last executing test programs:

837.575241ms ago: executing program 2 (id=4127):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYRES16=r0], 0x3c}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001fff001700000100260000000000", @ANYRES32=0x0, @ANYBLOB="0000000000180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB='m'], 0x44}}, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
read$alg(r8, 0x0, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r9}, 0x18)
r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r10}, 0x8)
write$cgroup_int(r11, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef)
write$ppp(r11, &(0x7f0000001fc0)="3750a56c6adf0da29f0253f7f409a361873d295f5e1f1ef9e2737f5c5d5de3310f15e8e4cfa1f74a8f6be707622eb58f4d0eadf6911325c4354fde5d1f603ed67b4caea58fef2fb9b11e567367747284a8323b3250938e9b6ae751403ee894c1b3c328f129bc48ba19c98b39dac659a6bb6e5ed9c67b64bce28f08a83636f8babc1285542420637d00922df9b4a24d849b6b0de3e161340c8443cf8e558a5b54a418b498e8368afbadba6a7cedad894275526085ae056afc817dbe3094ea6dccdfdf273f0e45c7bc29c6c63d1a22c7b67d14fe2746e5abbf30e6840d850d19ab5cb0e8891f390405b59d3b0616d73efee7958c3074fdfa1d94f8bd7389474808356cf0a6f707720ac814828b9d4afa4a2f5ca1df10c4a9e599fdaedfa34e44afa53fdd44152eafa5ecf1572dbecacfae95457701186fc022bd69f10e299c592db6cfb4d36424cac8349d7aba9e024504c7c22e54428d8317da0da8a010fd898998300a066993b24379aef62d8509c4e8e9e9c9008f8786a3afb4231b24936b93d095dcbea082e80223cdeb21dfe6ab44885f5d2eae319c7433d5b752d54a04348ba079e2c3f8d439a42c1e69924717ccb7026d67de243b368853c64fd050d2c8ce27a722c1b815f550807201029c5d7b56841dfa050b29dedadc73889d2962b27a6800a630a5fdf54e76bfeff5582c5e3d31b37fe30a7accef60fad443fdab10832f56d33d1437c9dcddb619c7444a31f8b5791861e3dec565184c09911d2542bc6445f432ecb9c5dde826941c2153e520a1dc30c56c46a28cee445c9f681de2dbebfd04738eeb7c240fc3c9288aa8e5949a8c45e8e6192acd85ad586f7a907c546d2e9833502f221a2d059ca9b35e10c7c1906925888d95b6f80b538a683bd3fdd1cd99a286d1150e97bc864ada23b8a27d8b6dd1c6471e51022a0a811ebc26913704ed1ddeea4e9289481fc747cead66c7d2ca7551933e20f56d5c512609ca90dff3962427de5500138da11629f68e372d016d9e2574f8855929a838fb56198edbd8421b68882a7107d5272aeaaefd1e884ce20764b181391d04157950add177f2c99cb66e0627865adde781cc402163e4b505d8a810b8479b0e4a043510291120f5875d29a0078c2b56672c59d4a357bb8c8bdadeabeaab62f6aca236cdaf96092afb6aca71fc40c8f55a33de670477681b71016dac7f74e2824d117193dd518441844c5af1e23f50114aa26ac5bfd9f64d3f5ddd35c820c80da9ebee630450a406a597d52d79860d26ca1d5a16d01874d3e60962a98f7f00a5e523a408da885751ef919c8f7cbccbbcc90dc72384e9bf8b477aa1f6c45c3b2a591d51d166dd71ce3c5d28950ded1623f265160ef3b459e0831eaaca8e09232fb13482bdc72313eca2f0872797c6707b098fe340df79eb098773b7ddbbff285aab712f1e399d976b10dbdb9e56ae5786965c911c64d3e459a7c1f2a58f7a4caaad3854950f480b0776bdee9d6139b99d11e761b167ad2e1bfa9387077ae3ffb3f3908f0b4f0b5861bc31d8d3f9606b51ec04ce950ae049880e06e496615c3a9c3858deeeeb34ce3b59853936885d2bfb4a925ba38c93cb9da3672a2056fb8b59a268c7ad81241eeb7f2b17a213b1475d29ca3ed483a52cd5cb11de78ba68ca69c6333b3cf2bc15794675f4dece9e43cace70cb8a9c74149c39d6aac75d016a232c449e4477f11858bf97a9c410f261d7d40d7c6298286ddaf4c4eabd4c05f96aad5ba1ea0cc482f2820af0c0d925c5aa7a8c583b6045ae80be6838a67899f17bfc274b0ad1177ed927655e066f45484722f240dc85017062e1626f1abf4b1bb3d8bd665cac44c67b7ecea047a5a308edc0d72fe2cc3d4979a69c31e722ba6362d50d3e7b3f42867036631bb17882b927dede3e8d29d8583a6821e3590c176580cb3cb29f0cfcaae63f7c0d0b1cbb3a221d0598ff52d0e9d4130196f17d246b760080a284b4ad8853fbcc0731ac8151f286fb3d6b043cb0aac55dd6024e76a8f3ff6098ee6a8cd0273f9682dab8825e259ca49a3fb45ad7877bb4217353b02190db4003a9dc21b698e994c78c06ad12b4c596095d1d6e3e57b69dcd72e5d9ff0ac2c37080b23c2e1272c9f26444592bc38808717103809869fce4b37f40dacbabcd1f9432c3b7969e115af8b4634455bb89c44ad0f491a2c553c95c2362aa6fa16573c4a7baf7cfacbf0af77c08d56e0e19efcc591006244a9a28992e51c8d2ba224294f605df29eb6a2ec4c9ad93356cf1b94e1df42b4c0ee4ee40d7b1a1dc64990efd782bc144681644bf3908649dfbdd5c591772f15651a731219c866965e75b729aa7475ed75f91019ff72b37c17d5d61320a32e2c883e683d48215ac35458315078c765c9e6ddc9e31d062b9c795f8cef5a3cfb415de2e232ce337f31e967e7b9385738295310cb4eaaad17eab6c2237e3903ca7bf590014b51d879107b41d8d438a823c5abe82cd3fe1242c3629d50197f425de12fa245141accc0fc3f1f6c344632e19fadfdef0c3811e83a49a1b98a931a7d854d074bc2256b6cd6781002708c2c10cea625dfd8d6c15c38244aee1d55cd028d1c471a9c7438101401c69bad9d81e93f9a7548ae9735316734d467b7ef53bb45fe754a2d43c629f0e32943dc31f357304747442f4b01cf9e9fe57d9ea837a9b2325ca855f7e85231776b943b8065b396dd4204778c63f8f5726bf8a5467e491d77efcc3e8c2b28e9a968b9bdd724cb953ffe601354c04ced31423c2a23165cf97068ebff73ee7c83a93d1ab6d01a0799a545b3b2f499f71163c9c167ae5555c56a832a3a668ce3cf4acecc5bc973dc5faba260746619fd9848db05af847c733e7201c59cf8e57cd2036896def0181f6065190a72bfa2e2a3560969002f9be06a07593ff6416323f1480da1f4285525d713d643c482803c8822d18098525310063a0ff2a70724515ce45071f618899fe3a448d630d0b9dadc5c825da2cdc59b7fcf58b0809294d1fc2406cdaae41acd25371424d573781b85b98f6de0db8b1d838583dd065575b8c9b4e721b81a57a4a48e32fc1026854f4323166859dc90c808307fdba76c98f12497a6953815a460d7c41acc08c9655e8fb8b50d9b9d29d99c738ee27d9e6eee0336c22213bcdf3a937ad4b4df800a385c417ef2bc2e0f2f6cb42857cd8b6b2055971ae37bdc2432dbce8aad29bd1a08fba510d1ecfee7a0648e03dfa895b0ed51e08a3b7e76fa465a0c3be4e2932481f6219057e10beb696d53475bc8a63ed4cc1b3db2916767b5337ad297ea93594deab37b7beb07e2d11b771521a59d0ba0b7d9fba5c9408628bbfe66e3f0b949f7c3fa3469e148766abf95f95cf0fda1a619fbb8b6a3e5af65396dae64e8a27adf1b9ddd9160b551901a2c82d64a30d04e83a5bbfffa1cfc49b3a9655ca3c7b1addd14a2f487751cd4c0eb98cf705846a94109bec3f5ebc5c0527d891e62dcae002608ff5e748bd0fa6f5d0e380fdef36641b8fc914f8ee45a20d3c7ae3d7f6e0d7df8a460da4b56917cf0133abcc7d24bbfc7d5ba8311e1960cbeb8afe4317450a2b18fc039ea2531babb8ac93944e603a2645eceb911ca8ce062fe272468e2ae2e942cb46e84c3e3b6c2e82b68d11fb82b234c47380b03751eb3070a4062ad504885dc9560f6cd3d2fc6a51d0e67872898a98fd7355ed4327ccdd79987cf9a93e992ef9b3a45c3b49acdc403ecd6361c0b2c91136a0957d6dfd8906c1ca3d0550c2354c8e63fc6196c829d94a65bc67c17294fd1b9c5eb38a3e0704758da7d6871652654525d2d0283b3ac0c63d8291e922d86991d0114f08909c1c9a03a2312f5d3676191cb77358fbb3e09b0f7ae9a243cc6aa328f58f6217381e3bb87ea791fc116ed6cca9c67efb4b0ce03a32837b2652a5c7b21e00b2faffc33513217156ec6202f8713e9f9d67c9a500c7d22a8e84946c7e5de4b0d05c5878392aea365cc6771fa6bd2eb67006f456bb59356e5d4f0b630614dcf675e9b87c7bb63096bf99a15f865373a7039370ad485ab82f2e7537958718529990bba73ceca287072dda98b7cd62d0f48c080ad702f38acec8473de5e12248c2db0c6a2a6a711582c3d9b84822f4572c53a272469024b88ac6039e5e6204df509844f2a78380f99a13f82952ad9ac9706afc91215d4647b25326d0aefa4d875e8f0faa79cc5addfed08d69777e1837bd4967256c2c741e03d1eae8a0b474120a0933e1026bc3bc6ca3801de376f942f6322a449dc148bd66e1ecbc110fa5904501145115485c551054c6559b1d187f6a0e6b86f6c8b97db582f1d8a160b4ce44c676f9afd3caa8d58a1e7a7bb53b6d8ba6a140d97628604f51eb8f8b179402d1c4ac81d72db2390c4ee7951807bc7df3c6771d6348f9daeb923cf44a91a56dd373ee1d6ff0609fc35a46723a332a6c6e4549683bd13a03c12e73c78348e90a9efabbeb7d1e911e6cb70a1283ce2e60842e098f20b77b6c9734f89e2bc8d32ca8178312164cbbf9bc1324cdf46dced8b24c0295c28efbf38224abf59da89bdef13d4875299d57f0864c812083525688d00a6b4fe84630bc9eb19a9f9f181396a5bad26de6366a796ec506377703b1d5a9d3330d2c67272a7ede377e397fd4accd35392eba2a681e447c34510236e176b9803bd51753caed3e322c2fe66b2f6887fbab8820f96bebac13b867f1be1828273f7a5695bf4db44b1957881ea4aacbcfa2debf7b91f4cff14c63596657c15b80cc0fb861115f35b533a18d5dcb26bc30edc53b5377696b30d8f43fedbccf440b3b3c941e37c38a2e47efb3f19818da3cca9dc2a165bc715f88a6926d4077a07ba5ef11a7d653ff7bbbc36e1997aa25d66de7860bd7e8112c31d657257e3b7b2f3b88315a7105ea28324ab9540dc068686df43f82651503205dbc62c3ff788f6afa471f781d2825b8cd896701a69b1864dd7596b95a5cb2807869e2c1946f40e9472c19fe0beef440716465997be2026dedc6da90ad61c13d7708892cd3494517c9c65b8c00711b726a4de24c4fbd4006c82ab4a27131c9becb9ca4adffa3ecb1ee2017b595176fbc97fb581c65d123315a217dc2587bb957cb363afe17e7a1fdfae67c80c44f5bb0de0874680ce8065d951d2501bd676f897c883cab764b91cb9b74bc040cf51fee22b096a0a28a140b8134eb68e9df99154cc16b682c05a380dd0b7638c9c60bc34a1831aa024348642726c63e5910604e6251dc76d5159deb4e8b4ace04b2d3a4682620e9caec0fee1e59f822bb11c8456ea484ed7f792fadb1d52f11bc68d732932540abac0a178a26e5c43e093b94dcc3e00d3630071f476e6d954e34c6f4e7781694aa95c117576c594365b905aa07643e58d36854944e708389698ba0e4e6e86ca531c7b23a825f3ff0f8e4f1f767f48bd135a2d88e4a721813fbd22ecf7a586a3bbcc19549a6845c074d1f0e8635c3ce725cce3b7af664674ee5e982fa988e4a70bad3c3b4d73629a0a7e8e293d7e4300bab4a82a287996a3479ccaba5a2b6ab6fa8dadfd28c762494b56ff8a232a78aa255b8cab25486d8c9aab59d2ab26cd5df1013f7d5455f9c86082c98b75726a47e896b5ec41574e088d89e8ec693f0f0aea79c91458bb089dec23870e3ab98a814dcb80ef74a2ab3782fe6453f103422951c0559b5f94b737694cd2ec75fd8259381224d86bc79378c9b9109b650a031f9a5e155dd8d2ef4786d3646f225bdd03b13e610f053e09eb4b46ba32ddc521e936594d1bc02", 0x1000)
r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r13}, 0x0, &(0x7f00000002c0)}, 0x20)
r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x4000, r6}, 0x18)
r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FICLONE(r15, 0x40049409, 0xffffffffffffffff)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r6, <r16=>0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)='%-010d \x00'}, 0x20)
r17 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='\x00', 0x0, 0x10}, 0x18)
r18 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0x0, 0xe38d, 0x8}, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x1a, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x4}, @generic={0x2, 0x5, 0xf, 0x8001, 0xfff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000140)='GPL\x00', 0x10000, 0x8a, &(0x7f0000000580)=""/138, 0x41100, 0x34, '\x00', r4, 0x25, r12, 0x8, &(0x7f00000001c0)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000007c0)=[0x1, r13, r14, r15, r16, r17, r18], &(0x7f0000000800)=[{0x3, 0x2, 0x3}, {0x1, 0x1, 0x2, 0x7}, {0x5, 0x2, 0xa, 0x2}], 0x10, 0xe}, 0x94)

778.810885ms ago: executing program 1 (id=4130):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x11, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000001000000801863000000000000000000000900000099b300011000000018100000", @ANYRES32=0x1, @ANYBLOB="0000000000000000950000000000000018110000", @ANYRES32=0x1, @ANYBLOB="000000001d000000b702000008000000850000008600000018110000", @ANYRES32, @ANYBLOB="000000000000000018240000", @ANYRES32, @ANYBLOB="00000000820200009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x24}, 0x94)

659.105948ms ago: executing program 1 (id=4133):
r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmsg(r1, &(0x7f0000000800)={&(0x7f0000000000)=@qipcrtr, 0x80, &(0x7f0000000680)=[{&(0x7f0000000080)=""/20, 0x14}, {&(0x7f00000000c0)=""/175, 0xaf}, {&(0x7f0000000180)=""/99, 0x63}, {&(0x7f0000000200)=""/244, 0xf4}, {&(0x7f0000000300)=""/77, 0x4d}, {&(0x7f0000000380)=""/138, 0x8a}, {&(0x7f0000000440)=""/170, 0xaa}, {&(0x7f0000000500)=""/119, 0x77}, {&(0x7f0000000580)=""/207, 0xcf}], 0x9, &(0x7f0000000740)=""/180, 0xb4}, 0x40000000)
accept4(r0, 0x0, 0x0, 0x80000)
unshare(0x20000080)

658.229632ms ago: executing program 0 (id=4134):
socket$key(0xf, 0x3, 0x2)
socket$inet(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='i2c_reply\x00', r0, 0x0, 0x2}, 0x18)
pipe(&(0x7f0000000c00))
epoll_create(0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x18)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='i2c_reply\x00', r2}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="015c00000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0)

600.750196ms ago: executing program 1 (id=4135):
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d000600000007000000250000000d0016000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00006600}, 0x8000000, 0x0, 0x1, 0x1}, 0x29) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00006600}, 0x8000000, 0x0, 0x1, 0x1}, 0x29)

600.055492ms ago: executing program 1 (id=4136):
listen(0xffffffffffffffff, 0x5)
r0 = socket$inet(0xa, 0x801, 0x84)
listen(r0, 0xfffffffd)
r1 = socket$inet(0xa, 0x801, 0x84)
listen(r1, 0x8)
listen(0xffffffffffffffff, 0x0)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r2, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00fffffff00000", 0x40b}], 0x1)

540.007788ms ago: executing program 1 (id=4137):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001280)=@nat={'nat\x00', 0x2, 0x5, 0x4d0, 0x220, 0x310, 0xffffffff, 0x310, 0xf0, 0x400, 0x400, 0xffffffff, 0x400, 0x400, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@remote, @icmp_id=0x64, @gre_key=0x4}}}, {{@ipv6={@dev, @loopback, [0x0, 0xff], [0x0, 0xffffffff], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@mcast1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @port=0x4e23, @icmp_id=0x68}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @gre_key, @gre_key}}}, {{@ipv6={@local, @mcast1, [0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0xffffff00], 'syzkaller0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x10, @ipv4=@private=0xa010101, @ipv6=@empty, @port=0x4e23, @gre_key=0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x530)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x56, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, r2, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)

