last executing test programs:

1.158311001s ago: executing program 0 (id=5264):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c000000020605000000000000000000ffec000014000780080011400000000005001500000000000500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x700}, 0x0)

1.089075031s ago: executing program 0 (id=5266):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)={0x23c, r4, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0x21c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x4}, {0x7, 0x1}, {0x1, 0x4}, {0x1}, {0x6, 0x7}, {0x3, 0xa}, {0x5, 0x7}, {0x0, 0x5}, {0x0, 0x4}, {}, {0x2, 0x1}, {0x0, 0x6}, {0x6, 0x3}, {0x5, 0x8}, {}, {0x4, 0x4}, {0x7, 0x2}, {0x0, 0x2}, {0x6, 0x3}, {0x2}, {0x1, 0x1}, {0x1, 0x3}, {0x2, 0x2}, {0x0, 0xa}, {0x2, 0x5}, {0x4, 0x2}, {0x7, 0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x1, 0x9}, {0x4, 0x6}, {0x5, 0x3}, {0x2, 0x3}, {0x7, 0x4}, {0x5, 0x9}, {0x7, 0xa}, {0x3, 0x9}, {0x3, 0x5}, {0x3, 0x3}, {0x1, 0x2}, {0x4, 0x8}, {0x1, 0x2}, {0x1, 0x4}, {0x1, 0x8}, {}]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x0, 0x8}, {0x6}, {0x0, 0x5}, {0x6, 0x9}, {0x5, 0x5}, {0x0, 0x4}, {0x5, 0x2}, {0x0, 0x3}, {0x5, 0x3}, {0x2, 0x8}, {0x7, 0x5}, {0x6, 0x1}, {0x4, 0x1f}, {0x7, 0x1}, {0x2, 0x5}, {0x0, 0x1}, {0x3, 0x3}, {0x7}, {0x5, 0x8}, {0x0, 0x9}, {0x1, 0x6}, {0x4, 0x1}, {0x0, 0x8}, {0x2, 0x3}, {0x7, 0x6}, {0x0, 0x3}, {0x7, 0x5}, {}, {0x2}, {0x7, 0x7}, {0x4, 0x6}, {0x0, 0x2}, {0x3, 0x5}, {0x3, 0x2}, {0x6, 0x7}, {0x1}, {0x1, 0x9}, {0x4, 0x8}, {0x0, 0xa}, {0x5, 0x9}, {0x2}, {0x3, 0x4}, {0x0, 0x8}, {0x4, 0x2}, {0x3, 0xa}, {0x0, 0x9}, {0x1, 0x6}, {0x6, 0x2}, {0x7, 0x4}, {0x4, 0x5}, {0x6, 0x4}, {0x7, 0x8}, {0x3, 0x8}, {0x0, 0x1}, {0x1, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xb, 0x2, 0x7ff, 0x5, 0x8001, 0xc3d, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x1, 0xa}, {0x5, 0x5}, {0x6, 0x7}, {0x0, 0x1}, {0x0, 0x5}, {0x7, 0x2}, {0x5, 0x7}, {0x6, 0x4}, {0x4, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0x3, 0x7ff, 0x1eb6, 0x7ff, 0xfff, 0xe418]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x3, 0x4}, {0x1, 0x6}, {0x0, 0x8}, {0x4, 0xa}, {0x3, 0x7}, {0x6}, {0x5, 0x3}, {0x6, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x3, 0x7cc, 0x1, 0x1000, 0x9, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x1, 0x3}, {0x0, 0x4}, {0x1, 0x2}, {0x4, 0x7}, {0x1, 0x7}, {0x3, 0x3}, {0x0, 0x5}, {0x3, 0x3}, {0x2, 0x1}]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x1, 0x7}, {0x2, 0x9}, {0x1, 0x2}, {0x0, 0x8}, {0x0, 0x5}, {0x6, 0x5}, {0x2}, {0x4, 0x5}, {0x1, 0x7}, {0x6, 0x1}, {0x1, 0x9}, {0x7, 0x4}, {0x1, 0x5}, {0x2}, {0x4, 0x2}, {0x2, 0x6}, {0x5, 0x4}, {0x6, 0x6}, {0x2}, {0x1, 0x7}, {0x0, 0x7}, {0x5, 0x6}, {0x7, 0x8}, {0x1, 0x9}, {0x3, 0x1}, {0x4, 0xa}, {0x3}, {0x4, 0x4}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x5}, {0x3, 0x4}, {0x6, 0x2}, {0x6, 0x1}]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x4, 0x8}, {0x4, 0x8}, {0x0, 0x9}, {0x5, 0x9}, {0x0, 0x2}, {0x1, 0x9}, {0x0, 0x7}, {0x1, 0x6}, {0x5, 0x6}, {0x3, 0x8}, {0x0, 0x7}, {0x3, 0x4}, {0x0, 0x3}, {}, {0x0, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x0, 0x1}, {0x1, 0x2}, {0x0, 0xa}, {0x5, 0x3}, {0x4, 0xa}, {0x0, 0x3}, {0x6, 0x1}, {0x7, 0x9}, {0x3, 0x1}, {0x4, 0xa}, {0x4}, {0x1, 0x5}, {0x5, 0x9}, {0x1, 0x9}, {0x4, 0x2}, {0x3, 0x3}, {0x6, 0x5}, {0x1, 0x1}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x2, 0x6}, {0x4, 0x7}, {0x5, 0x5}, {0x0, 0xa}, {0x1, 0x1}]}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x18, 0x30, 0x4, 0x60, 0x18, 0x6, 0xb, 0x4, 0xb, 0x18, 0x9, 0x3, 0x5, 0x3, 0x6, 0x4, 0x48, 0x3, 0x6, 0x36, 0x18, 0x1b, 0xc11e5ca52182082e, 0x24, 0x12, 0x48]}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x6, 0x5594, 0x800, 0x7f, 0x8, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x5, 0x4, 0x7fff, 0xfffa, 0x2, 0x0, 0xab99]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xffffffff}]}, 0x23c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000004)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b70500000000000079105c000000000005000000000000009500000000000000045deb497403e574cbc2452a08546d06f98c930d8e572b73415d11c0717dbb9620625647e8a04f951e768a659cbc1451eee1c437e0d5440a4994b4742c33358d626e74c92eca7b0ec92b0c5f6a1dae3c6c0071b2b5d7e188daca43cee12b6581d6a7b1691e9e5c35bb0352ef52f367f01c31bbe26d4228c6f3bf372099eba19fd12fbf718e4ae5ab7d6af0cc3445634d99c2461ea0ac21ca579f75af9a8b45b0ca5f91121c569919e991bc00f9c53b5239baa54df300c663229c6a22d1bf6533"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0x3}, {0xfff2, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x20044000)

1.030238427s ago: executing program 0 (id=5268):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r3}, 0x18)
r4 = socket(0x2b, 0x80801, 0x1)
getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000003200090000000000000000000300000021fd3aea8bb7173fb6c2796f368b430411bd8f8d2951a276b1e0272e045e"], 0x14}}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r7=>0x0})
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002200)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000240)={r10, @in={{0x2, 0x4e24, @empty}}, 0x7fff, 0xbb5f}, &(0x7f0000000480)=0x90)
r11 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r11, 0x88, 0x67, &(0x7f00000002c0), 0x4)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dc30008000300", @ANYRES32=r7, @ANYBLOB="0c0058000d000000000000000c0058001b000000000000000c0058006200000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0xe554d85c7ff4445c)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdc02, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc890}, 0x20000000)
r12 = socket(0x40000000015, 0x5, 0x0)
recvmsg$can_j1939(r12, 0xfffffffffffffffe, 0x142)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000240)={'gretap0\x00', 0x0})

968.434812ms ago: executing program 0 (id=5270):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021692500000000002020207b1a00fe00000000bfa100000000000047010000f8ffffffb702000008000000b703000000000000850000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38}, 0x66)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)
recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0xff05, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r2, &(0x7f0000000000)="4a77273b368865c646ea0f0311cc9a6895199d960bac50b11df63c5166ad4b1981ead333d8076891c9d7939ebe915634240373e9ce183f489ab5845c002f245660a11d4c4d65539df1bcacf608e8ac94899c92c10c48d412ead831bb85e9a59855b078dee568e35ddc6b9ebbf75235d28e06f0e03cfdc30f78cff2fb0da58db4fdc056af974c5cbfc2fe0914", &(0x7f0000000140)=""/190}, 0x20)
r3 = socket$kcm(0x29, 0x0, 0x0)
recvmsg$kcm(r3, &(0x7f00000004c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)=""/24, 0x18}, {&(0x7f00000002c0)}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000000340)=""/146, 0x92}], 0x4, &(0x7f0000000440)=""/116, 0x74}, 0x2000)

679.445008ms ago: executing program 1 (id=5277):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32], 0x90}}, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000000c0)='`', 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0xb8c2, @remote}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x20}}], 0x2, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x81, 0x4)

677.648569ms ago: executing program 1 (id=5279):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x1000, @private0, 0x200}, @in6={0xa, 0x4e24, 0xfffffe01, @private2, 0xc}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2f}}, @in6={0xa, 0x4e24, 0x9, @mcast2, 0xffffffff}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, @in6={0xa, 0x4e20, 0x2000, @loopback, 0xf0f9}, @in={0x2, 0x4e20, @private=0xa010100}], 0xb0) (async)
bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000100)={0x0, 0x7, 0x1000, "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"}, 0x1008) (async)
setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001140)={<r3=>r2, 0x80, 0x2, 0x7})
r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001180), 0x4) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000012c0)={@map=<r5=>r3, 0x14, 0x0, 0x0, &(0x7f00000011c0)=[0x0], 0x1, 0x0, &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001240)=[0x0], &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r6=>0x0}, 0x40) (async)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001340)={0x6, <r7=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001300)={@map=r3, r4, 0x15, 0x24, 0x0, @void, @void, @void, @value=r7, r6}, 0x20) (async)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001580), 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000017c0)={r3, 0x20, &(0x7f0000001780)={&(0x7f0000001640)=""/12, 0xc, <r9=>0x0, &(0x7f0000001680)=""/235, 0xeb}}, 0x10) (async)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x6, 0x23, &(0x7f0000001800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @tail_call, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x401}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc1e}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000001940)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x33, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000001980)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000019c0)={0x5, 0x10, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001a00)=[r5, r3, r5, r5, r3], &(0x7f0000001a40)=[{0x0, 0x1, 0xf, 0x7}, {0x3, 0x3, 0xe, 0x3}, {0x2, 0x1, 0x1, 0x9}, {0x1, 0x5, 0x5, 0x2}, {0x4, 0x1, 0x0, 0x9}, {0x4, 0x3, 0xe, 0x3}, {0x4, 0x5, 0x10}, {0x4, 0x4, 0x0, 0xc}, {0x2, 0x2, 0x2, 0xa}], 0x10, 0x9}, 0x94) (async)
r11 = openat$cgroup_ro(r3, &(0x7f0000001bc0)='cpuset.effective_mems\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x1a, 0x1f, &(0x7f0000001380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @generic={0x5, 0x4, 0x4, 0xb, 0x2}, @generic={0x1, 0x6, 0xd, 0x8, 0xde2}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x10}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001480)='syzkaller\x00', 0x0, 0xb3, &(0x7f00000014c0)=""/179, 0x41100, 0x10, '\x00', 0x0, @tracing=0x19, r8, 0x8, &(0x7f00000015c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000001600)={0x2, 0x10, 0xffffd0de, 0x8}, 0x10, r9, r10, 0x3, &(0x7f0000001c00)=[r3, r0, r11, r3, r5, r3, r5], &(0x7f0000001c40)=[{0x0, 0x1, 0xf, 0x6}, {0x0, 0x3, 0x2, 0x8}, {0x0, 0x1, 0x8, 0x9}], 0x10, 0x5}, 0x94) (async, rerun: 32)
sendto$inet6(r1, &(0x7f0000001d40)="cf339c65546d26af53a4acd261bf5e79b2be8e8de689754ebb03a359dd0bbbf153a0698ff1f1b8a1cc2554b02f24a1d9eb29b5833c6714acfefb5063eccf5430bfd9bc968618682f8f97d76d398f9e4516a034496c99df8016c8165be90c8c1f7b1821a307cb3d2192a4a95eba8d178a0d1476bf16f472011b503088631c88b735f854414bbe18862eec1fc122ecee9766111dd426433a10e8ec886cabce406660023b8d86d6f6c36500cbe5761a969ab7c7848b79b94b16ae6cefd2", 0xbc, 0x50, &(0x7f0000001e00)={0xa, 0x4e23, 0xffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}, 0x1c) (rerun: 32)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001e40)={r7}, 0x4) (async)
recvfrom$l2tp6(r11, &(0x7f0000001e80)=""/197, 0xc5, 0x10100, &(0x7f0000001f80)={0xa, 0x0, 0x0, @empty}, 0x20) (async, rerun: 64)
socket$rxrpc(0x21, 0x2, 0x2) (rerun: 64)
r12 = accept$inet(r11, &(0x7f0000001fc0)={0x2, 0x0, @dev}, &(0x7f0000002000)=0x10)
ioctl$sock_inet_SIOCADDRT(r12, 0x890b, &(0x7f0000002080)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e20, @empty}, 0x4, 0x0, 0x0, 0x0, 0x8d, &(0x7f0000002040)='bridge_slave_1\x00', 0x5, 0x5, 0x2}) (async, rerun: 32)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r14 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r13, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x1c, r14, 0x200, 0x70bd27, 0x4, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008011}, 0x4040840) (async)
socket$nl_route(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000002240)="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", 0x1000, 0x0, 0x0, 0x0) (async, rerun: 64)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000003240)={0x3, [0x3, 0x6, 0xfc]}, &(0x7f0000003280)=0xa) (rerun: 64)

609.189525ms ago: executing program 1 (id=5282):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x3, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x7)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x20)
ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc})
sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}}, 0x0)

510.258332ms ago: executing program 1 (id=5285):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710437000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f0000000400000004000000120000000000", @ANYRES32=0x0], 0x50) (async)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff})
ioctl$sock_inet_sctp_SIOCINQ(r4, 0x5761, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x2c, r6, 0x1, 0x70bd2b, 0xfffffffb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48008}, 0x20044000) (async)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd9, 0xd9, 0x9, [@fwd={0x2}, @ptr={0x5, 0x0, 0x0, 0x2, 0x3}, @typedef, @datasec={0x10, 0x5, 0x0, 0xf, 0x1, [{0x2, 0x3a, 0x8}, {0x5, 0x0, 0x2}, {0x5, 0x3, 0x35b}, {0x1, 0xf, 0x3}, {0x4, 0x4, 0x10}], "dd"}, @ptr={0x9, 0x0, 0x0, 0x2, 0x2}, @union={0x3, 0x4, 0x0, 0x5, 0x0, 0x9, [{0x9, 0x2, 0x4}, {0x4, 0x1, 0xb3}, {0xd, 0x4, 0xcd7}, {0x6, 0x5, 0x8}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x2}}, @typedef={0x7, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x61, 0x5f, 0x2e, 0x61, 0x61, 0x5f, 0x0]}}, &(0x7f0000000200)=""/94, 0xfd, 0x5e, 0x1, 0x5}, 0x28)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0x1, <r9=>0xffffffffffffffff}, 0x4) (async)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0c000000010000b1b447825e96339500008000010000000000000000"], 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0x10, &(0x7f0000000080)=@raw=[@ldst={0x2, 0x1, 0x4, 0x0, 0x5, 0x50, 0x8}, @ldst={0x1, 0x1, 0x6, 0x6, 0x4, 0x2, 0x10}, @alu={0x4, 0x0, 0xd, 0xa, 0x7, 0x30, 0x1}, @jmp={0x5, 0x1, 0xc, 0x7, 0x0, 0xffffffffffffffff, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x54020, 0x0, 0x0, 0x0, 0xfff}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xa}, @map_val={0x18, 0x8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x70, '\x00', r7, 0x0, r8, 0x8, &(0x7f00000002c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x6, 0x2}, 0x10, 0xd4f9, r0, 0x6, &(0x7f0000000400)=[r9, r10, 0x1], &(0x7f0000000440)=[{0x4, 0x4, 0xb, 0x5}, {0x2, 0x2, 0x6, 0xa}, {0x1, 0x1, 0x3, 0x1}, {0x0, 0x5, 0x7, 0x8}, {0x2, 0x4, 0xd, 0xa}, {0x4, 0x3, 0x0, 0x4}], 0x10, 0x6}, 0x94)

