last executing test programs:

1.610885637s ago: executing program 2 (id=3517):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="020000000000010000003f000000080003000000000053ee5482f552c9020922f0487044581a7a0e042a007adc9bfd9c3808489d26520b1dac722c2213ba73efdfd8a28b88d671764bad7d4c22abe9a8702adc761fa0af48999f625dd5585cec0f6b5ca1b004bd4c166c5115b03fd0f82a2b3ea383f8ccc21f2230d8ddf31a3cde9914dddd5b180d"], 0x1c}}, 0x40845)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1)
socket$tipc(0x1e, 0x2, 0x0)
socket(0x10, 0x80003, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000095080000000000002f7e71b5618f1ee16af22a7508b5d9eaa029e273bfc7f2b2bab0ad8f84c88946ee24c18a521dcf22eeed227f18732444499c827bb71f9a8029951edeb471e9008e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x12}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r2}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2b4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x270, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x48, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xc90}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x4f}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x184, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x174, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_INFO={0x6f, 0x3, "d8725b90d008f099932a86b6bfd4f11af9120b12ec3de75f5aefd96af81e64989e8408aeca5c34e73415520b9c0e9293915b615b848d7c2e1ba9241567c9900c41e77e7f5a6c0ff995345bb809088862d4c7d08b3ee86c05e3faada51e1f28f74952a6f913913d27680dd4"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_INFO={0xde, 0x3, "12e98e8f78f739027cce2d8fe544a4fa50944d87ddc777f04627b524427d6a2b89a2ab2925624f72942017386e96bde5759f5ef804c8226f73490412675e9f1e44b51f6895e043b66f16dae0d80e474b5c84333144bcf4f4f6fed51cc0f7409c4088728eb0837bd95abb678f49d3a0562dd7a3cb537a02c4f3c7549211bc3c29c55485cddf4bd96ce435ef498266a19809fd4e5703cc75ae431a8b2a8b14e84bd09d1d883a8c9c4a9b9f3045e40a6b995325e4e3b51ef7e11976ef89c1e080d839fb42105b5749fe22e5263adfd55dc446a6df85c14b43cbd0f2"}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}]}], {0x14}}, 0x33c}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x28, 0x0, 0x1, 0x8}, 0x28)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
unshare(0x2a020400)
socket$xdp(0x2c, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'wlan1\x00', 0x0})
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={<r9=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14)
socket(0x1d, 0x2, 0x6)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000840)={r9, @in={{0x2, 0x4e22, @empty}}, 0x2, 0x2, 0x614, 0x1, 0x2d, 0x7, 0x4}, 0x9c)

709.615826ms ago: executing program 0 (id=3530):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000040), 0x4)
setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000180)={0x1}, 0x8)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x33}}, 0x1c)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_GET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x3c, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x4a}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000050000009500000000000000e6923b33b19a35d427f5e67496beeea639e2b7f2c14e7f99b7ecf39c93069d27164b045baa56262b38e43704f9b69a7a628f93ee62718c1331b374a2452f29c71f8e3e27cb5734add259f2c4045905f8a45ac0bcf54572565c58b6bc51b84b04df5211835b93aa87b5b652adc617b8d2831beec0b5c4bb871cdd0350b6121829a7e3576e9a0a486e0a97a0613343c8de3bec27990cdeb3bc92c681f68983ad2c81ef5a875b67598e7066cfd5b9a146c7204013ceb14c8297cd192f43aac1624b15d6a457d4dcf94f41e7526f1cf70961f9f3b48ca6de7b2fbc7a7f3e8f0d0924cb2f957bf60d51406d3a258af3d58e0380ae328a63434a74d406020076040044240835f3668a6896dbc8fcea250f4b0c297986b8acea238698844e0675d242a7d3acfd1ac46d85c8b23ad8279643d5e3e00a2d319882945b3d0aa8e9a54cbd1aeb90c55b295b9d6021217c70fc7cedba84dd598b53c8521f149b33cb95cae5df2ebf8b7103803aaaa8e7d68dcdfaa835bdb5a23bdbff8362d41a1126043b88f00fdc17ccd274999304c1dff6f4f4f8b219b418e09cf2c0e0cb2f9ad957fd859564f7ff6f28fb3b2d3a97df6f6f54c4ea794102494e1d56e88c1439ea086b1acc9fbc26c315246741cb722188846b1175178f6fa467be03e9f7cff922a1c78bbb28bdf7816bb27db7e86d988213dffd7f012721f2ec81ace497eeca313214f1d8c89ec824b5907e3ab7ec1d387cffbdb4d79ccb3c2e29275da223f5fa52525145684e10798d3de43fa175137b205fc7ccf3a4d0a237bf80bfd9acf1be2a56eecbbce4bc4708db946b1a1b989dc6b146853fea8deab55df9eaf759ffd08ff483103720ebfbc53be6a85fc1b610ba8e3ecb8a7351cf218073aecf3b631837846b703e7772626376aa84290a8b7b4f3472976f6688cb230ccd762d00fcf810ca0c3d20ccdcac10fe09cc5fccf31d9e16e899d32dee701d2b6fff95c1328f249878e6dde3ed840d4b5fb05cc1399dd151f59e53712285d5e9c4dba7e1eb9ff174487c74454f8f5e996e600c5740d21d7ac237d62bee06c1834b04e29c8ee7a5a56a386eca1b136904aeca3cbb85c7278fe202d286d45461d8c9e74654b95b8ebdfa7d9bbe7d5cc269d368efe9056060de9bcaa714bcc8429b623dd78d4fd6ebfaadb7bd35a3ff3da98e2164c8cc1d0d7017b8a7a0fef4f802d538e5bd40daba01aa97fa689d928a6e52e1b21c"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000500)="84", 0x2}, 0x50)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="58f76b8f1d400000975b4916f9edfadf84e76c35", @ANYRES32=r5, @ANYBLOB="00000000000000002000128008000100736974001400028006001000018000000800140008000000"], 0x40}}, 0x0)
r9 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0xfe, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r9, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r9)
sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r10, 0x2, 0x6, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4002001}, 0x40000)
sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$ax25_SO_BINDTODEVICE(r9, 0x101, 0x19, &(0x7f0000000040)=@bpq0, 0x10)

595.917304ms ago: executing program 0 (id=3531):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1ff, 0x32}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x8001)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000001800003900000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0)

592.653781ms ago: executing program 0 (id=3532):
r0 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x1, 0xffffffff, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x9, 0xffffffff, 0x20000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r3)
sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000ffdbdf250100000007000700e0000001080002000500000008000800001e01010c0001"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x80) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000"], 0x48) (async)
r9 = socket(0x2c, 0x3, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0xb8, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0x0, 0xffe0}, {0xfff1, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x88, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0xb}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x401}, @TCA_FLOW_EMATCHES={0x4}, @TCA_FLOW_PERTURB={0x8, 0xc, 0xfff}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xd, 0xf}}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xa}, @TCA_FLOW_EMATCHES={0x58, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_META={0x3c, 0x1, 0x0, 0x0, {{0x4, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x0, 0x1}, {0x73e, 0x5, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8}, {0x8, 0x8, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x48a, 0x3, 0x1}, {0x1, 0x80, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xf, 0x9}, {0x800, 0xd, 0x1}}}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0xfc}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}}}]}]}]}}]}, 0xb8}}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r9}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r8, &(0x7f0000000140), &(0x7f0000000080)=@udp=r9}, 0x20) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r8, &(0x7f0000000540)}, 0x20) (async)
sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1d9300008b304c608f8e1c912c065846e0b98c3f56c8a74cb01f7c0f84029643a2c583b1ec46c4f057b42ab8eb7914688249815c0761e76ead93719dad61dbfad5e96129f8086ec477814f5285b645f7277db1dd734bc4c8db5711043757004e4b142f3397847912a3d42468afe2d4c727cb1b864a70899ae0e2bb2b1a96020e8aa09b47a1485ea34d04c9c22d1335657df733bb79d98b62a4b294ad4f347fddd97749dd70509b3131b2e26125224db60599a5bf59c279f3c819e746704f17bb96616129d0890fdf124c89704a1f994b544494824d73e47a0136b59de2ccb5", @ANYRES16=r7, @ANYBLOB="01002cbd7000fddbdf25090000000800010001000000080003", @ANYRESDEC=r6, @ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0xc855}, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000005a554f7cf994ce39e4991000010000000000d70600000300000a20000000000a03000000000000000000070000000900e10073797a300000000078000000090a0104000000000000000007000000f7000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3400128010000180090001006c61737400000000670001800a00010071756f7461000000100002800c000140000000000000000b0800034000000110140000001000010000000000000000000a84000a"], 0xc0}, 0x1, 0x0, 0x0, 0xc041}, 0x2005c081) (async)
r12 = socket$kcm(0x2, 0xa, 0x2)
r13 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r13, 0x8983, &(0x7f0000000040)={0x0, 'syzkaller1\x00'}) (async)
r14 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$IP_VS_SO_SET_EDITDEST(r14, 0x0, 0x489, &(0x7f0000000100)={{0x89, @remote, 0x4e24, 0x2, 'lc\x00', 0x11, 0xa, 0x2f}, {@private=0xa010102, 0x4e21, 0x3, 0x9, 0x9}}, 0x44)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})

592.472971ms ago: executing program 0 (id=3533):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9403000010000104f04e93294c00000000001700", @ANYRES32=0x0, @ANYBLOB="00000000000000001400350076657468305f6d61637674617000000005001100050000000a0002"], 0x394}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)={0x1c, r2, 0xf03, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x6}, 0xaf)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280), 0x8}, 0x20)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001700)={'ip6tnl0\x00'})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x205, 0x0, 0x2}, 0x10)
sendto$inet6(r7, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x9, 0x12, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000ff7f000000000000fbff000085100000f9ffffff9876040008000000851000000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000000000085000000860000008520000001000000851000000100000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000e77b328d9ca9766f8a0400000034330000850000008600000070560c00100001e1ffff94000000000012"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0xd4, &(0x7f0000000640)=""/212, 0x41100, 0x20, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x10, 0xffff, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000380)=[0x1, 0x1, 0x1, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x3, 0x3, 0xf, 0x1}, {0x0, 0x1, 0x8, 0x9}], 0x10, 0x7}, 0x94)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r11)
sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000740)={@in6={{0xa, 0x4e22, 0x9, @empty, 0x6}}, 0x0, 0x0, 0x2a, 0x0, "957c94b19a44f02aa23c6a4a3c6ec11144bdee5d5ac0d8cb63051a062ed1c96567b1db8c7c21607784474b040000003fcd5722a45429b214a097963a1a5644d190193a1ceb23ed9bb6d25ad252bd381d"}, 0xd8)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0)
sendto$inet6(r9, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000004c0)=r8, 0x4)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x3c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0xfffffffffffffe22, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)

518.351595ms ago: executing program 0 (id=3536):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x7c, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdc01, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0x5c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "7444382151fa8e5e90cca0e56c3ce3cb9d9072590dfb97ecb85e5283086a0667"}]}]}, 0x7c}}, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000440)={&(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x2, {0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x805}, 0x40805)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054010b80080009000000000008"], 0x184}}, 0x0)

471.629931ms ago: executing program 0 (id=3538):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0], 0x18}}, 0x4044004)
recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x22}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfe61}, 0x10008}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000000)=""/176, 0xb0}, {&(0x7f00000000c0)=""/65, 0x41}, {&(0x7f00000006c0)=""/4104, 0x1008}, {&(0x7f00000005c0)=""/236, 0xec}, {&(0x7f00000004c0)=""/220, 0xdc}], 0x5}, 0x80000000}], 0x4, 0x0, 0x0)

310.50297ms ago: executing program 2 (id=3544):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockname(r1, 0x0, &(0x7f0000000a80))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a0103000000000000000000000000140000001100010000000000000000000000000a7711bf65fd7755842fb96cc292c0cafc4dfab16a2c3802faf327c7d6734d35faa3f6ab5c4441512cb522d3011e838ed35aef95a6b502efd214b8f6296a9dffa367e053a332f90c6e62c2564e18a08ecf6e81a785c308c0e2bd6989effff9f9723f73e6231c3c4a1c0e9b63eefb760721535466c0b46f18496e43231f2198d59250a332b1"], 0x3c}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001001700"], 0x1c}}, 0x0)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r8}, 0x0, &(0x7f0000000940)}, 0x20)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x22, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r11}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000040000000060000000800000000000000", @ANYRES32, @ANYBLOB="00d281d312800000005e00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
setsockopt$IP_VS_SO_SET_DEL(r10, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'lblc\x00', 0x6, 0xc972, 0xffffeffc}, 0x2c)
splice(r7, 0x0, r9, 0x0, 0xf3a, 0x0)
write(r5, &(0x7f0000000240)="94", 0x1)
tee(r4, r9, 0x8f5, 0x100000000000000)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff050006"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x60800)
write$cgroup_type(r9, &(0x7f0000000180), 0x9)
write(r6, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000040000006149ff2c", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRESDEC=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

250.905709ms ago: executing program 1 (id=3545):
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, &(0x7f00000001c0))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e24, @private=0xa010101}], 0x10) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e24, @private=0xa010101}], 0x10)
setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r2, 0x20, 0x2000, 0x2, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x3}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000) (async)
sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r2, 0x20, 0x2000, 0x2, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x3}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0)

198.825108ms ago: executing program 1 (id=3546):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$pppl2tp(0x18, 0x1, 0x1)
socket(0x2c, 0x3, 0xe7)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={<r1=>0x0, 0x4, 0x401}, &(0x7f0000000180)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300)={r1, 0x7f, 0x6, 0xd, 0xc, 0x1000}, 0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0x800000000000d}, 0xfffffffffffffffe)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000003900010324bd7002fadfdf9b000000b5554908f12b0696124e696efebd405a3ee982dfa8656ed31a246dcb19901f26cf17792cf22412b82bcc1a4467665faca17c74b424ff6c60383dc3b7de70a914fa5acf74ee556edc6eb1023ead9dd2641709"], 0x14}}, 0x4000000)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00000c00000000000000000000000400080088856d00f92fb75e907b22b4d70848507ea830038a000000000000e80300efff0000000002010000ac1414aa00001c00000000000300060000000000020000000a0101010000000000000000"], 0x60}}, 0x0) (async)
sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00000c00000000000000000000000400080088856d00f92fb75e907b22b4d70848507ea830038a000000000000e80300efff0000000002010000ac1414aa00001c00000000000300060000000000020000000a0101010000000000000000"], 0x60}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
socketpair(0x31, 0xa, 0x5a, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20048010}, 0x30) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20048010}, 0x30)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
unshare(0x24040400)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x5d28}, 0x18)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r7, 0xfffffffffffffd20}, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
setsockopt$inet6_tcp_int(r9, 0x6, 0x1d, &(0x7f0000000000)=0xfff, 0x4) (async)
setsockopt$inet6_tcp_int(r9, 0x6, 0x1d, &(0x7f0000000000)=0xfff, 0x4)
sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
socket(0x18, 0x800, 0xfffffff4) (async)
socket(0x18, 0x800, 0xfffffff4)

198.41946ms ago: executing program 1 (id=3547):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) (async)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x81, 0x64}, {0x3e, 0x3}, {0x8, 0x6}, {0xfa, 0x3}], "55275edec3d8d2a1"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x30000814)