539.672182ms ago: executing program 0 (id=4138):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000b00000008046ac1fd0001800400069000000000020000"], 0x24}}, 0x0)

539.5271ms ago: executing program 1 (id=4139):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc1, 0xc1, 0x8, [@struct={0xc, 0x4, 0x0, 0x4, 0x1, 0xfffffe69, [{0x2, 0x5, 0x1}, {0x4, 0x4, 0x1}, {0xa, 0x2, 0x6}, {0x9, 0x5, 0x40}]}, @func={0x10, 0x0, 0x0, 0xc, 0x5}, @datasec={0x10, 0x8, 0x0, 0xf, 0x1, [{0x3, 0x401, 0x10000}, {0x5, 0x4, 0x1c}, {0x2, 0x8, 0x9}, {0x1, 0x2, 0x4}, {0x1, 0x1}, {0x2, 0x9f7, 0x7}, {0x3, 0x1ff, 0x200}, {0x1, 0x2, 0x7}], "02"}, @func={0x6, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x0, 0x61, 0x61, 0x30, 0x0, 0x0]}}, &(0x7f0000000100)=""/38, 0xe4, 0x26, 0x0, 0x1}, 0x28)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r2)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={r4, 0xfffe, 0x6}, 0x8) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x20000}, 0x50) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) (async, rerun: 64)
recvmsg$kcm(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000500)=""/69, 0x45}], 0x1}, 0x2120) (async, rerun: 64)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6, &(0x7f0000000040)}, 0x20)
close(0x4)

469.300498ms ago: executing program 0 (id=4140):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x11, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000002000000801863000000000000000000000900000099b300011000000018100000", @ANYRES32=0x1, @ANYBLOB="0000000000000000950000000000000018110000", @ANYRES32=0x1, @ANYBLOB="000000001d000000b702000008000000850000008600000018110000", @ANYRES32, @ANYBLOB="000000000000000018240000", @ANYRES32, @ANYBLOB="00000000820200009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x24}, 0x94)

420.605752ms ago: executing program 0 (id=4141):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x18)
sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @osf={{0x8}, @void}}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x20040004)
write(r1, &(0x7f00000014c0)="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", 0x1000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f00000002c0)=@base={0xa, 0x9, 0x8, 0x2}, 0x50)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x20000328)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1f, 0x813, 0x8001, 0x5, 0x8, 0x21, 0x1, 0x9, 0x7, 0x4, 0x0, 0x3, 0x108, 0xc, 0xbd, 0x8, [0xa2ff, 0x5]}})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r6=>0x0})
r7 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000200)={0x2c}, 0x8)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r8, 0x8943, &(0x7f0000000080)={'dummy0\x00'})
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000040)=0x217d, 0x4)
sendmmsg$inet6(r7, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001780)={@cgroup=r9, r9, 0x37, 0x2008, 0x4}, 0x20)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000000000014001a8010000580"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x100, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}}}]}, 0x3c}}, 0x0)

240.717782ms ago: executing program 0 (id=4142):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb43, 0x0, 0x0, 0x0, 0x28000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x89}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

186.20058ms ago: executing program 0 (id=4143):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="40c20000d00000002400128009000100626f6e640000000014000280080007000500d190"], 0x4c}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffff9}, 0x28)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r5, &(0x7f0000000500), &(0x7f0000000100)=@udp6=r3, 0x1}, 0x20) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0)

140.713591ms ago: executing program 2 (id=4144):
listen(0xffffffffffffffff, 0x5)
r0 = socket$inet(0xa, 0x801, 0x84)
listen(r0, 0xfffffffd)
r1 = socket$inet(0xa, 0x801, 0x84)
listen(r1, 0x8)
listen(0xffffffffffffffff, 0x0)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r2, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00fffffffe0000", 0x40b}], 0x1)

137.486142ms ago: executing program 2 (id=4145):
socket(0x1a, 0xa, 0x9)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="156da3ecddb2c331e1bafc7f186fc6c830cbbb5c325007b3eb6748aa222565d058f09fc9711d6adaa19560d129814ea1bbb9d77b6d75f7b9a90186ebbfcf14ee1df4ade25268ddc8b1cb23c36174ba8a0fccf61cd8277d8738c6f2a05fdb3e775e72f0856265547102c2ca88f615a4f7ff8abeb731e67b573ec7a596dcb6be7f17688f01c522e1a53fcda14c0d8a1460c90bcf95871e452bc366749590d281a73606b6c25810b6c14d3bd2a71a516f6266ca50e7c4d594d2754b7226c3f417efe62c2cf1ad2422796e25e38d0359b09068096aa814f1c4b04f7bbd0ba58e6b6194d7a16c8bc3fa914294a7c22e9b2a05bacb22809d54ad", @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf253d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x50}, 0x1, 0x0, 0x0, 0x20008804}, 0x4050)

79.964496ms ago: executing program 2 (id=4146):
socket$key(0xf, 0x3, 0x2)
socket$inet(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='i2c_reply\x00', r0, 0x0, 0x2}, 0x18)
pipe(&(0x7f0000000c00))
epoll_create(0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x18)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='i2c_reply\x00', r2}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="016000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0)

657.102µs ago: executing program 2 (id=4147):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r2}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x24, r4, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r6}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x100, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}}, 0x20}}, 0x0)

0s ago: executing program 2 (id=4148):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880))
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94)
socket$inet6(0xa, 0x1, 0x100) (async, rerun: 64)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) (async, rerun: 64)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (async)
r2 = socket$inet(0x2, 0x3, 0x6)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @loopback}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3}}}) (async)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0xff, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000280)="90", 0x1}], 0x1}}], 0x2, 0x4000000) (async)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r5, 0x6}, 0x8) (async)
ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0xe, {0x2, 0x0, @local}, 'syz_tun\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) (async)
getuid() (async, rerun: 32)
sendfile(r2, r2, &(0x7f0000000240)=0xf2a, 0x4) (async, rerun: 32)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00001700000000001c0037800b0003086970768a616e08000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
socket$rds(0x15, 0x5, 0x0) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async, rerun: 64)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r0, 0xe0, &(0x7f0000000740)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f00000003c0)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], <r12=>0x0, 0x7c, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f00000006c0), 0x8, 0x18, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (rerun: 64)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000040000b740000000000000850000000400000095ffcbad88d63a7cf3d359c6f136ce365306e3740cd8cb7e6d9ffefa71e4ac1e7d9f7e0c52994a377f20fe4a176fef7ec80d", @ANYRESDEC=r11], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000380)={'wlan1\x00'})

kernel console output (not intermixed with test programs):