438.011886ms ago: executing program 1 (id=5286):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r1, r3, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8}}, 0x40)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x22}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xb4}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x70)

368.419676ms ago: executing program 1 (id=5288):
socket$key(0xf, 0x3, 0x2)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
socket$kcm(0x2, 0x1000000000000002, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
r2 = socket(0x1e, 0x4, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}, 0x1, 0x0, 0x0, 0x20004844}, 0x40000)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
write(r0, &(0x7f0000000040)="05000000010000", 0x7)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, 0x0, 0x1000f)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="611272000000000061137e0000000000bf2000000000000007020100180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f020000d706000020000000620a04ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2736f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfdb247bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded5275c00"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x31}, 0x48)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r7)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r9, @ANYBLOB="140004006e696376663000ffffffff00000000000800050008000000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x240048d0)
sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r8, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x4b}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40c0}, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200ac14000000000d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfa1d7071b8b08a24211d2530205e1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x2400c804)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="bc0100001900010027bd700000000000e00000020000000000000000000000000000000000000000000000000000000001fe0000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1bc}}, 0x4004)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x3, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x6, 0x0, 0x200000}, 0x1}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x74}}, 0x0)

367.976103ms ago: executing program 2 (id=5289):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001d80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x84, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x5c, 0x6, "cadb9a1ff9d7fc1f1e75e7e69199f0e14a5353fda8b8de711409fdd59792419fcde73f8761528483694850843d9c4af75cd584a6ae8be68c5dd99e826145e9d459204da600bf54c220d935a2e96d1bb0c98b9324930527a3"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88be}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6004}]}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x16c}, 0x1, 0x0, 0x100000000000000}, 0x0)

367.659534ms ago: executing program 2 (id=5290):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
unshare(0x4000400)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x124, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xf4, 0x2, {{0x5, 0x80000000, 0xffff, 0x1, 0x140000, 0xed06}, [@TCA_NETEM_DELAY_DIST={0x62, 0x2, "907b4f52022554d1ccf6bbba8548b8736c3ccc0b9b82b93db3140c9f87ff835d9bc5b45f1a7ab39d0b6936e814e33120e18ad6e26a4a9a15041a61151dfb3b32e33e01a3c024b4a24a8de24f1daf5e37023f0a15bfb3b0ea0d08eb34ba3f"}, @TCA_NETEM_REORDER={0xc, 0x3, {0xa, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xdb6b5f2e6752cf7a}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x100, 0x0, 0x884, 0x8, 0x800}}, @TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x6, 0xb8, 0xffffff47}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0xfff, 0x80000001, 0x1, 0x1aaf751}}]}]}}}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x1, 0xffff, 0x0, 0xffffffff, 0x75, 0x46b, 0x9, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
close(r1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async)
close(r4) (async)
socket$unix(0x1, 0x1, 0x0) (async)
unshare(0x4000400) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x124, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xf4, 0x2, {{0x5, 0x80000000, 0xffff, 0x1, 0x140000, 0xed06}, [@TCA_NETEM_DELAY_DIST={0x62, 0x2, "907b4f52022554d1ccf6bbba8548b8736c3ccc0b9b82b93db3140c9f87ff835d9bc5b45f1a7ab39d0b6936e814e33120e18ad6e26a4a9a15041a61151dfb3b32e33e01a3c024b4a24a8de24f1daf5e37023f0a15bfb3b0ea0d08eb34ba3f"}, @TCA_NETEM_REORDER={0xc, 0x3, {0xa, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xdb6b5f2e6752cf7a}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x100, 0x0, 0x884, 0x8, 0x800}}, @TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x6, 0xb8, 0xffffff47}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0xfff, 0x80000001, 0x1, 0x1aaf751}}]}]}}}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x1, 0xffff, 0x0, 0xffffffff, 0x75, 0x46b, 0x9, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async)

220.433081ms ago: executing program 2 (id=5291):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={<r1=>0x0, 0x2}, &(0x7f00000000c0)=0x8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x70, 0x0, 0x9, 0x401, 0x0, 0x0, {0xa}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x70}}, 0x4008000)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x50)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0x6, &(0x7f0000000300)=@framed={{0x18, 0x2, 0x0, 0x0, 0x200}, [@map_fd={0x18, 0x3, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x1f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120800", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={r1, @in6={{0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}}, 0x7, 0x3, 0x7263, 0x4, 0x14, 0xb2c, 0x4}, 0x9c)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x2}, &(0x7f00000000c0)=0x8) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x70, 0x0, 0x9, 0x401, 0x0, 0x0, {0xa}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x70}}, 0x4008000) (async)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x50) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0x6, &(0x7f0000000300)=@framed={{0x18, 0x2, 0x0, 0x0, 0x200}, [@map_fd={0x18, 0x3, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x1f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120800", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={r1, @in6={{0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}}, 0x7, 0x3, 0x7263, 0x4, 0x14, 0xb2c, 0x4}, 0x9c) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)

129.706093ms ago: executing program 2 (id=5292):
unshare(0x400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000120) (async)
r2 = socket(0x11, 0x800000003, 0x0) (async)
r3 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x4]}}}}, @TCA_RATE={0x6, 0x5, {0xf, 0x8}}]}, 0x90}}, 0x0) (async, rerun: 64)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async, rerun: 64)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000100)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], <r5=>0x0, 0xe6, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x5a, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r0, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0, r0, r0, r0, 0xffffffffffffffff, r0], 0x0, 0x10, 0xfffffffe}, 0xc3)

129.474239ms ago: executing program 0 (id=5293):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c000000020605000000000000000000ffec000014000780080011400000000005001500000000000500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x2000000}, 0x0)

77.006441ms ago: executing program 2 (id=5294):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'macsec0\x00', <r1=>0x0})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$cgroup_devices(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='b ', @ANYRESOCT=0x0], 0x44)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r6 = openat$cgroup_devices(r5, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
splice(r3, 0x0, r6, 0x0, 0xb, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'bridge0\x00', <r8=>0x0})
r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg(r9, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x20008041) (async)
sendmsg(r9, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x20008041)
sendmmsg$inet6(r2, &(0x7f0000002cc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0xa267, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffeff}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000000000000290000000800000003000000000000002400000000000000290000003200000000000000000000000000ffff00000000", @ANYRES32=r8], 0x40}}], 0x1, 0x40884) (async)
sendmmsg$inet6(r2, &(0x7f0000002cc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0xa267, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffeff}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000000000000290000000800000003000000000000002400000000000000290000003200000000000000000000000000ffff00000000", @ANYRES32=r8], 0x40}}], 0x1, 0x40884)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newlink={0x2c, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, 0x2420, 0x900}, [@IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newlink={0x2c, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, 0x2420, 0x900}, [@IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x2c}}, 0x0)

76.915869ms ago: executing program 0 (id=5295):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac55000000000300060000000000020000000000000000000000000000000200010000000000000002fc00000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x0)

0s ago: executing program 2 (id=5296):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000480)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0xfffffffffffffe4b}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x48}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x21}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

kernel console output (not intermixed with test programs):