128.655434ms ago: executing program 1 (id=3548):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x0, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket(0x29, 0x2, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4844}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140), 0x4)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a3200000000f70007404884b24b02a8a7758a688958ed60ecfd057e10926ba77e5596b13e43cd4488e4aa68af5f7236ec205b6e4cac2a0d86c336bf07dbe861f4f57bcef92dcf818d532d4475b5daa4dadc1690f228e860bba5a0b5d9bde86862e8f7fc08f0debd4974c6fae7d737a0007ec948ac4d8714ebff6b25648fb910e0d6d07f023cf5fa4051627b9c5b69e265538f9ba683bf172a5ff815afa543c12e550a1bcc9287080c7c12cc89d216c56febb0b06134672ea6b0077c846396169475f271319988f49ec94f2996e5d0e1cb151fb223e556f10fb681d068e055eb34e5f8fc7a524ffe5f4632a6c74ad0fe0b1542497d76a5a4416c47805e001c0005800800014008000008080002"], 0x1ec}}, 0x0)
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0xffff, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000030000000900010073797a310000000014000000020a010400000000000000080000000034000000140a03000000000000000000030000000800e19b2ef000090000000000000031000000000900020073797a3000000000140000001100010000000000000000000000000a338c03f24f0f9cff363289f93c8eb93ab6170ca8f621224e96b662da9f8a9fe4629d7357009fa4a8c91ba61a53d5e834c448931d18ff3d5ddf207f47e91be8deaada6aa92f36a2b18ea4056453580fdb6f253d69deaa7ae7358e9d3af444"], 0x90}}, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e006f9721acbd0848ab8b27000000f32700000505f600040b00000020400000ceb51321b283eceded2694787ce15243e5210056ca4454e727ca8c2da9e6a773902036442e85dc21b1793d3ad5f11de42e1cd3e6a2603a06ebf1b0255bf9d2469adf", @ANYRES32=r4, @ANYBLOB="1000"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0100000000000000020000000300"/28], 0x50)
setsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f00000005c0)=0x3, 0x4)
r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={<r7=>0x0}, &(0x7f0000000200)=0xc)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000240)=<r8=>0x0)
sendmsg$nl_route(r2, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="540000005800000227bd7000fedbdf250008000300", @ANYRES32=r6, @ANYRES64=r2, @ANYRES32=r7, @ANYBLOB="08000100030000000800010004000000080001000200000008000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r8, @ANYBLOB="67a143022eba060958cab6f5182627f2920bd678cf530e469219c3be2b7f577f6c80dc4c9642c7ad8651070d65b7b88a9d5c1b85c88d7f62b585bc8159c3a493989031358d6f0036a1cfb9c2c9be9435c77d07db28440ccd987c9d0bcd0edc50af3dd73f9d6dcb2a82059fa64c3119b0acb51755c73f8e93d4dfaea6ac55bf281ee846fe37c524c29f5604e9e0bda0ec4475d20010"], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
socket$netlink(0x10, 0x3, 0x10)
r9 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)

60.418833ms ago: executing program 2 (id=3549):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0))
socket$nl_route(0x10, 0x3, 0x0)
socket(0x11, 0x800000003, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000ff07000000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x6, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18020000040000000000000000000002180000000100008000000000060000003c2200f10000000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x1f00, 0x3}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00')
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

59.87897ms ago: executing program 2 (id=3550):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000200000aac000000060a010400000000000000000a0000050900010073797a310000000054000480500001800a000100696e6e65720000004000028008000440000000171c000580090001006d657461000000000c00028008000140000000090800034000000000080002400000008408000140000000000900020073797a32000000000900010073797a31000000001d0007"], 0xd4}, 0x1, 0x0, 0x0, 0x80040}, 0x24000000)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100191600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008"], 0x124}}, 0x0)
sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000004480)={0x0, 0x0, &(0x7f0000004440)={&(0x7f00000043c0)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x80)

57.673629ms ago: executing program 1 (id=3551):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00020000000000000000000006000000040100000000afe274d9da000000000000000000004c8a"], 0xfc}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x3ff}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000000000"], 0x50)
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000540)={'ip6gre0\x00', 0x0})
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x41000)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x5b}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280140007000000000000000000000000000000000105000c000100000008000a00", @ANYRES32=r5], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

57.068154ms ago: executing program 2 (id=3552):
r0 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000400000000000f0400000000005f00"], 0x0, 0x28}, 0x20) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000400000000000f0400000000005f00"], 0x0, 0x28}, 0x20)
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000021000000000800000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000021000000000800000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10)
r4 = socket$inet(0x2, 0x3, 0x14)
setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, 0x0, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000b80), r5)
sendmsg$NLBL_CIPSOV4_C_LIST(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000bc0)={0x14, r6, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000c0)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x6}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000580)='syzkaller\x00'}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r7, &(0x7f0000000480)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async)
bind$rds(r7, &(0x7f0000000480)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)

363.12µs ago: executing program 1 (id=3553):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x24008004)
getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000100)=0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000100)='syzkaller\x00'}, 0x94)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x2, 0x80805, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x7, 0x10001, 0x9, 0x1}, 0x50)
socket$netlink(0x10, 0x3, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
socket$unix(0x1, 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0)
epoll_create1(0x80000)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket(0x2, 0x80805, 0x0)
socket$inet(0x2, 0x80001, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000400000071108c000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000025a801002cbd7000fbdbde2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040085}, 0x10)

0s ago: executing program 2 (id=3554):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) (async)
syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) (async, rerun: 64)
socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
r1 = socket$kcm(0x10, 0x2, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket(0x2a, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000020000000000000000009a0095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LBT_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', <r4=>0x0})
r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, r4, 0x25, 0x4}, 0x14) (async, rerun: 64)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r5, r6, 0x4, r2}, 0x10)
r7 = socket$alg(0x26, 0x5, 0x0) (async)
r8 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r8, &(0x7f0000000940)={&(0x7f0000000200)=@rc={0x1f, @none, 0xfb}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000700)="7a094323c1ee3dc8baaafc965cdcb114bd799a06037ff1ae0d7f4731ef9fd33b8f8d34a9a324f26f20111953935f2335f82dec176ed90973806910451c5dc2308d19d710740cd461357363d86a523cf1cf8808bd75eff1f83f3eaf87aabbc19cb7bf3541d516cbd3f3c9812324eac621e12dd7ffa01e2e41ea9daaa2bc28b2cd7b009f12a19e87ce4052458590c10486128d1afbd7fc34d0155012d32244c455d3a791c1ba80f7944e7e61f160b44525601724eb176eea3ca835de4e", 0xbc}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f00000007c0)="34eb44cf093008161bd63f96418fcdf2400b9dc3ec113c93ab60c21004d5fbe0ddf80f97bbf1a835d5a7ccac94f90fbbc3c543da77d7a36510a9d0d384aae435cae445043aa14db97b34b3f5d8898c0a10480da95e10a414a133bf93b0ef60b543450eaaace7dbfe7196708d69100b2724cfcd81e0aee1356f81fec0e12f6b6ed82183cecfb64d68b3305020d8a6abc2fe71728ccbf3390e85327c168256f0ccdbb5d095ae1d419709130ce1f178207ffb20719e39bbe208e6b1c4e87d7a734ca16132d1fca4d0fdc68db28da65852a6c5b61a", 0xd3}, {&(0x7f0000000280)="c1d37c88546cb962e79449", 0xb}, {&(0x7f0000000340)="832da6ace01d04bd770dce623616112cb9e45953ca909b71162d8eb04b6868c8a913b3", 0x23}], 0x5}, 0x8000) (async)
r9 = accept4(r7, 0x0, 0x0, 0x0)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private2, {0x0, 0xb400, 0x2, 0x100000000000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) (async)
r12 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="34060069", @ANYRES16=r12, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000000900010073797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x200400b0) (async)
r13 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab14e39ba9bf6c4387ea1b", 0x4c}], 0x1}, 0x0) (async)
recvmmsg(r13, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