7056] syz_tun: entered allmulticast mode
[   61.956583][ T7056] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[   61.961748][ T7058] netlink: 'syz.2.375': attribute type 1 has an invalid length.
[   61.966824][ T7058] netlink: 'syz.2.375': attribute type 1 has an invalid length.
[   61.989450][ T7056] syz_tun: left allmulticast mode
[   61.995680][ T7065] netlink: 'syz.2.376': attribute type 11 has an invalid length.
[   62.136440][ T7093] netlink: 'syz.2.385': attribute type 11 has an invalid length.
[   62.189347][ T7098] 8021q: adding VLAN 0 to HW filter on device bond2
[   62.201172][ T7098] bond2: (slave bridge2): making interface the new active one
[   62.204750][ T7098] bond2: (slave bridge2): Enslaving as an active interface with an up link
[   62.213224][ T7098] gretap1: entered promiscuous mode
[   62.216600][ T7098] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   62.259562][ T7108] atomic_op ffff888107d01998 conn xmit_atomic 0000000000000000
[   62.276876][ T7108] xt_CT: No such helper "pptp"
[   62.279345][ T7110] macvlan2: entered promiscuous mode
[   62.282068][ T7110] macvlan2: entered allmulticast mode
[   62.284138][ T7110] bond2: entered promiscuous mode
[   62.286947][ T7110] bridge2: entered promiscuous mode
[   62.289193][ T7110] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   62.291698][ T7110] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   62.298366][ T7110] bond2: left promiscuous mode
[   62.300045][ T7110] bridge2: left promiscuous mode
[   62.439743][ T7120] netlink: 'syz.1.397': attribute type 11 has an invalid length.
[   62.553063][ T7137] dvmrp0: entered allmulticast mode
[   62.597791][ T7141] vlan3: entered allmulticast mode
[   62.682550][ T7141] batman_adv: batadv0: Adding interface: netdevsim0
[   62.684817][ T7141] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.694868][ T7141] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   63.091976][ T7213] xt_bpf: check failed: parse error
[   63.380682][ T7244] bridge_slave_0: left allmulticast mode
[   63.382618][ T7244] bridge_slave_0: left promiscuous mode
[   63.384537][ T7244] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.389541][ T7244] bridge_slave_1: left allmulticast mode
[   63.391423][ T7244] bridge_slave_1: left promiscuous mode
[   63.393371][ T7244] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.403538][ T7244] bond0: (slave bond_slave_0): Releasing backup interface
[   63.408724][ T7244] bond_slave_0: left promiscuous mode
[   63.414016][ T7244] bond0: (slave bond_slave_1): Releasing backup interface
[   63.418762][ T7244] bond_slave_1: left promiscuous mode
[   63.433353][ T7244] team0: Port device team_slave_0 removed
[   63.441396][ T7244] team0: Port device team_slave_1 removed
[   63.443717][ T7244] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.447217][ T7244] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.450901][ T7244] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.453301][ T7244] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.460875][ T7244] bond4: (slave bridge3): Releasing active interface
[   63.611898][ T7277] IPv6: sit1: Disabled Multicast RS
[   64.133543][ T7338] __nla_validate_parse: 122 callbacks suppressed
[   64.133553][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.468'.
[   64.200630][ T7343] bond5: entered promiscuous mode
[   64.202455][ T7343] bond5: entered allmulticast mode
[   64.598363][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.481'.
[   64.628694][ T7394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.482'.
[   64.736988][ T7401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.485'.
[   64.791578][ T7409] D: renamed from syzkaller0
[   64.846853][ T7417] validate_nla: 5 callbacks suppressed
[   64.846863][ T7417] netlink: 'syz.1.489': attribute type 1 has an invalid length.
[   64.965080][ T7439] netlink: 'syz.1.498': attribute type 1 has an invalid length.
[   65.006660][ T7437] netlink: 20 bytes leftover after parsing attributes in process `syz.2.497'.
[   65.030890][ T7446] netlink: 'syz.2.501': attribute type 3 has an invalid length.
[   65.033565][ T7446] netlink: 132 bytes leftover after parsing attributes in process `syz.2.501'.
[   65.050911][ T7449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.502'.
[   65.055858][ T7449] netlink: 'syz.1.502': attribute type 3 has an invalid length.
[   65.163743][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.508'.
[   65.247524][ T7473] netlink: 596 bytes leftover after parsing attributes in process `syz.2.512'.
[   65.251333][ T7472] netlink: 268 bytes leftover after parsing attributes in process `syz.2.512'.
[   65.257794][ T7472] unsupported nla_type 65024
[   65.548256][ T7500] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[   65.551361][ T7500] team0: Device ipvlan3 is already an upper device of the team interface
[   65.756704][ T7528] delete_channel: no stack
[   65.872717][ T7534] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   66.730462][ T7572] netlink: 'syz.1.546': attribute type 1 has an invalid length.
[   67.028464][ T7597] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   67.110554][ T7603] vlan0 (unregistering): left promiscuous mode
[   67.207249][ T7609] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[   67.951715][ T7633] sctp: [Deprecated]: syz.2.568 (pid 7633) Use of int in max_burst socket option.
[   67.951715][ T7633] Use struct sctp_assoc_value instead
[   67.973445][ T7633] sctp: [Deprecated]: syz.2.568 (pid 7633) Use of int in max_burst socket option.
[   67.973445][ T7633] Use struct sctp_assoc_value instead
[   68.017996][   T55] Bluetooth: hci2: command 0x040f tx timeout
[   68.091917][ T7650] sctp: [Deprecated]: syz.2.573 (pid 7650) Use of int in max_burst socket option deprecated.
[   68.091917][ T7650] Use struct sctp_assoc_value instead
[   68.132971][ T7652] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[   68.236424][ T7662] bridge: RTM_NEWNEIGH with invalid state 0x1
[   68.460186][ T5846] nci: nci_rx_work: unknown MT 0x1
[   68.462558][ T7705] netlink: 'syz.0.584': attribute type 1 has an invalid length.
[   68.536316][ T7716] netlink: 'syz.0.584': attribute type 1 has an invalid length.
[   69.226992][ T7708] __nla_validate_parse: 21 callbacks suppressed
[   69.227003][ T7708] netlink: 248 bytes leftover after parsing attributes in process `syz.1.587'.
[   69.415184][ T7741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.596'.
[   69.575677][ T7760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.603'.
[   69.618785][ T7767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.605'.
[   69.621634][ T7767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.605'.
[   69.680546][ T7774] netlink: 60 bytes leftover after parsing attributes in process `syz.2.607'.
[   69.890106][ T7796] netlink: 404 bytes leftover after parsing attributes in process `syz.1.615'.
[   69.897329][ T7796] netlink: 88 bytes leftover after parsing attributes in process `syz.1.615'.
[   69.900229][ T7796] netlink: 88 bytes leftover after parsing attributes in process `syz.1.615'.
[   69.904882][ T7796] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.910934][ T7796] netlink: 404 bytes leftover after parsing attributes in process `syz.1.615'.
[   69.924754][ T7799] syzkaller1: entered promiscuous mode
[   69.936643][ T7799] syzkaller1: entered allmulticast mode
[   69.943495][ T7799] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   70.027837][ T7806] wg1: entered promiscuous mode
[   70.029538][ T7806] wg1: entered allmulticast mode
[   70.406919][ T7843] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[   70.409773][ T5242] IPVS: starting estimator thread 0...
[   70.495798][ T7849] IPVS: using max 78 ests per chain, 187200 per kthread
[   70.821602][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   70.823604][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   70.866733][ T7903] netlink: 'syz.1.657': attribute type 5 has an invalid length.
[   70.909731][ T7911] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.992061][ T7926] netlink: 'syz.1.665': attribute type 10 has an invalid length.
[   71.003293][ T7926] team0: Device ipvlan1 failed to register rx_handler
[   71.086234][ T7939] netlink: 'syz.0.671': attribute type 5 has an invalid length.
[   71.092310][ T7939] netlink: 'syz.0.671': attribute type 1 has an invalid length.
[   71.308637][   T12] syzkaller0: tun_net_xmit 76
[   71.310516][   T12] syzkaller0: tun_net_xmit 48
[   71.314846][ T7960] syzkaller0: create flow: hash 1679868844 index 1
[   71.342712][ T7959] syzkaller0: delete flow: hash 1679868844 index 1
[   71.974121][ T7977] tc_dump_action: action bad kind
[   72.415021][ T8036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   73.189950][ T8102] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.907153][   T12] nci: nci_rsp_packet: unknown rsp opcode 0x204
[   74.369200][ T8141] __nla_validate_parse: 25 callbacks suppressed
[   74.369210][ T8141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.734'.
[   74.638519][ T8146] netlink: 134820 bytes leftover after parsing attributes in process `syz.2.736'.
[   74.939217][ T8185] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.749'.
[   75.084386][ T8197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.753'.
[   75.117931][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.754'.
[   75.214840][ T8222] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.393702][ T8242] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   75.460029][ T8242] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   75.621413][ T8275] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.912790][ T8296] netlink: 52 bytes leftover after parsing attributes in process `syz.0.789'.
[   76.604714][ T8334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.803'.
[   77.003059][ T8376] netlink: 'syz.1.822': attribute type 1 has an invalid length.
[   77.058343][ T8382] netlink: 'syz.0.824': attribute type 1 has an invalid length.
[   77.061133][ T8382] NCSI netlink: No device for ifindex 0
[   77.066184][ T8385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.826'.
[   77.166189][ T8394] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   77.385646][ T8410] pim6reg: entered allmulticast mode
[   77.388120][ T8410] pim6reg: left allmulticast mode
[   77.494851][ T8410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.832'.
[   77.497861][ T8410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.832'.
[   77.563584][ T8415] syzkaller0: entered promiscuous mode
[   77.565865][ T8415] syzkaller0: entered allmulticast mode
[   77.719863][ T8421] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   78.110417][ T8461] netlink: 'syz.2.848': attribute type 7 has an invalid length.
[   78.115586][ T8461] netlink: 'syz.2.848': attribute type 8 has an invalid length.
[   78.201634][ T8464] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.204211][ T8464] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.273639][ T8464] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.287054][ T8464] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.349402][ T8464] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.352837][ T8464] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.356120][ T8464] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.359270][ T8464] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.867632][ T8514] netlink: 'syz.0.869': attribute type 1 has an invalid length.
[   79.850594][ T8544] __nla_validate_parse: 4 callbacks suppressed
[   79.850603][ T8544] netlink: 256 bytes leftover after parsing attributes in process `syz.0.877'.
[   79.937467][ T8554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.881'.
[   79.978072][ T8562] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.996542][ T8561] tipc: Disabling bearer <eth:syzkaller0>
[   80.086238][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.889'.
[   80.137425][ T8586] netlink: 48 bytes leftover after parsing attributes in process `syz.0.891'.
[   80.249762][ T8609] netlink: 20 bytes leftover after parsing attributes in process `syz.0.897'.
[   80.290461][ T8619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.901'.
[   80.359261][ T8623] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   80.371416][ T8623] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   80.482682][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.909'.
[   80.486575][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.909'.
[   80.711158][ T8664] netlink: 'syz.1.919': attribute type 1 has an invalid length.
[   80.771796][ T8673] netlink: 32 bytes leftover after parsing attributes in process `syz.1.922'.
[   80.958543][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.930'.
[   80.963895][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   80.969383][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   80.995419][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   81.057074][   T10] cfg80211: failed to load regulatory.db
[   81.275589][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   81.568292][ T8730] netlink: 'syz.2.944': attribute type 7 has an invalid length.
[   81.577662][ T8730] : entered promiscuous mode
[   81.602452][ T8732] netlink: 'syz.2.945': attribute type 5 has an invalid length.
[   81.945940][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   81.960917][ T8774] tipc: Started in network mode
[   81.962641][ T8774] tipc: Node identity fa7da4b99223, cluster identity 4711
[   81.965130][ T8774] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.030907][ T8779] tipc: Resetting bearer <eth:syzkaller0>
[   82.377098][ T8811] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.379701][ T8811] syzkaller0: entered promiscuous mode
[   82.381570][ T8811] syzkaller0: entered allmulticast mode
[   82.391079][ T8811] tipc: Resetting bearer <eth:syzkaller0>
[   82.403629][ T8812] tipc: Resetting bearer <eth:syzkaller0>
[   82.411688][ T8812] tipc: Disabling bearer <eth:syzkaller0>
[   82.647835][ T8836] ip6erspan0: entered allmulticast mode
[   83.046174][    T9] tipc: Node number set to 1751033017
[   83.278131][ T8870] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[   83.513103][ T8886] xt_CT: No such helper "snmp"
[   83.554164][ T8894] netlink: 'syz.0.1004': attribute type 1 has an invalid length.
[   83.589602][ T8896] veth0_to_team: left promiscuous mode
[   83.591398][ T8896] veth0_to_team: left allmulticast mode
[   83.594257][ T8896] vlan0: left promiscuous mode
[   83.597085][ T8896] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[   83.599424][ T8896] vti0: left promiscuous mode
[   83.601262][ T8896] xfrm1: left promiscuous mode
[   83.602297][ T8899] netlink: 'syz.0.1006': attribute type 13 has an invalid length.
[   83.602842][ T8896] xfrm1: left allmulticast mode
[   83.608261][ T8896] veth2: left allmulticast mode
[   83.609928][ T8896] veth3: left promiscuous mode
[   83.611811][ T8896] gretap1: left promiscuous mode
[   83.613909][ T8896] vlan3: left allmulticast mode
[   83.617572][ T8896] tipc: Resetting bearer <eth:syzkaller0>
[   83.620233][ T8896] syzkaller0: left promiscuous mode
[   83.621932][ T8896] syzkaller0: left allmulticast mode
[   83.704151][ T8899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.762250][ T8915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.817575][ T8899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.886435][    C1] vcan0: j1939_tp_rxtimer: 0xffff88812420cc00: rx timeout, send abort
[   84.389862][    C1] vcan0: j1939_tp_rxtimer: 0xffff88812420cc00: abort rx timeout. Force session deactivation
[   84.586633][ T8960] trusted_key: syz.0.1027 sent an empty control message without MSG_MORE.
[   84.699213][ T8969] tipc: Enabling of bearer <5dp:s> rejected, media not registered
[   84.927610][ T8987] openvswitch: netlink: Flow actions attr not present in new flow.
[   85.037235][ T9010] pimreg: entered allmulticast mode
[   85.039556][ T9010] pimreg: left allmulticast mode
[   85.168651][ T9020] __nla_validate_parse: 11 callbacks suppressed
[   85.168661][ T9020] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1049'.
[   85.415154][ T9050] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[   85.473155][ T9059] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1061'.
[   85.479764][ T9059] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1061'.
[   85.483467][ T9059] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1061'.
[   85.580768][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1064'.
[   85.748679][ T9075] netlink: 'syz.0.1067': attribute type 11 has an invalid length.
[   85.751250][ T9075] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1067'.
[   85.761823][ T9077] syzkaller0: entered allmulticast mode
[   86.017437][ T9106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1077'.
[   86.054233][ T9115] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   86.077587][ T9115] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1079'.
[   86.136363][ T9124] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1080'.
[   86.201979][ T9133] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1083'.
[   86.234576][ T9137] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[   86.288798][ T9142] vlan0: entered promiscuous mode
[   86.322205][  T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.324992][  T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.806249][ T9160] netlink: 'syz.0.1094': attribute type 2 has an invalid length.
[   87.034444][ T9174] nbd: illegal input index -381222912
[   87.368531][ T9212] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   87.371810][ T9212] syzkaller0: entered promiscuous mode
[   87.522975][ T9227] netlink: 'syz.2.1117': attribute type 21 has an invalid length.
[   87.939803][ T9269] netlink: 'syz.0.1133': attribute type 1 has an invalid length.
[   88.767511][ T9397] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[   88.797143][ T9398] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[   88.862843][ T9408] netlink: 'syz.1.1144': attribute type 1 has an invalid length.
[   88.865890][ T9408] netlink: 'syz.1.1144': attribute type 1 has an invalid length.
[   88.972051][ T9412] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   89.069609][ T9434] netlink: 'syz.2.1152': attribute type 26 has an invalid length.
[   89.245121][ T9447] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[   89.248107][ T9447] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[   89.250726][ T9447] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[   89.738679][ T9458] netlink: 'syz.0.1162': attribute type 9 has an invalid length.
[   89.820332][ T9472] netlink: 'syz.0.1166': attribute type 26 has an invalid length.
[   89.934741][ T9484] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   90.125434][ T9500] nbd0: detected capacity change from 0 to 63
[   90.129071][   T56] block nbd0: Receive control failed (result -32)
[   90.132784][ T8105] block nbd0: Dead connection, failed to find a fallback
[   90.135215][ T8105] block nbd0: shutting down sockets
[   90.137720][ T8105] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   90.142605][ T8105] Buffer I/O error on dev nbd0, logical block 0, async page read
[   90.146988][ T8105] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   90.150087][ T8105] Buffer I/O error on dev nbd0, logical block 1, async page read
[   90.153266][ T8105] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   90.157127][ T8105] Buffer I/O error on dev nbd0, logical block 2, async page read
[   90.159671][ T8105] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   90.162603][ T8105] Buffer I/O error on dev nbd0, logical block 3, async page read
[   90.165172][ T8105] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   90.169247][ T8105] Buffer I/O error on dev nbd0, logical block 0, async page read
[   90.172367][ T8105] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   90.176415][ T8105] Buffer I/O error on dev nbd0, logical block 1, async page read
[   90.177909][ T9503] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.178973][ T8105] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   90.186163][ T8105] Buffer I/O error on dev nbd0, logical block 2, async page read
[   90.189223][ T8105] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   90.192130][ T8105] Buffer I/O error on dev nbd0, logical block 3, async page read
[   90.194997][ T8105] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   90.199588][ T8105] Buffer I/O error on dev nbd0, logical block 0, async page read
[   90.204887][ T8105] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   90.209109][ T8105] Buffer I/O error on dev nbd0, logical block 1, async page read
[   90.213143][ T8105] ldm_validate_partition_table(): Disk read failed.