ttribute type 1 has an invalid length.
[  179.106270][T11963] netlink: 'syz.1.2011': attribute type 1 has an invalid length.
[  179.161192][T11965] netlink: 'syz.0.2012': attribute type 21 has an invalid length.
[  179.335968][T11977] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  179.546848][T11987] __nla_validate_parse: 14 callbacks suppressed
[  179.546863][T11987] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2020'.
[  179.636408][T12002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2026'.
[  179.639887][T12001] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  179.680704][T12003] bond14 (unregistering): Released all slaves
[  179.700800][T12002] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR
[  179.765636][T12016] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2030'.
[  179.777123][T12016] openvswitch: netlink: Key type 29 is not supported
[  179.810434][T12020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2032'.
[  179.895410][T12024] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2033'.
[  180.003865][T12034] policy can only be matched on NF_INET_PRE_ROUTING
[  180.003876][T12034] unable to load match
[  180.305803][T12053] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2044'.
[  180.310037][T12053] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2044'.
[  180.313930][T12053] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2044'.
[  180.317668][T12053] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2044'.
[  180.323907][T12053] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2044'.
[  180.434459][T12061] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.570006][T11944] Bluetooth: hci0: command 0x0406 tx timeout
[  180.573013][T11944] Bluetooth: hci1: command 0x0406 tx timeout
[  180.811941][T12083] netlink: 'syz.0.2052': attribute type 23 has an invalid length.
[  180.867426][T12089] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  180.871849][T12089] openvswitch: netlink: Message has 1 unknown bytes.
[  180.890446][ T5848] Bluetooth: hci2: command 0x0405 tx timeout
[  181.143321][T12112] sctp: [Deprecated]: syz.0.2061 (pid 12112) Use of struct sctp_assoc_value in delayed_ack socket option.
[  181.143321][T12112] Use struct sctp_sack_info instead
[  181.454115][T12126] netlink: 'syz.0.2065': attribute type 1 has an invalid length.
[  181.779801][T12151] syzkaller1: entered promiscuous mode
[  181.782343][T12151] syzkaller1: entered allmulticast mode
[  181.948164][T12166] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  182.163739][T12183] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  182.474582][T12214] bond6: (slave gretap2): making interface the new active one
[  182.477766][T12214] bond6: (slave gretap2): Enslaving as an active interface with an up link
[  182.523796][T12227] vcan0: tx drop: invalid da for name 0x0000000000000002
[  182.802889][T12236] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  183.006498][T12258] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  183.130877][T12262] validate_nla: 7 callbacks suppressed
[  183.130892][T12262] netlink: 'syz.2.2113': attribute type 1 has an invalid length.
[  183.136801][T12266] netlink: 'syz.2.2113': attribute type 1 has an invalid length.
[  183.189095][T12270] bond0: option mode: unable to set because the bond device is up
[  183.271943][T12281] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  183.283125][T12281] syzkaller0: entered promiscuous mode
[  183.285427][T12281] syzkaller0: entered allmulticast mode
[  183.294656][T12281] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  183.311862][T12280] tipc: Resetting bearer <eth:syzkaller0>
[  183.333053][T12280] tipc: Disabling bearer <eth:syzkaller0>
[  183.566408][T12305] vlan4: entered promiscuous mode
[  183.568372][T12305] bond0: entered promiscuous mode
[  183.818988][T12326] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  184.372146][T12343] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  184.479221][T12357] netlink: 'syz.1.2144': attribute type 4 has an invalid length.
[  184.752503][T12378] netlink: 'syz.0.2150': attribute type 1 has an invalid length.
[  185.022428][T12397] __nla_validate_parse: 84 callbacks suppressed
[  185.022438][T12397] netlink: 204476 bytes leftover after parsing attributes in process `syz.2.2155'.
[  185.051923][T12399] veth0_to_bond: entered allmulticast mode
[  185.207785][T12407] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.212233][T12407] syzkaller0: entered promiscuous mode
[  185.214465][T12407] syzkaller0: entered allmulticast mode
[  185.224104][T12407] dummy0: entered promiscuous mode
[  185.226516][T12407] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  185.233842][T12407] hsr1: entered promiscuous mode
[  185.235598][T12407] hsr1: entered allmulticast mode
[  185.237371][T12407] bond0: entered allmulticast mode
[  185.239161][T12407] dummy0: entered allmulticast mode
[  185.252925][T12407] tipc: Resetting bearer <eth:syzkaller0>
[  185.256190][T12406] tipc: Resetting bearer <eth:syzkaller0>
[  185.264582][T12406] tipc: Disabling bearer <eth:syzkaller0>
[  185.631044][T12434] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2168'.
[  185.637133][T12434] team0: Unable to change to the same mode the team is in
[  185.728863][T12441] netlink: 'syz.2.2171': attribute type 7 has an invalid length.
[  185.734100][T12441] netlink: 'syz.2.2171': attribute type 3 has an invalid length.
[  185.736712][T12441] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2171'.
[  185.966635][T12454] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  185.970429][T12454] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  185.985831][T12454] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2177'.
[  186.129362][T12463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  186.253046][T12472] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2183'.
[  186.274682][T12474] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2184'.
[  186.278433][T12474] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  186.282473][T12474] openvswitch: netlink: Message has 1 unknown bytes.
[  186.356298][T12480] netlink: 'syz.2.2187': attribute type 1 has an invalid length.
[  186.408796][T12489] netlink: 'syz.2.2190': attribute type 3 has an invalid length.
[  186.445068][T12484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2189'.
[  186.447526][T12495] netlink: 20824 bytes leftover after parsing attributes in process `syz.1.2191'.
[  186.554741][T12512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2197'.
[  186.883595][T12542] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2206'.
[  186.925464][T12546] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  186.928983][T12546] openvswitch: netlink: Message has 1 unknown bytes.
[  187.073918][T12560] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  187.105704][T12561] gretap3: entered allmulticast mode
[  187.193968][T12562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  187.937799][T12588] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  187.943044][T12588] openvswitch: netlink: Message has 1 unknown bytes.
[  188.847739][T12635] netlink: 'syz.2.2236': attribute type 4 has an invalid length.
[  189.020847][T12647] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  189.024273][T12647] openvswitch: netlink: Message has 1 unknown bytes.
[  190.067665][T12710] __nla_validate_parse: 11 callbacks suppressed
[  190.067675][T12710] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2263'.
[  190.278738][T12743] netlink: 'syz.1.2270': attribute type 1 has an invalid length.
[  190.342824][T12750] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  190.347858][T12750] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2275'.
[  190.424552][T12762] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  190.446533][T12767] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  190.478661][T12765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2280'.
[  190.496123][T12765] team1: entered promiscuous mode
[  190.497823][T12765] team1: entered allmulticast mode
[  190.510192][ T5880] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  190.521243][T12775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2284'.
[  190.610512][T12777] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2285'.
[  190.658803][T12779] netlink: 'syz.0.2286': attribute type 1 has an invalid length.
[  190.662603][T12779] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2286'.
[  190.666469][T12779] netlink: 'syz.0.2286': attribute type 1 has an invalid length.
[  190.670536][T12779] netlink: 'syz.0.2286': attribute type 2 has an invalid length.
[  190.807050][T12792] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2290'.
[  190.847477][T12794] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2291'.
[  190.898650][T12796] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2292'.
[  190.951280][T12798] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2293'.
[  191.109559][ T5880] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  191.545521][T12842] netlink: 'syz.0.2308': attribute type 29 has an invalid length.
[  191.549814][T12842] netlink: 'syz.0.2308': attribute type 29 has an invalid length.
[  191.553404][T12842] netlink: 'syz.0.2308': attribute type 29 has an invalid length.
[  191.556969][T12842] netlink: 'syz.0.2308': attribute type 29 has an invalid length.
[  191.561392][T12842] netlink: 'syz.0.2308': attribute type 29 has an invalid length.
[  191.568035][T12841] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  191.585398][T12841] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  191.588568][T12841] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  191.599744][T12841] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  191.653125][T12841] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  191.657454][T12841] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  191.661715][T12841] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  191.665343][T12841] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  191.725195][T12841] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  191.729225][T12841] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  191.733144][T12841] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  191.736457][T12841] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  191.784098][T12841] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  191.787508][T12841] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  191.791294][T12841] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  191.794619][T12841] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  191.886121][ T5717] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  191.889056][ T5717] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  191.892586][ T5717] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  191.895387][ T5717] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  191.956570][ T5717] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  191.959640][ T5717] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  191.962813][ T5717] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  191.965551][ T5717] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  191.968878][ T5717] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  191.972699][ T5717] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  191.976322][ T5717] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  191.982606][ T5717] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  191.986064][ T5717] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  191.989018][ T5717] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  191.992917][ T5717] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  191.996670][ T5717] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  192.226700][T12868] net_ratelimit: 6 callbacks suppressed
[  192.226710][T12868] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  192.394299][T12895] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  192.612121][T12927] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  192.872616][T12956] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  193.853390][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  193.856025][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  193.963587][T13008] validate_nla: 42 callbacks suppressed
[  193.963602][T13008] netlink: 'syz.0.2366': attribute type 22 has an invalid length.
[  193.976125][T13008] netlink: 'syz.0.2366': attribute type 1 has an invalid length.
[  194.144482][T13019] tc_dump_action: action bad kind
[  194.691556][T13055] netlink: 'syz.1.2384': attribute type 1 has an invalid length.
[  194.713577][T13055] 8021q: adding VLAN 0 to HW filter on device bond14
[  194.738613][T13055] bond14: (slave geneve2): making interface the new active one
[  194.742561][T13055] bond14: (slave geneve2): Enslaving as an active interface with an up link
[  194.747771][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.751638][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  194.768013][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  194.774566][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.111344][T13078] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  195.166952][T13081] netlink: 'syz.1.2393': attribute type 1 has an invalid length.
[  195.170024][T13081] __nla_validate_parse: 27 callbacks suppressed
[  195.170033][T13081] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2393'.
[  195.305726][T13094] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2399'.
[  195.537065][T13110] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2405'.
[  195.676465][T13125] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2411'.
[  195.798222][T13143] netlink: 'syz.0.2416': attribute type 1 has an invalid length.
[  195.801419][T13143] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2416'.
[  195.804931][T13142] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  195.811364][T13142] netlink: 'syz.1.2417': attribute type 1 has an invalid length.
[  195.814671][T13142] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2417'.
[  195.819119][T13142] syzkaller0: entered promiscuous mode
[  195.827550][T13142] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2417'.
[  195.834680][T13142] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2417'.
[  195.892977][T13151] 8021q: adding VLAN 0 to HW filter on device bond15
[  196.142084][T13177] netlink: 'syz.1.2427': attribute type 1 has an invalid length.
[  196.160098][T13177] 8021q: adding VLAN 0 to HW filter on device bond16
[  196.162987][T13178] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2427'.
[  196.267926][T13188] batadv_slave_0: entered promiscuous mode
[  196.332882][T13192] batadv_slave_0: left promiscuous mode
[  196.496645][T13215] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  196.795308][T13238] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2446'.
[  196.806043][T13243] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  197.295499][T13276] netlink: 'syz.1.2456': attribute type 4 has an invalid length.
[  197.310263][T13273] netlink: 'syz.1.2456': attribute type 4 has an invalid length.
[  197.369038][T13280] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  197.496691][T13296] netlink: 'syz.2.2466': attribute type 83 has an invalid length.
[  198.200821][T13279] tipc: Disabling bearer <eth:syzkaller0>
[  198.891677][T13380] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  199.013715][T13386] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  199.164723][T13397] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  199.305324][T13404] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  199.387654][T13406] netlink: 'syz.1.2508': attribute type 3 has an invalid length.
[  199.456577][T13418] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  199.465721][T13422] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  199.491717][T13415] TC_ACT_REPEAT abuse ?
[  199.538544][T13432] netlink: 'syz.0.2515': attribute type 1 has an invalid length.
[  199.738795][T13451] netlink: 'syz.2.2520': attribute type 6 has an invalid length.
[  199.998433][T13461] tc_dump_action: action bad kind
[  200.022460][T13463] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  200.549333][T13483] netem: change failed
[  200.695564][T13491] macsec2: entered promiscuous mode
[  200.697398][T13491] macsec2: entered allmulticast mode
[  200.699207][T13491] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  200.738335][T13491] netlink: 'syz.1.2534': attribute type 1 has an invalid length.
[  200.763707][T13493] netlink: 'syz.1.2535': attribute type 7 has an invalid length.
[  200.766367][T13493] __nla_validate_parse: 11 callbacks suppressed
[  200.766377][T13493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2535'.
[  200.792432][T13493] 8021q: adding VLAN 0 to HW filter on device bond17
[  200.795343][T13493] bridge19: port 1(bond17) entered blocking state
[  200.797917][T13493] bridge19: port 1(bond17) entered disabled state
[  200.801441][T13493] bond17: entered allmulticast mode
[  200.807756][T13493] bridge19: port 1(bond17) entered blocking state
[  200.811068][T13493] bridge19: port 1(bond17) entered forwarding state
[  200.982075][T13504] netlink: 'syz.1.2540': attribute type 1 has an invalid length.
[  201.018493][T13506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2541'.
[  201.186415][T13516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2545'.
[  201.422509][T13545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2554'.
[  201.557220][T13552] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  201.567441][T13552] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.578255][T13551] tipc: Disabling bearer <eth:syzkaller0>
[  201.772488][   T36] bridge19: port 1(bond17) entered disabled state
[  202.005561][T13576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2565'.
[  202.057380][T13577] netlink: 75 bytes leftover after parsing attributes in process `syz.0.2565'.
[  202.406869][T13589] netlink: 'syz.0.2569': attribute type 12 has an invalid length.
[  202.409981][T13589] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2569'.
[  202.522450][T13600] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  202.789894][T13613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2574'.
[  202.979761][T13629] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  202.999668][ T5880] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  203.197211][T13647] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  203.203384][T13647] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  203.240597][T13647] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  203.299121][T13657] netlink: 'syz.2.2591': attribute type 1 has an invalid length.
[  203.330552][T13659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2592'.
[  203.416934][T13665] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2595'.
[  203.422779][T13665] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  203.449539][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  203.522613][T13673] netlink: 'syz.2.2599': attribute type 4 has an invalid length.
[  203.569537][ T5880] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  203.792163][T13684] tipc: Trying to set illegal importance in message
[  204.120708][T13703] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  204.407599][T13708] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  204.411737][T13708] syzkaller0: entered promiscuous mode
[  204.414069][T13708] syzkaller0: entered allmulticast mode
[  204.431383][T13709] tipc: Resetting bearer <eth:syzkaller0>
[  204.444403][T13709] tipc: Disabling bearer <eth:syzkaller0>
[  204.526254][T13715] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  204.789980][T13736] syzkaller1: entered promiscuous mode
[  204.791740][T13736] syzkaller1: entered allmulticast mode
[  204.893019][T13741] syzkaller1: entered promiscuous mode
[  204.894840][T13741] syzkaller1: entered allmulticast mode
[  204.898750][T13740] delete_channel: no stack
[  205.359712][T13760] netlink: 'syz.1.2629': attribute type 1 has an invalid length.
[  205.521616][T13767] netlink: 'syz.2.2632': attribute type 2 has an invalid length.
[  205.938605][T13803] syzkaller0: left promiscuous mode
[  205.940955][T13803] syzkaller0: left allmulticast mode
[  205.945051][T13803] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  205.951442][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.954505][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.981902][T13805] netlink: 'syz.1.2645': attribute type 1 has an invalid length.
[  206.147188][T13809] __nla_validate_parse: 10 callbacks suppressed
[  206.147204][T13809] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2647'.
[  206.197666][T13809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2647'.
[  206.658498][T13821] netlink: 'syz.2.2651': attribute type 64 has an invalid length.
[  206.720314][T13823] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  206.872350][T13848] syzkaller0: entered promiscuous mode
[  206.878344][T13848] syzkaller0: entered allmulticast mode
[  207.446097][T13879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2659'.
[  207.479569][T13880] bond18 (unregistering): Released all slaves