valid length.
[  142.555126][T12099] ip6_vti0: Master is either lo or non-ether device
[  142.559315][T12099] netlink: 'syz.2.1688': attribute type 1 has an invalid length.
[  143.570660][T12124] __nla_validate_parse: 37 callbacks suppressed
[  143.570673][T12124] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1696'.
[  143.692589][T12142] netlink: 'syz.1.1699': attribute type 13 has an invalid length.
[  143.695157][T12142] netlink: 'syz.1.1699': attribute type 17 has an invalid length.
[  143.778049][T12132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1699'.
[  144.008126][T12151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1702'.
[  144.060195][T12153] netlink: 20824 bytes leftover after parsing attributes in process `syz.1.1703'.
[  144.095443][    C0] net_ratelimit: 26 callbacks suppressed
[  144.095455][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  144.100563][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  144.177067][T12162] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1706'.
[  144.221536][T12165] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1707'.
[  144.226240][T12165] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1707'.
[  144.272940][T12174] netlink: 'syz.1.1709': attribute type 7 has an invalid length.
[  144.300329][T12177] bridge5: the hash_elasticity option has been deprecated and is always 16
[  144.303537][T12177] bridge5: entered allmulticast mode
[  144.400721][T12192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1714'.
[  144.407058][T12192] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1714'.
[  144.409420][T12193] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1714'.
[  144.447813][T12192] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  144.650924][T12229] netlink: 'syz.2.1723': attribute type 1 has an invalid length.
[  144.663524][T12229] 8021q: adding VLAN 0 to HW filter on device bond6
[  144.685144][T12229] bond6: (slave veth23): Enslaving as an active interface with a down link
[  144.714718][T12229] macvlan2: entered promiscuous mode
[  144.719696][T12229] macvlan2: entered allmulticast mode
[  144.722138][T12229] bond6: entered promiscuous mode
[  144.724829][T12229] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  144.728600][T12229] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  144.734277][T12229] bond6: left promiscuous mode
[  144.742838][T12236] netlink: 'syz.0.1725': attribute type 1 has an invalid length.
[  144.759749][T12236] 8021q: adding VLAN 0 to HW filter on device bond11
[  144.880999][T12251] netlink: 'syz.0.1729': attribute type 1 has an invalid length.
[  144.921688][T12257] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  144.966019][T12269] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  145.135452][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  145.137972][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  145.733079][T12298] 8021q: adding VLAN 0 to HW filter on device bond13
[  145.737033][T12298] bond12: (slave bond13): Enslaving as an active interface with an up link
[  145.742328][T12298] bond12 (unregistering): (slave bond13): Releasing backup interface
[  145.747382][T12298] bond12 (unregistering): Released all slaves
[  145.849096][T12313] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.880682][T12316] 8021q: adding VLAN 0 to HW filter on device bond12
[  145.888000][T12316] vlan3: entered promiscuous mode
[  145.890320][T12316] bond12: entered promiscuous mode
[  145.892553][T12316] vlan3: entered allmulticast mode
[  145.894728][T12316] bond12: entered allmulticast mode
[  146.081128][T12349] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  146.083686][T12349] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  146.175651][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  146.178662][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  146.675401][T12385] nbd0: detected capacity change from 0 to 63
[  146.677642][T12386] block nbd0: NBD_DISCONNECT
[  146.679514][T12386] block nbd0: Disconnected due to user request.
[  146.681626][T11593] blk_print_req_error: 138 callbacks suppressed
[  146.681633][T11593] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.683581][T12386] block nbd0: shutting down sockets
[  146.683733][T11593] buffer_io_error: 138 callbacks suppressed
[  146.683739][T11593] Buffer I/O error on dev nbd0, logical block 0, async page read
[  146.693983][  T128] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[  146.697765][  T128] Buffer I/O error on dev nbd0, logical block 1, async page read
[  146.700948][  T128] Buffer I/O error on dev nbd0, logical block 2, async page read
[  146.704128][  T128] Buffer I/O error on dev nbd0, logical block 3, async page read
[  146.707503][T11593] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.715862][T11593] Buffer I/O error on dev nbd0, logical block 0, async page read
[  146.718441][T11593] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.721573][T11593] Buffer I/O error on dev nbd0, logical block 1, async page read
[  146.724470][T11593] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.728223][T11593] Buffer I/O error on dev nbd0, logical block 2, async page read
[  146.730813][T11593] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.734370][T11593] Buffer I/O error on dev nbd0, logical block 3, async page read
[  146.738359][T11593] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.741761][T12391] validate_nla: 6 callbacks suppressed
[  146.741768][T12391] netlink: 'syz.2.1766': attribute type 4 has an invalid length.
[  146.743388][T11593] Buffer I/O error on dev nbd0, logical block 0, async page read
[  146.750968][T11593] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.753997][T11593] Buffer I/O error on dev nbd0, logical block 1, async page read
[  146.756923][T11593] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.760111][T11593] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.767365][T11593] ldm_validate_partition_table(): Disk read failed.
[  146.770240][T11593] Dev nbd0: unable to read RDB block 0
[  146.772738][T11593]  nbd0: unable to read partition table
[  146.777851][T11593] ldm_validate_partition_table(): Disk read failed.
[  146.781553][T11593] Dev nbd0: unable to read RDB block 0
[  146.784312][T11593]  nbd0: unable to read partition table
[  147.020722][T12424] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  147.096843][T12431] bond4: option mode: unable to set because the bond device is up
[  147.114640][T12431] bond6: (slave veth23): Releasing active interface
[  147.215405][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  147.217946][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  148.255521][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  148.353793][T12496] netlink: 'syz.0.1790': attribute type 21 has an invalid length.
[  148.422536][T12507] netlink: 'syz.0.1794': attribute type 12 has an invalid length.
[  148.523958][T12520] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.529504][T12520] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.567950][T12520] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.572037][T12520] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.577407][T12524] netlink: 'syz.0.1798': attribute type 2 has an invalid length.
[  148.649957][T12520] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.658873][T12520] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.698518][T12520] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.704702][T12520] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.768822][ T9090] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  148.772377][ T9090] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  148.775905][ T9090] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  148.779628][ T9090] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  148.788215][ T9090] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  148.791660][ T9090] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  148.801957][ T9090] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  148.804821][ T9090] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.864367][T12551] netlink: 'syz.2.1805': attribute type 1 has an invalid length.
[  148.867280][T12551] __nla_validate_parse: 69 callbacks suppressed
[  148.867287][T12551] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1805'.
[  148.909491][T12561] netlink: 'syz.2.1808': attribute type 1 has an invalid length.
[  148.911961][T12561] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1808'.
[  148.915594][T12564] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1806'.
[  149.305684][    C0] net_ratelimit: 8 callbacks suppressed
[  149.305694][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  149.310206][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  149.388524][T12598] sctp: [Deprecated]: syz.1.1816 (pid 12598) Use of int in max_burst socket option deprecated.
[  149.388524][T12598] Use struct sctp_assoc_value instead
[  149.402973][T12598] netlink: 'syz.1.1816': attribute type 1 has an invalid length.
[  149.407978][T12598] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1816'.
[  149.411127][T12598] netlink: 'syz.1.1816': attribute type 1 has an invalid length.
[  149.425175][T12600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1817'.
[  149.591588][T12619] IPVS: Unknown mcast interface: vcan0
[  149.629272][T12623] netlink: 'syz.0.1822': attribute type 1 has an invalid length.
[  149.632108][T12623] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1822'.
[  149.637574][T12623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1822'.
[  149.647423][T12623] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1822'.
[  149.694266][T12628] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.1824'.
[  149.700370][T12628] syzkaller1: entered promiscuous mode
[  149.702295][T12628] syzkaller1: entered allmulticast mode
[  149.862268][T12635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1826'.
[  149.914177][T12636] netlink: 'syz.0.1826': attribute type 11 has an invalid length.
[  149.951556][T12638] netlink: 'syz.2.1827': attribute type 4 has an invalid length.
[  150.335464][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  150.337982][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  150.549484][T12658] vlan0: entered promiscuous mode
[  150.589552][T12667] sock: sock_timestamping_bind_phc: sock not bind to device
[  150.660798][T12680] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:0
[  150.665570][T12682] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:0
[  150.776001][T12694] bond5: (slave bond6): Releasing backup interface
[  150.779903][T12694] bond7: (slave ip6gretap2): Removing an active aggregator
[  150.783960][T12694] bond7: (slave ip6gretap2): Releasing backup interface
[  150.788010][T12694] bond7: (slave ip6gretap2): the permanent HWaddr of slave - aa:33:3e:1a:7a:0b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  150.796587][T12694] bond7: (slave veth9): Releasing backup interface
[  150.858011][T12701] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  150.862484][T12701] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  150.870407][T12701] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  151.375527][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  151.378338][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  151.970108][T12751] netlink: zone id is out of range
[  151.973267][T12751] netlink: zone id is out of range
[  151.976949][T12751] netlink: zone id is out of range
[  151.979418][T12751] netlink: zone id is out of range
[  152.940239][T12766] IPVS: Error joining to the multicast group
[  153.079703][T12799] vxcan1: entered allmulticast mode
[  153.081725][T12799] vxcan1: left allmulticast mode
[  153.084542][T12797] validate_nla: 6 callbacks suppressed
[  153.084554][T12797] netlink: 'syz.2.1868': attribute type 62 has an invalid length.
[  153.421644][T12834] netlink: 'syz.2.1876': attribute type 1 has an invalid length.
[  153.535907][T12838] nbd0: detected capacity change from 0 to 127
[  153.539680][   T55] block nbd0: Receive control failed (result -104)
[  153.568271][T12840] bond2: option mode: unable to set because the bond device is up
[  153.732958][T12848] _Z`Ԁ@: entered promiscuous mode
[  153.790634][T12774] delete_channel: no stack
[  153.806679][T12859] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  153.809532][T12859] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  153.961342][T12877] __nla_validate_parse: 25 callbacks suppressed
[  153.961351][T12877] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1895'.
[  153.966856][T12877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1895'.
[  153.978854][T12881] netlink: 'syz.1.1897': attribute type 29 has an invalid length.
[  154.017444][T12882] batadv_slave_1: entered promiscuous mode
[  154.057351][T12876] batadv_slave_1: left promiscuous mode
[  154.082886][T12894] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1899'.
[  154.218560][T12919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1904'.
[  154.222246][T12919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1904'.
[  154.251236][T12927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1907'.
[  154.256303][T12919] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1904'.
[  154.324222][T12936] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1910'.
[  154.329718][T12943] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  154.332556][T12943] IPv6: NLM_F_CREATE should be set when creating new route
[  154.335494][T12943] IPv6: NLM_F_CREATE should be set when creating new route
[  154.338324][T12943] IPv6: NLM_F_CREATE should be set when creating new route
[  154.495487][    C0] net_ratelimit: 23 callbacks suppressed
[  154.495498][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  154.499627][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  154.515451][T12943] block nbd5: server does not support multiple connections per device.
[  154.519008][T12943] block nbd5: shutting down sockets
[  154.835836][T12971] netlink: 'syz.1.1919': attribute type 10 has an invalid length.
[  154.838364][T12971] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  154.870248][T12973] netlink: 'syz.1.1920': attribute type 8 has an invalid length.
[  154.921308][T12978] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1920'.
[  155.013157][T12982] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20002
[  155.030920][T12986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1924'.
[  155.140569][T12992] netlink: 'syz.1.1925': attribute type 1 has an invalid length.
[  155.298331][T13022] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  155.301586][T13022] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  155.545400][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  155.547921][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  155.721846][T13024] netlink: 'syz.2.1936': attribute type 13 has an invalid length.
[  155.724506][T13024] netlink: 'syz.2.1936': attribute type 17 has an invalid length.
[  155.727405][T13024] netlink: 'syz.2.1936': attribute type 27 has an invalid length.
[  155.932942][T13042] netlink: 'syz.2.1942': attribute type 4 has an invalid length.
[  156.100476][T13054] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  156.191229][T13076] _Z`Ԁ@S: entered promiscuous mode
[  156.415161][ T9090] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  156.420264][ T9090] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  156.423307][ T9090] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  156.426529][ T9090] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  156.430718][ T9090] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  156.436479][ T9090] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  156.440463][ T9090] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  156.446245][ T9090] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  156.575487][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  156.578548][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  156.663061][T13127] bond0: (slave rose0): Error: Device can not be enslaved while up
[  157.615492][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  157.618577][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  157.655859][T13166] netlink: 'syz.1.1972': attribute type 11 has an invalid length.
[  157.816163][T13182] nbd1: detected capacity change from 0 to 63
[  157.819609][T13185] block nbd1: NBD_DISCONNECT
[  157.821656][T13185] block nbd1: Disconnected due to user request.
[  157.824123][T13185] block nbd1: shutting down sockets
[  157.826439][    C0] blk_print_req_error: 136 callbacks suppressed
[  157.826446][    C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.832608][    C0] buffer_io_error: 138 callbacks suppressed
[  157.832614][    C0] Buffer I/O error on dev nbd1, logical block 0, async page read
[  157.838252][    C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.841838][    C0] Buffer I/O error on dev nbd1, logical block 1, async page read
[  157.844947][    C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.847687][T13182] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  157.848615][    C0] Buffer I/O error on dev nbd1, logical block 2, async page read
[  157.854805][    C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.858370][    C0] Buffer I/O error on dev nbd1, logical block 3, async page read
[  157.861735][T12907] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.866580][T12907] Buffer I/O error on dev nbd1, logical block 0, async page read
[  157.871648][T12907] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.876451][T12907] Buffer I/O error on dev nbd1, logical block 1, async page read
[  157.880983][T12907] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.885095][T12907] Buffer I/O error on dev nbd1, logical block 2, async page read
[  157.893379][T12907] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.897434][T12907] Buffer I/O error on dev nbd1, logical block 3, async page read
[  157.900064][T12907] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.903580][T12907] Buffer I/O error on dev nbd1, logical block 0, async page read
[  157.906901][T12907] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.909942][T12907] Buffer I/O error on dev nbd1, logical block 1, async page read
[  157.913087][T12907] ldm_validate_partition_table(): Disk read failed.
[  157.915933][T12907] Dev nbd1: unable to read RDB block 0
[  157.918322][T12907]  nbd1: unable to read partition table
[  157.922345][T12907] ldm_validate_partition_table(): Disk read failed.
[  157.924962][T12907] Dev nbd1: unable to read RDB block 0
[  157.927498][T12907]  nbd1: unable to read partition table
[  158.645013][T13197] validate_nla: 13 callbacks suppressed
[  158.645023][T13197] netlink: 'syz.0.1982': attribute type 1 has an invalid length.
[  158.654455][T13197] bond13: entered promiscuous mode
[  158.658225][T13197] 8021q: adding VLAN 0 to HW filter on device bond13
[  158.662816][T13197] "syz.0.1982" (13197) uses obsolete ecb(arc4) skcipher
[  158.668847][T13197] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  158.671883][T13197] IPv6: NLM_F_CREATE should be set when creating new route
[  158.674809][T13197] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  158.704646][T13200] pimreg: tun_chr_ioctl cmd 2147767506
[  159.008341][T13215] __nla_validate_parse: 29 callbacks suppressed
[  159.008351][T13215] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1988'.
[  159.033639][T13220] bridge0: entered allmulticast mode
[  159.043154][T13220] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  159.288136][T13240] netlink: 'syz.2.1991': attribute type 10 has an invalid length.
[  159.294437][T13240] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  159.300250][T13240] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  159.357670][T13244] netlink: 'syz.1.1996': attribute type 3 has an invalid length.
[  159.409980][T13248] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1998'.
[  159.414959][T13248] netlink: 'syz.1.1998': attribute type 3 has an invalid length.
[  159.434895][T13250] netlink: 'syz.1.1999': attribute type 10 has an invalid length.
[  159.440865][T13250] team0: Device dummy0 failed to register rx_handler
[  159.535950][T13255] nbd1: detected capacity change from 0 to 63
[  159.538624][T13256] block nbd1: NBD_DISCONNECT
[  159.540558][T13256] block nbd1: Disconnected due to user request.
[  159.543230][T13256] block nbd1: shutting down sockets
[  159.549288][T12907] ldm_validate_partition_table(): Disk read failed.
[  159.553094][T12907] Dev nbd1: unable to read RDB block 0
[  159.557023][T12907]  nbd1: unable to read partition table
