last executing test programs:

333.820307ms ago: executing program 0 (id=2398):
unshare(0x2c020680)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2e8}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0)
r0 = socket$kcm(0x2, 0xa, 0x2)
r1 = socket$packet(0x11, 0x2, 0x300)
getsockopt$sock_buf(r1, 0x1, 0x28, &(0x7f0000000780)=""/155, &(0x7f0000000840)=0x9b)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f0000000440))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x20008091)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYRES16=r0], 0xa0}, 0x1, 0x0, 0x0, 0x400c5}, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r5, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000034640)=""/102400, 0x19000}], 0x1, 0x1903d}}], 0x48}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r2, 0x0, 0x0}, 0x10)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000500)={0x2, 0x4e23, @broadcast}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8004900}, 0x4048800)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

226.8135ms ago: executing program 0 (id=2405):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/26, 0x1a}], 0x1}, 0x40)

162.505643ms ago: executing program 2 (id=2408):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000040)=0x1000000, &(0x7f0000000100)}, 0x20)

162.425737ms ago: executing program 1 (id=2409):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

111.592813ms ago: executing program 2 (id=2410):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000780)={r0, &(0x7f0000000800), &(0x7f0000000880)=""/2, 0x2}, 0x20)

111.421591ms ago: executing program 0 (id=2411):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000300)='neigh_update\x00', r1}, 0x10)
r2 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

111.283695ms ago: executing program 2 (id=2412):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x30, 0x10, 0x503, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x880}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0)

110.849266ms ago: executing program 1 (id=2413):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff, 0x1, 0x0, 0x9, 0x8, 0x4}, &(0x7f0000000100)=0x20)

54.80888ms ago: executing program 1 (id=2414):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a000000060001003c"], 0x1c}}, 0x0)

54.678135ms ago: executing program 0 (id=2415):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4)
sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="3000000000000000000000000700000000830b4be0000001e0000001008911e44833856ee8b25633f47d13d5e4aa00001c000000000000000000000008000000", @ANYRES32], 0x50}}], 0x1, 0x0)

54.518356ms ago: executing program 2 (id=2416):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x4e)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xe, 0x0, &(0x7f00000002c0)="69d387051eaf71a0486e5c660000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

54.369531ms ago: executing program 1 (id=2417):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="110000001d00070f000000000000000007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)

53.999578ms ago: executing program 0 (id=2418):
r0 = socket$inet6(0xa, 0x3, 0xff)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10011, 0xffffffffffffffff, 0xa10b1000)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000c40)={'wg2\x00', <r4=>0x0})
sendmmsg(r1, &(0x7f0000001800)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000ec0)='O', 0x1}], 0x1}}, {{&(0x7f0000000c80)=@ll={0x11, 0x19, r4, 0x1, 0x81, 0x6, @broadcast}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000d00)="c3dfe1aa2599aecaaeb8da011bca2643c38100626c84eb07", 0x18}, {&(0x7f0000000d40)="4261273ad586cc6dbe6750ab3913ee1a61f4d294a1f5b6085b68a8592773e2c50f", 0x21}, {&(0x7f0000000e00)="6a9f2768f96214afa39e247dc37e0a91ea1fc33764e1d9cf3a12a1f3b740e53f82777fff6f686665b59fbe8f6d8f59f0d42070743ad624e7d1ba687915e959ec3c8c2e115b35a5788459b31fda1d34cc8164c2adb0329fc1fbdbead9b3adf9873c671f7b4f30a838bc1f31a2eb67b504565a", 0x72}], 0x3, &(0x7f0000001900)=[{0x108, 0x111, 0x3c3, "04855f1978ae7adf5f93e5b5ee28895622c6abe3ca1c2c9447a1ccf402e7df806e6816f23741fd52b1ed98f96f33e6ef4132beef5c21aad3eef446f67a03a706c0b06d3b8e55d0cdb48c7b311d7502858fb185a98c46ba0cc3945fd806c36a0f30bfc6c391f9ded532ded7b0f10a9ff87979c8fef4e944a63db9821494c34b67cc70a7a83323e5f5f5651f62820f40c8da4692780d66c77995119713ee62752060b8a379ce48afe1584fe4dbb2a030d562d8f709f9394a6bc48fb8fb00d792008c3fa96c361557b8a97ecd3f5d3afce5d67dbd150407a9188a91993049e628ead3dc232467d312c145ab5b4d99e6566ec4f1f4d0060a"}, {0x80, 0x38, 0x3ff, "7f6ab7cd3132d5f1f0d080c5b7aecebb6cb19a0fd48231845173b9aeb6fcefdc062a5c9b672d42faddee9a4c8272c4eb98defd986ee9bab242892ca8f91168831c916ee5c3a01251492b3209615dadd3fc3dbe3498d2fe84dd5621eb6ad26a490847dfab9ed97febb7394cc15a3da228"}], 0x188}}, {{&(0x7f0000001100)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, &(0x7f0000001280)=[{&(0x7f0000001180)="3d7e2aa78227a4076aba27a0c808602ed0372a0835df5dac21d7419015c49bb3749daef2baa2ad6aac8cceba1b3ecf6c5acfa0b236e83097d4ac5b410fdc20bee04eb8f451e2d027ab88a29ac9dd7f4063f09a3f47e27d7f0c357123fc3903675578f297182b05b9447034b563d42681ed71fa4fc3913d0ad7e024a1815ba3bff420a84453570b8b63ac16c407842e7c17947e732c353c92950af7f15e57541ebf0d67e04e7c9ee8c879abe7390c6c1eb87afac5", 0xb4}], 0x1, &(0x7f00000012c0)=[{0x78, 0x101, 0x2, "668b7eba18097dc5d45e6b9fdd9aab8871ad3e06a742038ac1fad51ee7ca4e0c56b630ea85f3fed6ec00fb8940686d0d8417ab7a34e205c5e4f2e3abbd5e7966b38b72b65b9c015fa19309db6ac261a1378ae0c7c5a0ff252fe037a1f45f151dcce75381"}, {0xb0, 0x10c, 0x5, "c9d1fc02fd6e768638b85aa924e38e774f0b6554dfc57a67ebc34db87a82b01499a703036ae387ce673abc61bdd205f8beaed8f5e6a39c784c22ecfa7eec74e8f5dccc10f784f422e65eea47b6e8548d0963e23ae4ff1e44baa3312a3b2e905d9bee3589eb0b3e8feda0cd7bc32ea048b2164f2b6929f8848a1132e391f52319807fde95034d142a6bff7426e500244c15edcf145cbee3ba45421bb0"}, {0x68, 0x10b, 0x2, "ed791edceaf64fe9772cf91504b043eabd4f7f991697a1ea089d791d46ef48814dd4e8a25c1b00de252d1523b9f1fcd8ff46804a10cd61de9597b6710b2578f25b0814d16f5c316b4935c03a951a1921ab7e504e"}], 0x190}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001500)="f7b7476f7527001a0bded632b3c35a7b0ab97c120eae7acf334ffa3c321439de7f3969f2885ff58bb2d009820595631b6e173fbfc4065ac6fe755783eea54c537f1790b8d17c92a1d9e0dc249981c0e688e524c37d2cc3e0b5785a1dd389cbbbbe3708d24390830d5ab675f5e7121f8276184828ef5d34", 0x77}, {&(0x7f0000001580)="9747a42160497a097b23f2cf6daa2756955517", 0x13}], 0x2, &(0x7f0000001600)=[{0xf8, 0x10b, 0x9, "f64112ea5311ea5ce53fb4d230e9c3e5f6bceb1cd6977abbb4b559ba118fad8d3463eb87ec3165f299542f7dc871c4606edfd9fd3d36579f672da2065beab708f5133fefd2359e13a7aed28f73a894a8c018ce36385cdce136aff0e527a85b0220b4bcd0ad922190a3b6ab0b209966e5b0812144f80a99e3b2c55be90ff5f6d8efcdb6a7e540daf40133fb633b8332158ade3c5159f381b064a42018bd9079e75af48d432451bc3b9203ee654e0ddd4da0c0ade729d765b2fa21aef4961220b775df71aeab2be6fc0b09c4a178d8cd858cb6dbb64311fedae847b3a77014ec72608aa04a24"}, {0x10, 0x103, 0x7}, {0x78, 0x118, 0x5, "b3b7454f09f6b889a3a7ed8adc21e7dd20d605a1f56ad421473a4f7972bad8d5031b9ec880d23a12f0d2f0cd1a81370b344e6f51b379b62aae81317734b2b3c681f78b98c94fea8d840292ef3a0e56e6e778b2d3bcc94c9fab844b154a28fa1cbc8042eb"}], 0x180}}], 0x4, 0x1)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0xe6, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xc0, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
r5 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r5, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000540)=[{0x0}, {&(0x7f00000003c0)="5c6817db84aafc4ba93b3b7b773c1f5c014e2a4405abce2e2192542afa9748dcd0a777a42e01e563f192537c527923b0f362103e5bbeda2dca0d9d2b5e5238329691753f1860286f1aaa075a70123a788ba8d0e1205af7751df76effba5cb644966e7b7566d2", 0x66}, {&(0x7f0000000b40)="9eb8a2c0e241fb0402ac8d04ecbc724648d79b443d283855fdba1e1dc628359101e57e31436788b6b641ed5ea90be62fc7499c9b017d2e73973395411b7efb244a226ba0ae7657c57101711c5aa138abd03dec1e0899824e678aced03a92fec128f69d27d84ae2ff2e4ad7a3db413358c266a43f743c155d8bcbab110f73f4f12d0728bada715bf5ab80002346bb7d7345e8df1fc10fa733c98030cb193341700961aa2ccb9f0f029190a14386c73e7017cf0fe0275d2d6f9531b12f12e29b903f30c3228aa9ab3a503e9512", 0xcc}], 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000"], 0x18}, 0x40080c0)
sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="96f5", 0x2}, {&(0x7f0000000640)="25b2b3cbea4056eb9d31", 0xa}], 0x2, 0x0, 0x0, 0x900}, 0x0)
sendmmsg(r0, &(0x7f0000008440)=[{{&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}}], 0x1, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES8, @ANYRESDEC=r6, @ANYRESOCT=r6, @ANYRESHEX, @ANYRESHEX=r6, @ANYRESOCT=r6, @ANYRESOCT=r6, @ANYBLOB="233596c1cb38abfa40f3240712b26efa1bb4fca55d14d97b408e966e98d1c8fec819cef4bb7ac4eb5adc953c4d14cbb26a142094011abcd0c12cd22879639ff51aeb1c99647e505d1cb70c18d60c50e90a1c0e703b6c541baaddab4f05e8755e6356b5c60e857100f8e2b96b1e5796f5da9e07c1d5b5b57f8edb32fc56c1e34e4170118d5064c6a77eb6", @ANYRES8=r6, @ANYRESDEC=r6], 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r9, 0x89b1, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="34000000130a03000000000000000000020000060900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0)