[  207.501598][T13879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2659'.
[  207.549151][T13887] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  207.554402][T13887] syzkaller0: entered promiscuous mode
[  207.556467][T13887] syzkaller0: entered allmulticast mode
[  207.561131][T13887] tipc: Resetting bearer <eth:syzkaller0>
[  207.563058][T13887] syzkaller0: tun_net_xmit 90
[  207.565360][T13887] netlink: 'syz.2.2661': attribute type 1 has an invalid length.
[  207.570759][T13886] tipc: Resetting bearer <eth:syzkaller0>
[  207.579216][T13886] tipc: Disabling bearer <eth:syzkaller0>
[  207.583822][T13889] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  207.875623][T13909] netlink: 'syz.1.2671': attribute type 14 has an invalid length.
[  207.887401][T13911] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  208.312681][T13952] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2679'.
[  208.352927][T13957] bond14: (slave geneve2): Releasing active interface
[  208.358814][T13957] bond17: left allmulticast mode
[  208.362173][T13957] bridge19: port 1(bond17) entered disabled state
[  208.374260][ T5873] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  208.377798][ T5873] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  208.383125][ T5873] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  208.386087][ T5873] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  208.419980][T13962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2681'.
[  208.562245][T13971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2685'.
[  208.575838][T13971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2685'.
[  209.071564][T13940] delete_channel: no stack
[  209.297922][T14002] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  209.443009][T14008] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2698'.
[  209.453354][T14008] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  209.612776][T14014] netlink: 'syz.0.2699': attribute type 6 has an invalid length.
[  209.733527][T14020] netlink: 'syz.1.2702': attribute type 1 has an invalid length.
[  209.736933][T14020] netlink: 'syz.1.2702': attribute type 3 has an invalid length.
[  209.742949][T14020] netlink: 564 bytes leftover after parsing attributes in process `syz.1.2702'.
[  210.303419][T14051] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  210.647100][T14079] netlink: 'syz.2.2724': attribute type 83 has an invalid length.
[  211.052216][T14103] TC_ACT_REPEAT abuse ?
[  211.311695][T14113] __nla_validate_parse: 5 callbacks suppressed
[  211.311710][T14113] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2736'.
[  211.402529][T14117] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2738'.
[  211.595767][T14127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2742'.
[  211.601532][T14127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2742'.
[  211.625814][T14127] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2742'.
[  211.806142][T14133] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  211.809255][T14133] syzkaller0: entered promiscuous mode
[  211.812508][T14133] syzkaller0: entered allmulticast mode
[  211.818124][T14132] tipc: Resetting bearer <eth:syzkaller0>
[  211.830155][T14132] tipc: Disabling bearer <eth:syzkaller0>
[  211.898186][T14137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2746'.
[  211.908842][T14137] ipvlan2: entered promiscuous mode
[  211.914272][T14137] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  212.202475][T14156] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2753'.
[  212.902255][T14175] netlink: 'syz.0.2760': attribute type 1 has an invalid length.
[  212.928858][T14175] 8021q: adding VLAN 0 to HW filter on device bond8
[  213.137220][T14191] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2766'.
[  213.167807][T14195] netlink: 'syz.1.2765': attribute type 6 has an invalid length.
[  213.216324][T14199] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  213.389541][T14212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2774'.
[  213.782056][T14237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2782'.
[  214.264456][T14260] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  214.346124][T14267] netlink: 'syz.0.2794': attribute type 6 has an invalid length.
[  214.358248][T14267] IPv6: syztnl2: Disabled Multicast RS
[  214.458689][T14278] netlink: 'syz.0.2798': attribute type 1 has an invalid length.
[  214.491319][T14278] 8021q: adding VLAN 0 to HW filter on device bond9
[  214.513119][T14278] bond9: (slave gretap4): making interface the new active one
[  214.517016][T14278] bond9: (slave gretap4): Enslaving as an active interface with an up link
[  214.598948][T14287] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  214.707002][T14291] sch_tbf: burst 240 is lower than device lo mtu (1294) !
[  214.875011][T14299] unknown channel width for channel at 909000KHz?
[  215.840974][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  215.970604][T14334] netlink: 'syz.2.2818': attribute type 1 has an invalid length.
[  216.164968][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  216.244456][T14350] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  216.266553][T14350] netlink: 'syz.2.2820': attribute type 3 has an invalid length.
[  216.271995][T14350] netlink: 'syz.2.2820': attribute type 1 has an invalid length.
[  216.275491][T14350] netlink: 'syz.2.2820': attribute type 1 has an invalid length.
[  216.821247][T14366] netlink: 'syz.0.2828': attribute type 6 has an invalid length.
[  217.050425][T14371] netlink: 'syz.2.2830': attribute type 1 has an invalid length.
[  217.196632][T14375] __nla_validate_parse: 8 callbacks suppressed
[  217.196646][T14375] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2832'.
[  217.203771][T14375] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  217.227716][T14377] bond6: (slave gretap2): Releasing active interface
[  217.231029][ T5908] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  217.242530][T14377] bond9: (slave gretap4): Releasing active interface
[  217.281826][T14381] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2835'.
[  217.285624][T14381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2835'.
[  217.300252][T14384] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  217.304205][T14384] syzkaller0: entered promiscuous mode
[  217.306615][T14384] syzkaller0: entered allmulticast mode
[  217.343396][T14384] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2836'.
[  217.347251][    C1] vcan0: j1939_tp_rxtimer: 0xffff888022097c00: rx timeout, send abort
[  217.425369][T14393] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20003
[  217.513589][T14398] netlink: 'syz.1.2840': attribute type 6 has an invalid length.
[  217.665039][T14407] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2843'.
[  217.729769][ T5908] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  217.739110][T14411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2845'.
[  217.847366][    C1] vcan0: j1939_tp_rxtimer: 0xffff888022097c00: abort rx timeout. Force session deactivation
[  218.148735][T14421] IPv6: sit3: Disabled Multicast RS
[  218.152236][T14421] sit3: entered allmulticast mode
[  218.340759][T14427] netlink: 'syz.0.2850': attribute type 6 has an invalid length.
[  218.732648][   T33] audit: type=1804 audit(1756438649.000:2): pid=14430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2851" name="/newroot/971/cgroup.controllers" dev="tmpfs" ino=4951 res=1 errno=0
[  218.740402][   T33] audit: type=1800 audit(1756438649.000:3): pid=14430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2851" name="cgroup.controllers" dev="tmpfs" ino=4951 res=0 errno=0
[  218.848136][T14436] netlink: 'syz.1.2854': attribute type 1 has an invalid length.
[  219.078477][T14458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2862'.
[  219.371444][T14481] netlink: 'syz.1.2871': attribute type 2 has an invalid length.
[  219.385481][T14481] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  219.563841][T14493] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  220.402846][T14520] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.2882'.
[  220.567714][T14532] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2884'.
[  220.593569][T14536] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2885'.
[  221.068599][T14561] bridge0: port 1(erspan0) entered blocking state
[  221.072902][T14561] bridge0: port 1(erspan0) entered disabled state
[  221.075880][T14561] erspan0: entered allmulticast mode
[  221.080137][T14561] erspan0: entered promiscuous mode
[  221.317145][T14565] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  221.460288][ T5907] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  221.537688][T14587] validate_nla: 3 callbacks suppressed
[  221.537702][T14587] netlink: 'syz.0.2903': attribute type 1 has an invalid length.
[  221.572577][T14590] netlink: 'syz.1.2901': attribute type 6 has an invalid length.
[  221.634585][T14594] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  221.704468][T14599] netlink: 'syz.0.2908': attribute type 1 has an invalid length.
[  221.740120][T14600] netlink: 'syz.2.2907': attribute type 26 has an invalid length.
[  221.791108][ T5907] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  221.868204][T14607] netlink: 'syz.0.2911': attribute type 1 has an invalid length.
[  222.810216][ T5907] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  224.613508][T14631] erspan0: left allmulticast mode
[  224.615279][T14631] erspan0: left promiscuous mode
[  224.617075][T14631] bridge0: port 1(erspan0) entered disabled state
[  224.710371][T14635] __nla_validate_parse: 5 callbacks suppressed
[  224.710387][T14635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2921'.
[  224.760031][T14639] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2922'.
[  224.787291][T14643] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2924'.
[  224.850536][T14649] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  224.893135][T14651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2929'.
[  224.896940][T14651] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  224.903749][T14651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2929'.
[  224.917879][T14653] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2931'.
[  224.936383][T14657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2932'.
[  224.958569][T14653] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2931'.
[  225.042914][T14661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2931'.
[  225.113998][T14665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2934'.
[  225.240510][ T5880] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  225.431343][T14688] netlink: 'syz.0.2943': attribute type 1 has an invalid length.
[  225.460773][ T5907] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  225.498259][T14694] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  225.972290][ T5907] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  226.747460][T14751] TC_ACT_REPEAT abuse ?
[  227.351942][T14773] vcan0: tx drop: invalid da for name 0x0000000000000003
[  227.403073][T14780] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  227.417314][T14782] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  227.856873][T14814] TC_ACT_REPEAT abuse ?
[  228.015783][T14820] netlink: 'syz.1.2987': attribute type 6 has an invalid length.
[  229.026759][T14836] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  229.174933][T14844] syzkaller1: entered allmulticast mode
[  229.183314][T14844] syzkaller1: left allmulticast mode
[  229.190139][T14846] syzkaller1: entered allmulticast mode
[  229.555802][T14859] openvswitch: netlink: Missing key (keys=40, expected=80)
[  231.480074][T14889] netlink: 'syz.0.3007': attribute type 26 has an invalid length.
[  231.517227][T14891] openvswitch: netlink: Key type 206 is out of range max 32
[  231.667043][T14899] sctp: [Deprecated]: syz.0.3012 (pid 14899) Use of int in max_burst socket option.
[  231.667043][T14899] Use struct sctp_assoc_value instead
[  232.164982][T14908] tun0: tun_chr_ioctl cmd 1074025672
[  232.166788][T14908] tun0: ignored: set checksum disabled
[  232.285880][T14911] __nla_validate_parse: 12 callbacks suppressed
[  232.285890][T14911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3016'.
[  232.293350][T14911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3016'.
[  232.322377][T14913] digital: digital_start_poll: Unknown protocol
[  232.433716][T14920] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3019'.
[  232.550521][T14930] netlink: 'syz.2.3023': attribute type 1 has an invalid length.
[  232.699921][T14932] netlink: 'syz.0.3024': attribute type 10 has an invalid length.
[  232.709666][T14932] team0: Device ipvlan1 failed to register rx_handler
[  232.774377][   T33] audit: type=1800 audit(1756438663.040:4): pid=14946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3027" name="memory.events" dev="tmpfs" ino=5260 res=0 errno=0
[  232.855428][T14950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3029'.
[  232.904422][T14954] netlink: 'syz.2.3031': attribute type 1 has an invalid length.
[  233.062309][T14958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3033'.
[  233.070264][T14958] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3033'.
[  233.302387][T14971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3037'.
[  233.457385][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.462912][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.866145][T15002] sctp: [Deprecated]: syz.1.3047 (pid 15002) Use of int in max_burst socket option.
[  233.866145][T15002] Use struct sctp_assoc_value instead
[  233.922404][T15004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3048'.
[  233.925673][T15004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3048'.
[  233.982063][T15009] net veth1_virt_wifi : renamed from virt_wifi0
[  234.284392][T15035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3058'.
[  234.292156][T15035] team0: entered allmulticast mode
[  234.387613][T15042] netlink: 'syz.0.3061': attribute type 6 has an invalid length.
[  234.498962][T15048] TC_ACT_REPEAT abuse ?
[  234.561431][T15053] netlink: 'syz.0.3064': attribute type 1 has an invalid length.
[  234.589802][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  234.798314][T15064] 8021q: adding VLAN 0 to HW filter on device bond10
[  234.800985][T15065] bond10: option mode: unable to set because the bond device is up
[  234.808680][T15064] bond10: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  234.900801][ T9543] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  235.010857][ T5717] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  235.129989][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  235.225640][T15084] netlink: 'syz.0.3076': attribute type 2 has an invalid length.
[  235.265390][T15089] netlink: 'syz.0.3078': attribute type 1 has an invalid length.
[  235.619278][T15119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  235.843003][T15125] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  236.622621][T15186] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  237.293097][T15240] __nla_validate_parse: 25 callbacks suppressed
[  237.293112][T15240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3135'.
[  237.338288][T15245] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  237.396691][T15248] bond0: mtu less than device minimum
[  237.447029][T15252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3138'.
[  237.452154][T15252] netlink: 452 bytes leftover after parsing attributes in process `syz.0.3138'.
[  237.527469][T15257] netlink: 'syz.2.3140': attribute type 1 has an invalid length.
[  237.918118][T15272] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3147'.
[  237.922038][T15272] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3147'.
[  237.924772][T15272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3147'.
[  238.126800][T15286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3151'.
[  238.253343][T15286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3151'.
[  238.256628][T15286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3151'.
[  238.262255][T15286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3151'.
[  238.402577][T15309] netlink: 'syz.2.3163': attribute type 11 has an invalid length.
[  238.484184][T15320] netlink: 'syz.1.3161': attribute type 6 has an invalid length.
[  239.375624][T15338] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.392451][T15338] tipc: Resetting bearer <eth:syzkaller0>
[  239.432146][T15337] tipc: Disabling bearer <eth:syzkaller0>
[  239.448802][T15343] netlink: 'syz.1.3172': attribute type 1 has an invalid length.
[  239.557355][T15348] netlink: 'syz.1.3173': attribute type 9 has an invalid length.
[  239.643679][T15355] netlink: 'syz.2.3177': attribute type 10 has an invalid length.
[  239.659062][T15355] netlink: 'syz.2.3177': attribute type 10 has an invalid length.
[  239.664412][T15355] batadv0: entered promiscuous mode
[  239.668082][T15355] batadv0: entered allmulticast mode
[  239.668272][T15357] TC_ACT_REPEAT abuse ?
[  239.673046][T15355] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  239.727164][T15364] ieee802154 phy0 wpan0: encryption failed: -126
[  239.744910][T15369] netlink: 'syz.2.3183': attribute type 1 has an invalid length.
[  239.791792][T15375] netlink: 'syz.1.3186': attribute type 15 has an invalid length.
[  239.795124][T15373] bond10: (slave ip6gretap1): Removing an active aggregator
[  239.804406][T15373] bond10: (slave ip6gretap1): Releasing backup interface
[  239.815553][ T5880] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  239.868904][T15380] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  239.889871][    C0] TC_ACT_REPEAT abuse ?
[  239.891897][    C0] TC_ACT_REPEAT abuse ?
[  239.919947][T15385] netlink: 'syz.0.3188': attribute type 5 has an invalid length.
[  239.926767][T15381] netlink: 'syz.0.3188': attribute type 5 has an invalid length.
[  239.931308][T15380] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  239.963495][T15385] geneve2: entered promiscuous mode
[  239.971259][T15385] geneve2: entered allmulticast mode
[  239.975966][ T9543] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  239.980350][ T9543] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  239.998190][T15380] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  240.008304][T15380] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  240.042645][T15380] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  240.046446][T15380] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  240.136754][T15393] TC_ACT_REPEAT abuse ?
[  240.242024][ T5873] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  240.244955][ T5873] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  240.253059][   T33] audit: type=1800 audit(1756438670.520:5): pid=15395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3191" name="memory.events" dev="tmpfs" ino=5484 res=0 errno=0
[  240.268018][ T5873] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  240.274233][ T5873] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  240.288145][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  240.292979][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  240.309498][    C0] TC_ACT_REPEAT abuse ?
[  240.311328][    C0] TC_ACT_REPEAT abuse ?
[  240.312057][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  240.316308][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  240.349799][    C1] TC_ACT_REPEAT abuse ?
[  240.402373][T15401] nbd: couldn't find a device at index 0
[  240.491915][ T5880] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  240.520919][ T5880] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  240.557722][T15415] vcan0: tx drop: invalid da for name 0x0000000000000003
[  240.592597][T15412] sctp: [Deprecated]: syz.0.3198 (pid 15412) Use of struct sctp_assoc_value in delayed_ack socket option.
[  240.592597][T15412] Use struct sctp_sack_info instead
[  240.872773][T15422] ieee802154 phy0 wpan0: encryption failed: -126
[  241.020330][T15426] netlink: 'syz.1.3203': attribute type 1 has an invalid length.
[  241.427092][T15435] netlink: 'syz.2.3206': attribute type 39 has an invalid length.
[  241.559572][ T5908] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  241.605701][T15446] ieee802154 phy0 wpan0: encryption failed: -126
[  242.554797][T15467] __nla_validate_parse: 50 callbacks suppressed
[  242.554922][T15467] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3216'.
[  242.776827][T15480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3222'.
[  242.791589][T15480] net_ratelimit: 4 callbacks suppressed
[  242.791597][T15480] TC_ACT_REPEAT abuse ?
[  242.796655][T15480] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3222'.
[  242.809592][    C0] TC_ACT_REPEAT abuse ?
[  242.811527][    C0] TC_ACT_REPEAT abuse ?
[  243.163276][T15504] ieee802154 phy0 wpan0: encryption failed: -126
[  243.196847][T15510] ieee802154 phy0 wpan0: encryption failed: -126
[  243.253336][T15514] syzkaller1: entered promiscuous mode
[  243.255494][T15514] syzkaller1: entered allmulticast mode
[  243.289606][    C1] TC_ACT_REPEAT abuse ?
[  243.341763][T15517] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3233'.
[  243.603718][T15536] ieee802154 phy0 wpan0: encryption failed: -126