[  159.563093][T12907] ldm_validate_partition_table(): Disk read failed.
[  159.567047][T13258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2001'.
[  159.567450][T12907] Dev nbd1: unable to read RDB block 0
[  159.573378][T12907]  nbd1: unable to read partition table
[  159.695495][    C0] net_ratelimit: 2 callbacks suppressed
[  159.695506][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  159.699804][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  159.765471][T13281] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2006'.
[  159.819938][T13287] netlink: 'syz.1.2009': attribute type 2 has an invalid length.
[  159.854566][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2011'.
[  159.968598][T13306] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:0
[  160.026575][T13319] netlink: 'syz.0.2015': attribute type 1 has an invalid length.
[  160.034628][T13319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2015'.
[  160.217226][T13355] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.2026'.
[  160.330241][T13366] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  160.334564][T13367] tipc: Bearer <eth:team0>: already 2 bearers with priority 10
[  160.345676][T13367] tipc: Bearer <eth:team0>: trying with adjusted priority
[  160.360965][T13367] tipc: Enabling of bearer <eth:team0> rejected, max 3 bearers permitted
[  160.561146][T13380] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2031'.
[  160.567296][T13380] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  160.658514][T13382] netlink: 201916 bytes leftover after parsing attributes in process `syz.1.2032'.
[  160.735452][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  160.738020][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  160.818373][T13407] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2039'.
[  160.828475][T13407] veth25: entered promiscuous mode
[  160.848533][   T33] audit: type=1800 audit(1756671957.799:19): pid=13409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2040" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=3827 res=0 errno=0
[  160.859205][   T33] audit: type=1804 audit(1756671957.809:20): pid=13409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2040" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=3827 res=1 errno=0
[  160.937089][T13424] netlink: 'syz.1.2044': attribute type 10 has an invalid length.
[  160.969379][T13432] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  160.981054][T13434] netlink: 'syz.1.2047': attribute type 1 has an invalid length.
[  161.014694][T13440] netlink: 'syz.0.2049': attribute type 1 has an invalid length.
[  161.018159][T13440] NCSI netlink: No device for ifindex 0
[  161.069644][T13452] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  161.082991][T13451] IPVS: stopping backup sync thread 13452 ...
[  161.148644][T13466] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  161.179388][T13468] syzkaller1: entered promiscuous mode
[  161.181637][T13468] syzkaller1: entered allmulticast mode
[  161.193172][T13468] 8021q: adding VLAN 0 to HW filter on device bond15
[  161.197703][T13468] bond14: (slave bond15): Enslaving as an active interface with an up link
[  161.204611][T13468] bond14 (unregistering): (slave bond15): Releasing backup interface
[  161.211433][T13468] bond14 (unregistering): Released all slaves
[  161.586894][T13493] syzkaller1: entered promiscuous mode
[  161.588747][T13493] syzkaller1: entered allmulticast mode
[  161.775408][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  161.778106][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  161.860118][T13520] 8021q: adding VLAN 0 to HW filter on device bond14
[  161.870979][T13520] ipvlan0: entered allmulticast mode
[  161.872876][T13520] bond14: entered allmulticast mode
[  161.879576][T13520] bond14: (slave gretap2): making interface the new active one
[  161.882078][T13520] gretap2: entered allmulticast mode
[  161.884549][T13520] bond14: (slave gretap2): Enslaving as an active interface with an up link
[  162.001945][T13546] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  162.067538][T13562] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.281636][T13600] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  162.815436][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  162.844914][T13608] bond16: (slave veth15): Enslaving as an active interface with a down link
[  162.851441][T13608] 8021q: adding VLAN 0 to HW filter on device bond16
[  162.891095][T13613] sctp: [Deprecated]: syz.0.2097 (pid 13613) Use of int in max_burst socket option.
[  162.891095][T13613] Use struct sctp_assoc_value instead
[  162.902963][T13615] sctp: [Deprecated]: syz.0.2097 (pid 13615) Use of int in max_burst socket option.
[  162.902963][T13615] Use struct sctp_assoc_value instead
[  162.921602][T13618] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  163.053343][T13637] IPVS: Unknown mcast interface: vcan0
[  163.094021][T13641] gtp1: entered promiscuous mode
[  163.343331][T13688] sock: sock_timestamping_bind_phc: sock not bind to device
[  163.468804][T13709] bond0: (slave rose0): Error: Device can not be enslaved while up
[  163.924181][T13747] validate_nla: 19 callbacks suppressed
[  163.924191][T13747] netlink: 'syz.0.2140': attribute type 1 has an invalid length.
[  163.934334][T13747] 8021q: adding VLAN 0 to HW filter on device bond17
[  163.943376][T13747] 8021q: adding VLAN 0 to HW filter on device bond17
[  163.948606][T13747] bond17: (slave vxcan3): The slave device specified does not support setting the MAC address
[  163.953039][T13747] bond17: (slave vxcan3): Error -95 calling set_mac_address
[  163.994924][T13749] veth17: entered promiscuous mode
[  163.997954][T13749] bond17: (slave veth17): Enslaving as an active interface with a down link
[  164.003105][T13747] erspan0: entered allmulticast mode
[  164.006997][T13747] bond17: (slave erspan0): making interface the new active one
[  164.010178][T13747] bond17: (slave erspan0): Enslaving as an active interface with an up link
[  164.334536][T13779] __nla_validate_parse: 74 callbacks suppressed
[  164.334550][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2149'.
[  164.435798][T13786] netlink: 'syz.0.2151': attribute type 4 has an invalid length.
[  164.438943][   T55] block nbd1: Receive control failed (result -32)
[  164.456381][T13792] bridge6: the hash_elasticity option has been deprecated and is always 16
[  164.459260][T13792] bridge6: entered allmulticast mode
[  164.497245][T13799] netlink: 'syz.1.2155': attribute type 1 has an invalid length.
[  164.499900][T13799] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2155'.
[  164.504269][T13800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2155'.
[  164.507457][T13799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2155'.
[  164.657141][T13827] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2164'.
[  164.895513][    C0] net_ratelimit: 25 callbacks suppressed
[  164.895528][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  164.900682][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  165.139442][T13832] openvswitch: netlink: IP tunnel dst address not specified
[  165.143381][T13832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2166'.
[  165.177562][T13834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2167'.
[  165.361291][T13841] netlink: 'syz.1.2169': attribute type 1 has an invalid length.
[  165.364626][T13841] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2169'.
[  165.569818][T13874] openvswitch: netlink: IPv4 tun info is not correct
[  165.571989][T13876] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  165.575191][T13876] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  165.613356][T13883] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2180'.
[  165.617813][T13883] openvswitch: netlink: IP tunnel TTL not specified.
[  165.646542][T13889] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.2181'.
[  165.935438][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  165.938035][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  166.707635][T13926] bridge7: port 1(bond7) entered blocking state
[  166.709860][T13926] bridge7: port 1(bond7) entered disabled state
[  166.712198][T13926] bond7: entered allmulticast mode
[  166.714767][T13926] bond7: entered promiscuous mode
[  166.853262][T13938] netlink: 'syz.2.2197': attribute type 10 has an invalid length.
[  166.880016][T13941] smc: net device bond0 applied user defined pnetid SYZ2
[  166.883038][T13941] smc: net device bond0 erased user defined pnetid SYZ2
[  166.953428][T13954] IPVS: set_ctl: invalid protocol: 0 172.30.0.3:20004
[  166.957665][T13954] netlink: 'syz.2.2199': attribute type 1 has an invalid length.
[  166.975613][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  166.978887][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  167.744266][T13993] tc_dump_action: action bad kind
[  167.848915][T14014] netlink: 'syz.0.2216': attribute type 11 has an invalid length.
[  167.899404][T14019] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  168.027164][T14040] nbd: must specify a size in bytes for the device
[  168.527959][T14111] netlink: 'syz.0.2245': attribute type 12 has an invalid length.
[  168.531607][T14111] netlink: 'syz.0.2245': attribute type 1 has an invalid length.
[  168.560764][T14113] bond0: (slave rose0): Error: Device can not be enslaved while up
[  168.678732][T14142] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  168.729887][T14153] netlink: 'syz.1.2253': attribute type 1 has an invalid length.
[  168.733290][T14153] netlink: 'syz.1.2253': attribute type 2 has an invalid length.
[  169.034512][T14173] block nbd0: must specify backend
[  169.060579][T14176] netlink: 'syz.2.2261': attribute type 2 has an invalid length.
[  169.063762][T14176] netlink: 'syz.2.2261': attribute type 1 has an invalid length.
[  169.112560][T14184] netlink: 'syz.2.2263': attribute type 10 has an invalid length.
[  169.119604][T14184] team0: Port device geneve0 added
[  169.122192][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.126640][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.130276][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.133692][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.273379][T14195] netlink: 'syz.2.2265': attribute type 1 has an invalid length.
[  169.284022][T14195] 8021q: adding VLAN 0 to HW filter on device bond8
[  169.531978][T14211] netlink: 'syz.1.2270': attribute type 4 has an invalid length.
[  169.539437][T14211] tipc: Resetting bearer <eth:syzkaller0>
[  169.543990][T14211] __nla_validate_parse: 95 callbacks suppressed
[  169.543998][T14211] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2270'.
[  169.589933][T14218] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2271'.
[  169.687708][T14228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2274'.
[  169.693879][T14228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2274'.
[  169.697820][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  169.707600][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  169.707605][T14228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2274'.
[  169.707618][T14228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2274'.
[  169.717948][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  169.721311][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  169.724420][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  169.728055][T14228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2274'.
[  169.759444][T14234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2275'.
[  169.763190][T14234] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  169.770029][T14234] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2275'.
[  169.773905][T14234] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2275'.
[  169.806128][T14236] netlink: 'syz.1.2276': attribute type 5 has an invalid length.
[  169.809159][T14236] netlink: 'syz.1.2276': attribute type 7 has an invalid length.
[  170.095471][    C0] net_ratelimit: 53 callbacks suppressed
[  170.095484][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  170.100810][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  170.107178][T14270] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  170.177288][T14280] veth16: entered allmulticast mode
[  170.184782][T14279] veth16: entered allmulticast mode
[  170.305163][T14288] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  170.309403][T14288] bond17: (slave erspan0): Releasing active interface
[  170.314588][T14288] bond14: (slave gretap2): Releasing active interface
[  170.317192][T14288] gretap2: left allmulticast mode
[  170.321404][T14288] bond16: (slave veth15): Releasing active interface
[  170.326137][T14288] bond17: (slave veth17): Releasing active interface
[  170.335912][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  170.357809][T14288] netlink: 'syz.0.2292': attribute type 10 has an invalid length.
[  170.360599][T14288] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  170.364883][T14288] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  170.368688][T14288] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  171.035174][T14293] dvmrp8: entered allmulticast mode
[  171.114545][T14292] dvmrp8: left allmulticast mode
[  171.135526][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  171.138549][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  171.159675][T14297] syzkaller1: entered promiscuous mode
[  171.161680][T14297] syzkaller1: entered allmulticast mode
[  171.162582][T14299] netlink: 'syz.0.2295': attribute type 10 has an invalid length.
[  171.252292][T14308] netlink: 'syz.2.2298': attribute type 1 has an invalid length.
[  171.555090][T14359] 8021q: adding VLAN 0 to HW filter on device bond9
[  171.728383][T14384] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  171.731610][T14384] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  171.754385][T14386] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.816026][T14386] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.878143][T14386] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.951757][T14386] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.036888][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.040524][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.049932][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.052725][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.075113][T14405] k*]: entered promiscuous mode
[  172.080791][T14405] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  172.175492][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  172.178507][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  172.245360][T14418] nbd5: detected capacity change from 0 to 127
[  172.248886][   T56] block nbd5: Receive control failed (result -104)
[  172.424782][T14229] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  172.477735][T14448] lo: entered promiscuous mode
[  172.479941][T14448] tunl0: entered promiscuous mode
[  172.482980][T14448] gre0: entered promiscuous mode
[  172.484698][T14448] gretap0: entered promiscuous mode
[  172.486716][T14448] erspan0: entered promiscuous mode
[  172.488526][T14448] ip_vti0: entered promiscuous mode
[  172.490379][T14448] ip6_vti0: entered promiscuous mode
[  172.492254][T14448] sit0: entered promiscuous mode
[  172.494046][T14448] ip6tnl0: entered promiscuous mode
[  172.496385][T14448] ip6gre0: entered promiscuous mode
[  172.498184][T14448] ip6gretap0: entered promiscuous mode
[  172.500055][T14448] team0: entered promiscuous mode
[  172.501829][T14448] geneve0: entered promiscuous mode
[  172.503687][T14448] dummy0: entered promiscuous mode
[  172.505597][T14448] nlmon0: entered promiscuous mode
[  172.507345][T14448] caif0: entered promiscuous mode
[  172.509054][T14448] veth0: entered promiscuous mode
[  172.510747][T14448] veth1: entered promiscuous mode
[  172.512593][T14448] wg0: entered promiscuous mode
[  172.514582][T14448] wg1: entered promiscuous mode
[  172.516554][T14448] wg2: entered promiscuous mode
[  172.518241][T14448] veth0_to_bridge: entered promiscuous mode
[  172.520259][T14448] bridge_slave_0: entered promiscuous mode
[  172.522345][T14448] bridge_slave_1: entered promiscuous mode
[  172.524900][T14448] veth0_to_bond: entered promiscuous mode
[  172.527461][T14448] bond_slave_0: entered promiscuous mode
[  172.530547][T14448] veth1_to_bond: entered promiscuous mode
[  172.533151][T14448] bond_slave_1: entered promiscuous mode
[  172.536247][T14448] team_slave_0: entered promiscuous mode
[  172.538284][T14448] veth1_to_team: entered promiscuous mode
[  172.540255][T14448] team_slave_1: entered promiscuous mode
[  172.542172][T14448] veth0_to_batadv: entered promiscuous mode
[  172.544376][T14448] veth1_to_batadv: entered promiscuous mode
[  172.546889][T14448] batadv_slave_1: entered promiscuous mode
[  172.548972][T14448] xfrm0: entered promiscuous mode
[  172.550784][T14448] veth0_to_hsr: entered promiscuous mode
[  172.552807][T14448] veth1_to_hsr: entered promiscuous mode
[  172.554757][T14448] hsr0: entered promiscuous mode
[  172.556672][T14448] veth1_virt_wifi: entered promiscuous mode
[  172.558707][T14448] veth0_virt_wifi: entered promiscuous mode
[  172.561126][T14448] vlan1: entered promiscuous mode
[  172.562967][T14448] macvlan0: entered promiscuous mode
[  172.564920][T14448] macvlan1: entered promiscuous mode
[  172.566861][T14448] ipvlan0: entered promiscuous mode
[  172.568664][T14448] ipvlan1: entered promiscuous mode
[  172.570536][T14448] macvtap0: entered promiscuous mode
[  172.572448][T14448] macsec0: entered promiscuous mode
[  172.575825][T14448] geneve1: entered promiscuous mode
[  172.578896][T14448] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  172.581281][T14448] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  172.583793][T14448] sit1: entered promiscuous mode
[  172.587457][T14448] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  172.589864][T14448] ip6erspan0: entered promiscuous mode
[  172.591964][T14448] bridge1: entered promiscuous mode
[  172.594126][T14448] mac80211_hwsim hwsim9 wlan2: entered promiscuous mode
[  172.596691][T14448] syztnl2: entered promiscuous mode
[  172.598508][T14448] mac80211_hwsim hwsim10 wlan3: entered promiscuous mode
[  172.600815][T14448] bridge2: entered promiscuous mode
[  172.602554][T14448] mac80211_hwsim hwsim17 wlan4: entered promiscuous mode
[  172.604952][T14448] bond1: entered promiscuous mode
[  172.606848][T14448] ip6gretap1: entered promiscuous mode
[  172.608678][T14448] veth2: entered promiscuous mode
[  172.610364][T14448] @: entered promiscuous mode
[  172.614315][T14448] gre1: entered promiscuous mode
[  172.616599][T14448] bond2: entered promiscuous mode
[  172.618791][T14448] sit2: entered promiscuous mode
[  172.620983][T14448] veth4: entered promiscuous mode
[  172.623161][T14448] veth5: entered promiscuous mode
[  172.625492][T14448] mac80211_hwsim hwsim27 wlan5: entered promiscuous mode
[  172.628429][T14448] ip6gretap2: entered promiscuous mode
[  172.630706][T14448] mac80211_hwsim hwsim4 nicvPN: entered promiscuous mode
[  172.633682][T14448] veth6: entered promiscuous mode
[  172.635433][T14448] veth7: entered promiscuous mode
[  172.637091][T14448] veth8: entered promiscuous mode
[  172.638786][T14448] veth9: entered promiscuous mode
[  172.640443][T14448] veth10: entered promiscuous mode
[  172.642119][T14448] veth11: entered promiscuous mode
[  172.643746][T14448] vlan3: entered promiscuous mode
[  172.645607][T14448] bridge3: entered promiscuous mode
[  172.647366][T14448] veth12: entered promiscuous mode
[  172.649091][T14448] veth13: entered promiscuous mode
[  172.650808][T14448] veth14: entered promiscuous mode
[  172.652546][T14448] veth15: entered promiscuous mode
[  172.654267][T14448] ip6tnl1: entered promiscuous mode
[  172.656541][T14448] syztnl0: entered promiscuous mode
[  172.658294][T14448] veth16: entered promiscuous mode
[  172.659992][T14448] veth17: entered promiscuous mode
[  172.661695][T14448] veth18: entered promiscuous mode
[  172.663408][T14448] veth19: entered promiscuous mode
[  172.666245][T14448] mac80211_hwsim hwsim33 wlan6: entered promiscuous mode
[  172.669438][T14448] bridge4: entered promiscuous mode
[  172.671746][T14448] mac80211_hwsim hwsim35 wlan7: entered promiscuous mode
[  172.674406][T14448] bond0: entered promiscuous mode
[  172.676425][T14448] veth20: entered promiscuous mode
[  172.678434][T14448] mac80211_hwsim hwsim38 wlan8: entered promiscuous mode
[  172.680859][T14448] veth1.2: entered promiscuous mode
[  172.682911][T14448] mac80211_hwsim hwsim42 wlan9: entered promiscuous mode
[  172.685579][T14448] bond3: entered promiscuous mode
[  172.687822][T14448] mac80211_hwsim hwsim44 wlan10: entered promiscuous mode