[   90.218051][ T8105] Dev nbd0: unable to read RDB block 0
[   90.226663][ T8105]  nbd0: unable to read partition table
[   90.233857][ T8105] ldm_validate_partition_table(): Disk read failed.
[   90.241722][ T8105] Dev nbd0: unable to read RDB block 0
[   90.249786][ T8105]  nbd0: unable to read partition table
[   90.260882][ T9503] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.328642][ T9503] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.453488][ T9522] __nla_validate_parse: 21 callbacks suppressed
[   90.453498][ T9522] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1185'.
[   90.491994][ T9503] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.501847][ T9503] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.510892][ T9503] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.518865][ T9503] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.563359][  T972] hid-generic 0005:0458:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[   90.641879][ T9542] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1191'.
[   90.651812][ T9542] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1191'.
[   90.658782][ T9542] netlink: 'syz.0.1191': attribute type 4 has an invalid length.
[   91.053957][ T9592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1210'.
[   91.218011][ T9610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1218'.
[   91.251735][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1219'.
[   91.578084][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1221'.
[   91.764626][ T9629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1225'.
[   91.895669][ T9636] netlink: 'syz.0.1228': attribute type 4 has an invalid length.
[   92.221155][ T9648] unknown channel width for channel at 909000KHz?
[   92.223387][ T9648] unknown channel width for channel at 909000KHz?
[   92.226679][ T9648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1233'.
[   92.234425][   T34] audit: type=1804 audit(1752780501.544:2): pid=9650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1234" name="/newroot/375/memory.events" dev="tmpfs" ino=1932 res=1 errno=0
[   92.252657][   T34] audit: type=1800 audit(1752780501.554:3): pid=9650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1234" name="memory.events" dev="tmpfs" ino=1932 res=0 errno=0
[   92.263079][   T34] audit: type=1804 audit(1752780501.564:4): pid=9650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1234" name="memory.events" dev="tmpfs" ino=1932 res=1 errno=0
[   92.364824][ T9661] bond3: entered promiscuous mode
[   92.368941][ T9661] 8021q: adding VLAN 0 to HW filter on device bond3
[   92.382250][ T9661] bond4: entered promiscuous mode
[   92.384262][ T9661] 8021q: adding VLAN 0 to HW filter on device bond4
[   93.136557][ T9673] netlink: 316 bytes leftover after parsing attributes in process `syz.1.1242'.
[   93.224998][ T9666] syz.0.1240 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   93.230273][ T9666] CPU: 0 UID: 0 PID: 9666 Comm: syz.0.1240 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   93.230284][ T9666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   93.230289][ T9666] Call Trace:
[   93.230292][ T9666]  <TASK>
[   93.230296][ T9666]  dump_stack_lvl+0x189/0x250
[   93.230310][ T9666]  ? __pfx_dump_stack_lvl+0x10/0x10
[   93.230319][ T9666]  ? __pfx__printk+0x10/0x10
[   93.230335][ T9666]  dump_header+0xd3/0x480
[   93.230347][ T9666]  oom_kill_process+0x3b6/0x950
[   93.230357][ T9666]  out_of_memory+0xf09/0x12a0
[   93.230373][ T9666]  ? __pfx_out_of_memory+0x10/0x10
[   93.230388][ T9666]  mem_cgroup_out_of_memory+0x145/0x240
[   93.230397][ T9666]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[   93.230409][ T9666]  ? _raw_spin_unlock+0x28/0x50
[   93.230420][ T9666]  ? memcg1_oom_prepare+0x37f/0x450
[   93.230431][ T9666]  try_charge_memcg+0xdff/0x1290
[   93.230476][ T9666]  ? __pfx_try_charge_memcg+0x10/0x10
[   93.230494][ T9666]  charge_memcg+0x9f/0x180
[   93.230505][ T9666]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[   93.230515][ T9666]  mem_cgroup_swapin_charge_folio+0x262/0x390
[   93.230527][ T9666]  __read_swap_cache_async+0x28c/0x510
[   93.230540][ T9666]  swap_cluster_readahead+0x305/0x5f0
[   93.230551][ T9666]  ? __pfx_swap_cluster_readahead+0x10/0x10
[   93.230564][ T9666]  ? get_vma_policy+0x27c/0x3c0
[   93.230576][ T9666]  swapin_readahead+0x17d/0xb50
[   93.230584][ T9666]  ? __pfx_filemap_get_entry+0x10/0x10
[   93.230594][ T9666]  ? __pfx_swapin_readahead+0x10/0x10
[   93.230604][ T9666]  ? __filemap_get_folio+0x9a6/0xaf0
[   93.230614][ T9666]  ? swap_cache_get_folio+0xae/0x3b0
[   93.230624][ T9666]  do_swap_page+0x525/0x5ac0
[   93.230635][ T9666]  ? __lock_acquire+0xab9/0xd20
[   93.230648][ T9666]  ? do_swap_page+0x184/0x5ac0
[   93.230656][ T9666]  ? __pfx_do_swap_page+0x10/0x10
[   93.230671][ T9666]  ? __pfx_default_wake_function+0x10/0x10
[   93.230680][ T9666]  ? ___pte_offset_map+0x21f/0x2c0
[   93.230691][ T9666]  ? pte_offset_map_rw_nolock+0xea/0x160
[   93.230702][ T9666]  __handle_mm_fault+0xf3e/0x5620
[   93.230711][ T9666]  ? __lock_acquire+0xab9/0xd20
[   93.230725][ T9666]  ? __pfx___handle_mm_fault+0x10/0x10
[   93.230735][ T9666]  ? lock_vma_under_rcu+0xf8/0x710
[   93.230749][ T9666]  ? lock_vma_under_rcu+0xf8/0x710
[   93.230760][ T9666]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[   93.230773][ T9666]  handle_mm_fault+0x40a/0x8e0
[   93.230787][ T9666]  do_user_addr_fault+0xa81/0x1390
[   93.230797][ T9666]  ? rcu_is_watching+0x15/0xb0
[   93.230806][ T9666]  ? trace_page_fault_user+0x84/0x1e0
[   93.230814][ T9666]  exc_page_fault+0x76/0xf0
[   93.230822][ T9666]  asm_exc_page_fault+0x26/0x30
[   93.230829][ T9666] RIP: 0033:0x7fed6de65368
[   93.230837][ T9666] Code: 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d 5a 28 35 00 00 0f 8e 09 fe ff ff e8 13 a0 fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 <69> 3d 26 03 e8 00 e8 03 00 00 48 8d 1d 27 0c 35 00 e8 02 95 12 00
[   93.230843][ T9666] RSP: 002b:00007ffeab659a80 EFLAGS: 00010212
[   93.230850][ T9666] RAX: 0000000000016ba5 RBX: 00007fed6e1b7ba0 RCX: 0000000000016b48
[   93.230855][ T9666] RDX: 000000000000005d RSI: 00007ffeab659a60 RDI: 0000000000000001
[   93.230859][ T9666] RBP: 00007fed6e1b7ba0 R08: 0000000005988c2e R09: 7fffffffffffffff
[   93.230864][ T9666] R10: 3fffffffffffffff R11: 0000000000000293 R12: 0000000000016bc4
[   93.230869][ T9666] R13: 00007fed6e1b6080 R14: ffffffffffffffff R15: 00007ffeab659b90
[   93.230881][ T9666]  </TASK>
[   93.230884][ T9666] memory: usage 307200kB, limit 307200kB, failcnt 287
[   93.338807][ T9666] memory+swap: usage 307420kB, limit 9007199254740988kB, failcnt 0
[   93.341290][ T9666] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0
[   93.343596][ T9666] Memory cgroup stats for /syz0:
[   93.345004][ T9666] cache 8192
[   93.347920][ T9666] rss 0
[   93.349899][ T9666] rss_huge 0
[   93.350970][ T9666] shmem 0
[   93.351922][ T9666] mapped_file 8192
[   93.353120][ T9666] dirty 0
[   93.354085][ T9666] writeback 0
[   93.355367][ T9666] workingset_refault_anon 0
[   93.356999][ T9666] workingset_refault_file 0
[   93.358572][ T9666] swap 233472
[   93.359693][ T9666] swapcached 4096
[   93.360870][ T9666] pgpgin 36240
[   93.361969][ T9666] pgpgout 36237
[   93.363090][ T9666] pgfault 67346
[   93.364213][ T9666] pgmajfault 8
[   93.365478][ T9666] inactive_anon 0
[   93.368527][ T9666] active_anon 4096
[   93.369748][ T9666] inactive_file 0
[   93.371942][ T9666] active_file 8192
[   93.373307][ T9666] unevictable 0
[   93.374423][ T9666] hierarchical_memory_limit 314572800
[   93.376733][ T9666] hierarchical_memsw_limit 9223372036854771712
[   93.378763][ T9666] total_cache 8192
[   93.380031][ T9666] total_rss 0
[   93.381172][ T9666] total_rss_huge 0
[   93.382531][ T9666] total_shmem 0
[   93.383734][ T9666] total_mapped_file 8192
[   93.435550][ T9666] total_dirty 0
[   93.436718][ T9666] total_writeback 0
[   93.437984][ T9666] total_workingset_refault_anon 0
[   93.439620][ T9666] total_workingset_refault_file 0
[   93.441240][ T9666] total_swap 233472
[   93.442466][ T9666] total_swapcached 4096
[   93.443781][ T9666] total_pgpgin 36241
[   93.445038][ T9666] total_pgpgout 36238
[   93.485369][ T9666] total_pgfault 67347
[   93.486680][ T9666] total_pgmajfault 8
[   93.487919][ T9666] total_inactive_anon 0
[   93.489238][ T9666] total_active_anon 4096
[   93.490592][ T9666] total_inactive_file 0
[   93.491948][ T9666] total_active_file 8192
[   93.517829][ T9666] total_unevictable 0
[   93.519128][ T9666] anon_cost 0
[   93.520195][ T9666] file_cost 0
[   93.521278][ T9666] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1240,pid=9666,uid=0
[   93.527555][ T9666] Memory cgroup out of memory: Killed process 9666 (syz.0.1240) total-vm:104064kB, anon-rss:984kB, file-rss:22992kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[   94.393978][ T9748] netlink: 'syz.0.1272': attribute type 4 has an invalid length.
[   94.902546][ T9760] syzkaller1: entered promiscuous mode
[   94.904445][ T9760] syzkaller1: entered allmulticast mode
[   95.947567][   T34] audit: type=1800 audit(1752780505.264:5): pid=9786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1285" name="memory.events" dev="tmpfs" ino=2182 res=0 errno=0
[   96.261291][ T9811] netlink: 'syz.0.1294': attribute type 1 has an invalid length.
[   96.263822][ T9811] __nla_validate_parse: 9 callbacks suppressed
[   96.263827][ T9811] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1294'.
[   96.330295][ T9814] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.333768][ T9814] netlink: 'syz.2.1289': attribute type 4 has an invalid length.
[   96.731713][ T9824] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[   96.832612][ T9839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'.
[   96.861477][ T9837] netlink: 'syz.1.1305': attribute type 1 has an invalid length.
[   96.864367][ T9837] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.893986][ T9847] openvswitch: netlink: Key type 251 is out of range max 32
[   96.976250][ T9857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1314'.
[   97.056891][ T9866] tipc: New replicast peer: 255.255.255.255
[   97.060442][ T9866] tipc: Enabled bearer <udp:syz2>, priority 10
[   97.257980][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1324'.
[   97.303836][ T9886] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1319'.
[   97.371109][ T9889] team0 (unregistering): Port device team_slave_0 removed
[   97.374788][ T9889] team0 (unregistering): Port device team_slave_1 removed
[   97.389731][ T9904] netlink: 'syz.1.1324': attribute type 10 has an invalid length.
[   97.395178][ T9904] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[   97.398255][ T9904] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   97.400849][ T9904] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   97.449371][ T9908] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1329'.
[   97.641677][ T9937] syzkaller1: entered promiscuous mode
[   97.643446][ T9937] syzkaller1: entered allmulticast mode
[   97.647772][ T9937] netlink: 'syz.2.1341': attribute type 23 has an invalid length.
[   97.686145][ T9943] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1343'.
[   97.689157][ T9942] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1343'.
[   97.694203][ T9942] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   97.700111][ T9943] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   97.867814][ T9958] xt_hashlimit: size too large, truncated to 1048576
[   97.918879][ T9961] : renamed from bridge_slave_0 (while UP)
[   98.094848][ T9976] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1355'.
[   98.095135][ T9977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1355'.
[   98.316985][ T9993] xt_CT: No such helper "pptp"
[   98.321212][ T9995] xt_CT: No such helper "pptp"
[   98.474044][T10018] netlink: 'syz.0.1366': attribute type 1 has an invalid length.
[   98.485561][T10018] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   98.596471][T10032] netlink: 'syz.0.1372': attribute type 1 has an invalid length.
[   98.869559][T10074] netlink: 'syz.2.1385': attribute type 9 has an invalid length.
[   99.095421][T10099] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.097886][T10099] syzkaller0: entered promiscuous mode
[   99.099743][T10099] syzkaller0: entered allmulticast mode
[   99.109714][T10099] tipc: Resetting bearer <eth:syzkaller0>
[   99.168016][T10103] bond6: entered promiscuous mode
[   99.214243][T10108] netlink: 'syz.2.1395': attribute type 83 has an invalid length.
[   99.275430][T10113] openvswitch: netlink: Message has 16 unknown bytes.
[   99.393044][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.396464][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.667481][T10149] x9: renamed from bridge_slave_0
[   99.744695][T10160] IPVS: set_ctl: invalid protocol: 255 172.20.20.28:20001
[   99.778161][ T5834] Bluetooth: hci2: link tx timeout
[   99.780217][ T5834] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[   99.783571][   T55] Bluetooth: hci2: link tx timeout
[   99.786536][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[   99.894882][T10177] validate_nla: 3 callbacks suppressed
[   99.894891][T10177] netlink: 'syz.1.1423': attribute type 1 has an invalid length.
[  100.106708][ T5868] tipc: Node number set to 1968266972
[  100.151448][T10213] netlink: 'syz.1.1437': attribute type 4 has an invalid length.
[  100.155488][T10213] netlink: 'syz.1.1437': attribute type 4 has an invalid length.
[  100.264296][T10229] x9: renamed from bridge_slave_0
[  100.470169][T10253] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  100.523259][T10258] veth4: entered allmulticast mode
[  100.530696][T10258] veth5: entered promiscuous mode
[  100.534128][T10258] xt_hashlimit: invalid interval
[  100.643768][T10263] IPv6: sit2: Disabled Multicast RS
[  100.646542][T10263] sit2: entered allmulticast mode
[  100.767927][T10279] netlink: 'syz.2.1462': attribute type 1 has an invalid length.
[  100.771320][T10279] netlink: 'syz.2.1462': attribute type 11 has an invalid length.
[  101.041584][T10297] netlink: 'syz.2.1468': attribute type 39 has an invalid length.
[  101.261229][T10300] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.266668][T10300] team0: Port device batadv0 added
[  101.298995][ T4442] wlan1: Trigger new scan to find an IBSS to join
[  101.335744][T10307] __nla_validate_parse: 12 callbacks suppressed
[  101.335753][T10307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1473'.
[  101.390911][T10315] pimreg: entered allmulticast mode
[  101.404000][T10315] pimreg: left allmulticast mode
[  101.618593][T10333] netlink: 'syz.0.1483': attribute type 4 has an invalid length.
[  101.621661][T10333] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1483'.
[  101.624834][T10333] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1483'.
[  101.630290][T10333] netlink: 'syz.0.1483': attribute type 6 has an invalid length.
[  101.632755][T10333] netlink: 'syz.0.1483': attribute type 5 has an invalid length.
[  101.635702][T10333] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1483'.
[  101.803003][T10360] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  101.806920][T10362] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  101.852534][T10367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1496'.
[  101.865759][ T5834] Bluetooth: hci2: command 0x040f tx timeout
[  101.885031][T10371] x_tables: duplicate underflow at hook 1
[  101.888617][T10371] IPVS: set_ctl: invalid protocol: 108 172.20.20.170:20003
[  101.921866][T10375] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1500'.
[  101.943094][T10379] netlink: 'syz.0.1502': attribute type 10 has an invalid length.
[  101.946095][T10379] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  102.038868][T10388] xt_TCPMSS: Only works on TCP SYN packets
[  102.150289][T10398] syzkaller1: entered promiscuous mode
[  102.152228][T10398] syzkaller1: entered allmulticast mode
[  102.156445][T10398] tipc: Started in network mode
[  102.158156][T10398] tipc: Node identity ac14142f, cluster identity 4711
[  102.160543][T10398] tipc: New replicast peer: 0.0.0.0
[  102.162816][T10398] tipc: Enabled bearer <udp:syz2>, priority 10
[  102.166000][T10398] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  102.242732][T10404] openvswitch: netlink: Missing valid actions attribute.
[  102.249953][T10404] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.294727][T10409] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1513'.
[  102.298802][T10409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1513'.
[  102.303346][T10409] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1513'.
[  102.427101][T10416] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  102.429581][T10416] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  102.574773][T10442] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1523'.
[  102.768307][T10463] bridge6: entered promiscuous mode
[  103.134790][T10517] wg2: left promiscuous mode
[  103.140604][T10517] wg2: left allmulticast mode
[  103.148461][T10517] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  103.164729][T10517] bond3: left promiscuous mode
[  103.170066][T10517] bond4: left promiscuous mode
[  103.180417][T10517] veth4: left allmulticast mode
[  103.182801][T10517] veth5: left promiscuous mode
[  103.186275][T10517] bridge6: left promiscuous mode
[  103.284727][T10534] xt_CT: You must specify a L4 protocol and not use inversions on it
[  103.285594][ T5868] tipc: Node number set to 2886997039
[  103.658802][T10592] delete_channel: no stack
[  103.737720][T10600] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  104.346207][ T5121] wlan1: Trigger new scan to find an IBSS to join
[  104.613539][ T4442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.616434][ T4442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.876548][T10726] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  104.996271][T10747] validate_nla: 9 callbacks suppressed
[  104.996281][T10747] netlink: 'syz.2.1620': attribute type 1 has an invalid length.
[  105.025190][T10751] syzkaller0: Caught tx_queue_len zero misconfig
[  105.163596][T10770] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.175768][T10770] syzkaller0: entered promiscuous mode
[  105.177659][T10770] syzkaller0: entered allmulticast mode
[  105.189540][T10771] tipc: Resetting bearer <eth:syzkaller0>
[  105.270178][T10784] ieee802154 phy0 wpan0: encryption failed: -22
[  105.272853][T10784] ieee802154 phy0 wpan0: encryption failed: -22
[  105.327092][ T5121] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00
[  105.424946][T10809] netlink: 'syz.2.1644': attribute type 1 has an invalid length.
[  105.443763][T10811] bridge8: entered allmulticast mode
[  105.688019][T10839] netlink: 'syz.2.1658': attribute type 1 has an invalid length.
[  105.708680][T10839] 8021q: adding VLAN 0 to HW filter on device bond7
[  105.723188][T10839] 8021q: adding VLAN 0 to HW filter on device bond7
[  105.726776][T10839] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  105.732466][T10839] bond7: (slave vxcan3): Error -95 calling set_mac_address
[  105.769169][T10845] xt_time: unknown flags 0x4
[  105.777089][T10845] gretap1: entered promiscuous mode
[  105.781190][T10845] bond7: (slave gretap1): making interface the new active one
[  105.784148][T10845] bond7: (slave gretap1): Enslaving as an active interface with an up link
[  105.810427][T10839] macvlan2: entered promiscuous mode
[  105.812858][T10839] macvlan2: entered allmulticast mode
[  105.818782][T10839] bond7: entered promiscuous mode
[  105.822417][T10839] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  105.831556][T10839] bond7: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  105.837783][T10839] bond7: left promiscuous mode
[  105.923157][T10855] netlink: 'syz.0.1664': attribute type 1 has an invalid length.
[  105.966187][T10859] tap0: tun_chr_ioctl cmd 1074025678
[  105.967986][T10859] tap0: group set to 0
[  105.983493][T10859] bond0: (slave wlan1): Releasing backup interface
[  105.987535][T10859] bond0: Destroying bond
[  106.054146][T10859] bond0 (unregistering): Released all slaves
[  106.149970][T10879] syzkaller1: entered promiscuous mode
[  106.151796][T10879] syzkaller1: entered allmulticast mode
[  106.245056][T10882] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  106.394943][T10917] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  106.419343][T10918] __nla_validate_parse: 24 callbacks suppressed
[  106.419351][T10918] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1688'.
[  106.439095][T10924] netlink: 'syz.1.1690': attribute type 10 has an invalid length.
[  106.604680][T10954] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1698'.
[  106.619008][T10958] netlink: 'syz.0.1701': attribute type 1 has an invalid length.