[  244.504778][T15553] validate_nla: 3 callbacks suppressed
[  244.504787][T15553] netlink: 'syz.2.3246': attribute type 6 has an invalid length.
[  244.902736][T15568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3251'.
[  245.167739][T15591] netlink: 'syz.1.3260': attribute type 4 has an invalid length.
[  245.172692][T15591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3260'.
[  245.301296][T15596] team0 (unregistering): left allmulticast mode
[  245.494957][T15612] TC_ACT_REPEAT abuse ?
[  245.546462][T15618] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  246.076246][T15630] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3271'.
[  246.089613][    C0] TC_ACT_REPEAT abuse ?
[  246.091186][    C0] TC_ACT_REPEAT abuse ?
[  246.153385][T15634] macsec3: entered promiscuous mode
[  246.155334][T15634] macvlan1: entered promiscuous mode
[  246.158535][T15634] macvlan1: left promiscuous mode
[  246.288955][T15639] netlink: 308 bytes leftover after parsing attributes in process `syz.0.3274'.
[  246.293839][T15639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3274'.
[  246.296807][T15639] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  246.389777][T15648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3278'.
[  246.551636][T15662] TC_ACT_REPEAT abuse ?
[  246.579725][    C1] TC_ACT_REPEAT abuse ?
[  246.873916][T15678] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  247.191735][  T792] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  247.195388][T15701] netlink: 'syz.0.3298': attribute type 2 has an invalid length.
[  247.204697][T15701] k*]: entered promiscuous mode
[  247.488585][T15712] ieee802154 phy0 wpan0: encryption failed: -126
[  247.689003][T15725] __nla_validate_parse: 8 callbacks suppressed
[  247.689017][T15725] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3308'.
[  247.829981][T15739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3314'.
[  247.841263][T15740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3314'.
[  247.849587][  T792] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  247.980015][T15752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3318'.
[  247.985654][T15752] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3318'.
[  247.988843][T15750] TC_ACT_REPEAT abuse ?
[  247.992125][T15750] TC_ACT_REPEAT abuse ?
[  247.992559][T15752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3318'.
[  247.993644][T15750] TC_ACT_REPEAT abuse ?
[  247.999676][T15750] TC_ACT_REPEAT abuse ?
[  248.001178][T15750] TC_ACT_REPEAT abuse ?
[  248.002622][T15750] TC_ACT_REPEAT abuse ?
[  248.004067][T15750] TC_ACT_REPEAT abuse ?
[  248.005514][T15750] TC_ACT_REPEAT abuse ?
[  248.007036][T15750] TC_ACT_REPEAT abuse ?
[  248.008589][T15750] TC_ACT_REPEAT abuse ?
[  248.041538][T15755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3319'.
[  248.109753][T15750] netlink: 288 bytes leftover after parsing attributes in process `syz.1.3319'.
[  248.115080][T15750] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3319'.
[  248.127745][T15750] IPVS: Unknown mcast interface: bridGe_slave0
[  248.226866][T15771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3326'.
[  248.865434][T15810] netlink: 'syz.0.3342': attribute type 10 has an invalid length.
[  248.883410][T15810] team0: Port device geneve0 added
[  248.942347][   T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  248.945933][   T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  248.996166][   T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  249.008727][   T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  249.340657][T15842] syzkaller1: entered promiscuous mode
[  249.342725][T15842] syzkaller1: entered allmulticast mode
[  249.633756][T15866] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  249.650326][T15865] tipc: Disabling bearer <eth:syzkaller0>
[  249.824133][T15896] ieee802154 phy0 wpan0: encryption failed: -126
[  249.862307][T15898] sctp: [Deprecated]: syz.0.3376 (pid 15898) Use of int in max_burst socket option.
[  249.862307][T15898] Use struct sctp_assoc_value instead
[  250.058201][T15908] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  250.206518][T15930] netlink: 'syz.0.3386': attribute type 1 has an invalid length.
[  250.351916][T15944] netlink: 'syz.1.3392': attribute type 2 has an invalid length.
[  250.356632][T15944] netlink: 'syz.1.3392': attribute type 2 has an invalid length.
[  250.419056][T15952] tipc: MTU too low for tipc bearer
[  250.543320][T15964] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  250.925425][T16007] netlink: 'syz.2.3411': attribute type 30 has an invalid length.
[  250.985687][T16014] team0: Port device geneve0 removed
[  250.996286][ T5717] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  251.005639][ T5717] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  251.010782][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  251.013489][ T5717] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  251.044016][ T5717] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  251.261934][T16038] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  251.783018][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  252.349828][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  253.084609][T16134] __nla_validate_parse: 40 callbacks suppressed
[  253.084625][T16134] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3448'.
[  253.110205][ T5908] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  253.130138][T16137] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3457'.
[  253.316566][T16158] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  253.321171][T16158] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  253.325457][T16158] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  253.325492][T16162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3465'.
[  253.328926][T16158] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  253.364417][T16158] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  253.368299][T16158] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  253.371773][    C1] net_ratelimit: 499 callbacks suppressed
[  253.371781][    C1] TC_ACT_REPEAT abuse ?
[  253.375748][T16158] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  253.378933][T16158] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  253.444645][T16158] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  253.447850][T16158] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  253.455187][T16158] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  253.458534][T16158] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  253.493125][T16158] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  253.496730][T16158] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  253.500384][T16158] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  253.503970][T16158] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  253.554848][T16169] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3468'.
[  253.620155][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  253.625204][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  253.628529][   T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  253.638481][   T13] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  253.656789][ T5872] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  253.661353][ T5872] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  253.664735][ T5872] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  253.667756][ T5872] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  253.681645][ T5872] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  253.686499][ T5872] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  253.690301][ T5872] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  253.692864][ T5872] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  253.699659][ T5872] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  253.703169][ T5872] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  253.712003][ T5872] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  253.718885][ T5872] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  254.169639][ T5908] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  254.320070][T16215] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3484'.
[  254.369060][T16217] Bluetooth: MGMT ver 1.23
[  254.421786][T16221] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3486'.
[  254.474476][T16223] netlink: 'syz.0.3487': attribute type 1 has an invalid length.
[  254.477790][T16223] netlink: 'syz.0.3487': attribute type 2 has an invalid length.
[  254.652521][T16227] netlink: 'syz.0.3488': attribute type 6 has an invalid length.
[  255.024146][T16245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3496'.
[  255.108625][T16254] batadv_slave_1: entered promiscuous mode
[  255.170121][   T33] audit: type=1804 audit(1756438685.440:6): pid=16259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3501" name="/newroot/1172/cgroup.controllers" dev="tmpfs" ino=5969 res=1 errno=0
[  255.189968][   T33] audit: type=1800 audit(1756438685.440:7): pid=16259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3501" name="cgroup.controllers" dev="tmpfs" ino=5969 res=0 errno=0
[  255.206547][T16261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3502'.
[  255.212853][T16263] netlink: 'syz.1.3503': attribute type 11 has an invalid length.
[  255.564015][T16289] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3512'.
[  256.551201][T16317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3520'.
[  256.658093][T16321] netlink: 'syz.2.3522': attribute type 11 has an invalid length.
[  256.727218][T16323] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  257.093673][T16338] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  257.097242][T16338] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  257.101141][T16338] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  257.104590][T16338] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  257.145169][T16338] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  257.149271][T16338] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  257.153510][T16338] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  257.157502][T16338] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  257.214477][T16338] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  257.218541][T16338] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  257.224484][T16338] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  257.228680][T16338] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  257.276947][T16338] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  257.282422][T16338] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  257.293747][T16338] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  257.297063][T16338] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  257.529675][ T5848] Bluetooth: hci2: command 0x0405 tx timeout
[  257.578462][T16362] TC_ACT_REPEAT abuse ?
[  257.689709][    C0] TC_ACT_REPEAT abuse ?
[  257.775431][ T5873] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  257.778815][ T5873] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  257.782260][ T5873] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  257.785617][ T5873] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  257.800345][ T5873] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  257.803837][ T5873] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  257.807304][ T5873] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  257.812079][ T5873] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  257.825109][ T5873] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  257.828352][ T5873] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  257.833234][ T5873] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  257.836761][ T5873] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  257.847436][ T5873] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  257.856553][ T5873] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  257.860612][ T5873] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  257.863825][ T5873] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  258.109724][    C0] TC_ACT_REPEAT abuse ?
[  258.571815][T16388] TC_ACT_REPEAT abuse ?
[  258.598222][T16391] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3546'.
[  258.634575][T16395] netlink: 'syz.1.3544': attribute type 6 has an invalid length.
[  258.723431][T16401] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  258.734660][T16405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3551'.
[  259.013464][T16420] nbd: illegal input index -1
[  259.093478][T16424] netlink: 'syz.0.3560': attribute type 1 has an invalid length.
[  259.223149][T16439] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  259.313891][T16444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3568'.
[  259.353746][T16444] netlink: 'syz.2.3568': attribute type 10 has an invalid length.
[  259.561137][T16455] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3574'.
[  259.627746][T16467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3578'.
[  259.873826][T16487] netlink: 'syz.0.3581': attribute type 1 has an invalid length.
[  260.052739][T16507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3586'.
[  260.057096][T16507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3586'.
[  260.083472][T16510] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3587'.
[  260.634928][T16541] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  260.729826][T11922] Bluetooth: hci0: command tx timeout
[  260.793167][T16554] netlink: 410 bytes leftover after parsing attributes in process `syz.0.3594'.
[  260.890202][ T5880] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  261.072472][ T5880] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  261.089597][T16587] netlink: 'syz.2.3604': attribute type 10 has an invalid length.
[  261.092708][T16587] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up
[  261.206351][T16597] netlink: 'syz.0.3607': attribute type 5 has an invalid length.
[  261.280259][  T792] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  261.535313][T16624] TC_ACT_REPEAT abuse ?
[  261.730625][ T5880] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  261.812728][T16645] IPv6: sit3: Disabled Multicast RS
[  261.815037][T16645] sit3: entered allmulticast mode
[  262.349660][ T5908] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  262.970462][T16698] TC_ACT_REPEAT abuse ?
[  263.442071][T16723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3648'.
[  263.494833][T16728] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  263.547585][T16733] TC_ACT_REPEAT abuse ?
[  263.570237][T16731] netlink: 'syz.2.3651': attribute type 1 has an invalid length.
[  263.652956][T16740] __nla_validate_parse: 1 callbacks suppressed
[  263.652969][T16740] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3654'.
[  263.668561][T16741] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3654'.
[  263.888455][T16760] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3661'.
[  263.895201][T16760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3661'.
[  264.143078][T16764] netlink: 'syz.2.3662': attribute type 10 has an invalid length.
[  264.358150][T16777] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3666'.
[  264.455047][T16786] netlink: 'syz.0.3671': attribute type 3 has an invalid length.
[  264.477010][T16790] netlink: 'syz.2.3673': attribute type 4 has an invalid length.
[  264.544877][T16798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3676'.
[  264.552124][T16798] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  264.569297][T16798] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  264.575772][T16798] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  264.611152][T16802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3679'.
[  264.616050][T16802] netlink: 'syz.0.3679': attribute type 1 has an invalid length.
[  264.744919][T16804] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  264.753913][T16804] netlink: 'syz.2.3678': attribute type 1 has an invalid length.
[  264.757185][T16804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3678'.
[  264.764835][T16816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3681'.
[  264.769283][T16817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3681'.
[  264.825390][T16823] TC_ACT_REPEAT abuse ?
[  264.883510][T16825] TC_ACT_REPEAT abuse ?
[  264.903915][T16827] sctp: [Deprecated]: syz.2.3685 (pid 16827) Use of int in max_burst socket option deprecated.
[  264.903915][T16827] Use struct sctp_assoc_value instead
[  264.931147][T16829] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  265.034542][T16838] netem: change failed
[  265.285293][T16853] macvtap0: entered promiscuous mode
[  265.287510][T16853] macvtap0: entered allmulticast mode
[  265.290205][T16853] syz_tun: entered promiscuous mode
[  265.291958][T16853] syz_tun: entered allmulticast mode
[  265.294602][T16853] team0: Device macvtap0 failed to register rx_handler
[  265.297249][T16853] syz_tun: left allmulticast mode
[  265.299056][T16853] syz_tun: left promiscuous mode
[  265.345295][T16858] TC_ACT_REPEAT abuse ?
[  265.514039][T16866] netlink: 'syz.1.3699': attribute type 11 has an invalid length.
[  265.834117][T16899] netlink: 'syz.1.3712': attribute type 1 has an invalid length.
[  265.862432][T16899] 8021q: adding VLAN 0 to HW filter on device bond18
[  265.884315][T16899] 8021q: adding VLAN 0 to HW filter on device bond18
[  265.887500][T16899] bond18: (slave vxcan3): The slave device specified does not support setting the MAC address
[  265.896425][T16899] bond18: (slave vxcan3): Error -95 calling set_mac_address
[  265.955093][T16905] veth13: entered promiscuous mode
[  265.965153][T16905] bond18: (slave veth13): Enslaving as an active interface with a down link
[  265.973384][T16899] erspan0: entered allmulticast mode
[  265.984144][T16899] bond18: (slave erspan0): making interface the new active one
[  265.987823][T16899] bond18: (slave erspan0): Enslaving as an active interface with an up link
[  265.992201][T16899] netlink: 'syz.1.3712': attribute type 1 has an invalid length.
[  266.169652][    C0] TC_ACT_REPEAT abuse ?
[  266.171683][    C0] TC_ACT_REPEAT abuse ?
[  266.529354][T16964] netlink: 'syz.0.3736': attribute type 3 has an invalid length.
[  266.597093][T16977] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  266.698368][T16982] netlink: 'syz.2.3742': attribute type 1 has an invalid length.
[  266.809637][    C1] TC_ACT_REPEAT abuse ?
[  266.884011][T17001] netlink: 'syz.0.3747': attribute type 1 has an invalid length.
[  267.229754][ T5880] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  267.562792][T17066] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  267.565645][T17066] syzkaller0: entered promiscuous mode
[  267.567750][T17066] syzkaller0: entered allmulticast mode
[  267.579223][T17066] tipc: Resetting bearer <eth:syzkaller0>
[  267.583984][T17065] tipc: Resetting bearer <eth:syzkaller0>
[  267.594082][T17065] tipc: Disabling bearer <eth:syzkaller0>
[  267.605991][T17070] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  268.116956][T17118] erspan0: left allmulticast mode
[  268.126511][T17118] veth0_to_team: left allmulticast mode
[  268.134502][T17118] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  268.145586][T17118] syzkaller0: left allmulticast mode
[  268.148053][T17118] tipc: Resetting bearer <eth:syzkaller0>
[  268.153866][T17118] tipc: Resetting bearer <eth:syzkaller0>
[  268.159298][T17118] macsec2: left allmulticast mode
[  268.162534][T17118] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  268.208071][ T5880] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  268.232981][T17122] bond18: (slave erspan0): Releasing active interface
[  268.243193][T17122] tipc: Resetting bearer <eth:syzkaller0>
[  268.252261][T17122] bond18: (slave veth13): Releasing active interface
[  268.325774][T17128] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  268.496137][T17149] TC_ACT_REPEAT abuse ?
[  268.669639][ T5908] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  269.337617][T17171] TC_ACT_REPEAT abuse ?
[  269.460891][T17181] validate_nla: 3 callbacks suppressed
[  269.460906][T17181] netlink: 'syz.2.3813': attribute type 1 has an invalid length.
[  269.466331][T17181] __nla_validate_parse: 21 callbacks suppressed
[  269.466339][T17181] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3813'.
[  269.472488][T17181] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3813'.
[  269.616414][T17195] tipc: Resetting bearer <eth:syzkaller0>
[  269.728681][T17205] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3823'.
[  270.051621][T17237] netlink: 'syz.0.3834': attribute type 4 has an invalid length.
[  270.061547][T17237] netlink: 'syz.0.3834': attribute type 4 has an invalid length.
[  270.192054][ T5880] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  270.209074][T17244] netlink: 'syz.2.3837': attribute type 1 has an invalid length.
[  270.213521][T17244] netlink: 'syz.2.3837': attribute type 11 has an invalid length.
[  270.216749][T17244] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3837'.
[  270.307670][T17257] net_ratelimit: 1 callbacks suppressed