1.927374ms ago: executing program 1 (id=2419):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x4, 0x0, 0x3, 0xa, 0x0, 0xeff, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x6, 0x2, 0xe0000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}, 0x1, 0x7}, 0x0)

1.680493ms ago: executing program 2 (id=2420):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x10000000004e20, 0x3, @mcast2, 0x6}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0), 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e20004db0"], 0x0)

277.837µs ago: executing program 0 (id=2421):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@enum64={0x6, 0x1, 0x0, 0x13, 0x0, 0x4, [{0x1000000, 0x43, 0x1}]}]}, {0x0, [0x2e, 0x71, 0x0, 0x5f, 0x5f, 0x2e]}}, 0x0, 0x38, 0x0, 0x0, 0x6abb}, 0x28)

194.706µs ago: executing program 1 (id=2422):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x14, 0x7ce6755b3a6b8c51, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0)

0s ago: executing program 2 (id=2423):
pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:61910' (ED25519) to the list of known hosts.
syzkaller login: [   40.182738][ T5776] cgroup: Unknown subsys name 'net'
[   40.301111][ T5776] cgroup: Unknown subsys name 'cpuset'
[   40.304187][ T5776] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   41.422960][ T5776] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   48.075169][ T5862] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.449584][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   49.453787][ T5869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   49.456900][ T5869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   49.460437][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   49.463609][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   49.468360][ T5873] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   49.475093][ T5873] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   49.478463][ T5873] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   49.490304][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   49.494499][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   49.564559][ T5869] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   49.567171][ T5869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   49.569578][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   49.573525][ T5869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   49.576045][ T5869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   49.667431][ T5871] chnl_net:caif_netlink_parms(): no params data found
[   49.685318][ T5868] chnl_net:caif_netlink_parms(): no params data found
[   49.777513][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.780885][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.783580][ T5871] bridge_slave_0: entered allmulticast mode
[   49.786416][ T5871] bridge_slave_0: entered promiscuous mode
[   49.791450][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.794233][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.796965][ T5868] bridge_slave_0: entered allmulticast mode
[   49.799526][ T5868] bridge_slave_0: entered promiscuous mode
[   49.802381][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.805244][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.808232][ T5871] bridge_slave_1: entered allmulticast mode
[   49.812255][ T5871] bridge_slave_1: entered promiscuous mode
[   49.815088][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.817867][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.822430][ T5868] bridge_slave_1: entered allmulticast mode
[   49.825251][ T5868] bridge_slave_1: entered promiscuous mode
[   49.845928][ T5875] chnl_net:caif_netlink_parms(): no params data found
[   49.858081][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   49.863086][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   49.870540][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   49.889179][ T5871] team0: Port device team_slave_0 added
[   49.893600][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   49.903044][ T5871] team0: Port device team_slave_1 added
[   49.927435][ T5868] team0: Port device team_slave_0 added
[   49.938966][ T5868] team0: Port device team_slave_1 added
[   49.946331][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0
[   49.948998][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   49.958663][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   49.974520][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1
[   49.977104][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   49.987243][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   50.000560][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0
[   50.003331][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.013138][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   50.017450][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1
[   50.020403][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.029323][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   50.041493][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.043916][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.046387][ T5875] bridge_slave_0: entered allmulticast mode
[   50.049073][ T5875] bridge_slave_0: entered promiscuous mode
[   50.059047][ T5871] hsr_slave_0: entered promiscuous mode
[   50.062002][ T5871] hsr_slave_1: entered promiscuous mode
[   50.064700][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.067384][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.070360][ T5875] bridge_slave_1: entered allmulticast mode
[   50.073371][ T5875] bridge_slave_1: entered promiscuous mode
[   50.091509][ T5868] hsr_slave_0: entered promiscuous mode
[   50.094104][ T5868] hsr_slave_1: entered promiscuous mode
[   50.096606][ T5868] debugfs: 'hsr0' already exists in 'hsr'
[   50.098376][ T5868] Cannot create hsr debugfs directory
[   50.108666][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   50.123305][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   50.172955][ T5875] team0: Port device team_slave_0 added
[   50.178249][ T5875] team0: Port device team_slave_1 added
[   50.212096][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0
[   50.214837][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.225246][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   50.239620][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1
[   50.242915][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.253120][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   50.294062][ T5875] hsr_slave_0: entered promiscuous mode
[   50.296736][ T5875] hsr_slave_1: entered promiscuous mode
[   50.299426][ T5875] debugfs: 'hsr0' already exists in 'hsr'
[   50.302114][ T5875] Cannot create hsr debugfs directory
[   50.334524][ T5871] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   50.343688][ T5871] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   50.353897][ T5871] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   50.361365][ T5871] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   50.401188][ T5868] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   50.405435][ T5868] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   50.413312][ T5868] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   50.421420][ T5868] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   50.433101][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.435692][ T5871] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.438457][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.441196][ T5871] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.463286][ T5875] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   50.468337][ T5875] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   50.474863][ T5875] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   50.479409][ T5875] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   50.497384][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.500364][ T5868] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.503370][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.506158][ T5868] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.523001][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.525908][ T5875] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.528913][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.531988][ T5875] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.565250][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.581381][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.584770][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.587993][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.591349][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.597149][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.601585][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.612517][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.620365][ T5871] 8021q: adding VLAN 0 to HW filter on device team0
[   50.629055][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.631525][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.637632][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.645343][ T5868] 8021q: adding VLAN 0 to HW filter on device team0
[   50.649090][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.651854][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.666370][ T5871] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   50.671733][ T5871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   50.681407][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.684391][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.693950][ T5875] 8021q: adding VLAN 0 to HW filter on device team0
[   50.705257][  T414] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.708120][  T414] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.726164][  T414] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.729132][  T414] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.755404][  T414] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.758134][  T414] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.788904][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.813735][ T5871] veth0_vlan: entered promiscuous mode
[   50.820877][ T5871] veth1_vlan: entered promiscuous mode
[   50.837592][ T5871] veth0_macvtap: entered promiscuous mode
[   50.843993][ T5871] veth1_macvtap: entered promiscuous mode