[  106.639302][T10960] netlink: 'syz.2.1703': attribute type 7 has an invalid length.
[  106.700543][T10973] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  106.738129][T10979] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1710'.
[  106.744598][T10979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1710'.
[  106.749841][T10979] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1710'.
[  106.752787][T10979] IPVS: Unknown mcast interface: bridge_slave_0
[  106.756486][T10979] netlink: 'syz.1.1710': attribute type 1 has an invalid length.
[  106.759854][T10979] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1710'.
[  106.763111][T10979] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1710'.
[  106.767901][T10979] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1710'.
[  106.799152][T10989] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1715'.
[  106.802002][T10989] netlink: 'syz.1.1715': attribute type 7 has an invalid length.
[  106.804474][T10989] netlink: 'syz.1.1715': attribute type 8 has an invalid length.
[  106.809527][T10989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1715'.
[  106.896743][T11000] sctp: [Deprecated]: syz.2.1717 (pid 11000) Use of struct sctp_assoc_value in delayed_ack socket option.
[  106.896743][T11000] Use struct sctp_sack_info instead
[  106.929764][T11004] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  106.932880][T11004] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  107.990290][T11061] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  108.452625][T11116] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  108.482103][T11118] x_tables: duplicate underflow at hook 2
[  108.688111][T11143] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma?
[  108.758320][T11153] xfrm0: entered allmulticast mode
[  108.768814][T11155] tc_dump_action: action bad kind
[  109.109949][T11188] team0 (unregistering): Port device batadv0 removed
[  109.133869][T11194] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  109.139149][T11194] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  109.308001][T11204] syzkaller1: entered promiscuous mode
[  109.309879][T11204] syzkaller1: entered allmulticast mode
[  109.497759][T11211] syzkaller1: entered promiscuous mode
[  109.499705][T11211] syzkaller1: entered allmulticast mode
[  109.987734][T11236] vlan0: left promiscuous mode
[  109.990159][T11236] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  110.004297][T11236] tipc: Resetting bearer <eth:syzkaller0>
[  110.006703][T11236] syzkaller0: left promiscuous mode
[  110.008413][T11236] syzkaller0: left allmulticast mode
[  110.355708][T11269] tipc: Resetting bearer <eth:syzkaller0>
[  110.369151][T11269] syzkaller0: left promiscuous mode
[  110.462532][T11290] syzkaller0: left promiscuous mode
[  110.466965][T11290] syzkaller0: left allmulticast mode
[  110.531179][T11296] delete_channel: no stack
[  110.572043][T11300] validate_nla: 7 callbacks suppressed
[  110.572053][T11300] netlink: 'syz.0.1840': attribute type 1 has an invalid length.
[  111.351155][T11328] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  111.353764][T11328] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  111.415111][T11333] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  111.421057][T11333] syzkaller0: entered promiscuous mode
[  111.422965][T11333] syzkaller0: entered allmulticast mode
[  111.470172][T11337] __nla_validate_parse: 23 callbacks suppressed
[  111.470182][T11337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1852'.
[  111.519862][T11343] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1854'.
[  111.522871][T11343] 0: renamed from hsr_slave_1 (while UP)
[  111.528497][T11343] 0: entered allmulticast mode
[  111.530280][T11343] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  111.564619][T11345] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  111.577929][T11343] xt_CT: No such helper "syz0"
[  111.688759][T11366] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1861'.
[  111.692269][T11366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1861'.
[  111.702051][T11363] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1859'.
[  111.893653][T11398] netlink: 'syz.0.1874': attribute type 2 has an invalid length.
[  111.896400][T11398] netlink: 119 bytes leftover after parsing attributes in process `syz.0.1874'.
[  111.923440][T11402] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1877'.
[  111.939172][T11402] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1877'.
[  112.154381][T11425] netlink: 'syz.0.1884': attribute type 8 has an invalid length.
[  112.283788][T11431] 8021q: adding VLAN 0 to HW filter on device batadv1
[  112.287652][T11431] team0: Port device batadv1 added
[  112.363477][T11435] netlink: 'syz.0.1888': attribute type 13 has an invalid length.
[  112.366502][T11435] netlink: 'syz.0.1888': attribute type 17 has an invalid length.
[  112.374409][T11435] gretap0: refused to change device tx_queue_len
[  112.377469][T11435] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  112.495418][ T5834] Bluetooth: hci2: command 0x040f tx timeout
[  112.536496][T11443] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1890'.
[  112.637829][T11450] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1892'.
[  112.947080][T11488] tipc: New replicast peer: 255.255.255.255
[  112.949515][T11488] tipc: Enabled bearer <udp:syz2>, priority 10
[  113.138181][T11505] netlink: 'syz.2.1911': attribute type 1 has an invalid length.
[  113.335991][T11522] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  114.648102][T11634] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  114.713544][T11641] netlink: 'syz.2.1950': attribute type 83 has an invalid length.
[  114.749306][T11645] netlink: 'syz.0.1951': attribute type 1 has an invalid length.
[  114.895613][   T55] Bluetooth: hci2: command 0x040f tx timeout
[  115.018279][T11690] netlink: 'syz.0.1964': attribute type 1 has an invalid length.
[  115.032836][T11690] bond0: entered promiscuous mode
[  115.034666][T11690] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.042244][T11690] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.044547][T11690] bond0: (slave vcan0): The slave device specified does not support setting the MAC address
[  115.048166][T11690] bond0: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  115.052776][T11690] bond0: (slave vcan0): making interface the new active one
[  115.055150][T11690] vcan0: entered promiscuous mode
[  115.057902][T11690] bond0: (slave vcan0): Enslaving as an active interface with an up link
[  115.119950][T11705] netlink: 'syz.0.1970': attribute type 1 has an invalid length.
[  115.228970][T11716] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len
[  115.254693][T11718] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.098621][T11753] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  116.359879][T11771] validate_nla: 1 callbacks suppressed
[  116.359893][T11771] netlink: 'syz.1.1995': attribute type 8 has an invalid length.
[  116.389755][T11773] netlink: 'syz.1.1996': attribute type 26 has an invalid length.
[  117.003423][T11815] __nla_validate_parse: 18 callbacks suppressed
[  117.003436][T11815] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2012'.
[  117.006585][T11816] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2012'.
[  117.012938][T11816] x_tables: duplicate underflow at hook 1
[  117.110340][T11835] netlink: 'syz.2.2019': attribute type 1 has an invalid length.
[  117.120405][T11834] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  117.123981][T11834] syzkaller0: left promiscuous mode
[  117.138342][T11834] lo speed is unknown, defaulting to 1000
[  117.140427][T11834] lo speed is unknown, defaulting to 1000
[  117.143744][T11834] lo speed is unknown, defaulting to 1000
[  117.149965][T11834] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  117.160328][T11834] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  117.202909][T11834] lo speed is unknown, defaulting to 1000
[  117.210534][T11834] lo speed is unknown, defaulting to 1000
[  117.213410][T11834] lo speed is unknown, defaulting to 1000
[  117.232951][T11845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2023'.
[  117.279290][T11850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2026'.
[  117.291477][T11850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2026'.
[  117.301649][T11850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2026'.
[  117.335158][T11845] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2023'.
[  117.541714][T11877] syzkaller0: left allmulticast mode
[  117.938950][T11915] x_tables: duplicate underflow at hook 2
[  117.989028][T11919] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2049'.
[  118.127870][T11931] lo speed is unknown, defaulting to 1000
[  118.310059][T11940] netlink: 212296 bytes leftover after parsing attributes in process `syz.0.2053'.
[  118.368353][T11942] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2054'.
[  119.214280][T11957] syzkaller0: entered promiscuous mode
[  119.718244][T11968] netlink: 'syz.2.2062': attribute type 1 has an invalid length.
[  119.790098][T11977] netlink: 'syz.2.2065': attribute type 1 has an invalid length.
[  122.218001][T11977] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  122.323954][T11994] macvlan0: entered promiscuous mode
[  122.335595][T11994] macvlan0: left promiscuous mode
[  122.339035][T11987] netlink: 'syz.2.2067': attribute type 6 has an invalid length.
[  122.576695][T12020] nbd1: detected capacity change from 0 to 63
[  122.581375][T12032] block nbd1: NBD_DISCONNECT
[  122.583854][T12032] block nbd1: Disconnected due to user request.
[  122.586830][T12032] block nbd1: shutting down sockets
[  122.594184][    C0] blk_print_req_error: 138 callbacks suppressed
[  122.594192][    C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  122.599396][    C0] buffer_io_error: 138 callbacks suppressed
[  122.599401][    C0] Buffer I/O error on dev nbd1, logical block 0, async page read
[  122.603937][    C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  122.606936][    C0] Buffer I/O error on dev nbd1, logical block 1, async page read
[  122.609777][    C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  122.612660][    C0] Buffer I/O error on dev nbd1, logical block 2, async page read
[  122.615109][    C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  122.618050][    C0] Buffer I/O error on dev nbd1, logical block 3, async page read
[  122.621591][T12011] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  122.624472][T12011] Buffer I/O error on dev nbd1, logical block 0, async page read
[  122.627370][T12031] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  122.630707][T12011] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  122.637695][T12028] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2074'.
[  122.641215][T12036] syzkaller0: entered promiscuous mode
[  122.642835][T12011] Buffer I/O error on dev nbd1, logical block 1, async page read
[  122.643575][T12036] syzkaller0: entered allmulticast mode
[  122.646514][T12011] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  122.650911][T12011] Buffer I/O error on dev nbd1, logical block 2, async page read
[  122.653539][T12011] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  122.659815][T12011] Buffer I/O error on dev nbd1, logical block 3, async page read
[  122.668094][T12011] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  122.671573][T12011] Buffer I/O error on dev nbd1, logical block 0, async page read
[  122.675815][T12011] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  122.678705][T12011] Buffer I/O error on dev nbd1, logical block 1, async page read
[  122.682444][T12011] ldm_validate_partition_table(): Disk read failed.
[  122.687583][T12011] Dev nbd1: unable to read RDB block 0
[  122.691245][T12011]  nbd1: unable to read partition table
[  122.697606][T12011] ldm_validate_partition_table(): Disk read failed.
[  122.701390][T12011] Dev nbd1: unable to read RDB block 0
[  122.704684][T12011]  nbd1: unable to read partition table
[  122.706972][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2083'.
[  122.707071][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2083'.
[  122.729739][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2083'.
[  122.737395][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2083'.
[  122.740552][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2083'.
[  122.743610][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2083'.
[  122.747569][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2083'.
[  122.750735][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2083'.
[  122.753842][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2083'.
[  122.795162][T12051] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.287043][T12093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  123.578874][T12106] ieee802154 phy0 wpan0: encryption failed: -90
[  123.724501][T12121] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.729631][T12121] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.732759][T12121] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.735638][T12121] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.738694][T12121] geneve2: entered promiscuous mode
[  123.847890][ T5846] nci: nci_ntf_packet: unknown ntf opcode 0x206
[  124.681743][T12166] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  124.681883][T12165] x_tables: duplicate underflow at hook 3
[  124.729627][T12173] No such timeout policy "syz1"
[  124.811524][T12181] netlink: 'syz.0.2133': attribute type 1 has an invalid length.
[  124.829542][T12181] 8021q: adding VLAN 0 to HW filter on device bond5
[  124.837453][T12184] IPVS: Error joining to the multicast group
[  124.921158][T12190] openvswitch: netlink: Flow actions attr not present in new flow.
[  124.947729][T12192] netlink: 'syz.0.2137': attribute type 1 has an invalid length.
[  124.988232][T12198] netlink: 'syz.2.2140': attribute type 3 has an invalid length.
[  125.109293][T12211] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[  125.211116][T12231] netlink: 'syz.0.2151': attribute type 1 has an invalid length.
[  125.587786][T12270] netlink: 'syz.0.2165': attribute type 1 has an invalid length.
[  125.590417][T12270] netlink: 'syz.0.2165': attribute type 2 has an invalid length.
[  125.617136][T12273] netlink: 'syz.0.2166': attribute type 1 has an invalid length.
[  125.667733][T12277] netlink: 'syz.0.2168': attribute type 33 has an invalid length.
[  125.670618][T12277] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[  126.258353][T12303] xt_TPROXY: Can be used only with -p tcp or -p udp
[  126.260893][T12304] xt_TPROXY: Can be used only with -p tcp or -p udp
[  126.359821][T12312] netlink: 'syz.2.2184': attribute type 1 has an invalid length.
[  126.597085][T12334] x_tables: unsorted underflow at hook 2
[  126.641440][T12339] openvswitch: netlink: IPv4 tun info is not correct
[  126.761351][T12348] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.724477][T12397] __nla_validate_parse: 45 callbacks suppressed
[  127.724487][T12397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2216'.
[  127.769981][T12399] validate_nla: 2 callbacks suppressed
[  127.769991][T12399] netlink: 'syz.2.2217': attribute type 1 has an invalid length.
[  127.784319][T12399] 8021q: adding VLAN 0 to HW filter on device bond8
[  127.792724][T12399] bond8: (slave ip6gretap1): making interface the new active one
[  127.797553][T12399] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link
[  127.812351][T12399] veth7: entered promiscuous mode
[  127.816734][T12399] bond8: (slave veth7): Enslaving as an active interface with a down link
[  127.822798][T12399] erspan0: entered allmulticast mode
[  127.838819][T12402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2218'.
[  127.863364][T12404] netlink: 'syz.2.2219': attribute type 1 has an invalid length.
[  128.037758][T12426] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2228'.
[  128.231383][T12450] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  128.329621][T12463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2241'.
[  128.335652][T12464] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2241'.
[  128.411812][T12474] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2245'.
[  128.424840][T12476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2247'.
[  128.469122][T12478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2248'.
[  128.474508][T12478] 8021q: VLANs not supported on caif0
[  128.520136][T12488] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2253'.
[  128.569189][T12495] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  128.583976][T12500] x9: left allmulticast mode
[  128.588507][T12500] x9: left promiscuous mode
[  128.590197][T12500] bridge0: port 1(1x9) entered disabled state
[  128.597893][T12500] bridge_slave_1: left allmulticast mode
[  128.599769][T12500] bridge_slave_1: left promiscuous mode
[  128.601657][T12500] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.608100][T12500] bond0: (slave bond_slave_0): Releasing backup interface
[  128.611033][T12500] bond_slave_0: left promiscuous mode
[  128.612888][T12500] bond_slave_0: left allmulticast mode
[  128.616547][T12500] bond0: (slave bond_slave_1): Releasing backup interface
[  128.623027][T12500] bond_slave_1: left promiscuous mode
[  128.624902][T12500] bond_slave_1: left allmulticast mode
[  128.628555][T12500] batman_adv: batadv0: Removing interface: batadv_slave_0
[  128.632140][T12500] batman_adv: batadv0: Removing interface: batadv_slave_1
[  128.634985][T12500] batman_adv: batadv0: Removing interface: netdevsim0
[  128.639114][T12500] bond0: (slave wlan1): Releasing backup interface
[  128.642376][T12500] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  128.644682][T12500] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  128.648539][T12500] vlan2: left allmulticast mode
[  128.650363][T12500] bond0: left allmulticast mode
[  128.652044][T12500] vlan2: left promiscuous mode
[  128.653736][T12500] bond0: left promiscuous mode
[  128.666930][T12500] bridge0: port 3(vlan2) entered disabled state
[  128.672769][T12500] bond2: (slave bridge2): Releasing active interface
[  128.674951][T12500] bond2: (slave bridge2): the permanent HWaddr of slave - 7a:69:01:2e:05:e4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  128.681009][T12500] bond2: (slave gretap1): making interface the new active one
[  128.701176][T12500] bond2: (slave gretap1): Releasing active interface
[  128.712589][T12495] team0: Port device batadv1 removed
[  128.715213][T12495] bond0: (slave vcan0): Releasing backup interface
[  128.717504][T12495] vcan0: left promiscuous mode
[  128.795886][T12515] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  128.800539][T12515] syzkaller1: entered promiscuous mode
[  128.802414][T12515] syzkaller1: entered allmulticast mode
[  128.834223][T12502] vlan0: entered promiscuous mode
[  129.772165][T12548] netlink: 'syz.2.2269': attribute type 1 has an invalid length.
[  129.809178][T12552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2270'.
[  129.898658][T12561] netlink: 'syz.0.2273': attribute type 29 has an invalid length.
[  129.931035][T12561] netlink: 'syz.0.2273': attribute type 29 has an invalid length.
[  129.933728][T12561] netlink: 'syz.0.2273': attribute type 29 has an invalid length.
[  129.936871][T12561] netlink: 'syz.0.2273': attribute type 29 has an invalid length.
[  129.939578][T12561] netlink: 'syz.0.2273': attribute type 29 has an invalid length.
[  129.942154][T12561] netlink: 'syz.0.2273': attribute type 29 has an invalid length.
[  129.944790][T12561] netlink: 'syz.0.2273': attribute type 29 has an invalid length.
[  130.572790][T12581] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  131.662503][T12626] lo speed is unknown, defaulting to 1000
[  131.803394][T12641] ip_vti0: Master is either lo or non-ether device
[  132.257651][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  132.536169][T12661] 8021q: adding VLAN 0 to HW filter on device bond6
[  132.853555][T12685] lo speed is unknown, defaulting to 1000
[  132.991279][T12705] Unsupported ieee802154 address type: 0
[  133.101931][T12712] vxcan1: entered allmulticast mode
[  133.144169][T12712] Unknown options in mask 700
[  133.537508][T12720] validate_nla: 38 callbacks suppressed
[  133.537518][T12720] netlink: 'syz.0.2332': attribute type 29 has an invalid length.
[  133.836559][T12728] __nla_validate_parse: 3 callbacks suppressed
[  133.836570][T12728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2333'.
[  133.879809][T12730] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2334'.
[  133.986650][T12741] syzkaller1: entered promiscuous mode