[  270.307683][T17257] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  270.473781][T17269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3848'.
[  270.482835][T17269] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  270.533864][T17275] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  270.650133][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  270.705718][T17291] sctp: [Deprecated]: syz.2.3857 (pid 17291) Use of int in max_burst socket option deprecated.
[  270.705718][T17291] Use struct sctp_assoc_value instead
[  270.715239][T17291] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3857'.
[  270.760371][T17296] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3859'.
[  270.789604][ T5880] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  270.997773][T17321] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  271.041441][T17325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3869'.
[  271.139896][T17330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3872'.
[  271.170991][T17338] netlink: 'syz.0.3874': attribute type 1 has an invalid length.
[  271.231034][T17343] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  271.256897][T17338] veth19: entered promiscuous mode
[  271.267186][T17338] bond14: (slave veth19): Enslaving as a backup interface with a down link
[  271.277697][T17338] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3874'.
[  271.284222][T17338] 8021q: adding VLAN 0 to HW filter on device bond14
[  271.424226][T17361] tipc: Can't bind to reserved service type 0
[  271.526620][T17373] netlink: 'syz.1.3884': attribute type 4 has an invalid length.
[  271.532803][T17373] netlink: 'syz.1.3884': attribute type 9 has an invalid length.
[  271.584248][T17378] TC_ACT_REPEAT abuse ?
[  271.622105][T17384] netlink: 'syz.2.3889': attribute type 1 has an invalid length.
[  271.624637][T17384] netlink: 'syz.2.3889': attribute type 1 has an invalid length.
[  272.036510][T17427] veth1_to_bond: entered allmulticast mode
[  272.077694][T17427] veth1_to_bond (unregistering): left allmulticast mode
[  272.784583][T17482] tipc: Resetting bearer <eth:syzkaller0>
[  273.042759][T17502] bond14: (slave veth19): Releasing backup interface
[  273.060757][ T5908] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  273.142162][T17511] tipc: Resetting bearer <eth:syzkaller0>
[  273.529782][ T5908] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  273.730466][T17556] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  273.737678][T17556] syzkaller0: entered promiscuous mode
[  273.742069][T17556] syzkaller0: entered allmulticast mode
[  273.748604][T17558] tipc: Resetting bearer <eth:syzkaller0>
[  273.755736][T17556] sch_tbf: peakrate 9 is lower than or equals to rate 196608 !
[  273.769289][T17556] tipc: Resetting bearer <eth:syzkaller0>
[  273.782059][T17555] tipc: Resetting bearer <eth:syzkaller0>
[  273.793418][T17555] tipc: Disabling bearer <eth:syzkaller0>
[  273.853341][T17564] netlink: zone id is out of range
[  273.855548][T17564] netlink: zone id is out of range
[  273.857756][T17564] netlink: zone id is out of range
[  273.860187][T17564] netlink: zone id is out of range
[  273.862764][T17564] netlink: zone id is out of range
[  273.950139][  T792] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  274.000948][  T792] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  274.084303][T17596] netem: incorrect ge model size
[  274.086724][T17596] netem: change failed
[  274.124622][T17599] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  274.128544][T17599] syzkaller0: entered promiscuous mode
[  274.133855][T17599] syzkaller0: entered allmulticast mode
[  274.143829][T17598] tipc: Resetting bearer <eth:syzkaller0>
[  274.163762][T17598] tipc: Disabling bearer <eth:syzkaller0>
[  274.285648][T17602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.432777][T17622] bridge0: port 1(macsec0) entered blocking state
[  274.435741][T17622] bridge0: port 1(macsec0) entered disabled state
[  274.438111][T17622] macsec0: entered allmulticast mode
[  274.440110][ T5907] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  274.440994][T17622] veth1_macvtap: entered allmulticast mode
[  274.447622][T17622] macsec0: entered promiscuous mode
[  274.651662][T17634] __nla_validate_parse: 17 callbacks suppressed
[  274.651677][T17634] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3968'.
[  275.415688][T17653] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  275.421792][T17653] net_ratelimit: 16 callbacks suppressed
[  275.421813][T17653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  275.557061][T17660] TC_ACT_REPEAT abuse ?
[  275.629844][T17664] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3975'.
[  275.853375][T17678] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3982'.
[  275.898706][T17683] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  275.911309][T17683] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  275.957807][T17688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3984'.
[  275.963495][T17688] validate_nla: 3 callbacks suppressed
[  275.963507][T17688] netlink: 'syz.2.3984': attribute type 10 has an invalid length.
[  276.017045][T17692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3985'.
[  276.020353][T17692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3985'.
[  276.432025][T17703] macsec0: left allmulticast mode
[  276.434177][T17703] veth1_macvtap: left allmulticast mode
[  276.436489][T17703] macsec0: left promiscuous mode
[  276.438961][T17703] bridge0: port 1(macsec0) entered disabled state
[  276.444993][T17703] tipc: Resetting bearer <eth:syzkaller0>
[  276.832051][T17730] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3997'.
[  276.851034][ T5907] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  276.883611][T17733] xt_socket: unknown flags 0xd0
[  276.947850][T17735] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  276.977856][T17744] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4004'.
[  276.996212][T17744] batadv0: entered promiscuous mode
[  276.999315][T17744] batadv0: entered allmulticast mode
[  277.126596][T17756] tipc: Resetting bearer <eth:syzkaller0>
[  277.185790][T17763] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4011'.
[  277.518232][T17798] tipc: Resetting bearer <eth:syzkaller0>
[  277.529911][ T5907] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  277.768323][T17813] netlink: 'syz.1.4030': attribute type 5 has an invalid length.
[  277.772509][T17813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4030'.
[  277.823654][T17815] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  277.867928][   T33] audit: type=1800 audit(1756438708.130:8): pid=17823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4033" name="blkio.bfq.time_recursive" dev="tmpfs" ino=6941 res=0 errno=0
[  277.876946][   T33] audit: type=1800 audit(1756438708.150:9): pid=17823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4033" name="blkio.bfq.time_recursive" dev="tmpfs" ino=6941 res=0 errno=0
[  277.925720][T17825] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  277.964564][T17827] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  278.097522][T17838] netlink: 'syz.2.4039': attribute type 5 has an invalid length.
[  278.124844][T17840] openvswitch: netlink: Message has 1 unknown bytes.
[  278.127802][T17840] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  278.214315][T17846] tipc: Resetting bearer <eth:syzkaller0>
[  278.381472][T17865] team0: Port device sit3 added
[  278.414588][T17869] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  278.517203][T17875] tipc: Resetting bearer <eth:syzkaller0>
[  278.524885][T17875] tipc: Resetting bearer <eth:syzkaller0>
[  278.563524][T17883] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  278.897543][T17912] tipc: Resetting bearer <eth:syzkaller0>
[  278.949336][T17916] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  279.937783][T17950] syzkaller0: entered promiscuous mode
[  279.940942][T17950] syzkaller0: entered allmulticast mode
[  279.944844][T17949] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  279.954815][T17949] tipc: Resetting bearer <eth:syzkaller0>
[  279.968674][T17949] tipc: Disabling bearer <eth:syzkaller0>
[  280.074640][T17960] v: renamed from ip6_vti0 (while UP)
[  280.370498][ T5907] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  280.990108][ T5907] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  281.003521][T18003] net_ratelimit: 1 callbacks suppressed
[  281.003530][T18003] TC_ACT_REPEAT abuse ?
[  281.190947][ T5907] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  281.581577][T18050] __nla_validate_parse: 10 callbacks suppressed
[  281.581591][T18050] netlink: 596 bytes leftover after parsing attributes in process `syz.2.4115'.
[  281.595780][T18050] pim6reg1: entered promiscuous mode
[  281.597597][T18050] pim6reg1: entered allmulticast mode
[  281.602626][T18050] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4115'.
[  281.939085][T18056] netlink: 'syz.2.4117': attribute type 21 has an invalid length.
[  282.318044][T18080] team0: Port device sit3 removed
[  282.320523][ T5908] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  282.372447][T18088] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  282.409040][T18090] netlink: 'syz.1.4126': attribute type 1 has an invalid length.
[  282.436256][T18090] 8021q: adding VLAN 0 to HW filter on device bond19
[  282.517487][T18100] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4129'.
[  282.610677][T18106] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4132'.
[  282.701402][T18117] syzkaller0: entered promiscuous mode
[  282.703812][T18117] syzkaller0: entered allmulticast mode
[  282.970152][ T5880] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  283.202168][T18142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4144'.
[  283.313187][T18148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4148'.
[  283.396135][T18153] tipc: Resetting bearer <eth:syzkaller0>
[  283.513980][T18174] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4158'.
[  283.564500][T18180] tipc: Resetting bearer <eth:syzkaller0>
[  283.703877][T18190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4163'.
[  283.707798][T18190] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4163'.
[  283.795438][T18194] tipc: Resetting bearer <eth:syzkaller0>
[  284.091156][T18209] netlink: 'syz.1.4171': attribute type 9 has an invalid length.
[  284.093725][T18209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4171'.
[  284.101230][T18209] macvlan3: entered promiscuous mode
[  284.103037][T18209] hsr0: entered promiscuous mode
[  284.104859][T18209] macvlan3: entered allmulticast mode
[  284.106649][T18209] hsr0: entered allmulticast mode
[  284.108412][T18209] hsr_slave_0: entered allmulticast mode
[  284.112557][T18209] hsr_slave_1: entered allmulticast mode
[  284.156361][T18209] netlink: 'syz.1.4171': attribute type 5 has an invalid length.
[  284.159137][T18209] netlink: 'syz.1.4171': attribute type 6 has an invalid length.
[  284.163694][T18209] netlink: 'syz.1.4171': attribute type 9 has an invalid length.
[  284.174669][T18209] macvlan4: entered promiscuous mode
[  284.177151][T18209] macvlan4: entered allmulticast mode
[  284.410251][  T792] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  284.451489][T11922] Bluetooth: hci2: link tx timeout
[  284.454384][T11922] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  284.742530][T18268] team0: Device gtp0 is up. Set it down before adding it as a team port
[  285.066069][T18300] delete_channel: no stack
[  285.079801][T18303] netlink: 'syz.2.4202': attribute type 4 has an invalid length.
[  285.138374][  T792] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  285.278027][T18322] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  285.327456][T18326] dvmrp1: entered allmulticast mode
[  285.339622][T18326] dvmrp1: left allmulticast mode
[  285.640102][T18358] IPv6: NLM_F_CREATE should be specified when creating new route
[  286.071123][ T5880] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  286.247937][T18418] openvswitch: netlink: Missing key (keys=40, expected=100)
[  286.268512][T18416] syzkaller0: entered promiscuous mode
[  286.271121][T18416] syzkaller0: entered allmulticast mode
[  286.277759][T18418] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  286.506575][T11922] Bluetooth: hci2: command 0x0405 tx timeout
[  286.689597][ T5880] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  287.697896][T18464] __nla_validate_parse: 23 callbacks suppressed
[  287.697910][T18464] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4263'.
[  287.973626][T18488] netlink: 'syz.0.4273': attribute type 1 has an invalid length.
[  288.005273][T18488] bond15: entered promiscuous mode
[  288.007475][T18488] 8021q: adding VLAN 0 to HW filter on device bond15
[  288.012017][T18493] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  288.015478][T18493] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  288.018591][T18493] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  288.024307][T18493] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  288.072806][T18493] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  288.076420][T18493] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  288.083660][T18493] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  288.088241][T18493] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  288.129016][T18493] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  288.133873][T18493] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  288.137493][T18493] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  288.142133][T18493] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  288.171513][T18511] netlink: 'syz.1.4280': attribute type 2 has an invalid length.
[  288.173471][T18509] netlink: 'syz.0.4279': attribute type 2 has an invalid length.
[  288.176742][T18511] : entered promiscuous mode
[  288.184446][T18493] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  288.193541][T18493] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  288.197032][T18493] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  288.201779][T18493] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  288.296331][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  288.298934][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  288.304724][   T12] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  288.307713][   T12] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  288.315225][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  288.317956][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  288.323537][   T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  288.326470][   T12] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  288.330417][T11922] Bluetooth: hci0: command tx timeout
[  288.334927][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  288.339093][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  288.342214][   T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  288.345641][   T12] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  288.362305][T18526] netlink: 'syz.0.4286': attribute type 1 has an invalid length.
[  288.426036][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  288.430499][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  288.437286][   T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  288.442017][T18531] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4287'.
[  288.446670][   T12] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  288.579804][T11922] Bluetooth: hci2: command 0x0405 tx timeout
[  288.657556][T18550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4295'.
[  288.802131][T18563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4300'.
[  288.841728][T18564] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4297'.
[  289.165883][T18582] netlink: 'syz.2.4307': attribute type 12 has an invalid length.
[  289.168519][T18582] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.4307'.
[  289.191490][ T5907] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  289.306615][T18611] netlink: 277 bytes leftover after parsing attributes in process `syz.2.4318'.
[  289.307785][T18610] vlan3: entered promiscuous mode
[  289.312144][T18610] gretap0: entered promiscuous mode
[  289.382181][T18623] netlink: 85 bytes leftover after parsing attributes in process `syz.1.4319'.
[  289.385551][T18625] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4324'.
[  289.391026][ T5908] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  289.502590][T18640] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  289.708650][T18659] netlink: 'syz.1.4333': attribute type 4 has an invalid length.
[  289.715367][T18659] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4333'.
[  289.848488][T18669] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check.
[  289.973451][T18685] bridge38: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  289.991733][T18686] bridge39: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  290.127274][T18702] lo speed is unknown, defaulting to 1000
[  290.132936][T18702] lo speed is unknown, defaulting to 1000
[  290.135533][T18702] lo speed is unknown, defaulting to 1000
[  290.143852][T18702] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  290.163353][T18702] lo speed is unknown, defaulting to 1000
[  290.168403][T18702] lo speed is unknown, defaulting to 1000
[  290.173810][T18702] lo speed is unknown, defaulting to 1000
[  290.224686][T18709] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7)
[  290.250002][ T5908] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  290.544885][T18729] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  290.812304][ T5908] lo speed is unknown, defaulting to 1000
[  290.831581][ T5908] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  290.855863][T18760] netlink: 'syz.1.4376': attribute type 4 has an invalid length.
[  290.911129][T18765] netlink: 'syz.2.4379': attribute type 62 has an invalid length.
[  291.259883][ T5908] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  291.645160][T18825] sit4: entered promiscuous mode
[  292.457076][   T47] lo speed is unknown, defaulting to 1000
[  292.459350][   T47] syz2: Port: 1 Link DOWN
[  292.577042][T18844] netlink: 'syz.0.4404': attribute type 1 has an invalid length.
[  292.595883][T18844] netlink: 'syz.0.4404': attribute type 1 has an invalid length.
[  292.705344][T18855] __nla_validate_parse: 19 callbacks suppressed
[  292.705360][T18855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4407'.
[  292.715767][T18858] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4409'.
[  293.034974][T18897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4421'.
[  293.056169][T18897] gtp0: entered promiscuous mode
[  293.057973][T18897] gtp0: entered allmulticast mode
[  293.198802][T18903] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4420'.
[  293.264486][T18912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4425'.
[  293.285666][T18912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4425'.
[  293.302161][T18900] lo speed is unknown, defaulting to 1000
[  293.658630][T18930] veth1: left promiscuous mode
[  293.669221][T18930] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  293.681144][T18930] bond3: left promiscuous mode
[  293.682850][T18930] bond3: left allmulticast mode
[  293.700771][T18930] erspan0: left allmulticast mode
[  293.703308][T18930] macvtap1: left promiscuous mode
[  293.705662][T18930] macvtap1: left allmulticast mode
[  293.738870][T18931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4431'.
[  293.752405][T18930] geneve2: left promiscuous mode
[  293.754467][T18930] geneve2: left allmulticast mode
[  293.772202][T18930] veth19: left promiscuous mode
[  293.781528][T18930] bond15: left promiscuous mode
[  293.786917][T18930] sit4: left promiscuous mode
[  293.800820][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  293.804225][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  293.807635][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  293.811773][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  293.817373][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  293.821185][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  293.824411][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  293.827963][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  293.877864][T18938] tipc: Resetting bearer <eth:syzkaller0>
[  294.419288][T18947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4434'.
[  294.619593][T18952] block nbd2: server does not support multiple connections per device.
[  294.624412][T18952] block nbd2: shutting down sockets
[  294.858434][T18962] lo speed is unknown, defaulting to 1000
[  295.135746][T18964] lo speed is unknown, defaulting to 1000
[  295.349162][T19002] bridge0: port 1(veth0_to_team) entered blocking state
[  295.355937][T19002] bridge0: port 1(veth0_to_team) entered disabled state
[  295.359278][T19002] veth0_to_team: entered allmulticast mode
[  295.366990][T19002] veth0_to_team: entered promiscuous mode
[  295.676434][T19008] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  295.681209][T19008] syzkaller0: entered allmulticast mode
[  295.683819][T19008] tipc: Resetting bearer <eth:syzkaller0>