[  172.690909][T14448] bond4: entered promiscuous mode
[  172.693275][T14448] mac80211_hwsim hwsim4 nicvf0: entered promiscuous mode
[  172.697516][T14448] mac80211_hwsim hwsim52 wlan11: entered promiscuous mode
[  172.700099][T14448] bond5: entered promiscuous mode
[  172.702165][T14448] vlan4: entered promiscuous mode
[  172.704478][T14448] sit3: entered promiscuous mode
[  172.706989][T14448] dvmrp0: entered promiscuous mode
[  172.709281][T14448] batadv1: entered promiscuous mode
[  172.711616][T14448] bridge5: entered promiscuous mode
[  172.713784][T14448] tun0: entered promiscuous mode
[  172.716177][T14448] gre2: entered promiscuous mode
[  172.718238][T14448] pim6reg9: entered promiscuous mode
[  172.720041][T14448] gtp0: entered promiscuous mode
[  172.721863][T14448] mac80211_hwsim hwsim57 wlan12: entered promiscuous mode
[  172.724249][T14448] hsr1: entered promiscuous mode
[  172.726093][T14448] bond6: entered promiscuous mode
[  172.727800][T14448] veth22: entered promiscuous mode
[  172.729555][T14448] veth23: entered promiscuous mode
[  172.731413][T14448] syztnl1: entered promiscuous mode
[  172.733491][T14448] erspan1: entered promiscuous mode
[  172.735245][T14448] veth24: entered promiscuous mode
[  172.737298][T14448] mac80211_hwsim hwsim75 wlan13: entered promiscuous mode
[  172.739810][T14448] gre3: entered promiscuous mode
[  172.743003][T14448] bridge0: entered promiscuous mode
[  172.744867][T14448] bridge6: entered promiscuous mode
[  172.748614][T14448] bridge7: entered promiscuous mode
[  172.752292][T14448] mac80211_hwsim hwsim79 wlan14: entered promiscuous mode
[  172.754858][T14448] bond8: entered promiscuous mode
[  172.757591][T14448] bond9: entered promiscuous mode
[  172.760216][T14448] netdevsim netdevsim2 eth0: entered promiscuous mode
[  172.762514][T14448] netdevsim netdevsim2 eth1: entered promiscuous mode
[  172.764845][T14448] netdevsim netdevsim2 eth2: entered promiscuous mode
[  172.767227][T14448] netdevsim netdevsim2 eth3: entered promiscuous mode
[  172.769483][T14448] bond10: entered promiscuous mode
[  172.771557][ T5849] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  172.774406][ T5849] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  172.778381][ T5849] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  172.781195][ T5849] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  172.926082][T14469] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  172.929304][T14469] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  173.215507][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  173.218878][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  173.226090][T14474] gretap3: entered allmulticast mode
[  173.229946][T14474] bond18: (slave gretap3): making interface the new active one
[  173.233431][T14474] bond18: (slave gretap3): Enslaving as an active interface with an up link
[  173.307568][T14484] 8021q: adding VLAN 0 to HW filter on device bond11
[  173.314305][T14484] veth27: entered promiscuous mode
[  173.317721][T14484] bond11: (slave veth27): Enslaving as a backup interface with a down link
[  173.323236][T14484] team0: Port device geneve0 removed
[  173.325778][T14484] bond7: left allmulticast mode
[  173.327612][T14484] bridge7: port 1(bond7) entered disabled state
[  173.331115][T14484] bond11: (slave veth27): Releasing backup interface
[  174.420795][T14538] netlink: 'syz.0.2360': attribute type 11 has an invalid length.
[  174.437180][T14541] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  174.440384][T14541] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  174.443407][T14541] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  174.451690][T14544] validate_nla: 9 callbacks suppressed
[  174.451699][T14544] netlink: 'syz.0.2362': attribute type 1 has an invalid length.
[  174.467946][T14544] 8021q: adding VLAN 0 to HW filter on device bond19
[  174.478098][T14544] 8021q: adding VLAN 0 to HW filter on device bond19
[  174.481190][T14544] bond19: (slave vxcan3): The slave device specified does not support setting the MAC address
[  174.486263][T14544] bond19: (slave vxcan3): Error -95 calling set_mac_address
[  174.578958][T14554] __nla_validate_parse: 90 callbacks suppressed
[  174.578967][T14554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2365'.
[  174.579004][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2365'.
[  174.752661][T14565] netlink: 'syz.1.2368': attribute type 5 has an invalid length.
[  174.774154][T14567] netlink: 'syz.1.2369': attribute type 10 has an invalid length.
[  174.778439][T14567] team0: Device dummy0 failed to register rx_handler
[  174.783939][T14567] netlink: 'syz.1.2369': attribute type 10 has an invalid length.
[  175.295670][    C0] net_ratelimit: 2 callbacks suppressed
[  175.295686][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  175.301177][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  175.478889][T14571] netlink: 'syz.2.2370': attribute type 1 has an invalid length.
[  175.482098][T14571] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2370'.
[  175.535699][   T60] block nbd5: Connection timed out, retrying (0/1 alive)
[  175.538234][   T60] block nbd5: Connection timed out, retrying (0/1 alive)
[  175.540711][   T60] block nbd5: Connection timed out, retrying (0/1 alive)
[  175.543139][   T60] block nbd5: Connection timed out, retrying (0/1 alive)
[  175.546499][   T25] block nbd5: Dead connection, failed to find a fallback
[  175.549516][   T25] block nbd5: shutting down sockets
[  175.551804][   T25] blk_print_req_error: 286 callbacks suppressed
[  175.551811][   T25] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  175.558019][   T25] buffer_io_error: 286 callbacks suppressed
[  175.558031][   T25] Buffer I/O error on dev nbd5, logical block 3, async page read
[  175.563675][   T25] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  175.567473][   T25] Buffer I/O error on dev nbd5, logical block 2, async page read
[  175.570084][   T25] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  175.572861][   T25] Buffer I/O error on dev nbd5, logical block 1, async page read
[  175.575343][   T25] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  175.578523][   T25] Buffer I/O error on dev nbd5, logical block 0, async page read
[  175.581474][T13871] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  175.584762][T13871] Buffer I/O error on dev nbd5, logical block 0, async page read
[  175.587739][T13871] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  175.590708][T13871] Buffer I/O error on dev nbd5, logical block 1, async page read
[  175.593226][T13871] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  175.596192][T13871] Buffer I/O error on dev nbd5, logical block 2, async page read
[  175.598962][T13871] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  175.601873][T13871] Buffer I/O error on dev nbd5, logical block 3, async page read
[  175.605400][T13871] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  175.608289][T13871] Buffer I/O error on dev nbd5, logical block 0, async page read
[  175.610955][T13871] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  175.614590][T13871] Buffer I/O error on dev nbd5, logical block 1, async page read
[  175.618509][T13871] ldm_validate_partition_table(): Disk read failed.
[  175.621651][T13871] Dev nbd5: unable to read RDB block 0
[  175.624390][T13871]  nbd5: unable to read partition table
[  175.627446][T14577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2371'.
[  175.630819][T14577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2371'.
[  175.640449][T13871] ldm_validate_partition_table(): Disk read failed.
[  175.643493][T13871] Dev nbd5: unable to read RDB block 0
[  175.647012][T13871]  nbd5: unable to read partition table
[  175.783019][T14592] netlink: 'syz.1.2376': attribute type 12 has an invalid length.
[  175.786760][T14592] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2376'.
[  175.918132][T14597] bridge0: failed insert local address into bridge forwarding table
[  176.030725][T14607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2381'.
[  176.138518][T14613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2384'.
[  176.141873][T14613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2384'.
[  176.144908][T14613] IPVS: Unknown mcast interface: batadv0
[  176.169815][T14615] syzkaller1: entered promiscuous mode
[  176.171654][T14615] syzkaller1: entered allmulticast mode
[  176.320304][T14632] netlink: 'syz.1.2390': attribute type 2 has an invalid length.
[  176.324041][T14626] netlink: 'syz.2.2388': attribute type 1 has an invalid length.
[  176.325054][T14632] ave_0: entered promiscuous mode
[  176.339409][T14626] bond12: entered promiscuous mode
[  176.341965][T14626] 8021q: adding VLAN 0 to HW filter on device bond12
[  176.345240][T14635] bridge0: failed insert local address into bridge forwarding table
[  176.345420][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  176.345525][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  176.356044][T14635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2391'.
[  176.362166][T14626] 8021q: adding VLAN 0 to HW filter on device bond12
[  176.365550][T14626] bond12: (slave vxcan1): The slave device specified does not support setting the MAC address
[  176.369844][T14626] bond12: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[  176.375929][T14626] bond12: (slave vxcan1): making interface the new active one
[  176.379132][T14626] vxcan1: entered promiscuous mode
[  176.381894][T14626] bond12: (slave vxcan1): Enslaving as an active interface with an up link
[  176.386326][T14635] bridge0 (unregistering): left allmulticast mode
[  176.493474][T14641] tipc: Disabling bearer <udp:syz2>
[  176.509275][T14643] macvlan2: entered promiscuous mode
[  176.544607][T14648] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.607949][T14653] netlink: 'syz.2.2397': attribute type 13 has an invalid length.
[  176.611417][T14653] netlink: 'syz.2.2397': attribute type 17 has an invalid length.
[  176.614926][T14653] lo: left promiscuous mode
[  176.618170][T14653] tunl0: left promiscuous mode
[  176.621056][T14653] gre0: left promiscuous mode
[  176.624751][T14653] gretap0: left promiscuous mode
[  176.627986][T14653] erspan0: left promiscuous mode
[  176.633319][T14653] ip_vti0: left promiscuous mode
[  176.636239][T14653] ip6_vti0: left promiscuous mode
[  176.646199][T14653] sit0: left promiscuous mode
[  176.650363][T14653] ip6tnl0: left promiscuous mode
[  176.652442][T14653] ip6gre0: left promiscuous mode
[  176.654511][T14653] ip6gretap0: left promiscuous mode
[  176.658226][T14653] team0: left promiscuous mode
[  176.660293][T14653] 8021q: adding VLAN 0 to HW filter on device team0
[  176.662758][T14653] dummy0: left promiscuous mode
[  176.665038][T14653] nlmon0: left promiscuous mode
[  176.671524][T14653] caif0: left promiscuous mode
[  176.673169][T14653] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  176.698819][T14657] bond11: (slave gretap2): Releasing active interface
[  176.701672][T14657] bond11: (slave gretap2): the permanent HWaddr of slave - 92:e9:d8:59:f4:05 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  176.708918][T14657] bond11: (slave gretap3): making interface the new active one
[  176.715165][T14657] bond11: (slave gretap3): Releasing active interface
[  176.729242][T14657] team0: Mode changed to "broadcast"
[  176.734516][T14657] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[  176.803136][T14666] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.940854][T14670] wg2: left promiscuous mode
[  177.754569][T14692] netlink: zone id is out of range
[  177.757799][T14692] netlink: zone id is out of range
[  177.759634][T14692] netlink: zone id is out of range
[  177.939074][T14715] erspan0: entered promiscuous mode
[  177.943880][T14715] erspan0: left promiscuous mode
[  178.310638][T14768] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  178.313347][T14768] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  178.424045][T14785] bond0 (unregistering): Released all slaves
[  178.701482][T14820] block nbd0: must specify backend
[  179.807744][T14903] validate_nla: 11 callbacks suppressed
[  179.807760][T14903] netlink: 'syz.2.2474': attribute type 23 has an invalid length.
[  180.005195][T14908] netlink: 'syz.0.2476': attribute type 7 has an invalid length.
[  180.015501][T14908] netlink: 'syz.0.2476': attribute type 8 has an invalid length.
[  180.018447][T14908] netlink: 'syz.0.2476': attribute type 15 has an invalid length.
[  180.024020][T14908] netlink: 'syz.0.2476': attribute type 1 has an invalid length.
[  180.027795][T14908] __nla_validate_parse: 26 callbacks suppressed
[  180.027807][T14908] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2476'.
[  180.072082][T14920] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2480'.
[  180.076910][T14920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2480'.
[  180.081097][T14920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2480'.
[  180.088065][T14920] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2480'.
[  180.092859][T14920] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2480'.
[  180.127039][T14923] netlink: 'syz.1.2481': attribute type 4 has an invalid length.
[  180.162491][T14925] netlink: 'syz.1.2482': attribute type 12 has an invalid length.
[  180.165830][T14925] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2482'.
[  180.226786][T14929] unknown channel width for channel at 909000KHz?
[  180.229485][T14929] unknown channel width for channel at 909000KHz?
[  180.232311][T14929] unknown channel width for channel at 909000KHz?
[  180.449276][T14944] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2488'.
[  181.036342][T14955] bridge0: port 1(erspan0) entered blocking state
[  181.038575][T14955] bridge0: port 1(erspan0) entered disabled state
[  181.041125][T14955] erspan0: entered allmulticast mode
[  181.043621][T14955] erspan0: entered promiscuous mode
[  181.046445][T14955] erspan0: left allmulticast mode
[  181.048163][T14955] erspan0: left promiscuous mode
[  181.049893][T14955] bridge0: port 1(erspan0) entered disabled state
[  181.182400][T14959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2492'.
[  181.258902][T14968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2495'.
[  181.279093][T14968] team0: Unable to change to the same mode the team is in
[  181.306408][T14973] netlink: 'syz.1.2497': attribute type 1 has an invalid length.
[  181.309013][T14973] netlink: 'syz.1.2497': attribute type 1 has an invalid length.
[  181.351882][T14976] net_ratelimit: 31 callbacks suppressed
[  181.351896][T14976] openvswitch: netlink: Tunnel attr 14 has unexpected len 1 expected 0
[  181.359771][T14976] syz.2.2498 uses old SIOCAX25GETINFO
[  181.489595][T14981] syzkaller1: entered allmulticast mode
[  181.919023][T14996] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  182.044704][T15018] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  182.158273][T15044] netlink: 'syz.1.2515': attribute type 1 has an invalid length.
[  182.168376][T15044] 8021q: adding VLAN 0 to HW filter on device bond14
[  182.175042][T15044] 8021q: adding VLAN 0 to HW filter on device bond14
[  182.178468][T15044] bond14: (slave vcan0): The slave device specified does not support setting the MAC address
[  182.182986][T15044] bond14: (slave vcan0): Error -95 calling set_mac_address
[  182.213880][T15052] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  182.226177][T15053] macvlan3: entered promiscuous mode
[  182.227928][T15053] macvlan3: entered allmulticast mode
[  182.230113][T15053] bond14: entered promiscuous mode
[  182.232124][T15053] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  182.238332][T15053] bond14: left promiscuous mode
[  182.325819][T15072] bond12: (slave vxcan1): Releasing backup interface
[  182.328002][T15072] vxcan1: left promiscuous mode
[  182.339885][T15072] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  182.343071][T15072] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  182.346646][T15072] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  183.218261][T15087] 8021q: VLANs not supported on xfrm0
[  183.383555][T15106] bond2: option mode: unable to set because the bond device is up
[  183.620423][  T128] block nbd0: Possible stuck request ffff88803d4d0000: control (read@0,1024B). Runtime 30 seconds
[  183.623933][  T128] block nbd0: Possible stuck request ffff88803d4d0200: control (read@1024,1024B). Runtime 30 seconds
[  183.627500][  T128] block nbd0: Possible stuck request ffff88803d4d0400: control (read@2048,1024B). Runtime 30 seconds
[  183.631132][  T128] block nbd0: Possible stuck request ffff88803d4d0600: control (read@3072,1024B). Runtime 30 seconds
[  183.734274][T15119] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20000
[  183.737540][T15119] IPVS: set_ctl: invalid protocol: 136 100.1.1.0:20003
[  183.740409][T15119] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20000
[  184.212483][T15130] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.260946][T15130] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.318628][T15130] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.358697][T15130] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.402876][ T5849] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  184.410375][ T5849] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  184.413706][ T5849] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  184.421940][ T5849] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  184.500546][T15138] siw: device registration error -23
[  185.396659][T15151] __nla_validate_parse: 21 callbacks suppressed
[  185.396670][T15151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2548'.
[  185.484436][T15160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2551'.
[  185.513090][T15160] bridge0: port 1(veth19) entered blocking state
[  185.515364][T15160] bridge0: port 1(veth19) entered disabled state
[  185.517555][T15160] veth19: entered allmulticast mode
[  185.519842][T15160] veth19: entered promiscuous mode
[  185.530389][T15160] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2551'.
[  185.563122][T15175] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.574458][T15176] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2556'.
[  185.603275][T15178] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2558'.
[  185.610274][T15178] netlink: zone id is out of range
[  185.611854][T15178] netlink: zone id is out of range
[  185.613638][T15178] netlink: zone id is out of range
[  185.615236][T15178] netlink: zone id is out of range
[  185.617167][T15178] netlink: zone id is out of range
[  185.619262][T15178] netlink: get zone limit has 8 unknown bytes
[  185.645803][T15178] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2558'.
[  185.682561][T15190] validate_nla: 7 callbacks suppressed
[  185.682571][T15190] netlink: 'syz.2.2561': attribute type 1 has an invalid length.
[  185.696335][T15190] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2561'.
[  185.729654][T15193] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2562'.
[  185.744042][T15201] nbd: couldn't find device at index 2
[  185.759354][T15203] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  185.867554][T15205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2566'.
[  186.139277][T15219] netlink: 'syz.2.2569': attribute type 1 has an invalid length.
[  186.141938][T15219] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2569'.
[  186.485245][T15253] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  186.488402][T15253] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  186.547282][T15265] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  186.596521][T15276] netlink: 'syz.0.2587': attribute type 1 has an invalid length.
[  186.646642][T15280] netlink: 'syz.2.2589': attribute type 1 has an invalid length.
[  186.984048][T15315] tipc: MTU too low for tipc bearer
[  187.008732][T15322] netlink: 'syz.2.2602': attribute type 1 has an invalid length.
[  187.015326][T15323] netlink: 'syz.2.2602': attribute type 1 has an invalid length.
[  187.225794][T15346] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  187.228868][T15346] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.233409][T15347] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  187.236516][T15347] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.261146][T15351] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  187.264243][T15351] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.490577][T15355] netlink: 'syz.1.2611': attribute type 1 has an invalid length.
[  187.500306][T15355] 8021q: adding VLAN 0 to HW filter on device bond15