[  133.990508][T12741] syzkaller1: entered allmulticast mode
[  134.078440][T12743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2339'.
[  134.112369][T12745] netlink: 'syz.2.2340': attribute type 1 has an invalid length.
[  134.132032][T12745] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address
[  134.136392][T12745] bond9: (slave vxcan3): Error -95 calling set_mac_address
[  134.180562][T12747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2340'.
[  134.188485][T12747] macvlan2: entered promiscuous mode
[  134.190645][T12747] macvlan2: entered allmulticast mode
[  134.279765][T12750] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2341'.
[  134.771404][T12756] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  134.783497][T12759] netlink: 'syz.1.2345': attribute type 1 has an invalid length.
[  134.860757][T12761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2346'.
[  134.863743][T12761] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  134.883411][T12769] x_tables: unsorted underflow at hook 3
[  134.893158][T12769] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2349'.
[  134.896346][T12769] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2349'.
[  134.913158][T12771] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2350'.
[  134.918187][T12771] netlink: 'syz.1.2350': attribute type 13 has an invalid length.
[  134.920993][T12771] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2350'.
[  134.924474][T12771] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len
[  135.024833][T12785] netlink: 'syz.0.2355': attribute type 1 has an invalid length.
[  135.399339][T12839] bridge0: port 1(ipvlan4) entered blocking state
[  135.401647][T12839] bridge0: port 1(ipvlan4) entered disabled state
[  135.403793][T12839] ipvlan4: entered allmulticast mode
[  135.414596][T12839] bridge0: entered allmulticast mode
[  135.435187][T12839] ipvlan4: left allmulticast mode
[  135.439170][T12839] bridge0: left allmulticast mode
[  135.528724][T12850] xt_CT: No such helper "snmp_trap"
[  135.593044][T12872] batadv2: entered promiscuous mode
[  135.598293][T12872] batadv2: entered allmulticast mode
[  136.170733][T12898] netlink: 'syz.2.2396': attribute type 1 has an invalid length.
[  137.248273][T12990] netlink: 'syz.1.2432': attribute type 1 has an invalid length.
[  137.277948][T12994] netlink: 'syz.0.2434': attribute type 1 has an invalid length.
[  137.418214][T13006] bridge9: entered allmulticast mode
[  137.707817][T13038] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  137.729668][T13044] bridge: RTM_NEWNEIGH with invalid ether address
[  137.749162][T13048] netlink: 'syz.0.2453': attribute type 10 has an invalid length.
[  137.754014][T13047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  138.411620][T13102] netlink: zone id is out of range
[  138.413384][T13102] netlink: get zone limit has 8 unknown bytes
[  138.488633][T13113] IPVS: set_ctl: invalid protocol: 252 100.1.1.2:20000
[  138.667034][T13144] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (34)
[  138.687638][T13148] netlink: 'syz.1.2490': attribute type 1 has an invalid length.
[  138.950020][T13175] __nla_validate_parse: 28 callbacks suppressed
[  138.950029][T13175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2500'.
[  138.955008][T13175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2500'.
[  138.957609][T13177] netlink: 'syz.1.2502': attribute type 2 has an invalid length.
[  138.960796][T13177] netlink: 'syz.1.2502': attribute type 2 has an invalid length.
[  138.970103][T13177] netlink: 564 bytes leftover after parsing attributes in process `syz.1.2502'.
[  139.062248][T13187] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2506'.
[  139.067045][T13188] netlink: 404 bytes leftover after parsing attributes in process `syz.0.2506'.
[  139.070109][T13188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2506'.
[  139.074296][T13188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2506'.
[  139.078033][T13188] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2506'.
[  139.081344][T13190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2507'.
[  139.131609][T13196] lo speed is unknown, defaulting to 1000
[  139.233571][T13211] tap0: tun_chr_ioctl cmd 1074025676
[  139.235491][T13211] tap0: owner set to 0
[  139.283141][T13216] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2516'.
[  139.438827][T13231] netlink: 'syz.1.2523': attribute type 83 has an invalid length.
[  139.443360][T13231] netlink: 'syz.1.2523': attribute type 83 has an invalid length.
[  139.659289][T13270] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  139.814060][T13293] vlan0: entered promiscuous mode
[  139.942848][T13305] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[  139.946900][T13305] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.339084][T13339] netlink: 'syz.2.2560': attribute type 2 has an invalid length.
[  140.342345][T13339] netlink: 'syz.2.2560': attribute type 1 has an invalid length.
[  140.372286][T13341] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  140.822079][T13366] netlink: 'syz.1.2571': attribute type 1 has an invalid length.
[  141.123670][T13407] delete_channel: no stack
[  141.145077][T13407] bond7: entered promiscuous mode
[  141.149124][T13407] 8021q: adding VLAN 0 to HW filter on device bond7
[  141.154090][T13407] ipt_REJECT: TCP_RESET invalid for non-tcp
[  141.161235][T13407] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.189630][T13414] hsr_slave_0: left promiscuous mode
[  141.201484][T13407] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.287824][T13407] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.327821][T13407] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.390409][T13407] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.400237][T13407] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.407392][T13407] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.414122][T13407] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.457878][T13429] 8021q: adding VLAN 0 to HW filter on device bond5
[  141.996972][T13477] batadv_slave_1: entered promiscuous mode
[  141.999965][T13476] batadv_slave_1: left promiscuous mode
[  142.108409][T13489] tap0: tun_chr_ioctl cmd 1074025677
[  142.110454][T13489] tap0: linktype set to 776
[  142.233121][T13502] lo speed is unknown, defaulting to 1000
[  142.319953][T13507] x_tables: ip_tables: icmp match: only valid for protocol 1
[  142.363315][T13509] bond0: entered promiscuous mode
[  142.365704][T13509] bond0: entered allmulticast mode
[  143.533892][T13565] rdma_op ffff8881129979f0 conn xmit_rdma 0000000000000000
[  143.878307][T13599] netlink: 'syz.0.2654': attribute type 1 has an invalid length.
[  143.880828][T13599] netlink: 'syz.0.2654': attribute type 2 has an invalid length.
[  143.884407][T13599] netlink: 'syz.0.2654': attribute type 1 has an invalid length.
[  143.889303][T13599] netlink: 'syz.0.2654': attribute type 2 has an invalid length.
[  144.155126][T13619] netlink: 'syz.2.2663': attribute type 9 has an invalid length.
[  144.254117][T13624] __nla_validate_parse: 25 callbacks suppressed
[  144.254127][T13624] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2665'.
[  144.260790][T13624] netlink: 'syz.0.2665': attribute type 1 has an invalid length.
[  144.263479][T13624] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.2665'.
[  144.518031][T13628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2667'.
[  144.558149][T13630] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  144.561704][T13630] syzkaller0: entered promiscuous mode
[  144.563585][T13630] syzkaller0: entered allmulticast mode
[  144.572200][T13630] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.2668'.
[  144.599984][T13632] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2669'.
[  144.631068][T13634] macsec0: entered promiscuous mode
[  144.633705][T13634] macsec0: entered allmulticast mode
[  144.740112][T13644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2674'.
[  145.049308][T13658] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  145.083978][T13653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2677'.
[  145.212121][T13682] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2690'.
[  145.504064][T13716] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2701'.
[  145.596006][T13724] lo speed is unknown, defaulting to 1000
[  145.723080][T13742] netlink: 'syz.0.2706': attribute type 4 has an invalid length.
[  145.726433][T13742] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2706'.
[  145.808996][T13752] sctp: [Deprecated]: syz.0.2708 (pid 13752) Use of int in max_burst socket option.
[  145.808996][T13752] Use struct sctp_assoc_value instead
[  145.895740][T13768] xt_l2tp: invalid flags combination: 4
[  146.421030][T13810] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  146.684241][T13829] wireguard2: entered promiscuous mode
[  146.689101][T13829] wireguard2: entered allmulticast mode
[  146.723082][T13768] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  146.819332][T13838] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  146.838002][T13841] netlink: 'syz.2.2723': attribute type 1 has an invalid length.
[  146.862378][T13844] netlink: 'syz.2.2724': attribute type 5 has an invalid length.
[  146.904908][T13849] netlink: 'syz.0.2725': attribute type 3 has an invalid length.
[  146.913020][T13849] macvlan3: entered allmulticast mode
[  147.432907][T13899] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  147.561052][T13916] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  147.580213][T13916] lo speed is unknown, defaulting to 1000
[  147.581742][T13918] tap0: tun_chr_ioctl cmd 1074025678
[  147.583962][T13918] tap0: group set to 0
[  147.733075][T13934] openvswitch: netlink: IPv4 tunnel dst address is zero
[  147.890286][T13864] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  147.988749][T13961] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  148.850424][T13995] lo speed is unknown, defaulting to 1000
[  148.940260][T14007] hsr_slave_0: left promiscuous mode
[  148.942447][T14007] 0: left promiscuous mode
[  148.951404][T13975] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  149.142085][T14033] validate_nla: 2 callbacks suppressed
[  149.142094][T14033] netlink: 'syz.2.2781': attribute type 11 has an invalid length.
[  149.189510][T14041] tipc: Enabling of bearer <5dp:s> rejected, media not registered
[  149.469123][T14086] __nla_validate_parse: 20 callbacks suppressed
[  149.469154][T14086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2800'.
[  149.539090][T14094] netlink: 'syz.2.2803': attribute type 7 has an invalid length.
[  149.639443][T14107] netlink: 'syz.1.2807': attribute type 1 has an invalid length.
[  149.781625][T14119] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.2811'.
[  150.099095][T14141] netlink: 'syz.1.2819': attribute type 1 has an invalid length.
[  150.174751][T14147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2822'.
[  150.240553][T14151] bond0: (slave rose0): Enslaving as an active interface with an up link
[  150.461554][T14182] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  150.467421][T14180] lo speed is unknown, defaulting to 1000
[  150.592311][T14194] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2839'.
[  150.676471][T14201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2842'.
[  150.701454][T14203] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2843'.
[  150.739809][T14213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2846'.
[  150.758142][T14215] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2847'.
[  150.761806][T14205] Bluetooth: hci1: Opcode 0x0c20 failed: -4
[  151.037155][T14253] atomic_op ffff888107733198 conn xmit_atomic 0000000000000000
[  151.809272][T14261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2860'.
[  151.857384][T14269] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  151.883968][T14273] netlink: 'syz.0.2864': attribute type 1 has an invalid length.
[  151.922609][T14275] lo speed is unknown, defaulting to 1000
[  152.058310][T14275] netlink: 'syz.0.2865': attribute type 2 has an invalid length.
[  152.159792][T14282] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2867'.
[  152.246677][T14295] netlink: 'syz.2.2871': attribute type 1 has an invalid length.
[  152.287989][T14298] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  152.687721][T14330] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.738642][ T5834] Bluetooth: hci1: command 0x0c20 tx timeout
[  153.021030][T14359] syzkaller1: entered promiscuous mode
[  153.026996][T14359] syzkaller1: entered allmulticast mode
[  153.040320][T14361] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  153.126562][T14369] netlink: 'syz.1.2897': attribute type 2 has an invalid length.
[  153.199427][T14311] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  153.210150][T14381] netlink: 'syz.2.2902': attribute type 3 has an invalid length.
[  153.213188][T14381] netlink: 'syz.2.2902': attribute type 2 has an invalid length.
[  153.354626][T14401] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  153.550452][   T10] lo speed is unknown, defaulting to 1000
[  153.552638][   T10] syz2: Port: 1 Link ACTIVE
[  153.589882][T14436] x_tables: duplicate underflow at hook 3
[  153.620066][T14444] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  153.703101][T14457] 8021q: adding VLAN 0 to HW filter on device bond9
[  153.782991][T14463] xt_hashlimit: max too large, truncated to 1048576
[  153.788632][T14463] No such timeout policy "syz1"
[  153.860951][T14478] gtp1: entered promiscuous mode
[  153.863176][T14478] gtp1: entered allmulticast mode
[  153.943710][T14498] Illegal XDP return value 4294967262 on prog  (id 763) dev N/A, expect packet loss!
[  154.010776][T14505] syzkaller1: entered promiscuous mode
[  154.012613][T14505] syzkaller1: entered allmulticast mode
[  154.078208][T14514] IPVS: Error connecting to the multicast addr
[  154.279821][T14530] validate_nla: 12 callbacks suppressed
[  154.279830][T14530] netlink: 'syz.1.2958': attribute type 1 has an invalid length.
[  154.313030][T14530] 8021q: adding VLAN 0 to HW filter on device bond6
[  154.326454][T14530] macvlan3: entered promiscuous mode
[  154.329550][T14530] macvlan3: entered allmulticast mode
[  154.332031][T14530] bond6: entered promiscuous mode
[  154.334171][T14530] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  154.342800][T14530] bond6: left promiscuous mode
[  154.547165][T14556] lo speed is unknown, defaulting to 1000
[  154.625902][T14560] xt_TPROXY: Can be used only with -p tcp or -p udp
[  154.881128][T14566] netlink: 'syz.2.2970': attribute type 1 has an invalid length.
[  154.905774][T14568] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  154.981051][T14573] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.010703][T14564] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  156.287683][T14577] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.330322][T14577] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.343715][T14587] __nla_validate_parse: 23 callbacks suppressed
[  156.343723][T14587] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2976'.
[  156.370629][T14577] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.379471][T14590] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2981'.
[  156.384266][T14585] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2978'.
[  156.392230][T14585] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2978'.
[  156.408151][T14577] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.443666][T14601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  156.454197][T14577] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.463996][T14577] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.471002][T14577] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.478974][T14577] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.654858][T14633] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.2997'.
[  156.667554][T14638] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2998'.
[  156.740373][T14647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3001'.
[  156.787577][T14649] wireguard2: entered promiscuous mode
[  156.789411][T14649] wireguard2: entered allmulticast mode
[  156.794293][T14649] xt_hashlimit: max too large, truncated to 1048576
[  156.798140][T14649] No such timeout policy "syz1"
[  156.806338][T14655] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3004'.
[  156.901484][T14668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3010'.
[  156.904976][T14668] openvswitch: netlink: Missing key (keys=40, expected=100)
[  156.959340][T14675] netlink: 'syz.1.3012': attribute type 33 has an invalid length.
[  156.961943][T14675] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3012'.
[  157.427923][T14734] x_tables: duplicate underflow at hook 1
[  157.808287][T14772] ksmbd: Unknown IPC event: 3, ignore.
[  158.311914][T14839] sctp: [Deprecated]: syz.1.3076 (pid 14839) Use of int in max_burst socket option.
[  158.311914][T14839] Use struct sctp_assoc_value instead
[  158.361145][T14845] netlink: 'syz.2.3079': attribute type 1 has an invalid length.
[  158.389111][T14849] x_tables: duplicate underflow at hook 1
[  158.526613][T14864] netlink: 'syz.0.3088': attribute type 1 has an invalid length.
[  158.653852][T14873] macsec2: entered promiscuous mode
[  158.657839][T14873] macsec2: entered allmulticast mode
[  158.732233][T14885] netlink: 'syz.2.3092': attribute type 1 has an invalid length.
[  159.502247][T14907] macvlan4: entered allmulticast mode
[  159.515790][T14907] veth1_vlan: entered allmulticast mode
[  159.519193][T14907] team0: Port device macvlan4 added
[  159.558381][T14913] netlink: 'syz.2.3105': attribute type 1 has an invalid length.
[  159.749158][T14935] @: renamed from bond_slave_0
[  159.826403][T14942] netlink: zone id is out of range
[  159.829474][T14942] netlink: zone id is out of range
[  159.831285][T14942] netlink: zone id is out of range
[  159.833094][T14942] netlink: zone id is out of range
[  159.834840][T14942] netlink: zone id is out of range
[  159.846790][T14942] netlink: zone id is out of range
[  159.848752][T14942] netlink: zone id is out of range
[  159.850597][T14942] netlink: zone id is out of range
[  159.852605][T14942] netlink: zone id is out of range
[  159.854323][T14942] netlink: zone id is out of range
[  159.864743][T14947] netlink: 'syz.1.3116': attribute type 1 has an invalid length.
[  159.922913][T14952] netlink: 'syz.0.3117': attribute type 1 has an invalid length.
[  160.166607][T14975] xt_cgroup: invalid path, errno=-2
[  160.220655][T14979] syzkaller0: left promiscuous mode
[  160.248068][T14982] netlink: 'syz.0.3127': attribute type 1 has an invalid length.
[  160.719252][T15014] lo speed is unknown, defaulting to 1000
[  161.084587][T15051] No such timeout policy "syz1"
[  161.262302][T15072] bridge0: port 1(ipvlan2) entered blocking state
[  161.265013][T15072] bridge0: port 1(ipvlan2) entered disabled state
[  161.268886][T15072] ipvlan2: entered allmulticast mode
[  161.270627][T15072] bridge0: entered allmulticast mode
[  161.273316][T15072] ipvlan2: left allmulticast mode
[  161.275313][T15072] bridge0: left allmulticast mode
[  161.351545][T15076] __nla_validate_parse: 35 callbacks suppressed
[  161.351556][T15076] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3153'.
[  161.359478][T15076] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3153'.
[  161.396463][T15002] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  161.429322][T15081] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3154'.
[  161.433098][T15081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3154'.
[  161.471230][T15086] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3156'.
[  161.473659][T15085] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3157'.
[  161.502193][T15091] netlink: 'syz.1.3158': attribute type 1 has an invalid length.
[  161.579946][T15097] netlink: 'syz.0.3161': attribute type 1 has an invalid length.
[  161.607803][T15097] bond10: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  161.627738][T15097] veth7: entered promiscuous mode
[  161.630940][T15097] bond10: (slave veth7): Enslaving as a backup interface with a down link
[  161.677860][T15104] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3164'.
[  162.132759][T15155] lo speed is unknown, defaulting to 1000
[  162.194741][T15164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3181'.
[  162.361419][T15178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3184'.
[  162.366650][T15178] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3184'.
[  162.371042][T15178] netlink: 'syz.2.3184': attribute type 10 has an invalid length.