[   50.853520][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.867473][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.882300][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.892543][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.895876][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.910707][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.917174][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.941611][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.975042][ T5868] veth0_vlan: entered promiscuous mode
[   50.977412][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.985357][ T5868] veth1_vlan: entered promiscuous mode
[   50.985877][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.997582][ T5875] veth0_vlan: entered promiscuous mode
[   51.011618][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.011982][ T5875] veth1_vlan: entered promiscuous mode
[   51.014789][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.023531][ T5868] veth0_macvtap: entered promiscuous mode
[   51.028114][ T5868] veth1_macvtap: entered promiscuous mode
[   51.042991][ T5875] veth0_macvtap: entered promiscuous mode
[   51.051374][ T5875] veth1_macvtap: entered promiscuous mode
[   51.056145][ T5871] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   51.056422][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.078366][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.083925][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.093616][ T5904] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.098951][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.104150][ T5904] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.110004][ T5901] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.117198][ T5901] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.156389][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.162204][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.185974][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.192077][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.193040][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.203973][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.232706][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.235748][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.261383][  T414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.274298][  T414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.298541][  T414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.303058][  T414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.319397][ T5942] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   51.322514][ T5942] IPv6: NLM_F_CREATE should be set when creating new route
[   51.325552][ T5942] IPv6: NLM_F_CREATE should be set when creating new route
[   51.328938][ T5942] IPv6: NLM_F_CREATE should be set when creating new route
[   51.387329][ T5954] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.15'.
[   51.513507][ T5969] vxcan1: tx drop: invalid da for name 0x0000000008000000
[   51.521161][ T5869] Bluetooth: hci0: command tx timeout
[   51.523523][ T5237] Bluetooth: hci1: command tx timeout
[   51.600459][ T5869] Bluetooth: hci2: command tx timeout
[   51.616507][ T5983] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[   51.779063][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33'.
[   51.788055][ T6001] tipc: Started in network mode
[   51.794869][ T6001] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[   51.803746][ T6001] tipc: Enabled bearer <eth:vlan0>, priority 18
[   52.066988][ T6030] netlink: 'syz.2.45': attribute type 1 has an invalid length.
[   52.116608][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.48'.
[   52.227210][ T6043] syz.2.51 uses obsolete (PF_INET,SOCK_PACKET)
[   52.597669][ T6083] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   52.675816][ T6091] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3952. macoff=96
[   52.749491][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'.
[   52.767760][ T6103] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   52.910411][ T5912] tipc: Node number set to 10005162
[   53.004508][ T6127] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.91'.
[   53.093754][ T6135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.95'.
[   53.100099][ T5904] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   53.103430][ T6135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.95'.
[   53.107035][ T5904] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   53.113610][ T6135] Zero length message leads to an empty skb
[   53.115982][ T5904] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   53.122420][ T5904] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   53.246016][ T6149] netlink: 28 bytes leftover after parsing attributes in process `syz.1.102'.
[   53.250595][ T6149] netlink: 28 bytes leftover after parsing attributes in process `syz.1.102'.
[   53.287401][ T6151] netlink: 'syz.0.103': attribute type 10 has an invalid length.
[   53.293011][ T6151] team0: Port device dummy0 added
[   53.302320][ T6151] netlink: 'syz.0.103': attribute type 10 has an invalid length.
[   53.316455][ T6151] team0: Port device dummy0 removed
[   53.321027][ T6151] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   53.324846][ T6157] warning: `syz.1.106' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   53.382847][ T6164] pim6reg1: entered promiscuous mode
[   53.385141][ T6164] pim6reg1: entered allmulticast mode
[   53.558485][ T6178] Bluetooth: MGMT ver 1.23
[   53.600064][ T5237] Bluetooth: hci1: command tx timeout
[   53.605403][ T5869] Bluetooth: hci0: command tx timeout
[   53.680475][ T5869] Bluetooth: hci2: command tx timeout
[   53.759106][ T6188] syz_tun: entered allmulticast mode
[   53.766047][ T6188] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   54.425105][ T6202] bond0: entered promiscuous mode
[   54.427455][ T6202] bond_slave_0: entered promiscuous mode
[   54.430746][ T6202] bond_slave_1: entered promiscuous mode
[   54.433422][ T6202] dummy0: entered promiscuous mode
[   54.437668][ T6202] bond0: left promiscuous mode
[   54.440920][ T6202] bond_slave_0: left promiscuous mode
[   54.443178][ T6202] bond_slave_1: left promiscuous mode
[   54.445576][ T6202] dummy0: left promiscuous mode
[   54.474230][ T6203] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[   54.739646][ T6212] netlink: 52 bytes leftover after parsing attributes in process `syz.2.130'.
[   54.744499][ T6212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   54.860227][ T6217] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   55.679996][ T5237] Bluetooth: hci1: command tx timeout
[   55.682847][ T5869] Bluetooth: hci0: command tx timeout
[   55.760138][ T5869] Bluetooth: hci2: command tx timeout
[   56.322428][ T6281] netlink: 'syz.1.158': attribute type 13 has an invalid length.
[   56.325143][ T6281] netlink: 'syz.1.158': attribute type 17 has an invalid length.
[   56.343705][ T6281] syz_tun: left allmulticast mode
[   56.377557][ T6281] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   56.492976][ T6276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   56.547496][ T6276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   56.565895][ T6293] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[   56.603243][ T6276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   57.625328][ T6363] netlink: 'syz.0.193': attribute type 1 has an invalid length.
[   57.648298][ T6363] __nla_validate_parse: 3 callbacks suppressed
[   57.648314][ T6363] netlink: 224 bytes leftover after parsing attributes in process `syz.0.193'.
[   57.759861][ T5869] Bluetooth: hci0: command tx timeout
[   57.762367][ T5237] Bluetooth: hci1: command tx timeout
[   57.839838][ T5869] Bluetooth: hci2: command tx timeout
[   58.278991][ T6374] netlink: 20 bytes leftover after parsing attributes in process `syz.2.198'.
[   58.304374][ T6374] netlink: 20 bytes leftover after parsing attributes in process `syz.2.198'.
[   58.615233][ T6410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.215'.
[   58.824549][ T6430] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.225'.
[   58.928626][ T6437] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.546058][ T6464] netlink: 'syz.0.238': attribute type 1 has an invalid length.
[   59.648956][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.242'.
[   59.685122][ T6474] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.793231][ T6474] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.854286][ T6474] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.945021][ T6474] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.000969][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.008597][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.016131][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.024370][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.640185][ T6538] netlink: 'syz.2.266': attribute type 46 has an invalid length.
[   61.491807][ T6587] Illegal XDP return value 4294967294 on prog  (id 56) dev N/A, expect packet loss!
[   61.589452][ T6594] syzkaller0: entered promiscuous mode
[   61.591469][ T6594] syzkaller0: entered allmulticast mode
[   61.605066][ T6589] nbd: couldn't find device at index 0
[   61.607408][ T6589] netlink: 20 bytes leftover after parsing attributes in process `syz.0.290'.
[   61.725238][ T6601] netlink: 45 bytes leftover after parsing attributes in process `syz.0.295'.
[   61.747412][ T6603] netlink: 'syz.0.296': attribute type 6 has an invalid length.
[   61.781889][ T6607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.298'.
[   62.793215][ T6658] ip6tnl1: entered promiscuous mode
[   62.795062][ T6658] ip6tnl1: entered allmulticast mode
[   62.797425][ T6658] team0: Device ip6tnl1 is of different type
[   62.915662][ T6666] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   63.122019][ T6681] nbd: socks must be embedded in a SOCK_ITEM attr
[   63.154350][ T6683] netlink: 'syz.0.328': attribute type 1 has an invalid length.
[   63.157386][ T6683] netlink: 17 bytes leftover after parsing attributes in process `syz.0.328'.
[   63.418465][ T3142] cfg80211: failed to load regulatory.db
[   63.651984][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.343'.
[   63.788609][ T6728] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.838006][ T6732] tipc: Started in network mode