[  187.585740][T15364] netlink: 'syz.1.2615': attribute type 10 has an invalid length.
[  187.685572][T15375] netlink: del zone limit has 4 unknown bytes
[  188.131430][T15392] netlink: 'syz.0.2623': attribute type 10 has an invalid length.
[  188.163646][T15395] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  188.174374][T15392] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.209123][T15395] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  188.278232][T15395] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  188.319216][T15395] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  188.422780][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  188.435203][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  188.439966][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  188.450995][T14229] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  188.484003][T15439] netlink: 'syz.1.2634': attribute type 1 has an invalid length.
[  188.513246][T15443] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  188.517299][T15443] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  188.522076][T15443] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  188.537628][T15441] 8021q: adding VLAN 0 to HW filter on device bond20
[  188.545148][T15441] ipvlan1: entered allmulticast mode
[  188.547611][T15441] bond20: entered allmulticast mode
[  188.633692][T15451] erspan0: left allmulticast mode
[  188.643247][T15451] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  188.669366][T15451] geneve3: entered promiscuous mode
[  188.671694][T15451] geneve3: entered allmulticast mode
[  188.674721][ T5883] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  188.678343][ T5883] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  188.684117][ T5883] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  188.691782][ T5883] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  188.757056][T15467] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  188.811381][T15479] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  188.923934][T15489] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  189.042724][T15498] syz1: rxe_newlink: already configured on bond_slave_0
[  189.058684][T15499] veth19: left allmulticast mode
[  189.060877][T15499] veth19: left promiscuous mode
[  189.063019][T15499] bridge0: port 1(veth19) entered disabled state
[  189.146796][T15502] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  189.149962][T15502] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  189.680140][T15564] sctp: [Deprecated]: syz.0.2669 (pid 15564) Use of int in max_burst socket option.
[  189.680140][T15564] Use struct sctp_assoc_value instead
[  189.685235][T15563] sctp: [Deprecated]: syz.0.2669 (pid 15563) Use of int in max_burst socket option.
[  189.685235][T15563] Use struct sctp_assoc_value instead
[  189.713075][T15566] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  189.883070][T15575] 8021q: adding VLAN 0 to HW filter on device bond16
[  190.283397][T15609] netlink: 'syz.1.2683': attribute type 11 has an invalid length.
[  190.368822][ T5883] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  190.418326][T15622] netlink: 'syz.1.2686': attribute type 11 has an invalid length.
[  190.422695][T15622] __nla_validate_parse: 42 callbacks suppressed
[  190.422704][T15622] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2686'.
[  190.638565][T15641] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2691'.
[  190.647683][T15642] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2691'.
[  190.727003][T15649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2694'.
[  190.731023][T15649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2694'.
[  190.771097][T15653] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2693'.
[  190.995139][T15668] validate_nla: 13 callbacks suppressed
[  190.995153][T15668] netlink: 'syz.2.2699': attribute type 1 has an invalid length.
[  191.000856][T15668] netlink: 'syz.2.2699': attribute type 1 has an invalid length.
[  191.005023][T15668] netlink: 'syz.2.2699': attribute type 10 has an invalid length.
[  191.229815][T15677] bridge0: port 1(batadv0) entered blocking state
[  191.232117][T15677] bridge0: port 1(batadv0) entered disabled state
[  191.234390][T15677] batadv0: entered allmulticast mode
[  191.238444][T15677] batadv0: entered promiscuous mode
[  191.331165][T15691] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2706'.
[  191.339779][T15690] netem: incorrect gi model size
[  191.342073][T15690] netem: change failed
[  191.354631][T15694] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  191.359327][   T95] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  191.395148][T15698] netlink: 'syz.2.2709': attribute type 2 has an invalid length.
[  191.420934][T15698] : entered promiscuous mode
[  191.460612][T15704] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2712'.
[  191.539417][T15712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2715'.
[  191.542466][T15712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2715'.
[  191.547594][T15712] netlink: 'syz.1.2715': attribute type 5 has an invalid length.
[  191.576500][T15715] netlink: 'syz.1.2716': attribute type 62 has an invalid length.
[  191.745684][ T5883] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  191.749675][ T5883] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  192.415630][   T95] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  194.604868][T15739] dvmrp8: entered allmulticast mode
[  194.686271][T15743] batadv0: left allmulticast mode
[  194.690738][T15743] batadv0: left promiscuous mode
[  194.693369][T15743] bridge0: port 1(batadv0) entered disabled state
[  194.699996][T15738] dvmrp8: left allmulticast mode
[  194.715865][ T9631] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  194.760059][T15747] netlink: 'syz.2.2725': attribute type 10 has an invalid length.
[  194.764525][T15747] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  194.768668][T15747] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  194.775351][T15749] netlink: 'syz.1.2726': attribute type 1 has an invalid length.
[  194.834233][T15758] netlink: 'syz.0.2729': attribute type 1 has an invalid length.
[  194.838336][T15758] netlink: 'syz.0.2729': attribute type 11 has an invalid length.
[  194.878634][T15760] net_ratelimit: 4 callbacks suppressed
[  194.878647][T15760] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  194.904547][T15764] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  195.542231][T15794] openvswitch: netlink: Unknown key attributes 2
[  195.641329][T15802] __nla_validate_parse: 19 callbacks suppressed
[  195.641339][T15802] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2743'.
[  195.651439][T15803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2743'.
[  195.655583][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  195.659664][T15802] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2743'.
[  195.662829][T15803] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2743'.
[  195.673858][T15804] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  195.677516][T15804] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  195.898268][T15817] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2748'.
[  195.946945][T15819] bpq0: entered promiscuous mode
[  195.952362][T15819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2749'.
[  195.956756][T15819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2749'.
[  196.006642][T15825] pim6reg: entered allmulticast mode
[  196.012366][T15825] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2752'.
[  196.018290][T15825] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2752'.
[  196.021196][T15825] validate_nla: 7 callbacks suppressed
[  196.021204][T15825] netlink: 'syz.1.2752': attribute type 6 has an invalid length.
[  196.027040][T15825] netlink: 'syz.1.2752': attribute type 5 has an invalid length.
[  196.030451][T15825] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2752'.
[  196.033919][T15825] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  196.038801][T15825] netlink: 'syz.1.2752': attribute type 1 has an invalid length.
[  196.110303][T15828] bond2: option mode: unable to set because the bond device is up
[  196.130237][T15832] netlink: 'syz.1.2754': attribute type 7 has an invalid length.
[  196.145506][ T9631] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  196.448680][T15863] netlink: 'syz.1.2765': attribute type 1 has an invalid length.
[  196.555184][T15876] can: request_module (can-proto-4) failed.
[  196.595031][T15889] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  196.642829][T15899] netlink: 'syz.0.2774': attribute type 1 has an invalid length.
[  196.745344][T15906] nbd6: detected capacity change from 0 to 127
[  196.761462][   T55] block nbd6: Receive control failed (result -104)
[  196.862705][T15925] netlink: zone id is out of range
[  196.867729][T15925] netlink: zone id is out of range
[  196.870020][T15925] netlink: zone id is out of range
[  196.872340][T15925] netlink: zone id is out of range
[  196.874568][T15925] netlink: zone id is out of range
[  196.876423][T15925] netlink: zone id is out of range
[  197.051325][T15948] bridge0: failed insert local address into bridge forwarding table
[  197.559692][T15985] netlink: 'syz.0.2794': attribute type 5 has an invalid length.
[  197.562452][T15984] netlink: 'syz.0.2794': attribute type 5 has an invalid length.
[  197.586036][T15987] netlink: 'syz.0.2795': attribute type 10 has an invalid length.
[  197.588718][T15987] dummy0: entered promiscuous mode
[  197.590437][T15987] dummy0: entered allmulticast mode
[  197.592564][T15987] bridge0: port 1(dummy0) entered blocking state
[  197.594786][T15987] bridge0: port 1(dummy0) entered disabled state
[  197.654011][T15993] netlink: 'syz.0.2798': attribute type 1 has an invalid length.
[  197.850160][T16021] smc: removing ib device syz1
[  197.906022][T16027] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  197.912890][T16027] veth0_to_bridge: entered promiscuous mode
[  197.920032][T16027] veth0_to_bridge: entered allmulticast mode
[  197.958901][T16030] sctp: [Deprecated]: syz.0.2807 (pid 16030) Use of int in maxseg socket option.
[  197.958901][T16030] Use struct sctp_assoc_value instead
[  199.091349][T16086] ave_0: entered promiscuous mode
[  199.595971][ T5891] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  200.045349][T16171] 8021q: adding VLAN 0 to HW filter on device bond22
[  200.059409][T16176] tap0: tun_chr_ioctl cmd 1074025680
[  200.062324][T16176] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  200.067204][T16176] mac80211_hwsim hwsim3 D: renamed from syzkaller0 (while UP)
[  200.070898][T16176] tipc: Disabling bearer <eth:syzkaller0>
[  200.159241][T16189] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  200.161882][T16189] CPU: 1 UID: 0 PID: 16189 Comm: syz.1.2858 Not tainted syzkaller #0 PREEMPT(full) 
[  200.161893][T16189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  200.161897][T16189] Call Trace:
[  200.161901][T16189]  <TASK>
[  200.161904][T16189]  dump_stack_lvl+0x189/0x250
[  200.161917][T16189]  ? __pfx_dump_stack_lvl+0x10/0x10
[  200.161926][T16189]  ? __pfx__printk+0x10/0x10
[  200.161935][T16189]  ? kernfs_root+0x1c/0x230
[  200.161944][T16189]  ? kernfs_path_from_node+0x2f/0x290
[  200.161951][T16189]  ? kernfs_path_from_node+0x250/0x290
[  200.161958][T16189]  ? kernfs_path_from_node+0x2f/0x290
[  200.161966][T16189]  sysfs_warn_dup+0x8e/0xa0
[  200.161973][T16189]  sysfs_do_create_link_sd+0xc0/0x110
[  200.161980][T16189]  device_add_class_symlinks+0x1cf/0x240
[  200.161988][T16189]  device_add+0x475/0xb50
[  200.161995][T16189]  wiphy_register+0x1ba6/0x28d0
[  200.162008][T16189]  ? __pfx_wiphy_register+0x10/0x10
[  200.162017][T16189]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  200.162025][T16189]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  200.162033][T16189]  ieee80211_register_hw+0x3425/0x4080
[  200.162043][T16189]  ? ieee80211_register_hw+0x1461/0x4080
[  200.162052][T16189]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  200.162059][T16189]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  200.162070][T16189]  ? __hrtimer_setup+0x187/0x210
[  200.162077][T16189]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  200.162088][T16189]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  200.162100][T16189]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  200.162108][T16189]  ? trace_kmalloc+0x1f/0xd0
[  200.162117][T16189]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  200.162127][T16189]  ? kstrndup+0xbf/0x160
[  200.162135][T16189]  hwsim_new_radio_nl+0xea4/0x1b10
[  200.162144][T16189]  ? __pfx___nla_validate_parse+0x10/0x10
[  200.162157][T16189]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  200.162166][T16189]  ? __nla_parse+0x40/0x60
[  200.162177][T16189]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  200.162186][T16189]  genl_family_rcv_msg_doit+0x215/0x300
[  200.162195][T16189]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  200.162205][T16189]  ? bpf_lsm_capable+0x9/0x20
[  200.162214][T16189]  ? security_capable+0x7e/0x2e0
[  200.162224][T16189]  genl_rcv_msg+0x60e/0x790
[  200.162233][T16189]  ? __pfx_genl_rcv_msg+0x10/0x10
[  200.162239][T16189]  ? __kasan_slab_alloc+0x6c/0x80
[  200.162248][T16189]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  200.162257][T16189]  ? __netlink_lookup+0xbd/0x810
[  200.162262][T16189]  ? rcu_is_watching+0x15/0xb0
[  200.162270][T16189]  netlink_rcv_skb+0x208/0x470
[  200.162280][T16189]  ? __pfx_genl_rcv_msg+0x10/0x10
[  200.162287][T16189]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  200.162298][T16189]  ? lock_release+0x4b/0x3e0
[  200.162309][T16189]  ? down_read+0x1ad/0x2e0
[  200.162315][T16189]  genl_rcv+0x28/0x40
[  200.162321][T16189]  netlink_unicast+0x82f/0x9e0
[  200.162331][T16189]  ? __pfx_netlink_unicast+0x10/0x10
[  200.162347][T16189]  ? netlink_sendmsg+0x642/0xb30
[  200.162356][T16189]  ? skb_put+0x11b/0x210
[  200.162388][T16189]  netlink_sendmsg+0x805/0xb30
[  200.162400][T16189]  ? __pfx_netlink_sendmsg+0x10/0x10
[  200.162410][T16189]  ? futex_unqueue+0x22/0x240
[  200.162418][T16189]  ? aa_sock_msg_perm+0xf1/0x1d0
[  200.162424][T16189]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  200.162432][T16189]  ? __pfx_netlink_sendmsg+0x10/0x10
[  200.162442][T16189]  __sock_sendmsg+0x21c/0x270
[  200.162452][T16189]  ____sys_sendmsg+0x505/0x830
[  200.162461][T16189]  ? __pfx_____sys_sendmsg+0x10/0x10
[  200.162469][T16189]  ? import_iovec+0x74/0xa0
[  200.162477][T16189]  ___sys_sendmsg+0x21f/0x2a0
[  200.162484][T16189]  ? __pfx____sys_sendmsg+0x10/0x10
[  200.162492][T16189]  ? futex_wait+0x285/0x360
[  200.162504][T16189]  ? __fget_files+0x2a/0x420
[  200.162514][T16189]  ? __fget_files+0x3a0/0x420
[  200.162525][T16189]  __x64_sys_sendmsg+0x19b/0x260
[  200.162532][T16189]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  200.162540][T16189]  ? rcu_is_watching+0x15/0xb0
[  200.162547][T16189]  ? rcu_is_watching+0x15/0xb0
[  200.162554][T16189]  do_syscall_64+0xfa/0x3b0
[  200.162564][T16189]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.162571][T16189]  ? exc_page_fault+0x9f/0xf0
[  200.162580][T16189]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.162587][T16189] RIP: 0033:0x7ff91d58ebe9
[  200.162594][T16189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  200.162601][T16189] RSP: 002b:00007ff91e3fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  200.162611][T16189] RAX: ffffffffffffffda RBX: 00007ff91d7c5fa0 RCX: 00007ff91d58ebe9
[  200.162616][T16189] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  200.162620][T16189] RBP: 00007ff91d611e19 R08: 0000000000000000 R09: 0000000000000000
[  200.162625][T16189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  200.162629][T16189] R13: 00007ff91d7c6038 R14: 00007ff91d7c5fa0 R15: 00007ffedb4795c8
[  200.162636][T16189]  </TASK>
[  200.375268][T16195] net_ratelimit: 21 callbacks suppressed
[  200.378313][T16195] openvswitch: netlink: Key type 126 is out of range max 32
[  200.408979][T16197] IPVS: length: 49 != 24
[  200.570156][T16219] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  200.575503][ T5891] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  200.633811][T16219] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  200.637408][T16219] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  200.665722][T16222] __nla_validate_parse: 43 callbacks suppressed
[  200.665732][T16222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2868'.
[  200.674656][T16222] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  200.760751][T16223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2868'.
[  201.244667][T16227] tipc: Enabling of bearer <eth:team0> rejected, max 3 bearers permitted
[  201.608840][T16241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2875'.
[  201.612601][T16241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2875'.
[  201.720652][T16253] vxcan1: entered allmulticast mode
[  201.722708][T16253] vxcan1: left allmulticast mode
[  201.957232][T16258] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2880'.
[  202.169388][T16264] vxcan1: entered allmulticast mode
[  202.171432][T16265] vxcan1: left allmulticast mode
[  202.173207][T16265] pim6reg: left allmulticast mode
[  202.290392][T16268] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2883'.
[  202.340902][T16274] sctp: [Deprecated]: syz.0.2886 (pid 16274) Use of int in max_burst socket option.
[  202.340902][T16274] Use struct sctp_assoc_value instead
[  202.377159][T16274] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  202.382535][T16274] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  202.397728][T16275] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2885'.
[  202.414699][T16278] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  202.432972][T16280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2888'.
[  202.451285][T16284] validate_nla: 43 callbacks suppressed
[  202.451295][T16284] netlink: 'syz.0.2889': attribute type 1 has an invalid length.
[  202.513019][T16294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2892'.
[  202.519418][T16294] netlink: 'syz.0.2892': attribute type 3 has an invalid length.
[  202.522032][T16294] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2892'.
[  202.541558][T16296] IPVS: stopping backup sync thread 11871 ...
[  202.555934][T16299] netlink: 'syz.0.2894': attribute type 1 has an invalid length.
[  202.692976][T16313] netlink: 'syz.2.2898': attribute type 1 has an invalid length.
[  202.701502][T16313] 8021q: adding VLAN 0 to HW filter on device bond14
[  202.704123][T16304] IPv6: Can't replace route, no match found
[  202.784209][T16319] bond24: (slave geneve4): Opening slave failed
[  202.939243][T16350] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  202.947859][T16345] netlink: 'syz.0.2907': attribute type 1 has an invalid length.
[  202.951069][T16345] netlink: 'syz.0.2907': attribute type 1 has an invalid length.
[  202.954384][T16345] netlink: 'syz.0.2907': attribute type 2 has an invalid length.
[  203.038003][T16358] bond0: option mode: unable to set because the bond device is up
[  203.041579][T16363] bond0: option mode: unable to set because the bond device is up
[  203.044624][T16362] netlink: 'syz.2.2912': attribute type 1 has an invalid length.
[  203.047630][T16363] bridge0: port 1(dummy0) entered disabled state
[  203.053454][T16363] bond18: (slave gretap3): Releasing active interface
[  203.080796][T16362] 8021q: adding VLAN 0 to HW filter on device bond15
[  203.192183][T16380] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  203.194689][T16381] syzkaller0: entered promiscuous mode
[  203.198628][T16381] syzkaller0: entered allmulticast mode
[  203.203284][T16381] tipc: Resetting bearer <eth:syzkaller0>
[  203.209008][T16379] tipc: Resetting bearer <eth:syzkaller0>
[  203.213387][T16379] tipc: Disabling bearer <eth:syzkaller0>
[  203.555448][T16393] block nbd7: server does not support multiple connections per device.
[  203.559202][T16393] block nbd7: shutting down sockets
[  203.723025][T16398] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  203.788850][T16403] netlink: 'syz.1.2925': attribute type 10 has an invalid length.
[  203.792420][T16403] netlink: 'syz.1.2925': attribute type 10 has an invalid length.
[  203.864414][T16420] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  204.717969][T16436] netlink: zone id is out of range
[  204.722263][T16439] netlink: zone id is out of range
[  204.724427][T16439] netlink: zone id is out of range
[  204.730804][T16436] netlink: zone id is out of range
[  204.730993][T16439] netlink: zone id is out of range
[  204.733989][T16436] netlink: zone id is out of range