[  162.684923][T15128] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  162.833373][T15205] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  162.844588][T15207] sit0: entered promiscuous mode
[  162.845086][T15205] netlink: 'syz.1.3195': attribute type 10 has an invalid length.
[  162.851356][T15206] netlink: 'syz.1.3195': attribute type 10 has an invalid length.
[  162.854106][T15206] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  162.858405][T15206] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  162.860955][T15206] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  162.863939][T15206] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  162.910238][T15210] netlink: 'syz.1.3196': attribute type 7 has an invalid length.
[  162.950594][T15212] xt_bpf: check failed: parse error
[  163.493477][T15231] syz.2.3205: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  163.506504][T15231] CPU: 1 UID: 0 PID: 15231 Comm: syz.2.3205 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  163.506522][T15231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  163.506528][T15231] Call Trace:
[  163.506533][T15231]  <TASK>
[  163.506537][T15231]  dump_stack_lvl+0x189/0x250
[  163.506556][T15231]  ? __pfx_dump_stack_lvl+0x10/0x10
[  163.506569][T15231]  ? __pfx__printk+0x10/0x10
[  163.506581][T15231]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  163.506593][T15231]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  163.506605][T15231]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  163.506618][T15231]  warn_alloc+0x214/0x310
[  163.506626][T15231]  ? stack_depot_save_flags+0x40/0x900
[  163.506637][T15231]  ? __pfx_warn_alloc+0x10/0x10
[  163.506645][T15231]  ? kasan_save_track+0x4f/0x80
[  163.506655][T15231]  ? xskq_create+0x56/0x170
[  163.506662][T15231]  ? xsk_init_queue+0xb0/0x110
[  163.506668][T15231]  ? xsk_setsockopt+0x43f/0x710
[  163.506678][T15231]  ? do_sock_setsockopt+0x17c/0x1b0
[  163.506691][T15231]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  163.506702][T15231]  ? do_syscall_64+0xfa/0x3b0
[  163.506712][T15231]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.506723][T15231]  __vmalloc_node_range_noprof+0x125/0x12f0
[  163.506747][T15231]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  163.506761][T15231]  ? __kasan_kmalloc+0x93/0xb0
[  163.506772][T15231]  vmalloc_user_noprof+0xad/0xf0
[  163.506784][T15231]  ? xskq_create+0xbf/0x170
[  163.506792][T15231]  xskq_create+0xbf/0x170
[  163.506801][T15231]  xsk_init_queue+0xb0/0x110
[  163.506810][T15231]  xsk_setsockopt+0x43f/0x710
[  163.506824][T15231]  ? __pfx_xsk_setsockopt+0x10/0x10
[  163.506836][T15231]  ? __fget_files+0x2a/0x420
[  163.506843][T15231]  ? aa_sock_opt_perm+0x74/0x110
[  163.506853][T15231]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  163.506862][T15231]  ? __pfx_xsk_setsockopt+0x10/0x10
[  163.506873][T15231]  do_sock_setsockopt+0x17c/0x1b0
[  163.506886][T15231]  __x64_sys_setsockopt+0x13f/0x1b0
[  163.506900][T15231]  do_syscall_64+0xfa/0x3b0
[  163.506907][T15231]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.506914][T15231]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.506921][T15231]  ? exc_page_fault+0x9f/0xf0
[  163.506929][T15231]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.506936][T15231] RIP: 0033:0x7fa1bcd8e929
[  163.506944][T15231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  163.506950][T15231] RSP: 002b:00007fa1bdbf4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  163.506960][T15231] RAX: ffffffffffffffda RBX: 00007fa1bcfb5fa0 RCX: 00007fa1bcd8e929
[  163.506965][T15231] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  163.506970][T15231] RBP: 00007fa1bce10ca1 R08: 0000000000000004 R09: 0000000000000000
[  163.506975][T15231] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  163.506979][T15231] R13: 0000000000000000 R14: 00007fa1bcfb5fa0 R15: 00007fff4b6a8318
[  163.506991][T15231]  </TASK>
[  163.506994][T15231] Mem-Info:
[  163.616658][T15231] active_anon:4802 inactive_anon:0 isolated_anon:0
[  163.616658][T15231]  active_file:1305 inactive_file:38254 isolated_file:0
[  163.616658][T15231]  unevictable:1768 dirty:104 writeback:0
[  163.616658][T15231]  slab_reclaimable:9966 slab_unreclaimable:80483
[  163.616658][T15231]  mapped:18212 shmem:2440 pagetables:987
[  163.616658][T15231]  sec_pagetables:0 bounce:0
[  163.616658][T15231]  kernel_misc_reclaimable:0
[  163.616658][T15231]  free:269927 free_pcp:15263 free_cma:0
[  163.639961][T15231] Node 0 active_anon:12324kB inactive_anon:0kB active_file:2744kB inactive_file:18480kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34912kB dirty:144kB writeback:0kB shmem:4860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5060kB pagetables:2496kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  163.657694][T15231] Node 1 active_anon:6816kB inactive_anon:0kB active_file:2476kB inactive_file:134536kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37936kB dirty:272kB writeback:0kB shmem:4900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7016kB pagetables:1520kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  163.669866][T15231] Node 0 DMA free:14852kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:508kB local_pcp:384kB free_cma:0kB
[  163.679507][T15231] lowmem_reserve[]: 0 812 812 812 812
[  163.681381][T15231] Node 0 DMA32 free:351648kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12460kB inactive_anon:0kB active_file:2744kB inactive_file:18480kB unevictable:3536kB writepending:144kB present:1556484kB managed:831988kB mlocked:0kB bounce:0kB free_pcp:29776kB local_pcp:17028kB free_cma:0kB
[  163.691732][T15231] lowmem_reserve[]: 0 0 0 0 0
[  163.693285][T15231] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  163.703425][T15231] lowmem_reserve[]: 0 0 854 854 854
[  163.705145][T15231] Node 1 Normal free:254320kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6816kB inactive_anon:0kB active_file:2476kB inactive_file:134536kB unevictable:3536kB writepending:272kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:31108kB local_pcp:15004kB free_cma:0kB
[  163.719109][T15231] lowmem_reserve[]: 0 0 0 0 0
[  163.720805][T15231] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 2*128kB (U) 1*256kB (U) 2*512kB (U) 3*1024kB (U) 1*2048kB (M) 2*4096kB (U) = 14852kB
[  163.727268][T15231] Node 0 DMA32: 258*4kB (UME) 486*8kB (UME) 370*16kB (UME) 225*32kB (UME) 292*64kB (UME) 182*128kB (UM) 119*256kB (UM) 68*512kB (UME) 29*1024kB (UE) 18*2048kB (UE) 39*4096kB (UM) = 351608kB
[  163.744545][T15244] lo speed is unknown, defaulting to 1000
[  163.754202][T15231] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  163.759821][T15231] Node 1 Normal: 161*4kB (UME) 790*8kB (UME) 315*16kB (UME) 579*32kB (UME) 265*64kB (UME) 52*128kB (UM) 24*256kB (UME) 7*512kB (UM) 2*1024kB (ME) 6*2048kB (UME) 43*4096kB (UM) = 254340kB
[  163.768836][T15231] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  163.771836][T15231] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  163.774825][T15231] 41999 total pagecache pages
[  163.778823][T15231] 0 pages in swap cache
[  163.780334][T15231] Free swap  = 124996kB
[  163.781709][T15231] Total swap = 124996kB
[  163.783076][T15231] 786301 pages RAM
[  163.784332][T15231] 0 pages HighMem/MovableOnly
[  163.793807][T15231] 241056 pages reserved
[  163.795224][T15231] 0 pages cma reserved
[  163.818613][ T5834] Bluetooth: hci2: link tx timeout
[  163.820370][ T5834] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  163.823879][   T55] Bluetooth: hci2: link tx timeout
[  163.826569][   T55] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  163.830823][   T55] Bluetooth: hci2: link tx timeout
[  163.832924][   T55] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  163.838760][   T55] Bluetooth: hci2: link tx timeout
[  163.841402][   T55] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  163.844650][   T55] Bluetooth: hci2: link tx timeout
[  163.846972][   T55] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  163.850193][   T55] Bluetooth: hci2: link tx timeout
[  163.852469][   T55] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  163.857772][   T55] Bluetooth: hci2: link tx timeout
[  163.860183][   T55] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  163.865142][   T55] Bluetooth: hci2: link tx timeout
[  163.868176][   T55] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  163.871418][   T55] Bluetooth: hci2: link tx timeout
[  163.873546][   T55] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  163.877239][   T55] Bluetooth: hci2: link tx timeout
[  163.879485][   T55] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  164.872620][T15273] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  165.008839][T15364] xt_HMARK: spi-set and port-set can't be combined
[  165.138874][T15370] sctp: [Deprecated]: syz.1.3253 (pid 15370) Use of int in max_burst socket option.
[  165.138874][T15370] Use struct sctp_assoc_value instead
[  165.171481][T15372] validate_nla: 3 callbacks suppressed
[  165.171491][T15372] netlink: 'syz.1.3254': attribute type 1 has an invalid length.
[  165.207787][T15374] bond0: left promiscuous mode
[  165.209491][T15374] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  165.211765][T15374] bond0: left allmulticast mode
[  165.213427][T15374] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  165.224547][T15374] vlan0: left promiscuous mode
[  165.232818][T15374] tipc: Resetting bearer <eth:syzkaller0>
[  165.235003][T15374] syzkaller0: left promiscuous mode
[  165.237305][T15374] syzkaller0: left allmulticast mode
[  165.255743][T15374] bridge9: left allmulticast mode
[  165.273780][T15374] macsec0: left promiscuous mode
[  165.278908][T15374] macsec0: left allmulticast mode
[  165.307838][    T9] lo speed is unknown, defaulting to 1000
[  165.310107][    T9] syz2: Port: 1 Link DOWN
[  165.429651][T15385] lo speed is unknown, defaulting to 1000
[  165.583317][T15394] 8021q: adding VLAN 0 to HW filter on device bond11
[  165.588688][T15394] bond0: (slave bond11): making interface the new active one
[  165.591756][T15394] bond0: (slave bond11): Enslaving as an active interface with an up link
[  165.865533][ T5834] Bluetooth: hci2: command 0x040f tx timeout
[  166.056956][T15447] netlink: 'syz.0.3283': attribute type 1 has an invalid length.
[  166.447876][T15474] __nla_validate_parse: 31 callbacks suppressed
[  166.447887][T15474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3295'.
[  166.541686][T15480] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3297'.
[  166.847824][T15503] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  166.852113][T15503] syzkaller0: entered promiscuous mode
[  166.853982][T15503] syzkaller0: entered allmulticast mode
[  166.939023][T15509] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3309'.
[  166.980875][T15509] netlink: 'syz.0.3309': attribute type 39 has an invalid length.
[  167.029745][T15519] netlink: 'syz.1.3313': attribute type 1 has an invalid length.
[  167.112729][T15530] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3317'.
[  167.128211][T15532] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3318'.
[  167.132915][T15536] set match dimension is over the limit!
[  167.166316][T15542] netlink: 'syz.2.3321': attribute type 1 has an invalid length.
[  167.199197][T15546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3320'.
[  167.310250][T15560] bridge_slave_1: default FDB implementation only supports local addresses
[  167.450366][T15576] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3332'.
[  167.457784][T15579] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3332'.
[  167.498387][T15586] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3334'.
[  167.501565][T15586] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3334'.
[  167.761842][T15614] syzkaller0: left promiscuous mode
[  167.765345][T15614] syzkaller0: left allmulticast mode
[  167.898700][T15628] lo speed is unknown, defaulting to 1000
[  168.176766][T15659] netlink: 'syz.1.3362': attribute type 27 has an invalid length.
[  168.183148][T15659] netlink: 'syz.1.3362': attribute type 1 has an invalid length.
[  168.431847][T15688] lo speed is unknown, defaulting to 1000
[  168.542003][T15688] bridge_slave_1: default FDB implementation only supports local addresses
[  168.756699][T15727] netlink: 'syz.2.3388': attribute type 4 has an invalid length.
[  168.870560][T15739] netlink: 'syz.1.3392': attribute type 12 has an invalid length.
[  169.210087][T15790] netlink: 'syz.2.3411': attribute type 5 has an invalid length.
[  169.670122][T15831] syz_tun: entered allmulticast mode
[  169.683247][T15833] syz_tun: left allmulticast mode
[  169.717348][T15836] net_ratelimit: 28 callbacks suppressed
[  169.717361][T15836] openvswitch: netlink: IPv4 tunnel dst address is zero
[  169.770709][T15839] wireguard3: entered promiscuous mode
[  169.773068][T15839] wireguard3: entered allmulticast mode
[  169.857949][T15844] xt_hashlimit: size too large, truncated to 1048576
[  170.153004][T15870] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  170.158561][T15870] syzkaller0: entered promiscuous mode
[  170.175432][   T55] Bluetooth: hci1: command 0x0c20 tx timeout
[  170.677752][T15911] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  171.232795][T15941] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  171.398556][T15954] netlink: 'syz.2.3463': attribute type 6 has an invalid length.
[  171.558649][T15963] __nla_validate_parse: 35 callbacks suppressed
[  171.558661][T15963] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3467'.
[  171.749810][T15978] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3470'.
[  171.956576][T16004] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3479'.
[  172.081144][T16014] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3482'.
[  172.204849][T16033] lo speed is unknown, defaulting to 1000
[  172.229092][T16036] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  172.234249][T16036] veth0: entered promiscuous mode
[  172.237498][T16036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3487'.
[  172.243905][T16036] veth0 (unregistering): left promiscuous mode
[  172.976575][T16058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3490'.
[  173.074152][T16065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3492'.
[  173.274352][T16069] x_tables: unsorted underflow at hook 3
[  173.428261][T16102] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3502'.
[  173.447752][T16083] workqueue: Failed to create a rescuer kthread for wq "nfc9_nci_rx_wq": -EINTR
[  173.544758][T16122] netlink: 'syz.0.3505': attribute type 5 has an invalid length.
[  173.705986][T16140] netlink: 'syz.0.3510': attribute type 1 has an invalid length.
[  173.719106][T16134] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.752561][T16144] netlink: 'syz.2.3512': attribute type 1 has an invalid length.
[  173.873757][T16159] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3518'.
[  173.888231][T16161] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3518'.
[  173.998852][T16173] 8021q: adding VLAN 0 to HW filter on device bond7
[  174.212865][T16210] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.318699][T16219] sit0: left promiscuous mode
[  174.328343][T16219] 8021q: adding VLAN 0 to HW filter on device team0
[  174.332057][T16219] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  174.346177][  T972] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  174.467017][T16238] netlink: 'syz.2.3544': attribute type 3 has an invalid length.
[  174.494875][T16240] netlink: 'syz.0.3545': attribute type 4 has an invalid length.
[  174.498631][T16240] netlink: 'syz.0.3545': attribute type 6 has an invalid length.
[  174.501309][T16240] netlink: 'syz.0.3545': attribute type 5 has an invalid length.
[  174.515822][T16238] netlink: 'syz.2.3544': attribute type 1 has an invalid length.
[  174.654767][T16255] tipc: Invalid UDP bearer configuration
[  174.654798][T16255] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  174.807720][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  174.917523][  T972] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  174.926136][T16275] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  175.087210][T16296] team0: Device gtp2 is of different type
[  175.823741][T16373] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  175.827396][T16373] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  175.857924][ T5846] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  175.861104][ T5846] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  176.036895][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  176.190482][T16430] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  177.092538][T16484] lo speed is unknown, defaulting to 1000
[  177.174115][T16490] netlink: 'syz.1.3640': attribute type 2 has an invalid length.
[  177.454965][T16503] __nla_validate_parse: 28 callbacks suppressed
[  177.455013][T16503] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3646'.
[  177.651448][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3653'.
[  177.655074][T16519] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3653'.
[  177.658929][T16519] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3653'.
[  177.663472][T16519] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  177.737231][T16528] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  177.817645][T16537] sit2: entered promiscuous mode
[  177.980905][T16552] No such timeout policy "syz0"
[  178.048025][T16556] netlink: 'syz.0.3667': attribute type 6 has an invalid length.
[  178.140416][T16562] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3670'.
[  178.471550][T16567] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3672'.
[  178.498819][T16569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3673'.
[  178.570493][T16573] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3675'.
[  178.663832][T16579] netlink: 'syz.2.3678': attribute type 3 has an invalid length.
[  178.667117][T16579] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3678'.
[  178.783326][T16588] netlink: 161716 bytes leftover after parsing attributes in process `syz.2.3682'.
[  179.156235][T16605] netlink: 'syz.0.3687': attribute type 83 has an invalid length.
[  179.239819][T16618] xt_CT: No such helper "snmp_trap"
[  179.306913][T16629] syz.0.3696 uses old SIOCAX25GETINFO
[  179.424276][T16645] netlink: 'syz.0.3702': attribute type 83 has an invalid length.
[  179.480231][T16649] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  179.559183][T16650] lo speed is unknown, defaulting to 1000
[  179.589607][T16660] xt_TPROXY: Can be used only with -p tcp or -p udp
[  179.649812][T16664] bond0: (slave wlan1): Releasing backup interface
[  179.665950][T16664] netlink: 'syz.1.3708': attribute type 10 has an invalid length.
[  179.668948][T16664] bond0: (slave wlan1): refused to change device type
[  179.935519][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  180.067278][T16711] dvmrp0: left allmulticast mode
[  180.182922][T16724] netlink: 'syz.1.3733': attribute type 2 has an invalid length.
[  180.265003][T16731] netlink: 'syz.2.3736': attribute type 12 has an invalid length.
[  180.807518][T16763] ksmbd: Unknown IPC event: 3, ignore.
[  181.008910][T16777] netlink: zone id is out of range
[  181.010898][T16777] netlink: zone id is out of range
[  181.012753][T16777] netlink: zone id is out of range
[  181.014812][T16777] netlink: get zone limit has 8 unknown bytes
[  181.247062][T16785] xt_hashlimit: invalid rate
[  181.292048][T16789] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  181.305598][ T4214] wlan1: Trigger new scan to find an IBSS to join
[  181.492171][T16803] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  181.496675][T16803] syzkaller0: entered promiscuous mode
[  181.499238][T16803] syzkaller0: entered allmulticast mode
[  181.757688][T16807] bridge_slave_1: default FDB implementation only supports local addresses
[  181.856421][T16813] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  181.860370][T16813] netlink: 'syz.0.3764': attribute type 21 has an invalid length.
[  181.865210][T16813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  182.089072][T16839] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20004
[  182.277521][T16853] nbd: must specify at least one socket
[  183.161240][T16882] netlink: 'syz.1.3785': attribute type 12 has an invalid length.
[  183.164323][T16882] __nla_validate_parse: 27 callbacks suppressed
[  183.164336][T16882] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.3785'.
[  184.313263][T16911] lo speed is unknown, defaulting to 1000
[  184.346066][ T4214] wlan1: Trigger new scan to find an IBSS to join
[  184.352509][T16913] netlink: 'syz.0.3793': attribute type 4 has an invalid length.
[  184.470242][T16921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3797'.