[   63.842505][ T6732] tipc: Node identity 8286427fa08, cluster identity 4711
[   63.845188][ T6732] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.848205][ T6732] syzkaller0: entered promiscuous mode
[   63.851769][ T6732] syzkaller0: entered allmulticast mode
[   63.858341][ T6732] tipc: Resetting bearer <eth:syzkaller0>
[   63.862807][ T6731] tipc: Resetting bearer <eth:syzkaller0>
[   63.866384][ T6731] tipc: Disabling bearer <eth:syzkaller0>
[   64.246554][ T6762] netlink: 'syz.0.364': attribute type 10 has an invalid length.
[   64.250308][ T6762] netlink: 40 bytes leftover after parsing attributes in process `syz.0.364'.
[   64.267772][ T6762] team0: Port device geneve0 added
[   64.814014][ T6805] netlink: 'syz.1.384': attribute type 41 has an invalid length.
[   65.158820][ T6841] netlink: 'syz.1.401': attribute type 4 has an invalid length.
[   65.181938][ T6845] netlink: 24 bytes leftover after parsing attributes in process `syz.1.403'.
[   65.234170][ T6851] netlink: 830 bytes leftover after parsing attributes in process `syz.1.406'.
[   65.365828][ T6871] netlink: zone id is out of range
[   65.367844][ T6871] netlink: zone id is out of range
[   65.372340][ T6871] netlink: zone id is out of range
[   65.376248][ T6871] netlink: zone id is out of range
[   65.378460][ T6871] netlink: zone id is out of range
[   65.378871][ T6873] pimreg: entered allmulticast mode
[   65.381049][ T6871] netlink: zone id is out of range
[   65.384034][ T6871] netlink: zone id is out of range
[   65.384607][ T6873] pimreg: left allmulticast mode
[   65.385807][ T6871] netlink: zone id is out of range
[   65.385811][ T6871] netlink: zone id is out of range
[   65.385814][ T6871] netlink: zone id is out of range
[   65.464252][ T6883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.422'.
[   65.467488][    C1] vcan0: j1939_session_tx_dat: 0xffff888106776000: queue data error: -100
[   65.847493][ T6911] netlink: 96 bytes leftover after parsing attributes in process `syz.0.436'.
[   65.967621][ T6929] netlink: 'syz.0.445': attribute type 1 has an invalid length.
[   65.970579][ T6929] netlink: 244 bytes leftover after parsing attributes in process `syz.0.445'.
[   66.273994][ T6967] syzkaller1: entered promiscuous mode
[   66.275873][ T6967] syzkaller1: entered allmulticast mode
[   66.316077][ T6973] netlink: 'syz.0.454': attribute type 1 has an invalid length.
[   66.334063][ T6973] 8021q: adding VLAN 0 to HW filter on device bond2
[   66.337761][ T6973] bond1: (slave bond2): making interface the new active one
[   66.341437][ T6973] bond1: (slave bond2): Enslaving as an active interface with an up link
[   66.353909][ T6973] bond1: (slave gretap1): Enslaving as a backup interface with an up link
[   66.362461][ T6973] netlink: 28 bytes leftover after parsing attributes in process `syz.0.454'.
[   66.366220][ T6973] 8021q: adding VLAN 0 to HW filter on device bond1
[   66.466387][ T5904] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   66.632341][ T6994] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   66.635495][ T6994] macsec1: entered promiscuous mode
[   66.638098][ T6994] macsec1: entered allmulticast mode
[   66.641228][ T6994] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[   66.675292][ T6996] netlink: 108 bytes leftover after parsing attributes in process `syz.1.461'.
[   66.833909][ T7002] syzkaller0: entered promiscuous mode
[   66.836297][ T7002] syzkaller0: entered allmulticast mode
[   67.745278][ T7038] netlink: 'syz.1.479': attribute type 1 has an invalid length.
[   68.471088][ T7088] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.473708][ T7088] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.541465][ T7088] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.550330][ T7088] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.591859][ T7088] tipc: Resetting bearer <eth:vlan0>
[   68.684991][ T7086] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.688917][ T7094] syzkaller0: entered promiscuous mode
[   68.693405][ T7094] syzkaller0: entered allmulticast mode
[   68.698200][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.505'.
[   68.705730][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.505'.
[   68.706207][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.721080][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.743202][ T7086] tipc: Resetting bearer <eth:syzkaller0>
[   68.746710][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.754220][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.757946][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   68.770210][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   68.789453][ T7085] tipc: Resetting bearer <eth:syzkaller0>
[   68.795855][ T7085] tipc: Disabling bearer <eth:syzkaller0>
[   68.801476][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   68.805012][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   69.758937][ T7150] bridge_slave_0: left allmulticast mode
[   69.765206][ T7150] bridge_slave_0: left promiscuous mode
[   69.771989][ T7150] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.777030][ T7150] bridge_slave_1: left allmulticast mode
[   69.779537][ T7150] bridge_slave_1: left promiscuous mode
[   69.785167][ T7150] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.792560][ T7150] bond0: (slave bond_slave_0): Releasing backup interface
[   69.797924][ T7150] bond0: (slave bond_slave_1): Releasing backup interface
[   69.813426][ T7150] team0: Port device team_slave_0 removed
[   69.827727][ T7150] team0: Port device team_slave_1 removed
[   69.834135][ T7150] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.837493][ T7150] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.843211][ T7150] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.846616][ T7150] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.932431][ T7157] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.946488][ T7157] syzkaller0: entered promiscuous mode
[   69.948474][ T7157] syzkaller0: entered allmulticast mode
[   69.954485][ T7157] tipc: Resetting bearer <eth:syzkaller0>
[   69.968733][ T7156] tipc: Resetting bearer <eth:syzkaller0>
[   70.010269][ T7156] tipc: Disabling bearer <eth:syzkaller0>
[   70.145405][ T7161] netlink: 32 bytes leftover after parsing attributes in process `syz.0.528'.
[   70.151221][ T7161] bridge0: entered allmulticast mode
[   70.153728][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.528'.
[   70.156693][ T7161] bridge_slave_1: left allmulticast mode
[   70.158564][ T7161] bridge_slave_1: left promiscuous mode
[   70.168241][ T7161] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.174197][ T7161] bridge_slave_0: left allmulticast mode
[   70.176146][ T7161] bridge_slave_0: left promiscuous mode
[   70.178038][ T7161] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.182528][ T7161] bridge0 (unregistering): left allmulticast mode
[   70.270829][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.530'.
[   70.314256][ T7172] netlink: 'syz.1.532': attribute type 1 has an invalid length.
[   71.217488][ T7197] netlink: 'syz.1.543': attribute type 10 has an invalid length.
[   71.222843][ T7197] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   71.274049][ T7203] netlink: 'syz.1.546': attribute type 32 has an invalid length.
[   71.365766][ T7213] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.368575][ T7213] batadv_slave_0: entered promiscuous mode
[   71.371023][ T7213] batadv_slave_0: entered allmulticast mode
[   71.556097][ T7222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.553'.
[   71.561173][ T7219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.554'.
[   71.564535][ T7219] netlink: 36 bytes leftover after parsing attributes in process `syz.0.554'.
[   72.068783][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'.
[   72.328180][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.596'.
[   72.708297][ T7357] vti0: entered promiscuous mode
[   72.726185][ T7357] vti0: entered allmulticast mode
[   72.844891][ T7381] net_ratelimit: 296 callbacks suppressed
[   72.844901][ T7381] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.965070][ T7402] 0X: renamed from caif0
[   72.968075][ T7402] 0X: entered allmulticast mode
[   72.971444][ T7402] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[   73.008162][ T7405] syzkaller0: entered promiscuous mode
[   73.011233][ T7405] syzkaller0: entered allmulticast mode
[   73.995800][ T7442] batadv_slave_1: entered promiscuous mode
[   74.002855][ T7441] batadv_slave_1: left promiscuous mode
[   74.141363][ T7462] __nla_validate_parse: 4 callbacks suppressed
[   74.141378][ T7462] netlink: 28 bytes leftover after parsing attributes in process `syz.0.661'.
[   74.197918][ T7470] netlink: 20 bytes leftover after parsing attributes in process `syz.0.665'.
[   74.374096][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'.
[   74.377613][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'.
[   74.381749][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'.
[   74.385019][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'.
[   74.388090][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'.
[   74.392324][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'.
[   74.396338][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'.
[   74.400054][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'.
[   74.788695][ T7536] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   74.791957][ T7536] IPv6: NLM_F_CREATE should be set when creating new route
[   74.795089][ T7536] IPv6: NLM_F_CREATE should be set when creating new route
[   74.899563][ T7546] netlink: 'syz.1.701': attribute type 4 has an invalid length.
[   75.972791][ T7608] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[   75.977290][ T7608] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[   76.308711][ T7641] vlan2: entered promiscuous mode
[   76.310548][ T7641] team0: entered promiscuous mode
[   76.364822][ T7643] batadv_slave_1: entered promiscuous mode
[   76.375484][ T7643] bridge_slave_1: left allmulticast mode
[   76.378067][ T7643] bridge_slave_1: left promiscuous mode
[   76.382580][ T7643] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.387187][ T7643] bridge_slave_0: left allmulticast mode
[   76.389929][ T7643] bridge_slave_0: left promiscuous mode
[   76.392661][ T7643] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.573076][ T7642] batadv_slave_1: left promiscuous mode