[  204.744361][T16439] netlink: zone id is out of range
[  204.755676][T16436] netlink: zone id is out of range
[  204.916918][T16464] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  204.958252][T16464] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  205.001154][T16464] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  205.037592][T16464] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  205.082357][T16501] 8021q: adding VLAN 0 to HW filter on device team0
[  205.137135][ T5883] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  205.141927][ T5883] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  205.148174][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  205.156156][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  205.171478][T16508] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  205.175612][T16508] syzkaller0: entered promiscuous mode
[  205.177517][T16508] syzkaller0: entered allmulticast mode
[  205.188913][T16508] tipc: Resetting bearer <eth:syzkaller0>
[  205.192146][T16507] tipc: Resetting bearer <eth:syzkaller0>
[  205.196449][T16507] tipc: Disabling bearer <eth:syzkaller0>
[  205.285008][T16525] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  205.340196][T16527] 8021q: adding VLAN 0 to HW filter on device bond25
[  205.343879][T16527] bond25: (slave wlan0): Opening slave failed
[  205.347888][T16527] !: renamed from dummy0 (while UP)
[  205.375396][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  205.469350][T16559] net_ratelimit: 34 callbacks suppressed
[  205.469360][T16559] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  205.479922][T16556] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  205.483222][T16556] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  205.768527][T16580] smc: net device bond0 applied user defined pnetid SYZ2
[  205.868415][T16608] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  205.940242][T16621] __nla_validate_parse: 33 callbacks suppressed
[  205.940257][T16621] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2993'.
[  205.978251][T16623] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2994'.
[  205.983401][T16623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2994'.
[  206.078469][T16631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2997'.
[  206.228068][T16641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3000'.
[  206.231595][T16641] netlink: 159784 bytes leftover after parsing attributes in process `syz.2.3000'.
[  206.287799][T16656] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3005'.
[  206.291276][T16656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3005'.
[  206.295902][T16656] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3005'.
[  206.299520][T16656] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3005'.
[  206.320333][T16661] lo speed is unknown, defaulting to 1000
[  206.322191][T16661] lo speed is unknown, defaulting to 1000
[  206.324161][T16661] lo speed is unknown, defaulting to 1000
[  206.328400][T16661] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  206.332476][T16661] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  206.347288][T16661] lo speed is unknown, defaulting to 1000
[  206.349990][T16661] lo speed is unknown, defaulting to 1000
[  206.352952][T16661] lo speed is unknown, defaulting to 1000
[  207.198777][T16680] team0: Mode changed to "broadcast"
[  207.201144][T16680] tipc: Enabled bearer <eth:team0>, priority 0
[  207.236055][ T5876] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  207.406386][T16704] pim6reg1: entered promiscuous mode
[  207.408659][T16704] pim6reg1: entered allmulticast mode
[  207.493344][T16703] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  207.539003][ T5876] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  207.561001][T16718] validate_nla: 18 callbacks suppressed
[  207.561015][T16718] netlink: 'syz.1.3021': attribute type 1 has an invalid length.
[  207.570592][T16718] netlink: 'syz.1.3021': attribute type 1 has an invalid length.
[  207.581237][T16716] netlink: 'syz.0.3020': attribute type 12 has an invalid length.
[  207.661536][T16726] netlink: zone id is out of range
[  207.663459][T16726] netlink: zone id is out of range
[  207.666071][T16726] netlink: zone id is out of range
[  207.668356][T16726] netlink: zone id is out of range
[  207.671022][T16726] netlink: zone id is out of range
[  207.674482][T16726] netlink: zone id is out of range
[  207.675095][T16721] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  207.676965][T16726] netlink: zone id is out of range
[  207.683028][T16726] netlink: zone id is out of range
[  207.708194][T16721] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  207.708848][T16726] netlink: set zone limit has 4 unknown bytes
[  207.779610][T16721] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  207.830669][T16721] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  207.840872][T16739] netlink: 'syz.0.3027': attribute type 1 has an invalid length.
[  207.894550][ T5849] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  207.904893][ T5849] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  207.918035][ T5849] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  207.925368][ T5849] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  207.943212][ T9631] lo speed is unknown, defaulting to 1000
[  207.947975][T16752] netlink: 'syz.1.3032': attribute type 10 has an invalid length.
[  208.023803][T16770] dvmrp8: entered allmulticast mode
[  208.028022][T16772] netlink: 'syz.1.3037': attribute type 1 has an invalid length.
[  208.062958][T16776] netlink: 'syz.0.3035': attribute type 9 has an invalid length.
[  208.069988][   T56] block nbd7: Receive control failed (result -32)
[  208.188840][T16791] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  208.217399][T16791] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  208.248781][T16791] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  208.280076][T16797] netlink: 'syz.1.3042': attribute type 13 has an invalid length.
[  208.283178][T16797] netlink: 'syz.1.3042': attribute type 17 has an invalid length.
[  208.308039][T16791] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  208.315102][T16797] lo speed is unknown, defaulting to 1000
[  208.381271][ T5883] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  208.390664][ T5883] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  208.398951][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  208.406511][T14229] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  208.453363][T16807] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  208.488686][T16807] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  208.550381][T16807] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  208.608847][T16807] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  208.731937][T16746] dvmrp8: left allmulticast mode
[  208.777493][T16759] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  208.779905][T16759] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  208.783436][T16759] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  208.786140][T16759] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  208.968185][T16820] lo speed is unknown, defaulting to 1000
[  209.068569][T16824] IPv6: NLM_F_CREATE should be specified when creating new route
[  209.072726][T16824] netlink: 'syz.2.3050': attribute type 1 has an invalid length.
[  209.568472][T16831] IPVS: set_ctl: invalid protocol: 47731 172.20.20.187:20001
[  209.957420][T16839] 8021q: adding VLAN 0 to HW filter on device bond16
[  210.301330][T14229] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  210.308495][T14229] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  210.315203][T14229] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  210.321177][ T5849] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  210.801639][T16911] veth29: entered promiscuous mode
[  210.805632][T16911] bond17: (slave veth29): Enslaving as a backup interface with a down link
[  211.238945][T16941] __nla_validate_parse: 24 callbacks suppressed
[  211.238956][T16941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3082'.
[  211.284813][T16943] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  211.289663][T16943] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3083'.
[  211.418055][T16950] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3085'.
[  211.461148][T16953] net_ratelimit: 8 callbacks suppressed
[  211.461161][T16953] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  211.474445][T16953] netlink: 146772 bytes leftover after parsing attributes in process `syz.1.3086'.
[  211.530089][T16959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3088'.
[  211.567075][T16963] IPv4: Oversized IP packet from 127.202.26.0
[  211.601702][T16965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3091'.
[  211.627068][T16967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3092'.
[  211.703620][T16979] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  211.710561][T16981] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3099'.
[  211.739148][T16986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3101'.
[  211.860681][T17003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3107'.
[  211.915125][T17006] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  212.049626][T17016] lo speed is unknown, defaulting to 1000
[  212.248544][T17028] veth21: entered promiscuous mode
[  212.572751][T17062] tipc: MTU too low for tipc bearer
[  212.593957][T17064] netlink: zone id is out of range
[  212.596567][T17064] netlink: zone id is out of range
[  212.598282][T17064] netlink: zone id is out of range
[  212.599901][T17064] netlink: zone id is out of range
[  212.601529][T17064] netlink: get zone limit has 8 unknown bytes
[  212.702958][T17085] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  212.902333][T17105] openvswitch: netlink: Tunnel attr 16 has unexpected len 6 expected 0
[  212.946793][T17114] IPVS: set_ctl: invalid protocol: 1 100.1.1.0:20003
[  213.143078][T17131] dvmrp8: entered allmulticast mode
[  213.154101][T17132] lo speed is unknown, defaulting to 1000
[  213.172546][T17131] validate_nla: 39 callbacks suppressed
[  213.172557][T17131] netlink: 'syz.1.3150': attribute type 23 has an invalid length.
[  213.180588][T17130] dvmrp8: left allmulticast mode
[  213.453304][T17143] netlink: 'syz.1.3152': attribute type 4 has an invalid length.
[  213.680133][T17162] netlink: 'syz.0.3159': attribute type 1 has an invalid length.
[  213.681344][T17163] netlink: 'syz.0.3159': attribute type 1 has an invalid length.
[  213.683269][T17162] netlink: 'syz.0.3159': attribute type 2 has an invalid length.
[  213.688738][T17163] netlink: 'syz.0.3159': attribute type 2 has an invalid length.
[  213.700136][  T128] block nbd0: Possible stuck request ffff88803d4d0000: control (read@0,1024B). Runtime 60 seconds
[  213.704547][  T128] block nbd0: Possible stuck request ffff88803d4d0200: control (read@1024,1024B). Runtime 60 seconds
[  213.709419][  T128] block nbd0: Possible stuck request ffff88803d4d0400: control (read@2048,1024B). Runtime 60 seconds
[  213.714056][  T128] block nbd0: Possible stuck request ffff88803d4d0600: control (read@3072,1024B). Runtime 60 seconds
[  213.741677][T17167] netlink: 'syz.0.3160': attribute type 10 has an invalid length.
[  213.811776][T17177] netlink: 'syz.0.3162': attribute type 1 has an invalid length.
[  214.513316][T17205] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  214.532438][T17207] netlink: 'syz.1.3173': attribute type 3 has an invalid length.
[  214.638647][T17217] tc_dump_action: action bad kind
[  215.017747][T17266] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  215.027387][T17266] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  215.037680][T17271] _Z`Ԁ@S: entered promiscuous mode
[  215.041909][T17269] bridge0: port 1(batadv2) entered blocking state
[  215.044081][T17269] bridge0: port 1(batadv2) entered disabled state
[  215.050117][T17269] batadv2: entered allmulticast mode
[  215.052335][T17269] batadv2: entered promiscuous mode
[  215.066843][T17275] netlink: 'syz.0.3199': attribute type 7 has an invalid length.
[  215.086522][T17273] block nbd8: shutting down sockets
[  215.164786][T17292] bridge0: port 2(batadv3) entered blocking state
[  215.168147][T17292] bridge0: port 2(batadv3) entered disabled state
[  215.170815][T17292] batadv3: entered allmulticast mode
[  215.172959][T17292] batadv3: entered promiscuous mode
[  215.251088][T17308] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  215.439485][T17340] 8021q: adding VLAN 0 to HW filter on device bond18
[  215.452208][T17340] 8021q: adding VLAN 0 to HW filter on device bond18
[  215.454646][T17340] bond18: (slave vxcan3): The slave device specified does not support setting the MAC address
[  215.459276][T17340] bond18: (slave vxcan3): Error -95 calling set_mac_address
[  215.524588][   T13] syzkaller0: tun_net_xmit 76
[  215.528015][   T13] syzkaller0: tun_net_xmit 48
[  215.530976][T17345] syzkaller0: tun_net_xmit 76
[  215.532587][T17345] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  215.537783][T17344] tipc: Resetting bearer <eth:syzkaller0>
[  215.546813][   T13] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[  215.550576][   T13] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[  215.560542][T17344] tipc: Disabling bearer <eth:syzkaller0>
[  215.666677][   T13] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled
[  215.670301][   T13] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled
[  215.769027][T17356] tun0: tun_chr_ioctl cmd 2147767520
[  215.987753][T17363] 8021q: adding VLAN 0 to HW filter on device bond26
[  215.992158][T17363] bond26: (slave wlan0): Opening slave failed
[  215.995185][T17365] bond26: (slave wlan0): Opening slave failed
[  216.003210][T17363] vlan0: entered allmulticast mode
[  216.005992][T17363] veth1: entered allmulticast mode
[  216.009076][T17363] bond26: (slave vlan0): Opening slave failed
[  216.021545][T17370] veth0_to_bridge: left promiscuous mode
[  216.023613][T17370] veth0_to_team: left promiscuous mode
[  216.026079][T17370] veth5: left promiscuous mode
[  216.027677][T17370] gretap1: left promiscuous mode
[  216.029361][T17370] bond6: left promiscuous mode
[  216.030895][T17370] geneve4: left promiscuous mode
[  216.032677][T17370] hsr1: left promiscuous mode
[  216.034460][T17370] veth13: left promiscuous mode
[  216.037413][T17370] hsr2: left promiscuous mode
[  216.040064][T17370] vlan3: left promiscuous mode
[  216.042017][T17370] bond12: left promiscuous mode
[  216.044626][T17370] gtp1: left promiscuous mode
[  216.047841][T17370] macvlan2: left promiscuous mode
[  216.049905][T17370] vlan0: left promiscuous mode
[  216.052696][T17370] veth21: left promiscuous mode
[  216.233291][T17406] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4)
[  216.247144][T17410] team0: Port device dummy0 added
[  216.249859][T17410] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  216.259791][T17410] team0: Failed to send options change via netlink (err -105)
[  216.262681][T17410] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  216.265793][T17410] team0: Port device dummy0 removed
[  216.268574][ T1092] tipc: Resetting bearer <eth:team0>
[  216.327912][T17420] __nla_validate_parse: 436 callbacks suppressed
[  216.327925][T17420] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3246'.
[  216.334610][T17420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3246'.
[  216.339561][T17420] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3246'.
[  216.384537][T17422] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3247'.
[  216.426656][T17427] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.3248'.
[  216.481417][T17435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3250'.
[  216.485087][T17435] veth0_to_bond: entered allmulticast mode
[  216.489375][T17435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3250'.
[  216.493265][T17435] bond0: (slave rose0): Error: Device can not be enslaved while up
[  216.596154][T17444] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3255'.
[  216.600088][T17444] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3255'.
[  216.602659][T17446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3253'.
[  216.606881][T17446] net_ratelimit: 12 callbacks suppressed
[  216.606889][T17446] openvswitch: netlink: EtherType 0 is less than min 600
[  216.692722][T17457] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  216.761083][T17472] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  216.868844][T17484] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.021852][T17490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  217.267129][T17498] IPVS: length: 24 != 12312
[  217.436904][T17507] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.488453][T17509] openvswitch: netlink: Tunnel attr 16370 out of range max 16
[  217.551923][T17513] sctp: [Deprecated]: syz.2.3276 (pid 17513) Use of struct sctp_assoc_value in delayed_ack socket option.
[  217.551923][T17513] Use struct sctp_sack_info instead
[  217.558399][T17513] sctp: [Deprecated]: syz.2.3276 (pid 17513) Use of struct sctp_assoc_value in delayed_ack socket option.
[  217.558399][T17513] Use struct sctp_sack_info instead
[  217.599463][T17516] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.929368][T17547] lo speed is unknown, defaulting to 1000
[  217.994258][T17552] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  218.223990][T17569] validate_nla: 16 callbacks suppressed
[  218.223999][T17569] netlink: 'syz.0.3292': attribute type 2 has an invalid length.
[  218.228758][T17569] netlink: 'syz.0.3292': attribute type 1 has an invalid length.
[  218.246935][T17572] openvswitch: netlink: Multiple metadata blocks provided
[  218.432914][T17583] netlink: 'syz.0.3297': attribute type 1 has an invalid length.
[  218.436427][T17583] netlink: 'syz.0.3297': attribute type 1 has an invalid length.
[  218.805824][T17667] netlink: 'syz.2.3307': attribute type 16 has an invalid length.
[  218.813377][T17667] netlink: 'syz.2.3307': attribute type 3 has an invalid length.
[  218.861504][T17681] netlink: 'syz.1.3311': attribute type 9 has an invalid length.
[  218.899654][T17677] netlink: 'syz.2.3310': attribute type 1 has an invalid length.
[  218.929446][T17687] lo speed is unknown, defaulting to 1000
[  219.777471][T17715] netlink: 'syz.1.3317': attribute type 10 has an invalid length.
[  219.781889][T17715] team0: Port device geneve0 added
[  219.784074][T14229] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.790347][T14229] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.793250][T14229] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.815615][T14229] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.845138][T17724] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  219.849351][T17724] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  219.887268][T17726] netlink: 'syz.2.3321': attribute type 11 has an invalid length.
[  219.890678][T17726] netlink: 'syz.2.3321': attribute type 12 has an invalid length.
[  219.898868][T17728] team0: Device ipvlan1 failed to enter team mode
[  219.905037][T17728] team0: Device ipvlan1 failed to enter team mode
[  219.914836][T17731] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  220.013954][T17739] tipc: Resetting bearer <eth:team0>
[  220.020814][T17739] bond17: (slave veth29): Releasing backup interface
[  220.024614][T17739] batadv2: left allmulticast mode
[  220.026830][T17739] batadv2: left promiscuous mode
[  220.028575][T17739] bridge0: port 1(batadv2) entered disabled state
[  220.031715][T17739] batadv3: left allmulticast mode
[  220.033522][T17739] batadv3: left promiscuous mode
[  220.035586][ T5891] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  220.038806][T17739] bridge0: port 2(batadv3) entered disabled state
[  220.205798][T13092] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  220.696766][T17743] bridge0: port 1(batadv_slave_1) entered blocking state
[  220.699867][T17743] bridge0: port 1(batadv_slave_1) entered disabled state
[  220.703039][T17743] batadv_slave_1: entered allmulticast mode
[  220.707483][T17743] batadv_slave_1: entered promiscuous mode
[  220.711044][T17743] batadv_slave_1: left allmulticast mode
[  220.713530][T17743] batadv_slave_1: left promiscuous mode
[  220.716276][T17743] bridge0: port 1(batadv_slave_1) entered disabled state
[  220.856142][T17760] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.874633][T17763] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  220.921141][T17768] bond0: option mode: unable to set because the bond device is up
[  220.979595][T17774] lo speed is unknown, defaulting to 1000