[  295.712339][T19008] sch_fq: defrate 257 ignored.
[  295.744871][T19013] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  295.976190][T19038] netlink: 'syz.2.4463': attribute type 2 has an invalid length.
[  295.978947][T19038] netlink: 'syz.2.4463': attribute type 2 has an invalid length.
[  295.982976][T19013] lo speed is unknown, defaulting to 1000
[  296.172238][T19059] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  296.351308][T19079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4474'.
[  296.506575][T19101] openvswitch: netlink: Key type 16144 is out of range max 32
[  296.523785][T19101] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4478'.
[  296.604774][T19112] veth0_to_team: left allmulticast mode
[  296.607975][T19112] veth0_to_team: left promiscuous mode
[  296.610314][T19112] bridge0: port 1(veth0_to_team) entered disabled state
[  297.646781][T19169] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  297.669059][T19175] IPv6: Can't replace route, no match found
[  297.673873][T19168] tipc: Disabling bearer <eth:syzkaller0>
[  297.826632][T19190] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  297.833279][T19192] __nla_validate_parse: 1 callbacks suppressed
[  297.833288][T19192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4498'.
[  297.876287][T19195] syzkaller0: left promiscuous mode
[  297.878483][T19195] syzkaller0: left allmulticast mode
[  297.882538][T19195] tipc: Resetting bearer <eth:syzkaller0>
[  297.939264][T19195] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  298.073303][T19212] netlink: 'syz.2.4507': attribute type 23 has an invalid length.
[  298.171985][T19221] netlink: 13 bytes leftover after parsing attributes in process `syz.0.4510'.
[  298.237147][T19229] netlink: 'syz.0.4514': attribute type 10 has an invalid length.
[  298.241197][T19229] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4514'.
[  298.241622][T19230] netlink: 'syz.0.4514': attribute type 10 has an invalid length.
[  298.244270][T19229] bond0: option arp_all_targets: invalid value (196616)
[  298.250498][T19230] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4514'.
[  298.253483][T19230] bond0: option arp_all_targets: invalid value (196616)
[  298.310636][T19236] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4517'.
[  298.334641][T19238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4518'.
[  298.455671][T19251] tipc: Resetting bearer <eth:syzkaller0>
[  298.478154][T19256] netlink: 'syz.2.4522': attribute type 10 has an invalid length.
[  298.521833][T19259] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4526'.
[  298.527747][T19262] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4526'.
[  298.538852][T19259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4526'.
[  298.544188][T19262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4526'.
[  298.547998][T19259] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  298.553720][T19262] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  298.683261][T19276] tipc: Resetting bearer <eth:syzkaller0>
[  298.867709][T19298] tipc: Resetting bearer <eth:syzkaller0>
[  298.867977][T19296] netlink: 'syz.0.4542': attribute type 2 has an invalid length.
[  298.877132][T19296] : entered promiscuous mode
[  298.902354][T19301] IPv6: sit5: Disabled Multicast RS
[  299.105161][T19322] netlink: 'syz.0.4552': attribute type 2 has an invalid length.
[  299.107846][T19322] netlink: 'syz.0.4552': attribute type 1 has an invalid length.
[  299.342417][T19347] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  299.347862][T19347] syzkaller0: entered promiscuous mode
[  299.351579][T19347] syzkaller0: entered allmulticast mode
[  299.371102][T19347] tipc: Resetting bearer <eth:syzkaller0>
[  299.374246][T19346] tipc: Resetting bearer <eth:syzkaller0>
[  299.390846][T19346] tipc: Disabling bearer <eth:syzkaller0>
[  299.691804][T19369] syzkaller0: entered promiscuous mode
[  299.694816][T19369] syzkaller0: entered allmulticast mode
[  299.697836][T19369] tipc: Resetting bearer <eth:syzkaller0>
[  299.728303][T19371] netlink: 'syz.2.4571': attribute type 1 has an invalid length.
[  299.960993][T19386] syzkaller1: entered allmulticast mode
[  300.746317][T19400] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  301.324720][T19427] tipc: Resetting bearer <eth:syzkaller0>
[  301.395833][T19431] bridge40: port 1(veth0_to_bond) entered blocking state
[  301.399128][T19431] bridge40: port 1(veth0_to_bond) entered disabled state
[  301.403384][T19431] veth0_to_bond: entered allmulticast mode
[  301.407494][T19431] veth0_to_bond: entered promiscuous mode
[  301.422131][T19431] vlan4: entered allmulticast mode
[  301.424365][T19431] veth1: entered allmulticast mode
[  301.426968][T19431] bridge40: port 2(vlan4) entered blocking state
[  301.430409][T19431] bridge40: port 2(vlan4) entered disabled state
[  301.434855][T19431] vlan4: entered promiscuous mode
[  301.437190][T19431] veth1: entered promiscuous mode
[  301.553899][T19437] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  301.558298][T19437] netlink: 'syz.2.4593': attribute type 1 has an invalid length.
[  301.764498][T19454] syzkaller0: left promiscuous mode
[  301.771740][T19454] syzkaller0: left allmulticast mode
[  301.774462][T19454] tipc: Resetting bearer <eth:syzkaller0>
[  301.890127][T19445] lo speed is unknown, defaulting to 1000
[  302.167105][ T5717] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  302.178700][ T5717] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  302.183272][ T5717] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  302.186531][ T5717] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  302.613307][T19527] netlink: 'syz.2.4616': attribute type 1 has an invalid length.
[  302.647793][T19529] netlink: 'syz.1.4619': attribute type 6 has an invalid length.
[  302.663923][T19529] syzkaller0: entered promiscuous mode
[  302.666533][T19529] syzkaller0: entered allmulticast mode
[  302.678537][T19529] tipc: Resetting bearer <eth:syzkaller0>
[  302.849616][T19539] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  302.876349][T19539] __nla_validate_parse: 17 callbacks suppressed
[  302.876365][T19539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4623'.
[  302.918667][T19536] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4622'.
[  303.109960][T19567] netlink: 165 bytes leftover after parsing attributes in process `syz.2.4633'.
[  303.143384][T19571] netlink: 'syz.1.4634': attribute type 2 has an invalid length.
[  303.146438][T19570] netlink: 26 bytes leftover after parsing attributes in process `syz.1.4634'.
[  303.254774][T19580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4638'.
[  303.258615][T19580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4638'.
[  303.471456][T19601] netlink: 'syz.1.4644': attribute type 21 has an invalid length.
[  303.474424][T19601] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4644'.
[  303.535336][T19604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4645'.
[  303.549752][T19604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4645'.
[  303.556128][T19605] veth0_to_bond: left allmulticast mode
[  303.558594][T19605] veth0_to_bond: left promiscuous mode
[  303.561260][T19605] bridge40: port 1(veth0_to_bond) entered disabled state
[  303.568522][T19605] tipc: Resetting bearer <eth:syzkaller0>
[  303.574980][T19605] vlan4: left promiscuous mode
[  303.577084][T19605] veth1: left promiscuous mode
[  303.579802][T19605] bridge40: port 2(vlan4) entered disabled state
[  303.585620][T19606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4645'.
[  303.824708][T19627] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  303.832103][T19627] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  304.891774][   T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  304.895017][   T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  305.134570][T19691] netlink: 'syz.0.4672': attribute type 10 has an invalid length.
[  305.144855][T19691] team0: Port device dummy0 added
[  305.148559][T19691] netlink: 'syz.0.4672': attribute type 10 has an invalid length.
[  305.155519][T19691] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  305.164957][T19691] team0: Failed to send options change via netlink (err -105)
[  305.168232][T19691] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  305.172838][T19691] team0: Port device dummy0 removed
[  305.181502][T19691] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  305.264414][T19682] lo speed is unknown, defaulting to 1000
[  305.420715][T19697] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  305.964281][T19717] vlan6: entered allmulticast mode
[  305.966220][T19717] bridge0: entered allmulticast mode
[  305.968342][T19717] bridge28: port 1(vlan6) entered blocking state
[  305.971601][T19717] bridge28: port 1(vlan6) entered disabled state
[  305.977307][T19717] vlan6: entered promiscuous mode
[  305.979041][T19717] bridge0: entered promiscuous mode
[  306.337648][T19739] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  306.346114][T19739] macsec0: entered promiscuous mode
[  306.348549][T19739] macsec0: entered allmulticast mode
[  306.359312][T19739] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  306.408114][T19746] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  306.423873][T19746] macsec0: left promiscuous mode
[  306.613113][T19764] netlink: 'syz.0.4697': attribute type 1 has an invalid length.
[  306.616405][T19764] netlink: 'syz.0.4697': attribute type 2 has an invalid length.
[  306.622879][T19764] netlink: 'syz.0.4697': attribute type 8 has an invalid length.
[  307.246760][T19779] sctp: [Deprecated]: syz.1.4701 (pid 19779) Use of struct sctp_assoc_value in delayed_ack socket option.
[  307.246760][T19779] Use struct sctp_sack_info instead
[  307.314323][T19782] veth1: entered promiscuous mode
[  307.316566][T19782] netlink: 'syz.1.4702': attribute type 8 has an invalid length.
[  307.320873][T19782] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  307.376182][T19786] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  307.381512][T19787] tipc: Resetting bearer <eth:syzkaller0>
[  307.425512][T19789] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  307.707793][T19829] veth1: left promiscuous mode
[  307.713495][T19829] batadv_slave_1: left promiscuous mode
[  307.716247][T19829] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  307.720383][T19829] syzkaller0: left promiscuous mode
[  307.722819][T19829] tipc: Resetting bearer <eth:syzkaller0>
[  307.725347][T19829] tipc: Resetting bearer <eth:syzkaller0>
[  307.729247][T19829] macsec2: left promiscuous mode
[  307.738960][T19829] veth13: left promiscuous mode
[  307.741811][T19829] macvlan3: left promiscuous mode
[  307.744162][T19829] macvlan4: left promiscuous mode
[  307.746262][T19829] hsr0: left promiscuous mode
[  307.748906][T19829] vlan3: left promiscuous mode
[  307.751699][T19829] gretap0: left promiscuous mode
[  307.753947][T19830] tc_dump_action: action bad kind
[  307.756039][T19831] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  307.781473][T19827] lo speed is unknown, defaulting to 1000
[  307.887361][T19841] netlink: 'syz.2.4719': attribute type 1 has an invalid length.
[  307.966471][T19841] 8021q: adding VLAN 0 to HW filter on device bond15
[  307.983445][T19844] 8021q: adding VLAN 0 to HW filter on device bond15
[  307.987291][T19844] bond15: (slave vcan0): The slave device specified does not support setting the MAC address
[  307.998337][T19844] bond15: (slave vcan0): Error -95 calling set_mac_address
[  308.097290][T19844] macvlan3: entered promiscuous mode
[  308.099993][T19844] macvlan3: entered allmulticast mode
[  308.102914][T19844] bond15: entered promiscuous mode
[  308.105632][T19844] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  308.115235][T19844] bond15: left promiscuous mode
[  308.200757][T19860] __nla_validate_parse: 715 callbacks suppressed
[  308.200769][T19860] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4726'.
[  308.206258][T19862] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4727'.
[  308.311397][T19870] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  308.358207][T19874] netlink: 'syz.2.4733': attribute type 2 has an invalid length.
[  308.366251][T19874] netlink: 'syz.2.4733': attribute type 1 has an invalid length.
[  308.457961][T19887] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  308.490561][T19894] netlink: 'syz.0.4738': attribute type 5 has an invalid length.
[  308.564197][T19900] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  308.566729][T19900] macsec0: left allmulticast mode
[  308.578302][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  308.584373][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  308.603025][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  308.605837][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  308.724633][T19914] netlink: 'syz.1.4745': attribute type 83 has an invalid length.
[  308.738048][T19916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4747'.
[  308.877280][T19933] vlan6: left promiscuous mode
[  308.879151][T19933] bridge0: left promiscuous mode
[  308.882451][T19933] bridge28: port 1(vlan6) entered disabled state
[  308.896429][T19935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4752'.
[  308.935849][T19935] 8021q: adding VLAN 0 to HW filter on device bond17
[  308.937161][T19937] netlink: 'syz.1.4750': attribute type 33 has an invalid length.
[  308.943102][T19937] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4750'.
[  308.944849][T19935] macvlan2: entered promiscuous mode
[  308.947801][T19935] macvlan2: entered allmulticast mode
[  308.951197][T19935] bond17: entered promiscuous mode
[  308.953672][T19935] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  308.961527][T19935] bond17: left promiscuous mode
[  308.981193][T19937] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4750'.
[  309.448419][T19974] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  309.616340][T19990] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4770'.
[  309.666402][T19996] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4772'.
[  310.133309][T20015] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4779'.
[  310.164247][T20017] nbd: must specify an index to disconnect
[  310.591921][T20006] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  310.688191][T20029] bond0: (slave dummy0): Releasing backup interface
[  310.704919][T20031] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4784'.
[  310.773528][T20035] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  310.777191][T20036] syzkaller0: entered promiscuous mode
[  310.780409][T20036] tipc: Resetting bearer <eth:syzkaller0>
[  311.223507][T20063] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  311.509626][T20071] block nbd2: server does not support multiple connections per device.
[  311.513257][T20071] block nbd2: shutting down sockets
[  311.590126][T20081] syzkaller1: entered promiscuous mode
[  311.592358][T20081] syzkaller1: entered allmulticast mode
[  312.088592][T20110] syzkaller1: entered promiscuous mode
[  312.095473][T20110] syzkaller1: entered allmulticast mode
[  312.208919][T20119] macvtap2: entered promiscuous mode
[  312.215566][T20119] macvtap2: entered allmulticast mode
[  312.218017][T20119] erspan0: entered allmulticast mode
[  312.603016][T20141] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  313.547332][T20179] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  313.962859][T20172] sch_tbf: burst 19872 is lower than device lo mtu (65503) !
[  314.085952][T20189] tc_dump_action: action bad kind
[  314.376293][T20206] lo speed is unknown, defaulting to 1000
[  314.691671][T20234] lo speed is unknown, defaulting to 1000
[  314.727490][T20235] __nla_validate_parse: 13 callbacks suppressed
[  314.727505][T20235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4853'.
[  315.286266][T20254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  315.332802][T20265] sctp: [Deprecated]: syz.2.4862 (pid 20265) Use of int in maxseg socket option.
[  315.332802][T20265] Use struct sctp_assoc_value instead
[  315.560361][T20284] netlink: 19 bytes leftover after parsing attributes in process `syz.1.4871'.
[  315.720453][T20294] netlink: 'syz.1.4876': attribute type 2 has an invalid length.
[  315.729133][T20294] : entered promiscuous mode
[  315.826356][T20299] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4877'.
[  316.010982][T20311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4883'.
[  316.014679][T20311] nbd: socks must be embedded in a SOCK_ITEM attr
[  316.018288][T20311] block nbd2: shutting down sockets
[  316.074250][T20318] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4886'.
[  316.092279][T20321] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4886'.
[  316.241353][T20331] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4891'.
[  316.245343][T20331] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4891'.
[  316.254262][T20331] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4891'.
[  316.258304][T20331] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4891'.
[  316.706588][   T33] audit: type=1800 audit(1756438746.970:10): pid=20371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4899" name="blkio.bfq.time_recursive" dev="tmpfs" ino=8394 res=0 errno=0
[  316.715212][   T33] audit: type=1800 audit(1756438746.980:11): pid=20371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4899" name="blkio.bfq.time_recursive" dev="tmpfs" ino=8394 res=0 errno=0
[  316.919171][T20377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  317.331551][T20395] lo speed is unknown, defaulting to 1000
[  317.469117][T20406] tap0: tun_chr_ioctl cmd 1074025677
[  317.474597][T20406] tap0: linktype set to 270
[  317.847278][T20447] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  317.855654][T20447] netlink: 'syz.1.4924': attribute type 15 has an invalid length.
[  317.865115][T20447] netlink: 'syz.1.4924': attribute type 15 has an invalid length.
[  318.137630][T20467] netlink: 'syz.0.4929': attribute type 2 has an invalid length.
[  318.157184][T20467] netlink: 'syz.0.4929': attribute type 1 has an invalid length.
[  318.409024][T20490] netlink: 'syz.1.4934': attribute type 12 has an invalid length.
[  318.498208][T20503] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  318.564617][T20509] vlan5: entered promiscuous mode
[  318.656126][T20505] lo speed is unknown, defaulting to 1000
[  319.518434][T20530] batman_adv: batadv0: Adding interface: ipvlan2
[  319.522894][T20530] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  319.533622][T20530] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  319.719823][T20535] netlink: 'syz.2.4950': attribute type 1 has an invalid length.
[  319.764832][T20535] 8021q: adding VLAN 0 to HW filter on device bond16
[  320.144785][T20569] lo speed is unknown, defaulting to 1000
[  320.225159][T20578] delete_channel: no stack
[  320.302136][T20588] gtp0: entered promiscuous mode
[  320.308943][T20588] __nla_validate_parse: 23 callbacks suppressed
[  320.308954][T20588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4965'.
[  320.414522][T20595] : entered promiscuous mode
[  320.460284][T20595] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4968'.
[  320.465973][T20595] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4968'.
[  320.471605][T20595] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4968'.
[  320.655501][T20618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4978'.
[  320.728194][T20623] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4979'.
[  320.777585][T20630] netlink: 'syz.2.4981': attribute type 1 has an invalid length.
[  320.827998][T20630] 8021q: adding VLAN 0 to HW filter on device bond17
[  320.845785][T20630] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4981'.
[  320.878282][T20630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4981'.
[  320.913879][T20637] netlink: 'syz.1.4982': attribute type 3 has an invalid length.
[  320.933102][T20637] netlink: 'syz.1.4982': attribute type 3 has an invalid length.
[  321.138720][T20653] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4986'.
[  321.228419][T20667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4989'.
[  321.796997][T20704] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  322.037500][T20724] netlink: 'syz.0.5011': attribute type 1 has an invalid length.
[  322.042670][T20724] netlink: 'syz.0.5011': attribute type 1 has an invalid length.
[  322.218286][T20740] netlink: 'syz.2.5015': attribute type 6 has an invalid length.
[  322.233895][T20742] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  322.236856][T20742] syzkaller0: entered promiscuous mode
[  322.238759][T20742] syzkaller0: entered allmulticast mode
[  322.244839][T20742] tipc: Resetting bearer <eth:syzkaller0>
[  322.248991][T20741] tipc: Resetting bearer <eth:syzkaller0>
[  322.259639][T20741] tipc: Disabling bearer <eth:syzkaller0>
[  322.644559][T20773] netlink: 'syz.0.5027': attribute type 15 has an invalid length.
[  323.258526][T20804] netlink: 'syz.0.5038': attribute type 13 has an invalid length.
[  323.262615][T20804] netlink: 'syz.0.5038': attribute type 17 has an invalid length.
[  323.305427][T20804] 8021q: adding VLAN 0 to HW filter on device bond0