[   77.065651][ T7699] IPVS: length: 163 != 8
[   77.256130][ T7712] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16)
[   77.259483][ T7712] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   77.626505][ T7730] tipc: Invalid UDP bearer configuration
[   77.626535][ T7730] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   77.668868][ T7735] netlink: zone id is out of range
[   77.671007][ T7735] netlink: zone id is out of range
[   77.672979][ T7735] netlink: zone id is out of range
[   77.675129][ T7735] netlink: get zone limit has 8 unknown bytes
[   78.047681][ T7779] atomic_op ffff88811274a198 conn xmit_atomic 0000000000000000
[   78.215821][ T7783] syzkaller1: entered allmulticast mode
[   78.823951][ T7787] netlink: 'syz.1.806': attribute type 13 has an invalid length.
[   78.918823][ T7787] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.989539][ T7787] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[   79.000315][ T5901] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   79.004614][ T5901] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.008375][ T5901] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   79.013163][ T5901] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.017018][ T5901] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   79.021702][ T5901] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.025538][ T5901] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   79.029296][ T5901] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.062965][ T7800] _Z`Ԁ@S: entered promiscuous mode
[   79.180455][ T7813] 8021q: adding VLAN 0 to HW filter on device bond3
[   79.184480][ T7813] bond0: (slave bond3): Enslaving as an active interface with an up link
[   79.259247][ T7826] __nla_validate_parse: 58 callbacks suppressed
[   79.259262][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.824'.
[   79.294231][ T7828] !: renamed from dummy0 (while UP)
[   79.448227][ T7844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.833'.
[   79.463573][ T7844] team0 (unregistering): Port device team_slave_0 removed
[   79.470633][ T7844] team0 (unregistering): Port device team_slave_1 removed
[   79.476034][ T7844] team0 (unregistering): Port device geneve0 removed
[   80.379253][ T7864] ip6gre1: entered allmulticast mode
[   80.457928][ T7866] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.480416][ T7866] syzkaller0: entered promiscuous mode
[   80.483248][ T7866] syzkaller0: entered allmulticast mode
[   80.488948][ T7870] openvswitch: netlink: Message has 4 unknown bytes.
[   80.501198][ T7866] tipc: Resetting bearer <eth:syzkaller0>
[   80.506768][ T7865] tipc: Resetting bearer <eth:syzkaller0>
[   80.521222][ T7865] tipc: Disabling bearer <eth:syzkaller0>
[   80.589063][ T7882] sit0: entered promiscuous mode
[   80.591914][ T7882] netlink: 'syz.1.848': attribute type 1 has an invalid length.
[   80.594768][ T7882] netlink: 1 bytes leftover after parsing attributes in process `syz.1.848'.
[   80.599263][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.847'.
[   80.610394][ T5901] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   80.614657][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.847'.
[   80.618708][ T5901] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   80.622842][ T5901] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   80.626542][ T5901] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   80.871741][ T7915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.863'.
[   80.943988][ T7922] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.866'.
[   81.102961][ T7939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.874'.
[   81.286416][ T7948] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.289541][ T7948] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.501532][ T7962] netlink: 20 bytes leftover after parsing attributes in process `syz.1.884'.
[   81.537072][ T7967] netlink: 37768 bytes leftover after parsing attributes in process `syz.2.885'.
[   81.788631][ T8000] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.791880][ T8000] syzkaller0: entered promiscuous mode
[   81.794085][ T8000] syzkaller0: entered allmulticast mode
[   81.798833][ T8000] tipc: Resetting bearer <eth:syzkaller0>
[   81.815347][ T7997] tipc: Resetting bearer <eth:syzkaller0>
[   81.818342][ T7997] tipc: Disabling bearer <eth:syzkaller0>
[   81.982826][ T8037] netlink: 'syz.2.920': attribute type 1 has an invalid length.
[   82.028861][ T8043] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   82.104274][ T8047] svc: failed to register nfsdv3 RPC service (errno 111).
[   82.109303][ T8047] svc: failed to register nfsaclv3 RPC service (errno 111).
[   82.114977][ T8058] veth1_to_bond: entered allmulticast mode
[   82.123194][ T8058] bond0: (slave bond_slave_1): Releasing backup interface
[   82.128959][ T8058] veth1_to_bond (unregistering): left allmulticast mode
[   82.307975][ T8073] pimreg: entered allmulticast mode
[   82.359643][ T8083] wg1: entered promiscuous mode
[   82.363443][ T8083] wg1: entered allmulticast mode
[   83.087006][ T8176] openvswitch: netlink: Message has 4 unknown bytes.
[   83.392991][ T8213] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.397782][ T8213] syzkaller0: entered promiscuous mode
[   83.400731][ T8213] syzkaller0: entered allmulticast mode
[   83.419148][ T8213] tipc: Resetting bearer <eth:syzkaller0>
[   83.423972][ T8207] team0: Mode changed to "broadcast"
[   83.426838][ T8212] tipc: Resetting bearer <eth:syzkaller0>
[   83.432499][ T8212] tipc: Disabling bearer <eth:syzkaller0>
[   83.436333][ T8207] vlan0: entered promiscuous mode
[   83.444170][ T8207] team0: Port device vlan0 added
[   83.450307][ T8207] tipc: Started in network mode
[   83.452312][ T8207] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   83.455228][ T8207] tipc: Enabled bearer <eth:team0>, priority 0
[   83.538522][ T8233] syz_tun: entered allmulticast mode
[   83.541981][ T8229] syz_tun: left allmulticast mode
[   83.576192][ T8239] netlink: 'syz.1.1013': attribute type 5 has an invalid length.
[   83.588664][ T8237] syzkaller0: entered promiscuous mode
[   83.593436][ T8237] syzkaller0: entered allmulticast mode
[   84.569810][ T6654] tipc: Node number set to 11578026
[   84.840742][ T8319] netlink: 'syz.1.1049': attribute type 1 has an invalid length.
[   84.843992][ T8319] __nla_validate_parse: 17 callbacks suppressed
[   84.844002][ T8319] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1049'.
[   84.904193][ T8327] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1053'.
[   85.026758][ T8338] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[   85.033415][ T8339] tipc: Resetting bearer <eth:team0>
[   85.135380][ T8351] lo speed is unknown, defaulting to 1000
[   85.137617][ T8351] lo speed is unknown, defaulting to 1000
[   85.141250][ T8351] lo speed is unknown, defaulting to 1000
[   85.144226][ T8351] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   85.148478][ T8351] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   85.160830][ T8351] lo speed is unknown, defaulting to 1000
[   85.163985][ T8351] lo speed is unknown, defaulting to 1000
[   85.167049][ T8351] lo speed is unknown, defaulting to 1000
[   85.307283][ T8362] netlink: 'syz.1.1069': attribute type 1 has an invalid length.
[   85.310782][ T8362] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1069'.
[   85.512745][ T8380] syzkaller1: entered promiscuous mode
[   85.515236][ T8380] syzkaller1: entered allmulticast mode
[   85.682816][ T8392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1084'.
[   85.686441][ T8392] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1084'.
[   85.692189][ T8392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1084'.
[   85.695491][ T8392] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1084'.
[   85.698671][ T8392] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1084'.
[   85.717819][ T8396] sctp: [Deprecated]: syz.1.1086 (pid 8396) Use of struct sctp_assoc_value in delayed_ack socket option.
[   85.717819][ T8396] Use struct sctp_sack_info instead
[   86.284810][ T5901] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   86.288406][ T5901] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   86.292092][ T5901] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   86.294912][ T5901] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   86.323606][ T8437] lo speed is unknown, defaulting to 1000
[   86.495778][ T8441] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.1103'.
[   86.525436][ T8443] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1104'.
[   86.554465][ T8445] macsec1: entered promiscuous mode
[   86.556673][ T8445] bridge0: entered promiscuous mode
[   86.559202][ T8445] bridge0: port 1(macsec1) entered blocking state
[   86.561884][ T8445] bridge0: port 1(macsec1) entered disabled state
[   86.564238][ T8445] macsec1: entered allmulticast mode
[   86.566368][ T8445] bridge0: entered allmulticast mode
[   86.569205][ T8445] macsec1: left allmulticast mode
[   86.571937][ T8445] bridge0: left allmulticast mode
[   86.574244][ T8445] bridge0: left promiscuous mode
[   86.657974][ T8453] netlink: 'syz.1.1109': attribute type 2 has an invalid length.
[   86.858330][ T8490] netlink: 'syz.1.1124': attribute type 4 has an invalid length.
[   86.902891][ T8495] ipvlan2: entered promiscuous mode
[   86.904937][ T8495] ipvlan2: entered allmulticast mode
[   86.906691][ T8495] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   87.046835][ T5901] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   87.054803][ T5901] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.057769][ T5901] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   87.065067][ T5901] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.068803][ T5901] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   87.079986][ T5901] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.083442][ T5901] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   87.088570][ T5901] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.224056][ T8517] lo speed is unknown, defaulting to 1000