[  184.706682][T16946] IPVS: set_ctl: invalid protocol: 108 172.20.20.13:20002
[  184.749589][T16948] syzkaller0: left promiscuous mode
[  184.753587][T16948] syzkaller0: left allmulticast mode
[  185.094096][T16981] syzkaller0: entered promiscuous mode
[  185.098309][T16981] syzkaller0: entered allmulticast mode
[  185.126595][T16983] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3817'.
[  185.139721][T16983] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3817'.
[  185.466260][T17019] macvlan0: entered promiscuous mode
[  185.469091][T17019] macvlan0: left promiscuous mode
[  185.587528][T17036] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  185.592291][T17036] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  185.819295][T17054] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  185.852507][T17060] IPv6: sit3: Disabled Multicast RS
[  185.884001][T17066] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3841'.
[  185.912515][T17068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3842'.
[  186.276953][T17105] erspan0: left allmulticast mode
[  186.290778][T17105] tipc: Resetting bearer <ib:ip6gre0>
[  186.314125][T17110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3849'.
[  186.327256][T17110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3849'.
[  186.344602][T17105] wg1: left promiscuous mode
[  186.346907][T17105] wg1: left allmulticast mode
[  186.427493][T17105] 0: left allmulticast mode
[  186.454796][T17105] vlan0: left promiscuous mode
[  186.504896][T17105] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  186.526460][T17105] geneve2: left promiscuous mode
[  186.532486][T17105] bridge1: left allmulticast mode
[  186.542031][T17105] hsr1: left promiscuous mode
[  186.546923][T17105] bond5: left promiscuous mode
[  186.548724][T17105] bond5: left allmulticast mode
[  186.550788][T17105] ip6erspan0: left allmulticast mode
[  186.574089][T17105] tipc: Resetting bearer <eth:syzkaller0>
[  186.583454][T17105] syzkaller0: left promiscuous mode
[  186.589908][T17105] syzkaller0: left allmulticast mode
[  186.593031][T17105] bond6: left promiscuous mode
[  186.596774][T17105] gretap1: left promiscuous mode
[  186.618522][T17105] veth7: left promiscuous mode
[  186.621477][T17105] macvlan2: left promiscuous mode
[  186.623297][T17105] macvlan2: left allmulticast mode
[  186.644345][T17105] wireguard2: left promiscuous mode
[  186.646369][T17105] wireguard2: left allmulticast mode
[  186.658824][T17105] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  186.661820][T17105] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  186.664823][T17105] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  186.668148][T17105] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  186.682462][T17105] wireguard3: left promiscuous mode
[  186.684370][T17105] wireguard3: left allmulticast mode
[  186.727839][T17110] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  186.730861][T17110] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  186.733528][T17110] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  186.736578][T17110] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  186.810021][T17140] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3851'.
[  186.863178][T17146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  187.098443][T17166] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3862'.
[  187.192676][T17178] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  187.196722][T17178] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.243791][T17182] bridge_slave_1: default FDB implementation only supports local addresses
[  187.908203][T17247] netlink: 'syz.0.3896': attribute type 9 has an invalid length.
[  187.988552][T17250] netlink: 'syz.2.3898': attribute type 1 has an invalid length.
[  187.991394][T17250] netlink: 'syz.2.3898': attribute type 2 has an invalid length.
[  187.994041][T17250] netlink: 'syz.2.3898': attribute type 1 has an invalid length.
[  187.997048][T17250] netlink: 'syz.2.3898': attribute type 1 has an invalid length.
[  188.192466][T17279] bridge0: port 1(erspan0) entered blocking state
[  188.195114][T17279] bridge0: port 1(erspan0) entered disabled state
[  188.203025][T17279] erspan0: entered allmulticast mode
[  188.213410][T17279] erspan0: entered promiscuous mode
[  188.220365][T17279] erspan0: left allmulticast mode
[  188.223541][T17279] erspan0: left promiscuous mode
[  188.227472][T17279] bridge0: port 1(erspan0) entered disabled state
[  188.229947][T17282] __nla_validate_parse: 12 callbacks suppressed
[  188.229956][T17282] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3911'.
[  188.575498][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  189.175794][T17298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3917'.
[  189.212258][T17302] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  189.224249][T17302] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  189.337024][T17314] netlink: 'syz.1.3924': attribute type 4 has an invalid length.
[  189.339965][T17314] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3924'.
[  189.346993][T17314] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  189.417642][T17309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3922'.
[  189.424514][T17309] netlink: 'syz.0.3922': attribute type 1 has an invalid length.
[  189.619639][T17339] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3934'.
[  189.635175][T17339] netlink: 'syz.1.3934': attribute type 1 has an invalid length.
[  189.862448][T17361] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3942'.
[  189.948472][T17370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3946'.
[  190.031952][T17376] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  190.031996][T17377] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.129853][T17382] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3950'.
[  190.277998][T17396] netlink: 'syz.1.3957': attribute type 1 has an invalid length.
[  190.370422][T17408] netlink: 'syz.1.3961': attribute type 21 has an invalid length.
[  190.375146][T17405] xt_CT: You must specify a L4 protocol and not use inversions on it
[  190.471389][T17415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  190.509775][T17422] netlink: 'syz.1.3966': attribute type 1 has an invalid length.
[  190.661187][T17440] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3969'.
[  190.866208][T17461] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.968623][T17467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3979'.
[  191.021361][T17479] syzkaller0: entered promiscuous mode
[  191.023278][T17479] syzkaller0: entered allmulticast mode
[  191.200825][T17500] netlink: 'syz.0.3991': attribute type 1 has an invalid length.
[  191.203442][T17500] netlink: 'syz.0.3991': attribute type 2 has an invalid length.
[  191.210483][T17500] netlink: 'syz.0.3991': attribute type 8 has an invalid length.
[  191.558783][T17537] netlink: 'syz.2.4008': attribute type 12 has an invalid length.
[  191.793769][T17566] lo speed is unknown, defaulting to 1000
[  192.278659][T17611] sctp: [Deprecated]: syz.2.4027 (pid 17611) Use of struct sctp_assoc_value in delayed_ack socket option.
[  192.278659][T17611] Use struct sctp_sack_info instead
[  192.288364][T17611] IPVS: Unknown mcast interface: bridge_slave_0
[  193.153528][T17645] xt_CT: You must specify a L4 protocol and not use inversions on it
[  193.616693][T17697] __nla_validate_parse: 8 callbacks suppressed
[  193.616704][T17697] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4059'.
[  193.697793][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  193.700024][ T5834] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  193.728940][T17705] GUP no longer grows the stack in syz.2.4062 (17705): 200000006000-20000000a000 (200000005000)
[  193.732552][T17705] CPU: 1 UID: 0 PID: 17705 Comm: syz.2.4062 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  193.732568][T17705] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  193.732573][T17705] Call Trace:
[  193.732578][T17705]  <TASK>
[  193.732582][T17705]  dump_stack_lvl+0x189/0x250
[  193.732600][T17705]  ? __pfx_dump_stack_lvl+0x10/0x10
[  193.732610][T17705]  ? __pfx__printk+0x10/0x10
[  193.732620][T17705]  ? find_vma+0xe7/0x160
[  193.732639][T17705]  __get_user_pages+0x2a60/0x30b0
[  193.732666][T17705]  ? __pfx___get_user_pages+0x10/0x10
[  193.732677][T17705]  ? __gup_longterm_locked+0xbf7/0x15b0
[  193.732688][T17705]  ? down_read_killable+0x1d1/0x350
[  193.732699][T17705]  ? try_get_folio+0x633/0x660
[  193.732713][T17705]  __gup_longterm_locked+0xd66/0x15b0
[  193.732726][T17705]  ? try_grab_folio_fast+0x1be/0x4f0
[  193.732742][T17705]  ? gup_fast_fallback+0x1afc/0x2260
[  193.732753][T17705]  gup_fast_fallback+0x1cd4/0x2260
[  193.732778][T17705]  ? __pfx_gup_fast_fallback+0x10/0x10
[  193.732787][T17705]  ? trace_contention_end+0x39/0x120
[  193.732798][T17705]  ? __mutex_lock+0x330/0xe80
[  193.732808][T17705]  ? is_valid_gup_args+0x11f/0x200
[  193.732822][T17705]  ? get_user_pages_fast+0x4d/0xb0
[  193.732833][T17705]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  193.732847][T17705]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  193.732855][T17705]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  193.732866][T17705]  ? wait_for_space+0x24d/0x2d0
[  193.732878][T17705]  iov_iter_get_pages2+0x5e/0xa0
[  193.732913][T17705]  __se_sys_vmsplice+0x548/0x10d0
[  193.732932][T17705]  ? wake_up_q+0xca/0x110
[  193.732944][T17705]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  193.732958][T17705]  ? __pfx_futex_wake+0x10/0x10
[  193.732971][T17705]  ? __lock_acquire+0xab9/0xd20
[  193.732994][T17705]  ? do_pipe2+0xf7/0x170
[  193.733004][T17705]  ? rcu_is_watching+0x15/0xb0
[  193.733017][T17705]  ? do_syscall_64+0xbe/0x3b0
[  193.733033][T17705]  do_syscall_64+0xfa/0x3b0
[  193.733041][T17705]  ? lockdep_hardirqs_on+0x9c/0x150
[  193.733049][T17705]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.733056][T17705]  ? exc_page_fault+0x9f/0xf0
[  193.733064][T17705]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.733072][T17705] RIP: 0033:0x7fa1bcd8e929
[  193.733080][T17705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  193.733088][T17705] RSP: 002b:00007fa1bdbf4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  193.733100][T17705] RAX: ffffffffffffffda RBX: 00007fa1bcfb5fa0 RCX: 00007fa1bcd8e929
[  193.733106][T17705] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000010
[  193.733112][T17705] RBP: 00007fa1bce10ca1 R08: 0000000000000000 R09: 0000000000000000
[  193.733119][T17705] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  193.733125][T17705] R13: 0000000000000000 R14: 00007fa1bcfb5fa0 R15: 00007fff4b6a8318
[  193.733138][T17705]  </TASK>
[  193.904934][T17716] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4067'.
[  193.904944][T17715] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4067'.
[  193.928811][T17722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4068'.
[  193.987706][T17728] xt_CT: You must specify a L4 protocol and not use inversions on it
[  194.000976][T17728] sctp: [Deprecated]: syz.2.4070 (pid 17728) Use of int in max_burst socket option.
[  194.000976][T17728] Use struct sctp_assoc_value instead
[  194.096361][T17737] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4073'.
[  194.123714][T17739] netlink: 252 bytes leftover after parsing attributes in process `syz.2.4074'.
[  194.128147][T17739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4074'.
[  194.154994][T17742] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4075'.
[  194.163630][T17742] batadv1: entered promiscuous mode
[  194.165875][T17742] batadv1: entered allmulticast mode
[  194.281913][T17750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4078'.
[  194.603172][T17752] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4079'.
[  194.763163][T17763] xt_socket: unknown flags 0xd0
[  194.808477][T17769] nbd: must specify a size in bytes for the device
[  195.107569][T17778] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  195.966507][T17788] xt_hashlimit: size too large, truncated to 1048576
[  195.968622][T17791] validate_nla: 5 callbacks suppressed
[  195.968631][T17791] netlink: 'syz.0.4097': attribute type 2 has an invalid length.
[  195.999785][T17792] netlink: 'syz.2.4096': attribute type 1 has an invalid length.
[  196.447502][T17854] syzkaller0: Caught tx_queue_len zero misconfig
[  197.158069][T17911] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744071844200453)
[  197.166638][T17911] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  197.251473][T17911] veth1_vlan (unregistering): left allmulticast mode
[  197.298315][T17911] team0: Port device macvlan4 removed
[  197.386197][T17925] Oops: general protection fault, probably for non-canonical address 0xdffffc00000a2403: 0000 [#1] SMP KASAN PTI
[  197.390040][T17925] KASAN: probably user-memory-access in range [0x0000000000512018-0x000000000051201f]
[  197.393915][T17925] CPU: 1 UID: 0 PID: 17925 Comm: syz.2.4148 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  197.397947][T17925] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  197.401197][T17925] RIP: 0010:smc_diag_dump_proto+0x4d0/0x1f80
[  197.403210][T17925] Code: 80 3c 2f 00 74 08 48 89 df e8 4c d7 05 f7 4c 8b 23 4d 85 e4 0f 84 22 02 00 00 48 89 5c 24 38 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 21 d7 05 f7 4d 8b 2c 24 49 83 c5
[  197.409413][T17925] RSP: 0018:ffffc9000318efc0 EFLAGS: 00010206
[  197.411406][T17925] RAX: 00000000000a2403 RBX: ffff8880305a7160 RCX: ffff88811030d640
[  197.413965][T17925] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000
[  197.416515][T17925] RBP: ffffc9000318f330 R08: ffff8880305a6c5f R09: 1ffff110060b4d8b
[  197.419185][T17925] R10: dffffc0000000000 R11: ffffed10060b4d8c R12: 0000000000512018
[  197.421836][T17925] R13: dffffc0000000000 R14: ffff8880305a6c00 R15: 1ffff110060b4e2c
[  197.424460][T17925] FS:  00007fa1bdbd36c0(0000) GS:ffff8881a3c26000(0000) knlGS:0000000000000000
[  197.427323][T17925] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  197.429503][T17925] CR2: 000020000000e000 CR3: 000000002fba4000 CR4: 00000000000006f0
[  197.432138][T17925] Call Trace:
[  197.433296][T17925]  <TASK>
[  197.434306][T17925]  ? __pfx_smc_diag_dump_proto+0x10/0x10
[  197.436136][T17925]  ? __lruvec_stat_mod_folio+0x79/0x2f0
[  197.437960][T17925]  ? __lruvec_stat_mod_folio+0x79/0x2f0
[  197.439797][T17925]  ? __phys_addr+0xd3/0x180
[  197.441282][T17925]  ? __kasan_kmalloc_large+0x85/0xa0
[  197.443019][T17925]  ? rcu_is_watching+0x15/0xb0
[  197.444620][T17925]  ? rcu_is_watching+0x15/0xb0
[  197.446206][T17925]  ? trace_kmalloc+0x1f/0xd0
[  197.447743][T17925]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  197.449916][T17925]  ? __build_skb_around+0x257/0x3e0
[  197.451615][T17925]  smc_diag_dump+0x59/0xa0
[  197.453096][T17925]  netlink_dump+0x6cf/0xe90
[  197.454581][T17925]  ? __pfx_netlink_dump+0x10/0x10
[  197.456237][T17925]  ? netlink_lookup+0x30/0x200
[  197.457820][T17925]  ? netlink_lookup+0x30/0x200
[  197.459425][T17925]  ? netlink_lookup+0x30/0x200
[  197.461021][T17925]  __netlink_dump_start+0x5cb/0x7e0
[  197.462719][T17925]  smc_diag_handler_dump+0x178/0x210
[  197.464482][T17925]  ? __pfx_smc_diag_handler_dump+0x10/0x10
[  197.466424][T17925]  ? __pfx_smc_diag_dump+0x10/0x10
[  197.468097][T17925]  ? sock_diag_lock_handler+0x19/0x290
[  197.469921][T17925]  ? sock_diag_lock_handler+0x19/0x290
[  197.471751][T17925]  sock_diag_rcv_msg+0x4cc/0x600
[  197.473395][T17925]  netlink_rcv_skb+0x208/0x470
[  197.474999][T17925]  ? __pfx_sock_diag_rcv_msg+0x10/0x10
[  197.476806][T17925]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  197.478559][T17925]  ? netlink_deliver_tap+0x2e/0x1b0
[  197.480304][T17925]  ? netlink_deliver_tap+0x2e/0x1b0
[  197.481990][T17925]  netlink_unicast+0x75c/0x8e0
[  197.483555][T17925]  netlink_sendmsg+0x805/0xb30
[  197.485155][T17925]  ? __pfx_netlink_sendmsg+0x10/0x10
[  197.486894][T17925]  ? aa_sock_msg_perm+0x94/0x160
[  197.488517][T17925]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  197.490268][T17925]  ? __pfx_netlink_sendmsg+0x10/0x10
[  197.491999][T17925]  __sock_sendmsg+0x21c/0x270
[  197.493532][T17925]  ____sys_sendmsg+0x505/0x830
[  197.495114][T17925]  ? __pfx_____sys_sendmsg+0x10/0x10
[  197.496834][T17925]  ? import_iovec+0x74/0xa0
[  197.498343][T17925]  ___sys_sendmsg+0x21f/0x2a0
[  197.499904][T17925]  ? __pfx____sys_sendmsg+0x10/0x10
[  197.501633][T17925]  ? __fget_files+0x2a/0x420
[  197.503199][T17925]  ? __fget_files+0x3a0/0x420
[  197.504774][T17925]  __x64_sys_sendmsg+0x19b/0x260
[  197.506452][T17925]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  197.508280][T17925]  ? rcu_is_watching+0x15/0xb0
[  197.509865][T17925]  ? do_syscall_64+0xbe/0x3b0
[  197.511477][T17925]  do_syscall_64+0xfa/0x3b0
[  197.513031][T17925]  ? lockdep_hardirqs_on+0x9c/0x150
[  197.514774][T17925]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.516780][T17925]  ? exc_page_fault+0x9f/0xf0
[  197.518340][T17925]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.520258][T17925] RIP: 0033:0x7fa1bcd8e929
[  197.521776][T17925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  197.528041][T17925] RSP: 002b:00007fa1bdbd3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  197.530724][T17925] RAX: ffffffffffffffda RBX: 00007fa1bcfb6080 RCX: 00007fa1bcd8e929
[  197.533424][T17925] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 0000000000000007
[  197.536049][T17925] RBP: 00007fa1bce10ca1 R08: 0000000000000000 R09: 0000000000000000
[  197.538650][T17925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  197.541222][T17925] R13: 0000000000000000 R14: 00007fa1bcfb6080 R15: 00007fff4b6a8318
[  197.543967][T17925]  </TASK>
[  197.545021][T17925] Modules linked in:
[  197.547292][T17925] ---[ end trace 0000000000000000 ]---
[  197.549103][T17925] RIP: 0010:smc_diag_dump_proto+0x4d0/0x1f80
[  197.551059][T17925] Code: 80 3c 2f 00 74 08 48 89 df e8 4c d7 05 f7 4c 8b 23 4d 85 e4 0f 84 22 02 00 00 48 89 5c 24 38 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 21 d7 05 f7 4d 8b 2c 24 49 83 c5
[  197.557714][T17925] RSP: 0018:ffffc9000318efc0 EFLAGS: 00010206
[  197.559711][T17925] RAX: 00000000000a2403 RBX: ffff8880305a7160 RCX: ffff88811030d640
[  197.562273][T17925] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000
[  197.564892][T17925] RBP: ffffc9000318f330 R08: ffff8880305a6c5f R09: 1ffff110060b4d8b
[  197.567695][T17925] R10: dffffc0000000000 R11: ffffed10060b4d8c R12: 0000000000512018
[  197.570258][T17925] R13: dffffc0000000000 R14: ffff8880305a6c00 R15: 1ffff110060b4e2c
[  197.572814][T17925] FS:  00007fa1bdbd36c0(0000) GS:ffff8881a3c26000(0000) knlGS:0000000000000000
[  197.576024][T17925] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  197.578170][T17925] CR2: 000020000000e000 CR3: 000000002fba4000 CR4: 00000000000006f0
[  197.580805][T17925] Kernel panic - not syncing: Fatal exception
[  197.583491][T17925] Kernel Offset: disabled
[  197.584962][T17925] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:30:06  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000300 RBX=ffffffff8f7ed2e0 RCX=ffffffff8b700e88 RDX=0000000000000001
RSI=0000000000000004 RDI=ffffffff8f7ed2e0 RBP=ffffc900033efc10 RSP=ffffc900033efb60
R8 =ffffffff8f7ed2e3 R9 =1ffffffff1efda5c R10=dffffc0000000000 R11=fffffbfff1efda5d
R12=dffffc0000000000 R13=1ffff9200067df70 R14=ffffc900033efbb0 R15=1ffffffff1efda5c
RIP=ffffffff8b700eb0 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa1bdbf46c0 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa1bdbb1fc8 CR3=000000002fba4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fa1bcf86478 00007fa1bcf86450 XMM03=00007fa1bcf86488 00007fa1bcf86480
XMM04=00007fa1bdaed100 00007fa1bcf86440 XMM05=00007fa1bcf86458 00007fa1bcf864a0
XMM06=00007fa1bcf86498 00007fa1bcf86490 XMM07=00007fa1bcf86488 00007fa1bcf86480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fa1bce11df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000318e7f0
R8 =ffff888020eb0237 R9 =1ffff110041d6046 R10=dffffc0000000000 R11=ffffffff85460dc0
R12=dffffc0000000000 R13=ffffffff99aee8de R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e3c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa1bdbd36c0 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000000e000 CR3=000000002fba4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fa1bcf86478 00007fa1bcf86450 XMM03=00007fa1bcf86488 00007fa1bcf86480
XMM04=00007fa1bdaed100 00007fa1bcf86440 XMM05=00007fa1bcf86458 00007fa1bcf864a0
XMM06=00007fa1bcf86498 00007fa1bcf86490 XMM07=00007fa1bcf86488 00007fa1bcf86480
XMM08=7b20202000000000 0025782020000001 XMM09=0000000000000000 00007fa1bce11df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