[  221.006210][T17780] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  221.390855][T17805] __nla_validate_parse: 35 callbacks suppressed
[  221.390868][T17805] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3345'.
[  221.464780][T17813] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3347'.
[  221.622461][T17824] bond19: (slave vxcan3): The slave device specified does not support setting the MAC address
[  221.627844][T17824] bond19: (slave vxcan3): Error -95 calling set_mac_address
[  221.728961][T17830] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  221.732088][T17830] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  221.734590][T17830] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  221.739122][T17830] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3354'.
[  221.758972][T17832] ip6_vti0: entered allmulticast mode
[  221.763387][T17832] dvmrp8: entered allmulticast mode
[  221.774819][T17832] lo speed is unknown, defaulting to 1000
[  221.815814][T17831] ip6_vti0: left allmulticast mode
[  221.817769][T17831] dvmrp8: left allmulticast mode
[  221.880936][T17837] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3357'.
[  221.990698][T17840] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3358'.
[  222.078063][T17845] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  222.087442][T17845] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3360'.
[  222.168034][T17850] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  222.192076][T17850] lo speed is unknown, defaulting to 1000
[  222.559928][T17869] openvswitch: netlink: Missing valid actions attribute.
[  222.563684][T17869] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  222.610528][T17873] netlink: 20824 bytes leftover after parsing attributes in process `syz.2.3367'.
[  222.618139][T17873] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3367'.
[  222.673329][T17875] lo speed is unknown, defaulting to 1000
[  222.771271][T17882] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  222.776890][T17882] CPU: 0 UID: 0 PID: 17882 Comm: syz.0.3371 Not tainted syzkaller #0 PREEMPT(full) 
[  222.776913][T17882] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  222.776919][T17882] Call Trace:
[  222.776923][T17882]  <TASK>
[  222.776926][T17882]  dump_stack_lvl+0x189/0x250
[  222.776939][T17882]  ? __pfx_dump_stack_lvl+0x10/0x10
[  222.776947][T17882]  ? __pfx__printk+0x10/0x10
[  222.776956][T17882]  ? kernfs_root+0x1c/0x230
[  222.776964][T17882]  ? kernfs_path_from_node+0x2f/0x290
[  222.776971][T17882]  ? kernfs_path_from_node+0x250/0x290
[  222.776978][T17882]  ? kernfs_path_from_node+0x2f/0x290
[  222.776986][T17882]  sysfs_warn_dup+0x8e/0xa0
[  222.776993][T17882]  sysfs_do_create_link_sd+0xc0/0x110
[  222.777000][T17882]  device_add_class_symlinks+0x1cf/0x240
[  222.777008][T17882]  device_add+0x475/0xb50
[  222.777016][T17882]  wiphy_register+0x1ba6/0x28d0
[  222.777028][T17882]  ? __pfx_wiphy_register+0x10/0x10
[  222.777037][T17882]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  222.777046][T17882]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  222.777054][T17882]  ieee80211_register_hw+0x3425/0x4080
[  222.777064][T17882]  ? ieee80211_register_hw+0x1461/0x4080
[  222.777073][T17882]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  222.777085][T17882]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  222.777103][T17882]  ? __hrtimer_setup+0x187/0x210
[  222.777113][T17882]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  222.777128][T17882]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  222.777141][T17882]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  222.777169][T17882]  ? trace_kmalloc+0x1f/0xd0
[  222.777179][T17882]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  222.777189][T17882]  ? kstrndup+0xbf/0x160
[  222.777198][T17882]  hwsim_new_radio_nl+0xea4/0x1b10
[  222.777206][T17882]  ? __pfx___nla_validate_parse+0x10/0x10
[  222.777225][T17882]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  222.777241][T17882]  ? __nla_parse+0x40/0x60
[  222.777258][T17882]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  222.777274][T17882]  genl_family_rcv_msg_doit+0x215/0x300
[  222.777288][T17882]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  222.777305][T17882]  ? bpf_lsm_capable+0x9/0x20
[  222.777318][T17882]  ? security_capable+0x7e/0x2e0
[  222.777328][T17882]  genl_rcv_msg+0x60e/0x790
[  222.777337][T17882]  ? __pfx_genl_rcv_msg+0x10/0x10
[  222.777343][T17882]  ? __kasan_slab_alloc+0x6c/0x80
[  222.777352][T17882]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  222.777360][T17882]  ? __netlink_lookup+0xbd/0x810
[  222.777366][T17882]  ? rcu_is_watching+0x15/0xb0
[  222.777374][T17882]  netlink_rcv_skb+0x208/0x470
[  222.777389][T17882]  ? __pfx_genl_rcv_msg+0x10/0x10
[  222.777401][T17882]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  222.777419][T17882]  ? lock_release+0x4b/0x3e0
[  222.777434][T17882]  ? down_read+0x1ad/0x2e0
[  222.777445][T17882]  genl_rcv+0x28/0x40
[  222.777455][T17882]  netlink_unicast+0x82f/0x9e0
[  222.777466][T17882]  ? __pfx_netlink_unicast+0x10/0x10
[  222.777475][T17882]  ? netlink_sendmsg+0x642/0xb30
[  222.777485][T17882]  ? skb_put+0x11b/0x210
[  222.777492][T17882]  netlink_sendmsg+0x805/0xb30
[  222.777503][T17882]  ? __pfx_netlink_sendmsg+0x10/0x10
[  222.777513][T17882]  ? futex_unqueue+0x22/0x240
[  222.777520][T17882]  ? aa_sock_msg_perm+0xf1/0x1d0
[  222.777527][T17882]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  222.777534][T17882]  ? __pfx_netlink_sendmsg+0x10/0x10
[  222.777544][T17882]  __sock_sendmsg+0x21c/0x270
[  222.777552][T17882]  ____sys_sendmsg+0x505/0x830
[  222.777560][T17882]  ? __pfx_____sys_sendmsg+0x10/0x10
[  222.777568][T17882]  ? import_iovec+0x74/0xa0
[  222.777577][T17882]  ___sys_sendmsg+0x21f/0x2a0
[  222.777588][T17882]  ? __pfx____sys_sendmsg+0x10/0x10
[  222.777601][T17882]  ? futex_wait+0x285/0x360
[  222.777622][T17882]  ? __fget_files+0x2a/0x420
[  222.777637][T17882]  ? __fget_files+0x3a0/0x420
[  222.777655][T17882]  __x64_sys_sendmsg+0x19b/0x260
[  222.777663][T17882]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  222.777676][T17882]  ? rcu_is_watching+0x15/0xb0
[  222.777688][T17882]  ? rcu_is_watching+0x15/0xb0
[  222.777699][T17882]  do_syscall_64+0xfa/0x3b0
[  222.777714][T17882]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.777726][T17882]  ? exc_page_fault+0x9f/0xf0
[  222.777740][T17882]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.777749][T17882] RIP: 0033:0x7f421558ebe9
[  222.777760][T17882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  222.777769][T17882] RSP: 002b:00007f421641b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  222.777782][T17882] RAX: ffffffffffffffda RBX: 00007f42157c5fa0 RCX: 00007f421558ebe9
[  222.777789][T17882] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  222.777793][T17882] RBP: 00007f4215611e19 R08: 0000000000000000 R09: 0000000000000000
[  222.777798][T17882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  222.777802][T17882] R13: 00007f42157c6038 R14: 00007f42157c5fa0 R15: 00007ffddd8acf98
[  222.777809][T17882]  </TASK>
[  222.999904][T17891] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.041612][T17895] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3375'.
[  223.134205][T17900] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3377'.
[  223.511743][T17921] lo speed is unknown, defaulting to 1000
[  223.602279][T17932] validate_nla: 11 callbacks suppressed
[  223.602295][T17932] netlink: 'syz.2.3389': attribute type 1 has an invalid length.
[  223.692875][T17944] netlink: 'syz.1.3394': attribute type 1 has an invalid length.
[  223.708690][T17944] lo speed is unknown, defaulting to 1000
[  223.738217][T17948] openvswitch: netlink: Missing key (keys=40, expected=80)
[  223.757012][T17955] netlink: 'syz.2.3397': attribute type 1 has an invalid length.
[  223.767224][T17954] bond20: (slave bridge8): making interface the new active one
[  223.769871][T17954] bond20: (slave bridge8): Enslaving as an active interface with an up link
[  223.773487][T17958] bpq0: left promiscuous mode
[  223.851839][T17961] netlink: 'syz.2.3399': attribute type 1 has an invalid length.
[  224.377370][T18022] netlink: 'syz.0.3416': attribute type 9 has an invalid length.
[  224.760264][T18024] netlink: 'syz.2.3417': attribute type 1 has an invalid length.
[  224.776791][T18024] bond21: (slave bridge9): making interface the new active one
[  224.779932][T18024] bond21: (slave bridge9): Enslaving as an active interface with an up link
[  224.827716][T18029] tipc: Resetting bearer <eth:team0>
[  224.831804][T18029] bond20: (slave bridge8): Releasing active interface
[  224.837516][T18029] bond21: (slave bridge9): Releasing active interface
[  224.848116][T18029] team0: Unable to change to the same mode the team is in
[  224.851737][T18029] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  224.855580][ T5891] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  224.879155][T18031] netlink: 'syz.2.3420': attribute type 10 has an invalid length.
[  224.882024][T18031] tipc: Resetting bearer <eth:team0>
[  224.885364][T18031] team0: Cannot enslave team device to itself
[  224.986592][T18041] netlink: 'syz.2.3424': attribute type 1 has an invalid length.
[  224.995226][T18041] 8021q: adding VLAN 0 to HW filter on device bond22
[  225.216440][T18049] lo speed is unknown, defaulting to 1000
[  225.277183][T18070] netlink: 'syz.2.3432': attribute type 1 has an invalid length.
[  225.334436][T18082] netlink: 'syz.2.3436': attribute type 1 has an invalid length.
[  225.337631][T18082] NCSI netlink: No device for ifindex 0
[  225.350035][T18079] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  225.486678][T13092] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  225.729180][T18129] dvmrp8: entered allmulticast mode
[  225.739454][T18129] lo speed is unknown, defaulting to 1000
[  225.760803][T18128] dvmrp8: left allmulticast mode
[  226.332269][T18150] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  226.408496][T18161] __nla_validate_parse: 28 callbacks suppressed
[  226.408507][T18161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3458'.
[  226.441951][T18163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3459'.
[  226.464402][T18165] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3460'.
[  226.469341][T18165] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3460'.
[  226.482870][T18165] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3460'.
[  226.529495][T18174] syzkaller1: entered promiscuous mode
[  226.531802][T18174] syzkaller1: entered allmulticast mode
[  226.543707][T18177] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3463'.
[  226.551784][T18177] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3463'.
[  226.746794][T18199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3472'.
[  226.754821][ T5849] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  226.755234][T18195] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3471'.
[  226.758406][ T5849] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  226.766788][T18199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3472'.
[  226.766919][ T5849] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  226.773175][ T5849] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  226.778309][T18195] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  227.011883][T18223] lo speed is unknown, defaulting to 1000
[  227.143368][   T25] block nbd6: Possible stuck request ffff888020ec8000: control (read@0,1024B). Runtime 30 seconds
[  227.148077][   T25] block nbd6: Possible stuck request ffff888020ec8200: control (read@1024,1024B). Runtime 30 seconds
[  227.153376][   T25] block nbd6: Possible stuck request ffff888020ec8400: control (read@2048,1024B). Runtime 30 seconds
[  227.157804][   T25] block nbd6: Possible stuck request ffff888020ec8600: control (read@3072,1024B). Runtime 30 seconds
[  227.290415][T18243] lo speed is unknown, defaulting to 1000
[  227.882062][ T5891] lo speed is unknown, defaulting to 1000
[  227.884888][ T5891] syz1: Port: 1 Link DOWN
[  227.944290][   T33] audit: type=1800 audit(1756672024.889:21): pid=18299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3508" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=6426 res=0 errno=0
[  228.045528][T18309] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  228.071302][T18309] lo speed is unknown, defaulting to 1000
[  228.809026][T18342] validate_nla: 10 callbacks suppressed
[  228.809036][T18342] netlink: 'syz.0.3521': attribute type 32 has an invalid length.
[  228.813736][T18342] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  228.893634][T18349] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  229.060961][T18373] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  229.065897][T18373] netlink: 'syz.0.3527': attribute type 1 has an invalid length.
[  229.446407][T18414] mac80211_hwsim hwsim3 wlan1 (unregistering): left promiscuous mode
[  229.493696][T18417] tipc: Bearer <ib:sit0>: already 2 bearers with priority 10
[  229.496650][T18417] tipc: Bearer <ib:sit0>: trying with adjusted priority
[  229.499373][T18417] tipc: Enabled bearer <ib:sit0>, priority 9
[  229.690058][T18445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  229.814482][T18459] netlink: 'syz.1.3551': attribute type 1 has an invalid length.
[  229.824136][T18459] 8021q: adding VLAN 0 to HW filter on device bond18
[  229.831206][T18459] bond18: (slave geneve5): making interface the new active one
[  229.834590][T18459] bond18: (slave geneve5): Enslaving as an active interface with an up link
[  229.847123][T18463] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  229.852813][T18462] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  229.942543][T18478] netlink: zone id is out of range
[  229.944416][T18478] netlink: zone id is out of range
[  229.946340][T18478] netlink: zone id is out of range
[  229.948037][T18478] netlink: zone id is out of range
[  229.949739][T18478] netlink: zone id is out of range
[  229.951462][T18478] netlink: zone id is out of range
[  234.825457][    C1] BUG: kernel NULL pointer dereference, address: 0000000000000649
[  234.828233][    C1] #PF: supervisor write access in kernel mode
[  234.831194][    C1] #PF: error_code(0x0002) - not-present page
[  234.833395][    C1] PGD 0 P4D 0 
[  234.834525][    C1] Oops: Oops: 0002 [#1] SMP KASAN PTI
[  234.836327][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  234.839295][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  234.842537][    C1] RIP: 0010:llc_ui_setsockopt+0x4e1/0x5f0
[  234.844373][    C1] Code: a1 f8 eb 4b e8 c0 dc 3d f8 4c 6b f3 64 49 8d 9f a0 06 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 df 46 a1 f8 <4c> 89 33 eb 23 e8 95 dc 3d f8 4d 8d b7 0d 07 00 00 4c 89 f0 48 c1
[  234.850698][    C1] RSP: 0018:ffffc900001e0b98 EFLAGS: 00010246
[  234.852766][    C1] RAX: 00000000000000c9 RBX: 0000000000000649 RCX: ffff888100680000
[  234.855354][    C1] RDX: 0000000000000100 RSI: ffffffff8be33660 RDI: ffff888107e11410
[  234.858062][    C1] RBP: ffffc900001e0c90 R08: ffffffff8fa38437 R09: 1ffffffff1f47086
[  234.861198][    C1] R10: dffffc0000000000 R11: ffffffff8981cd90 R12: 1ffff9200003c178
[  234.863750][    C1] R13: ffff888107e11410 R14: 0000000000000001 R15: 0000000000000001
[  234.866379][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  234.869246][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  234.871388][    C1] CR2: 0000000000000649 CR3: 000000000df36000 CR4: 00000000000006f0
[  234.874020][    C1] Call Trace:
[  234.875158][    C1]  <IRQ>
[  234.876144][    C1]  ? call_timer_fn+0x17e/0x5f0
[  234.877778][    C1]  ? llc_ui_setsockopt+0x3e0/0x5f0
[  234.879410][    C1]  ? call_timer_fn+0xbe/0x5f0
[  234.881018][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  234.882760][    C1]  ? rcu_is_watching+0x15/0xb0
[  234.884358][    C1]  ? llc_ui_setsockopt+0x3e0/0x5f0
[  234.886024][    C1]  __run_timer_base+0x61a/0x860
[  234.887572][    C1]  ? ktime_get+0x3e/0x1f0
[  234.888978][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  234.890691][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  234.892797][    C1]  run_timer_softirq+0xb7/0x180
[  234.894406][    C1]  handle_softirqs+0x286/0x870
[  234.895970][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  234.897533][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  234.899288][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  234.900985][    C1]  __irq_exit_rcu+0xca/0x1f0
[  234.902532][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  234.904216][    C1]  irq_exit_rcu+0x9/0x30
[  234.905594][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  234.907545][    C1]  </IRQ>
[  234.908571][    C1]  <TASK>
[  234.909539][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  234.911656][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  234.913523][    C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 96 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  234.919706][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  234.921708][    C1] RAX: 739e6e6faaa3eb00 RBX: ffffffff819683b8 RCX: 739e6e6faaa3eb00
[  234.924309][    C1] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8
[  234.926868][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  234.929462][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa38430
[  234.932190][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d0000
[  234.934797][    C1]  ? do_idle+0x1e8/0x510
[  234.936243][    C1]  ? do_idle+0x1e8/0x510
[  234.937650][    C1]  default_idle+0x13/0x20
[  234.939118][    C1]  default_idle_call+0x74/0xb0
[  234.940722][    C1]  do_idle+0x1e8/0x510
[  234.942140][    C1]  ? __pfx_do_idle+0x10/0x10
[  234.943683][    C1]  cpu_startup_entry+0x44/0x60
[  234.945282][    C1]  start_secondary+0x101/0x110
[  234.946861][    C1]  common_startup_64+0x13e/0x147
[  234.948487][    C1]  </TASK>
[  234.949528][    C1] Modules linked in:
[  234.950875][    C1] CR2: 0000000000000649
[  234.952447][    C1] ---[ end trace 0000000000000000 ]---
[  234.954269][    C1] RIP: 0010:llc_ui_setsockopt+0x4e1/0x5f0
[  234.956111][    C1] Code: a1 f8 eb 4b e8 c0 dc 3d f8 4c 6b f3 64 49 8d 9f a0 06 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 df 46 a1 f8 <4c> 89 33 eb 23 e8 95 dc 3d f8 4d 8d b7 0d 07 00 00 4c 89 f0 48 c1
[  234.962454][    C1] RSP: 0018:ffffc900001e0b98 EFLAGS: 00010246
[  234.964346][    C1] RAX: 00000000000000c9 RBX: 0000000000000649 RCX: ffff888100680000
[  234.966894][    C1] RDX: 0000000000000100 RSI: ffffffff8be33660 RDI: ffff888107e11410
[  234.969434][    C1] RBP: ffffc900001e0c90 R08: ffffffff8fa38437 R09: 1ffffffff1f47086
[  234.971945][    C1] R10: dffffc0000000000 R11: ffffffff8981cd90 R12: 1ffff9200003c178
[  234.974426][    C1] R13: ffff888107e11410 R14: 0000000000000001 R15: 0000000000000001
[  234.976943][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  234.979801][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  234.981939][    C1] CR2: 0000000000000649 CR3: 000000000df36000 CR4: 00000000000006f0
[  234.984575][    C1] Kernel panic - not syncing: Fatal exception in interrupt
[  234.987568][    C1] Kernel Offset: disabled
[  234.988981][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:27:11  Registers:
info registers vcpu 0

CPU#0
RAX=ae2a547df3374500 RBX=ffffffff819683b8 RCX=ae2a547df3374500 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38430 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7993f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbf1e0323e1 CR3=00000000229fc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007fbf20397d20
XMM02=049eb00303b81000 6990031380046980 XMM03=030fffffffffffff 04049ec0030a1000
XMM04=9ef003000800049e e003001000049ed0 XMM05=010fffffffffffff 0400100008100004
XMM06=9b80040100000008 060a0156e6108080 XMM07=80800800049ef003 000800049ee00300
XMM08=1000049ed0030fff ffffffffff04049e XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bde60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99def670 RSP=ffffc900001e0170
R8 =ffff8881081a8237 R9 =1ffff11021035046 R10=dffffc0000000000 R11=ffffffff854f1db0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1e27 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000649 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0001000300058004 002c000000020001
XMM02=0002000300050000 0002000300050000 XMM03=0001000300050000 0000000300050000
XMM04=0200020008000000 0100030005000000 XMM05=0000030005000000 0200030005000000
XMM06=0200030005000000 0100030005800400 XMM07=2c00000002000100 080000000125dfdb
XMM08=0000000000000000 00007fa074612ee7 XMM09=0000000000000000 00007fa074612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