[   87.336780][ T5901] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.347114][ T5901] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.351432][ T5901] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.355132][ T5901] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.772907][ T5904] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.776617][ T5904] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.788870][ T5904] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.792493][ T5904] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.839912][ T5237] Bluetooth: hci2: command 0x0405 tx timeout
[   88.146679][ T8603] lo: entered allmulticast mode
[   89.366045][ T8650] syz.2.1193 uses old SIOCAX25GETINFO
[   89.498679][ T8666] netlink: 'syz.2.1201': attribute type 1 has an invalid length.
[   89.750467][ T8701] syzkaller0: entered promiscuous mode
[   89.752671][ T8701] syzkaller0: entered allmulticast mode
[   90.237486][ T8734] __nla_validate_parse: 10 callbacks suppressed
[   90.237531][ T8734] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1229'.
[   90.321818][ T8736] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1230'.
[   90.693876][ T8775] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1248'.
[   90.697777][ T8775] netlink: 'syz.0.1248': attribute type 1 has an invalid length.
[   91.098734][ T8796] netlink: 'syz.0.1257': attribute type 1 has an invalid length.
[   91.104371][ T8796] netlink: 'syz.0.1257': attribute type 1 has an invalid length.
[   91.107594][ T8796] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1257'.
[   91.149037][ T8816] netlink: 212280 bytes leftover after parsing attributes in process `syz.1.1267'.
[   91.164951][ T8818] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1268'.
[   91.165412][ T8822] netlink: 'syz.0.1270': attribute type 21 has an invalid length.
[   91.174139][ T8822] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1270'.
[   91.178849][ T8822] netlink: 'syz.0.1270': attribute type 5 has an invalid length.
[   91.182318][ T8822] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1270'.
[   91.238804][ T8830] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.242544][ T8830] syzkaller0: entered promiscuous mode
[   91.244848][ T8830] syzkaller0: entered allmulticast mode
[   91.253338][ T8830] tipc: Resetting bearer <eth:syzkaller0>
[   91.284912][ T8839] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1277'.
[   91.577877][ T8886] sock: sock_set_timeout: `syz.2.1300' (pid 8886) tries to set negative timeout
[   91.745055][ T8912] netlink: 'syz.1.1312': attribute type 1 has an invalid length.
[   92.245953][ T8944] gtp0: entered promiscuous mode
[   92.374298][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1330'.
[   92.378019][ T8951] netlink: 'syz.1.1330': attribute type 1 has an invalid length.
[   92.419850][ T8951] nbd: socks must be embedded in a SOCK_ITEM attr
[   92.422753][ T8951] block nbd2: shutting down sockets
[   92.538289][  T793] IPVS: starting estimator thread 0...
[   92.629820][ T8963] IPVS: using max 76 ests per chain, 182400 per kthread
[   93.088336][ T9027] syzkaller0: Caught tx_queue_len zero misconfig
[   93.191603][ T9035] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.665518][ T9062] 0X: left allmulticast mode
[   93.667674][ T9062] wg1: left promiscuous mode
[   93.679432][ T9062] wg1: left allmulticast mode
[   93.689295][ T9062] vti0: left promiscuous mode
[   93.694240][ T9062] vti0: left allmulticast mode
[   94.457919][ T9080] openvswitch: netlink: Message has 5 unknown bytes.
[   94.744480][ T9114] sctp: [Deprecated]: syz.0.1400 (pid 9114) Use of int in maxseg socket option.
[   94.744480][ T9114] Use struct sctp_assoc_value instead
[   94.751851][ T9114] rdma_rxe: rxe_newlink: failed to add syz_tun
[   94.800896][ T9118] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   94.806384][ T9118] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   94.814168][ T9118] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   94.960357][ T9130] Bluetooth: hci1: Opcode 0x080f failed: -4
[   95.304003][ T9153] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   95.403475][ T9164] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   95.408235][ T9163] IPVS: stopping backup sync thread 9164 ...
[   96.666415][ T9237] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[   96.902880][ T9254] __nla_validate_parse: 11 callbacks suppressed
[   96.902891][ T9254] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1456'.
[   96.911704][ T9254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1456'.
[   97.049984][ T5237] Bluetooth: hci1: command 0x080f tx timeout
[   97.354660][ T9282] netlink: 'syz.1.1469': attribute type 4 has an invalid length.
[   97.358076][ T9282] netlink: 'syz.1.1469': attribute type 4 has an invalid length.
[   97.364189][  T793] lo speed is unknown, defaulting to 1000
[   97.367873][  T793] syz1: Port: 1 Link ACTIVE
[   97.468205][ T9301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1478'.
[   97.501121][ T9294] nbd2: detected capacity change from 0 to 127
[   97.518469][   T56] block nbd2: Receive control failed (result -104)
[   97.522478][ T9303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1479'.
[   97.734979][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1494'.
[   97.873222][ T9356] netlink: 'syz.1.1504': attribute type 1 has an invalid length.
[   97.876767][ T9356] NCSI netlink: No device for ifindex 0
[   97.963421][ T9368] netlink: 'syz.2.1510': attribute type 11 has an invalid length.
[   97.966214][ T9368] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1510'.
[   98.004798][ T9377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1514'.
[   98.008189][ T9377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1514'.
[   98.012620][ T9377] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1514'.
[   98.066336][ T9386] macsec3: entered promiscuous mode
[   98.068299][ T9386] team0: entered promiscuous mode
[   98.072761][ T9386] team_slave_0: entered promiscuous mode
[   98.075452][ T9386] team_slave_1: entered promiscuous mode
[   98.271233][ T9420] netlink: 452 bytes leftover after parsing attributes in process `syz.2.1536'.
[   98.707508][ T9446] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[   99.692762][ T9603] netlink: 'syz.2.1582': attribute type 9 has an invalid length.
[   99.699774][ T9603] netlink: 'syz.2.1582': attribute type 6 has an invalid length.
[  100.041951][ T9634] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  100.327048][ T9672] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.330342][ T9672] syzkaller0: entered promiscuous mode
[  100.332760][ T9672] syzkaller0: entered allmulticast mode
[  100.338168][ T9672] tipc: Resetting bearer <eth:syzkaller0>
[  100.343790][ T9671] tipc: Resetting bearer <eth:syzkaller0>
[  100.348824][ T9671] tipc: Disabling bearer <eth:syzkaller0>
[  100.352609][ T9676] veth0_to_bridge: entered promiscuous mode
[  100.355149][ T9675] veth0_to_bridge: left promiscuous mode
[  101.461322][ T9728] geneve2: entered promiscuous mode
[  101.464507][ T5904] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.467890][ T5904] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.476786][ T5904] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.487488][ T5904] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.855955][ T9784] TCP: TCP_TX_DELAY enabled
[  101.973632][ T9806] __nla_validate_parse: 18 callbacks suppressed
[  101.973644][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1675'.
[  101.995539][ T9808] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  102.271119][ T9835] batadv_slave_0: entered promiscuous mode
[  102.275796][ T9834] batadv_slave_0: left promiscuous mode
[  102.869042][ T9842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1692'.
[  102.883843][ T9842] tipc: Disabling bearer <eth:vlan0>
[  103.166692][ T9867] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1703'.
[  103.271666][ T9884] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  103.281565][ T9886] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20001
[  103.339517][ T9891] lo speed is unknown, defaulting to 1000
[  103.381880][ T9903] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1719'.
[  103.665783][ T9922] netlink: 'syz.2.1728': attribute type 2 has an invalid length.
[  103.668721][ T9922] netlink: 'syz.2.1728': attribute type 2 has an invalid length.
[  103.751855][ T9928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1731'.
[  103.755845][ T9928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1731'.
[  103.760164][ T9928] netlink: 58 bytes leftover after parsing attributes in process `syz.1.1731'.
[  103.965735][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1741'.
[  103.977871][ T9949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1741'.
[  103.988444][ T9949] netlink: 'syz.1.1741': attribute type 6 has an invalid length.
[  104.290791][ T9965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1746'.
[  104.453819][ T9985] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  104.809065][ T9998] netlink: 'syz.2.1760': attribute type 1 has an invalid length.
[  104.813962][ T9998] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  104.817699][ T9998] gretap2: entered promiscuous mode
[  105.335507][T10010] vxcan1 speed is unknown, defaulting to 1000
[  105.338207][T10010] vxcan1 speed is unknown, defaulting to 1000
[  105.341353][T10010] vxcan1 speed is unknown, defaulting to 1000
[  105.386568][T10010] infiniband syz2: set down
[  105.388277][   T47] vxcan1 speed is unknown, defaulting to 1000
[  105.392982][T10010] infiniband syz2: added vxcan1
[  105.407173][T10010] RDS/IB: syz2: added
[  105.408926][T10010] smc: adding ib device syz2 with port count 1
[  105.411847][T10010] smc:    ib device syz2 port 1 has pnetid 
[  105.414393][   T47] vxcan1 speed is unknown, defaulting to 1000
[  105.417440][T10010] vxcan1 speed is unknown, defaulting to 1000
[  105.470661][T10010] vxcan1 speed is unknown, defaulting to 1000
[  105.540117][T10010] vxcan1 speed is unknown, defaulting to 1000
[  105.605307][T10029] lo speed is unknown, defaulting to 1000
[  105.611694][T10029] vxcan1 speed is unknown, defaulting to 1000
[  106.119086][T10097] sit0: left promiscuous mode
[  106.124326][T10097] batadv_slave_0: left promiscuous mode
[  106.126600][T10097] batadv_slave_0: left allmulticast mode
[  106.138668][T10097] macsec1: left promiscuous mode
[  106.146490][T10097] macsec1: left allmulticast mode
[  106.148876][T10097] ip6gre1: left allmulticast mode
[  106.151685][T10097] ipvlan2: left promiscuous mode
[  106.153700][T10097] ipvlan2: left allmulticast mode