[  323.313755][T20811] netlink: 'syz.1.5040': attribute type 18 has an invalid length.
[  323.358792][T20804] 8021q: adding VLAN 0 to HW filter on device team0
[  323.434056][T20804] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  323.441459][ T5880] lo speed is unknown, defaulting to 1000
[  323.443418][ T5872] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  323.447072][ T5880] syz2: Port: 1 Link ACTIVE
[  323.543454][T20821] vti1: entered promiscuous mode
[  323.605550][T20817] lo speed is unknown, defaulting to 1000
[  324.786764][T20907] bridge0: port 1(batadv1) entered blocking state
[  324.789859][T20907] bridge0: port 1(batadv1) entered disabled state
[  324.792741][T20907] batadv1: entered allmulticast mode
[  324.796455][T20907] batadv1: entered promiscuous mode
[  325.293368][   T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  325.297550][   T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  325.391315][T20926] __nla_validate_parse: 13 callbacks suppressed
[  325.391329][T20926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5079'.
[  325.669329][T20940] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5085'.
[  325.890105][T20958] validate_nla: 1 callbacks suppressed
[  325.890117][T20958] netlink: 'syz.2.5093': attribute type 10 has an invalid length.
[  325.895498][T20958] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5093'.
[  325.899663][T20958] bond0: option arp_all_targets: invalid value (196616)
[  325.992273][T20963] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5094'.
[  326.063383][T20972] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5098'.
[  326.228981][T20983] tipc: Resetting bearer <eth:syzkaller0>
[  326.237922][T20983] batman_adv: batadv0: Removing interface: ipvlan2
[  326.244506][T20983] batadv1: left allmulticast mode
[  326.247021][T20983] batadv1: left promiscuous mode
[  326.249764][T20983] bridge0: port 1(batadv1) entered disabled state
[  326.367091][T20992] netlink: 'syz.2.5107': attribute type 4 has an invalid length.
[  326.386926][T20992] netlink: 'syz.2.5107': attribute type 4 has an invalid length.
[  326.395397][T20992] netlink: 'syz.2.5107': attribute type 4 has an invalid length.
[  326.502590][T20999] netlink: 'syz.1.5105': attribute type 1 has an invalid length.
[  326.506291][T20999] netlink: 'syz.1.5105': attribute type 1 has an invalid length.
[  326.510061][T20999] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5105'.
[  326.524741][T21002] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  326.527591][T21002] syzkaller0: entered promiscuous mode
[  326.530177][T21002] syzkaller0: entered allmulticast mode
[  326.544272][T21002] tipc: Resetting bearer <eth:syzkaller0>
[  326.562172][T21003] tipc: Resetting bearer <eth:syzkaller0>
[  326.574329][T21003] tipc: Disabling bearer <eth:syzkaller0>
[  326.741817][T21013] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  326.807729][T21022] netlink: 'syz.2.5116': attribute type 1 has an invalid length.
[  326.814131][T21023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5116'.
[  326.933739][T21040] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5119'.
[  326.987099][T21042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5120'.
[  326.999327][T21043] netlink: 'syz.2.5118': attribute type 9 has an invalid length.
[  327.300911][T21058] tipc: Resetting bearer <eth:syzkaller0>
[  327.309631][T21062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5125'.
[  327.769931][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  328.208928][T21105] netlink: 'syz.2.5139': attribute type 29 has an invalid length.
[  328.213092][T21105] netlink: 'syz.2.5139': attribute type 29 has an invalid length.
[  328.625548][T21123] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  329.231314][T21181] team0: Device dummy0 failed to register rx_handler
[  330.445012][T21247] Only authenc() type AEADs are supported by ESSIV
[  330.607001][T21258] __nla_validate_parse: 6 callbacks suppressed
[  330.607010][T21258] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5185'.
[  330.729829][T21268] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5188'.
[  330.794776][T21278] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5190'.
[  330.819510][T21279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5188'.
[  331.602512][T21309] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5197'.
[  331.606190][T21311] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5199'.
[  331.607338][T21309] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.5197'.
[  331.771719][T21326] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5204'.
[  331.775703][T21327] validate_nla: 63 callbacks suppressed
[  331.775717][T21327] netlink: 'syz.2.5202': attribute type 6 has an invalid length.
[  332.138332][T21346] netlink: 'syz.0.5211': attribute type 3 has an invalid length.
[  332.415083][T21364] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5218'.
[  332.418844][T21364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5218'.
[  332.467724][T21366] openvswitch: netlink: Actions may not be safe on all matching packets
[  332.584587][T21376] netlink: 'syz.0.5222': attribute type 6 has an invalid length.
[  332.587590][T21376] netlink: 'syz.0.5222': attribute type 5 has an invalid length.
[  332.946282][T21394] erspan0: left allmulticast mode
[  332.968596][   T47] lo speed is unknown, defaulting to 1000
[  332.971360][   T47] syz2: Port: 1 Link DOWN
[  333.002880][T21402] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  333.212415][T21423] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  333.215649][T21423] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  333.313358][T21433] netlink: 'syz.1.5243': attribute type 1 has an invalid length.
[  333.362495][T21438] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  333.383097][T21439] tipc: Resetting bearer <eth:syzkaller0>
[  333.385600][T21439] tipc: Resetting bearer <eth:syzkaller0>
[  333.395400][T21436] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  333.399289][T21435] tipc: Resetting bearer <eth:syzkaller0>
[  334.480997][T21435] tipc: Disabling bearer <eth:syzkaller0>
[  334.652576][T21458] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96
[  335.223630][T21516] syzkaller1: entered promiscuous mode
[  335.225993][T21516] syzkaller1: entered allmulticast mode
[  335.571825][T21546] netlink: 'syz.2.5283': attribute type 1 has an invalid length.
[  335.574399][T21546] netlink: 'syz.2.5283': attribute type 1 has an invalid length.
[  335.717244][T21557] __nla_validate_parse: 13 callbacks suppressed
[  335.717255][T21557] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5287'.
[  335.807494][T21563] syzkaller0: entered promiscuous mode
[  335.811947][T21563] syzkaller0: entered allmulticast mode
[  335.871302][T21567] netlink: 'syz.1.5288': attribute type 2 has an invalid length.
[  335.874668][T21567] netlink: 119 bytes leftover after parsing attributes in process `syz.1.5288'.
[  335.911238][T21571] netlink: 'syz.2.5291': attribute type 2 has an invalid length.
[  335.913972][T21571] netlink: 'syz.2.5291': attribute type 1 has an invalid length.
[  336.134515][T21595] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5296'.
[  336.146438][T21595] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5296'.
[  336.162152][T21586] ==================================================================
[  336.164925][T21586] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  336.167710][T21586] Read of size 2 at addr ffff88810660f742 by task syz.0.5295/21586
[  336.170675][T21586] 
[  336.171870][T21586] CPU: 0 UID: 0 PID: 21586 Comm: syz.0.5295 Not tainted syzkaller #0 PREEMPT(full) 
[  336.171886][T21586] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  336.171894][T21586] Call Trace:
[  336.171899][T21586]  <TASK>
[  336.171905][T21586]  dump_stack_lvl+0x189/0x250
[  336.171921][T21586]  ? __kasan_check_byte+0x12/0x40
[  336.171938][T21586]  ? __pfx_dump_stack_lvl+0x10/0x10
[  336.171948][T21586]  ? lock_release+0x4b/0x3e0
[  336.171965][T21586]  ? __virt_addr_valid+0x4a5/0x5c0
[  336.171982][T21586]  print_report+0xca/0x240
[  336.171992][T21586]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  336.172002][T21586]  kasan_report+0x118/0x150
[  336.172018][T21586]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  336.172030][T21586]  __xfrm_state_lookup+0x6ad/0x8d0
[  336.172043][T21586]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  336.172052][T21586]  xfrm_state_add+0x27d/0xc40
[  336.172064][T21586]  pfkey_add+0x1edd/0x2e00
[  336.172080][T21586]  ? __pfx_pfkey_add+0x10/0x10
[  336.172089][T21586]  ? kmem_cache_free+0x18f/0x400
[  336.172107][T21586]  pfkey_sendmsg+0xbfe/0x1090
[  336.172116][T21586]  ? trace_sched_exit_tp+0x36/0x110
[  336.172134][T21586]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  336.172145][T21586]  ? aa_sock_msg_perm+0xf1/0x1d0
[  336.172156][T21586]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  336.172167][T21586]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  336.172177][T21586]  __sock_sendmsg+0x21c/0x270
[  336.172191][T21586]  ____sys_sendmsg+0x505/0x830
[  336.172204][T21586]  ? __pfx_____sys_sendmsg+0x10/0x10
[  336.172217][T21586]  ? import_iovec+0x74/0xa0
[  336.172227][T21586]  ___sys_sendmsg+0x21f/0x2a0
[  336.172236][T21586]  ? __pfx____sys_sendmsg+0x10/0x10
[  336.172257][T21586]  ? __fget_files+0x2a/0x420
[  336.172272][T21586]  ? __fget_files+0x3a0/0x420
[  336.172290][T21586]  __x64_sys_sendmsg+0x19b/0x260
[  336.172302][T21586]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  336.172315][T21586]  ? rcu_is_watching+0x15/0xb0
[  336.172326][T21586]  ? do_syscall_64+0xbe/0x3b0
[  336.172338][T21586]  do_syscall_64+0xfa/0x3b0
[  336.172351][T21586]  ? lockdep_hardirqs_on+0x9c/0x150
[  336.172363][T21586]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.172380][T21586]  ? exc_page_fault+0x9f/0xf0
[  336.172393][T21586]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.172403][T21586] RIP: 0033:0x7fa6ed58ebe9
[  336.172414][T21586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  336.172424][T21586] RSP: 002b:00007fa6ee370038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  336.172437][T21586] RAX: ffffffffffffffda RBX: 00007fa6ed7b5fa0 RCX: 00007fa6ed58ebe9
[  336.172447][T21586] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  336.172454][T21586] RBP: 00007fa6ed611e19 R08: 0000000000000000 R09: 0000000000000000
[  336.172461][T21586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  336.172467][T21586] R13: 00007fa6ed7b6038 R14: 00007fa6ed7b5fa0 R15: 00007ffdfa1d8798
[  336.172477][T21586]  </TASK>
[  336.172481][T21586] 
[  336.285926][T21586] Allocated by task 18363:
[  336.287531][T21586]  kasan_save_track+0x3e/0x80
[  336.289208][T21586]  __kasan_slab_alloc+0x6c/0x80
[  336.291217][T21586]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  336.293436][T21586]  xfrm_state_alloc+0x24/0x2f0
[  336.295342][T21586]  pfkey_add+0x6e4/0x2e00
[  336.297169][T21586]  pfkey_sendmsg+0xbfe/0x1090
[  336.299157][T21586]  __sock_sendmsg+0x21c/0x270
[  336.301216][T21586]  ____sys_sendmsg+0x505/0x830
[  336.303140][T21586]  ___sys_sendmsg+0x21f/0x2a0
[  336.305012][T21586]  __x64_sys_sendmsg+0x19b/0x260
[  336.306985][T21586]  do_syscall_64+0xfa/0x3b0
[  336.308830][T21586]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.311294][T21586] 
[  336.312318][T21586] Freed by task 792:
[  336.313963][T21586]  kasan_save_track+0x3e/0x80
[  336.315930][T21586]  kasan_save_free_info+0x46/0x50
[  336.318021][T21586]  __kasan_slab_free+0x5b/0x80
[  336.320007][T21586]  kmem_cache_free+0x18f/0x400
[  336.321991][T21586]  xfrm_state_gc_task+0x52d/0x6b0
[  336.324068][T21586]  process_scheduled_works+0xae1/0x17b0
[  336.326354][T21586]  worker_thread+0x8a0/0xda0
[  336.328272][T21586]  kthread+0x711/0x8a0
[  336.329940][T21586]  ret_from_fork+0x3fc/0x770
[  336.331906][T21586]  ret_from_fork_asm+0x1a/0x30
[  336.333995][T21586] 
[  336.335026][T21586] The buggy address belongs to the object at ffff88810660f600
[  336.335026][T21586]  which belongs to the cache xfrm_state of size 928
[  336.340670][T21586] The buggy address is located 322 bytes inside of
[  336.340670][T21586]  freed 928-byte region [ffff88810660f600, ffff88810660f9a0)
[  336.346327][T21586] 
[  336.347335][T21586] The buggy address belongs to the physical page:
[  336.349963][T21586] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88810660e880 pfn:0x10660c
[  336.353481][T21586] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  336.356377][T21586] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  336.358993][T21586] page_type: f5(slab)
[  336.360542][T21586] raw: 057ff00000000040 ffff88801d3cf140 dead000000000122 0000000000000000
[  336.363661][T21586] raw: ffff88810660e880 00000000800e0007 00000000f5000000 0000000000000000
[  336.366679][T21586] head: 057ff00000000040 ffff88801d3cf140 dead000000000122 0000000000000000
[  336.369662][T21586] head: ffff88810660e880 00000000800e0007 00000000f5000000 0000000000000000
[  336.373131][T21586] head: 057ff00000000002 ffffea0004198301 00000000ffffffff 00000000ffffffff
[  336.376499][T21586] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  336.379674][T21586] page dumped because: kasan: bad access detected
[  336.381904][T21586] page_owner tracks the page as allocated
[  336.383770][T21586] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6601, tgid 6600 (syz.1.236), ts 69793469087, free_ts 69503907761
[  336.390154][T21586]  post_alloc_hook+0x240/0x2a0
[  336.391953][T21586]  get_page_from_freelist+0x21e4/0x22c0
[  336.393956][T21586]  __alloc_frozen_pages_noprof+0x181/0x370
[  336.396325][T21586]  alloc_pages_mpol+0x232/0x4a0
[  336.398277][T21586]  allocate_slab+0x8a/0x370
[  336.400150][T21586]  ___slab_alloc+0xbeb/0x1410
[  336.402093][T21586]  kmem_cache_alloc_noprof+0x283/0x3c0
[  336.404325][T21586]  xfrm_state_alloc+0x24/0x2f0
[  336.406289][T21586]  pfkey_add+0x6e4/0x2e00
[  336.408029][T21586]  pfkey_sendmsg+0xbfe/0x1090
[  336.409697][T21586]  __sock_sendmsg+0x21c/0x270
[  336.411562][T21586]  ____sys_sendmsg+0x505/0x830
[  336.413494][T21586]  ___sys_sendmsg+0x21f/0x2a0
[  336.415464][T21586]  __x64_sys_sendmsg+0x19b/0x260
[  336.417388][T21586]  do_syscall_64+0xfa/0x3b0
[  336.419028][T21586]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.421075][T21586] page last free pid 6589 tgid 6588 stack trace:
[  336.423249][T21586]  __free_frozen_pages+0xbc4/0xd30
[  336.425138][T21586]  stack_depot_save_flags+0x436/0x860
[  336.427088][T21586]  kasan_save_track+0x4f/0x80
[  336.428669][T21586]  __kasan_kmalloc+0x93/0xb0
[  336.430323][T21586]  __kmalloc_cache_noprof+0x230/0x3d0
[  336.432277][T21586]  batadv_hard_if_event+0xe9a/0x1730
[  336.434104][T21586]  notifier_call_chain+0x1b6/0x3e0
[  336.436061][T21586]  register_netdevice+0x1608/0x1ae0
[  336.438200][T21586]  ip_tunnel_newlink+0x261/0x8b0
[  336.440284][T21586]  ipgre_newlink+0x354/0x420
[  336.441933][T21586]  rtnl_newlink_create+0x310/0xb00
[  336.443647][T21586]  rtnl_newlink+0x16d6/0x1c70
[  336.445396][T21586]  rtnetlink_rcv_msg+0x7cf/0xb70
[  336.447169][T21586]  netlink_rcv_skb+0x208/0x470
[  336.448941][T21586]  netlink_unicast+0x82f/0x9e0
[  336.450637][T21586]  netlink_sendmsg+0x805/0xb30
[  336.452455][T21586] 
[  336.453444][T21586] Memory state around the buggy address:
[  336.455745][T21586]  ffff88810660f600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  336.458983][T21586]  ffff88810660f680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  336.461995][T21586] >ffff88810660f700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  336.465121][T21586]                                            ^
[  336.467589][T21586]  ffff88810660f780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  336.470200][T21586]  ffff88810660f800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  336.472829][T21586] ==================================================================
[  336.475912][T21586] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  336.478395][T21586] CPU: 0 UID: 0 PID: 21586 Comm: syz.0.5295 Not tainted syzkaller #0 PREEMPT(full) 
[  336.481559][T21586] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  336.485341][T21586] Call Trace:
[  336.486566][T21586]  <TASK>
[  336.487646][T21586]  dump_stack_lvl+0x99/0x250
[  336.489373][T21586]  ? __asan_memcpy+0x40/0x70
[  336.491025][T21586]  ? __pfx_dump_stack_lvl+0x10/0x10
[  336.492691][T21586]  ? __pfx__printk+0x10/0x10
[  336.494345][T21586]  vpanic+0x281/0x750
[  336.495870][T21586]  ? __pfx_vpanic+0x10/0x10
[  336.497394][T21586]  ? irqentry_exit+0x74/0x90
[  336.499128][T21586]  panic+0xb9/0xc0
[  336.500528][T21586]  ? __pfx_panic+0x10/0x10
[  336.502043][T21586]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  336.504224][T21586]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  336.506494][T21586]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  336.508168][T21586]  check_panic_on_warn+0x89/0xb0
[  336.509971][T21586]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  336.511883][T21586]  end_report+0x78/0x160
[  336.513379][T21586]  kasan_report+0x129/0x150
[  336.515023][T21586]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  336.517072][T21586]  __xfrm_state_lookup+0x6ad/0x8d0
[  336.519059][T21586]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  336.521195][T21586]  xfrm_state_add+0x27d/0xc40
[  336.523085][T21586]  pfkey_add+0x1edd/0x2e00
[  336.524842][T21586]  ? __pfx_pfkey_add+0x10/0x10
[  336.526747][T21586]  ? kmem_cache_free+0x18f/0x400
[  336.528538][T21586]  pfkey_sendmsg+0xbfe/0x1090
[  336.530370][T21586]  ? trace_sched_exit_tp+0x36/0x110
[  336.532198][T21586]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  336.534063][T21586]  ? aa_sock_msg_perm+0xf1/0x1d0
[  336.535778][T21586]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  336.537612][T21586]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  336.539431][T21586]  __sock_sendmsg+0x21c/0x270
[  336.540995][T21586]  ____sys_sendmsg+0x505/0x830
[  336.542661][T21586]  ? __pfx_____sys_sendmsg+0x10/0x10
[  336.544747][T21586]  ? import_iovec+0x74/0xa0
[  336.546661][T21586]  ___sys_sendmsg+0x21f/0x2a0
[  336.548621][T21586]  ? __pfx____sys_sendmsg+0x10/0x10
[  336.550763][T21586]  ? __fget_files+0x2a/0x420
[  336.552504][T21586]  ? __fget_files+0x3a0/0x420
[  336.554092][T21586]  __x64_sys_sendmsg+0x19b/0x260
[  336.556092][T21586]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  336.557940][T21586]  ? rcu_is_watching+0x15/0xb0
[  336.559764][T21586]  ? do_syscall_64+0xbe/0x3b0
[  336.561718][T21586]  do_syscall_64+0xfa/0x3b0
[  336.563558][T21586]  ? lockdep_hardirqs_on+0x9c/0x150
[  336.565553][T21586]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.567841][T21586]  ? exc_page_fault+0x9f/0xf0
[  336.569392][T21586]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.571813][T21586] RIP: 0033:0x7fa6ed58ebe9
[  336.573714][T21586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  336.581585][T21586] RSP: 002b:00007fa6ee370038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  336.585089][T21586] RAX: ffffffffffffffda RBX: 00007fa6ed7b5fa0 RCX: 00007fa6ed58ebe9
[  336.588367][T21586] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  336.591440][T21586] RBP: 00007fa6ed611e19 R08: 0000000000000000 R09: 0000000000000000
[  336.593904][T21586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  336.597252][T21586] R13: 00007fa6ed7b6038 R14: 00007fa6ed7b5fa0 R15: 00007ffdfa1d8798
[  336.600445][T21586]  </TASK>
[  336.602459][T21586] Kernel Offset: disabled
[  336.604342][T21586] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:39:26  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000002b9d RDI=0000000000002b9e RBP=00000000000003f8 RSP=ffffc9000434ed90
R8 =ffff888106cf0237 R9 =1ffff11020d9e046 R10=dffffc0000000000 R11=ffffffff854f3380
R12=dffffc0000000000 R13=ffffffff99afa914 R14=ffffffff99def420 R15=0000000000000000
RIP=ffffffff854f33fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa6ee3706c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1effe8b440 CR3=000000003b414000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=a3d80bb97187d701 000000e000090005
XMM02=6e3ed0a938955b3d 007787c5834791b4 XMM03=0000000000060003 0000000055acfd9b
XMM04=0200000000000500 0300000000fc0200 XMM05=0000000000000100 0200000000000000
XMM06=0000000000000000 0200000000000600 XMM07=030000000055acfd 9b6e3ed0a938955b
XMM08=0000000000000000 00007fa6ed612ee7 XMM09=0000000000000000 00007fa6ed612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0f7d424740b0d800 RBX=ffffffff819683c8 RCX=0f7d424740b0d800 RDX=0000000000000001
RSI=ffffffff8d9b6cc2 RDI=ffffffff8be33680 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37930 R13=0000000000000001 R14=0000000000000001 R15=1ffff11020007000
RIP=ffffffff8b7973f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2e17c7 CR3=0000000047172000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0102000000000100 0000000000000000
XMM02=010a000000010000 0004000000010008 XMM03=0000000000000000 0000000000000201
XMM04=00000100007f0000 00020000006cd404 XMM05=0000000400000003 00000004006e0303
XMM06=0000350200000000 0000000000000000 XMM07=0100007f00000002 0000006cd4040000
XMM08=0000000000000000 000000000201010a XMM09=0000000000000000 00007f19c5e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