[  106.155835][T10097] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  106.168265][T10097] gtp0: left promiscuous mode
[  106.178391][ T6654] lo speed is unknown, defaulting to 1000
[  106.194637][ T6654] syz1: Port: 1 Link DOWN
[  106.203386][T10097] hsr_slave_0: left promiscuous mode
[  106.207219][T10097] hsr_slave_1: left promiscuous mode
[  106.392973][T10131] tipc: Invalid UDP bearer configuration
[  106.393002][T10131] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  106.899616][T10186] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614)
[  106.935492][T10190] netlink: 'syz.1.1846': attribute type 4 has an invalid length.
[  107.128230][T10210] __nla_validate_parse: 16 callbacks suppressed
[  107.128244][T10210] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1856'.
[  107.134441][T10211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  107.140255][T10210] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1856'.
[  107.151338][T10210] Set syz0 is full, maxelem 0 reached
[  107.155522][T10210] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1856'.
[  107.268233][T10223] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1862'.
[  107.397897][T10225] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.407010][T10225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1863'.
[  107.417039][T10225] siw: device registration error -23
[  107.875754][T10239] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1869'.
[  107.880838][T10239] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1869'.
[  107.914180][T10241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1870'.
[  107.955520][T10243] netlink: zone id is out of range
[  107.960892][T10243] netlink: zone id is out of range
[  108.001181][T10243] netlink: set zone limit has 4 unknown bytes
[  108.042384][T10253] netlink: 'syz.1.1876': attribute type 12 has an invalid length.
[  108.047728][T10243] netlink: del zone limit has 4 unknown bytes
[  108.148178][T10270] veth0_to_bond: entered allmulticast mode
[  108.323571][T10300] netlink: 'syz.1.1897': attribute type 1 has an invalid length.
[  108.405418][T10311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1899'.
[  108.455463][T10315] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1900'.
[  108.633191][T10347] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.639458][T10347] syzkaller0: entered promiscuous mode
[  108.642787][T10347] syzkaller0: entered allmulticast mode
[  108.652163][T10347] tipc: Resetting bearer <eth:syzkaller0>
[  108.655699][T10349] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  108.659664][T10349] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  108.663753][T10346] tipc: Resetting bearer <eth:syzkaller0>
[  108.667602][T10346] tipc: Disabling bearer <eth:syzkaller0>
[  108.800997][ T5904] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.804065][ T5904] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.806973][ T5904] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.811612][ T5904] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.860960][T10365] vlan0: entered promiscuous mode
[  108.863525][T10365] gretap0: entered promiscuous mode
[  109.690327][T10460] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.693047][T10460] syzkaller0: entered promiscuous mode
[  109.695253][T10460] syzkaller0: entered allmulticast mode
[  109.702706][T10460] tipc: Resetting bearer <eth:syzkaller0>
[  109.705793][T10459] tipc: Resetting bearer <eth:syzkaller0>
[  109.710130][T10459] tipc: Disabling bearer <eth:syzkaller0>
[  109.838369][T10464] lo speed is unknown, defaulting to 1000
[  109.842198][T10464] vxcan1 speed is unknown, defaulting to 1000
[  110.797258][T10492] lo speed is unknown, defaulting to 1000
[  110.799933][T10492] vxcan1 speed is unknown, defaulting to 1000
[  110.847120][T10496] netlink: 'syz.0.1981': attribute type 2 has an invalid length.
[  110.850225][T10496] netlink: 'syz.0.1981': attribute type 1 has an invalid length.
[  110.887309][T10493] netlink: 'syz.1.1980': attribute type 1 has an invalid length.
[  111.049756][   T33] audit: type=1804 audit(1755897593.808:2): pid=10511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1987" name="/newroot/663/cgroup.controllers" dev="tmpfs" ino=3359 res=1 errno=0
[  111.076168][   T33] audit: type=1800 audit(1755897593.808:3): pid=10511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1987" name="cgroup.controllers" dev="tmpfs" ino=3359 res=0 errno=0
[  111.089390][   T33] audit: type=1800 audit(1755897593.838:4): pid=10511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1987" name="cgroup.controllers" dev="tmpfs" ino=3359 res=0 errno=0
[  111.130952][T10518] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  111.290633][T10543] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.306035][T10543] tipc: Failed to remove unknown binding: 66,1,1/0:2499055625/2499055627
[  111.313956][T10543] tipc: Failed to remove unknown binding: 66,1,1/0:2499055625/2499055627
[  111.317759][T10547] netlink: 'syz.2.2000': attribute type 1 has an invalid length.
[  111.319793][T10543] tipc: Failed to remove unknown binding: 66,1,1/0:2499055625/2499055627
[  111.321499][T10547] netlink: 'syz.2.2000': attribute type 1 has an invalid length.
[  111.464559][T10566] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  111.528230][T10576] netlink: 'syz.1.2014': attribute type 7 has an invalid length.
[  111.532049][T10576] netlink: 'syz.1.2014': attribute type 8 has an invalid length.
[  111.543919][T10576] gretap0: entered promiscuous mode
[  111.547809][T10576] batadv_slave_1: entered promiscuous mode
[  111.553029][T10576] erspan0: entered promiscuous mode
[  111.555939][T10576] erspan0: left promiscuous mode
[  111.561508][T10576] gretap0: left promiscuous mode
[  111.564389][T10576] batadv_slave_1: left promiscuous mode
[  112.198169][T10613] __nla_validate_parse: 18 callbacks suppressed
[  112.198179][T10613] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2029'.
[  112.426731][T10636] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2040'.
[  112.859106][T10674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2056'.
[  112.908205][T10680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2058'.
[  113.104134][T10699] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2067'.
[  113.107853][T10699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2067'.
[  113.299151][T10705] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2070'.
[  113.409512][T10715] netlink: 'syz.2.2075': attribute type 10 has an invalid length.
[  113.413233][T10715] bond0: (slave wlan1): Opening slave failed
[  113.628852][T10720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2077'.
[  113.875182][T10751] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  113.882761][T10751] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2092'.
[  113.886243][T10751] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2092'.
[  113.971601][T10755] smc: net device bond0 applied user defined pnetid SYZ2
[  113.974457][T10755] smc: net device bond0 erased user defined pnetid SYZ2
[  114.350084][T10785] netlink: 'syz.0.2109': attribute type 8 has an invalid length.
[  114.395399][T10791] netlink: 'syz.0.2111': attribute type 1 has an invalid length.
[  114.457163][T10801] nbd: must specify a size in bytes for the device
[  114.529502][T10815] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  114.631001][T10829] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  115.063793][T10888] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  115.392927][T10929] netem: change failed
[  115.606327][T10947] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.135727][T10989] validate_nla: 3 callbacks suppressed
[  116.135737][T10989] netlink: 'syz.1.2205': attribute type 15 has an invalid length.
[  116.183197][T10993] netlink: 'syz.1.2207': attribute type 13 has an invalid length.
[  116.451615][T11036] bridge0: port 1(ipvlan3) entered blocking state
[  116.454262][T11036] bridge0: port 1(ipvlan3) entered disabled state
[  116.456998][T11036] ipvlan3: entered allmulticast mode
[  116.458987][T11036] bridge0: entered allmulticast mode
[  116.466180][T11036] ipvlan3: left allmulticast mode
[  116.468256][T11036] bridge0: left allmulticast mode
[  116.476908][T11039] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.537641][T11048] rdma_rxe: rxe_newlink: failed to add batadv_slave_1
[  116.619953][T11064] sctp: [Deprecated]: syz.2.2241 (pid 11064) Use of int in maxseg socket option.
[  116.619953][T11064] Use struct sctp_assoc_value instead
[  116.985959][T11083] netlink: 'syz.1.2250': attribute type 2 has an invalid length.
[  116.994221][T11083] : entered promiscuous mode
[  117.203946][T11119] lo speed is unknown, defaulting to 1000
[  117.211111][T11119] vxcan1 speed is unknown, defaulting to 1000
[  117.222249][T11124] netlink: ct family unspecified
[  117.224474][T11124] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.398916][T11149] netlink: 'syz.2.2279': attribute type 6 has an invalid length.
[  117.402305][T11149] IPv6: NLM_F_CREATE should be specified when creating new route
[  117.562388][T11173] __nla_validate_parse: 19 callbacks suppressed
[  117.562398][T11173] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2288'.
[  117.785027][T11205] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2303'.
[  117.886029][T11217] syz.1.2307 (11217) used obsolete PPPIOCDETACH ioctl
[  117.912672][T11225] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2311'.
[  118.011872][T11241] netlink: 'syz.1.2320': attribute type 7 has an invalid length.
[  118.125301][T11261] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2329'.
[  118.348009][T11275] netlink: 'syz.2.2334': attribute type 1 has an invalid length.
[  118.355949][T11275] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2334'.
[  118.418121][T11286] tipc: Enabling of bearer <eth:macvtap0> rejected, failed to enable media
[  118.523867][T11304] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2348'.
[  118.697555][T11320] bond0: (slave dummy0): Releasing backup interface
[  118.712364][T11320] bond0: (slave bond_slave_0): Releasing backup interface
[  118.716388][T11320] bond0: (slave bond_slave_1): Releasing backup interface
[  118.720669][T11320] batman_adv: batadv0: Removing interface: batadv_slave_0
[  118.724250][T11320] batman_adv: batadv0: Removing interface: batadv_slave_1
[  118.728102][T11320] bond1: (slave bond2): Releasing backup interface
[  118.731191][T11320] bond1: (slave bond2): the permanent HWaddr of slave - 82:ed:f3:cd:e4:ca - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  118.736891][T11320] bond1: (slave gretap1): making interface the new active one
[  118.743200][T11320] bond1: (slave gretap1): Releasing backup interface
[  118.747516][T11320] bond0: (slave bond3): Releasing backup interface
[  118.779148][T11320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2351'.
[  119.308502][T11353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2371'.
[  119.426108][T11369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2377'.
[  119.477502][T11378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2381'.
[  119.565015][T11392] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.047311][T11468] ==================================================================
[  120.050662][T11468] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  120.053527][T11468] Read of size 1 at addr ffff888021c8d0b0 by task syz.0.2424/11468
[  120.057917][T11468] 
[  120.058995][T11468] CPU: 1 UID: 0 PID: 11468 Comm: syz.0.2424 Not tainted syzkaller #0 PREEMPT(full) 
[  120.059013][T11468] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  120.059022][T11468] Call Trace:
[  120.059026][T11468]  <TASK>
[  120.059032][T11468]  dump_stack_lvl+0x189/0x250
[  120.059051][T11468]  ? __pfx_dump_stack_lvl+0x10/0x10
[  120.059065][T11468]  ? lock_release+0x4b/0x3e0
[  120.059085][T11468]  ? __virt_addr_valid+0x4a5/0x5c0
[  120.059102][T11468]  print_report+0xca/0x240
[  120.059113][T11468]  ? xfrm_state_find+0x2cf2/0x5400
[  120.059123][T11468]  kasan_report+0x118/0x150
[  120.059140][T11468]  ? xfrm_state_find+0x2cf2/0x5400
[  120.059152][T11468]  xfrm_state_find+0x2cf2/0x5400
[  120.059169][T11468]  ? xfrm_state_find+0x1da/0x5400
[  120.059182][T11468]  ? __pfx_xfrm_state_find+0x10/0x10
[  120.059193][T11468]  ? xfrm4_get_saddr+0xd5/0x140
[  120.059206][T11468]  ? __pfx_xfrm4_get_saddr+0x10/0x10
[  120.059218][T11468]  ? lock_acquire+0x5f/0x360
[  120.059234][T11468]  ? rcu_is_watching+0x15/0xb0
[  120.059245][T11468]  ? lock_release+0x4b/0x3e0
[  120.059291][T11468]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  120.059313][T11468]  ? __ip_dev_find+0xa2/0x4e0
[  120.059322][T11468]  ? rcu_is_watching+0x15/0xb0
[  120.059335][T11468]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  120.059351][T11468]  ? rcu_is_watching+0x15/0xb0
[  120.059364][T11468]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  120.059376][T11468]  ? rcu_is_watching+0x15/0xb0
[  120.059388][T11468]  ? rcu_is_watching+0x15/0xb0
[  120.059399][T11468]  ? xfrm_selector_match+0xbcf/0x1140
[  120.059412][T11468]  ? lock_release+0x4b/0x3e0
[  120.059437][T11468]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  120.059454][T11468]  ? rcu_is_watching+0x15/0xb0
[  120.059464][T11468]  ? xfrm_expand_policies+0x41f/0x6a0
[  120.059480][T11468]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  120.059496][T11468]  ? ip_route_output_key_hash+0xde/0x2e0
[  120.059510][T11468]  ? ip_route_output_key_hash+0x24e/0x2e0
[  120.059523][T11468]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  120.059537][T11468]  ? rcuref_put+0x1b7/0x210
[  120.059551][T11468]  ? __pfx_rcuref_put+0x10/0x10
[  120.059563][T11468]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  120.059583][T11468]  xfrm_lookup_route+0x3c/0x1c0
[  120.059598][T11468]  __ip4_datagram_connect+0x9a5/0x1270
[  120.059617][T11468]  __ip6_datagram_connect+0x9f0/0x1150
[  120.059636][T11468]  ? __pfx___ip6_datagram_connect+0x10/0x10
[  120.059650][T11468]  ? __local_bh_enable_ip+0x12d/0x1c0
[  120.059662][T11468]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  120.059677][T11468]  ip6_datagram_connect_v6_only+0x63/0xa0
[  120.059692][T11468]  __sys_connect+0x316/0x440
[  120.059709][T11468]  ? __pfx___sys_connect+0x10/0x10
[  120.059729][T11468]  ? rcu_is_watching+0x15/0xb0
[  120.059742][T11468]  __x64_sys_connect+0x7a/0x90
[  120.059758][T11468]  do_syscall_64+0xfa/0x3b0
[  120.059769][T11468]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.059781][T11468]  ? exc_page_fault+0x9f/0xf0
[  120.059798][T11468]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.059809][T11468] RIP: 0033:0x7ff1bd58ebe9
[  120.059820][T11468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  120.059830][T11468] RSP: 002b:00007ff1be337038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  120.059845][T11468] RAX: ffffffffffffffda RBX: 00007ff1bd7b5fa0 RCX: 00007ff1bd58ebe9
[  120.059854][T11468] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000004
[  120.059862][T11468] RBP: 00007ff1bd611e19 R08: 0000000000000000 R09: 0000000000000000
[  120.059869][T11468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  120.059877][T11468] R13: 00007ff1bd7b6038 R14: 00007ff1bd7b5fa0 R15: 00007ffed922d218
[  120.059889][T11468]  </TASK>
[  120.059893][T11468] 
[  120.199850][T11468] Allocated by task 8696:
[  120.201571][T11468]  kasan_save_track+0x3e/0x80
[  120.203131][T11468]  __kasan_slab_alloc+0x6c/0x80
[  120.204887][T11468]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  120.206966][T11468]  xfrm_state_alloc+0x24/0x2f0
[  120.208997][T11468]  __find_acq_core+0x8a7/0x1c00
[  120.210697][T11468]  xfrm_find_acq+0x78/0xa0
[  120.212274][T11468]  xfrm_alloc_userspi+0x6b3/0xc90
[  120.214002][T11468]  xfrm_user_rcv_msg+0x7a3/0xab0
[  120.215742][T11468]  netlink_rcv_skb+0x208/0x470
[  120.217689][T11468]  xfrm_netlink_rcv+0x79/0x90
[  120.219726][T11468]  netlink_unicast+0x82f/0x9e0
[  120.221747][T11468]  netlink_sendmsg+0x805/0xb30
[  120.223714][T11468]  __sock_sendmsg+0x21c/0x270
[  120.225667][T11468]  ____sys_sendmsg+0x505/0x830
[  120.227618][T11468]  ___sys_sendmsg+0x21f/0x2a0
[  120.229426][T11468]  __x64_sys_sendmsg+0x19b/0x260
[  120.231167][T11468]  do_syscall_64+0xfa/0x3b0
[  120.232777][T11468]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.235273][T11468] 
[  120.236359][T11468] Freed by task 6654:
[  120.238094][T11468]  kasan_save_track+0x3e/0x80
[  120.240139][T11468]  kasan_save_free_info+0x46/0x50
[  120.242366][T11468]  __kasan_slab_free+0x5b/0x80
[  120.244365][T11468]  kmem_cache_free+0x18f/0x400
[  120.246045][T11468]  xfrm_state_gc_task+0x52d/0x6b0
[  120.247720][T11468]  process_scheduled_works+0xae1/0x17b0
[  120.249688][T11468]  worker_thread+0x8a0/0xda0
[  120.251347][T11468]  kthread+0x711/0x8a0
[  120.253051][T11468]  ret_from_fork+0x3fc/0x770
[  120.255040][T11468]  ret_from_fork_asm+0x1a/0x30
[  120.257129][T11468] 
[  120.258181][T11468] The buggy address belongs to the object at ffff888021c8cd80
[  120.258181][T11468]  which belongs to the cache xfrm_state of size 928
[  120.264041][T11468] The buggy address is located 816 bytes inside of
[  120.264041][T11468]  freed 928-byte region [ffff888021c8cd80, ffff888021c8d120)
[  120.269678][T11468] 
[  120.270674][T11468] The buggy address belongs to the physical page:
[  120.272832][T11468] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888021c8c480 pfn:0x21c8c
[  120.276039][T11468] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  120.278837][T11468] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  120.281634][T11468] page_type: f5(slab)
[  120.283289][T11468] raw: 00fff00000000040 ffff88801d7ca280 dead000000000122 0000000000000000
[  120.286466][T11468] raw: ffff888021c8c480 00000000800e000c 00000000f5000000 0000000000000000
[  120.289366][T11468] head: 00fff00000000040 ffff88801d7ca280 dead000000000122 0000000000000000
[  120.292149][T11468] head: ffff888021c8c480 00000000800e000c 00000000f5000000 0000000000000000
[  120.295112][T11468] head: 00fff00000000002 ffffea0000872301 00000000ffffffff 00000000ffffffff
[  120.298097][T11468] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  120.301106][T11468] page dumped because: kasan: bad access detected
[  120.303761][T11468] page_owner tracks the page as allocated
[  120.306272][T11468] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7016, tgid 7015 (syz.1.469), ts 67379000581, free_ts 63047924471
[  120.313321][T11468]  post_alloc_hook+0x240/0x2a0
[  120.315045][T11468]  get_page_from_freelist+0x21e4/0x22c0
[  120.317138][T11468]  __alloc_frozen_pages_noprof+0x181/0x370
[  120.319118][T11468]  alloc_pages_mpol+0x232/0x4a0
[  120.320746][T11468]  allocate_slab+0x8a/0x370
[  120.322274][T11468]  ___slab_alloc+0xbeb/0x1410
[  120.323838][T11468]  kmem_cache_alloc_noprof+0x283/0x3c0
[  120.325634][T11468]  xfrm_state_alloc+0x24/0x2f0
[  120.327162][T11468]  pfkey_add+0x6e4/0x2e00
[  120.328585][T11468]  pfkey_sendmsg+0xbfe/0x1090
[  120.330090][T11468]  __sock_sendmsg+0x21c/0x270
[  120.331729][T11468]  ____sys_sendmsg+0x505/0x830
[  120.333400][T11468]  ___sys_sendmsg+0x21f/0x2a0
[  120.335022][T11468]  __x64_sys_sendmsg+0x19b/0x260
[  120.336762][T11468]  do_syscall_64+0xfa/0x3b0
[  120.338360][T11468]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.340467][T11468] page last free pid 5871 tgid 5871 stack trace:
[  120.342647][T11468]  __free_frozen_pages+0xbc4/0xd30
[  120.344424][T11468]  __put_partials+0x156/0x1a0
[  120.346038][T11468]  put_cpu_partial+0x17c/0x250
[  120.348002][T11468]  __slab_free+0x2d5/0x3c0
[  120.349947][T11468]  qlist_free_all+0x97/0x140
[  120.351981][T11468]  kasan_quarantine_reduce+0x148/0x160
[  120.354332][T11468]  __kasan_slab_alloc+0x22/0x80
[  120.356485][T11468]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  120.358866][T11468]  getname_flags+0xb8/0x540
[  120.360879][T11468]  __x64_sys_unlink+0x3a/0x50
[  120.362974][T11468]  do_syscall_64+0xfa/0x3b0
[  120.364781][T11468]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.366901][T11468] 
[  120.367980][T11468] Memory state around the buggy address:
[  120.370479][T11468]  ffff888021c8cf80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  120.373928][T11468]  ffff888021c8d000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  120.377285][T11468] >ffff888021c8d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  120.380659][T11468]                                      ^
[  120.383114][T11468]  ffff888021c8d100: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  120.386108][T11468]  ffff888021c8d180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  120.388818][T11468] ==================================================================
[  120.393011][T11468] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  120.396123][T11468] CPU: 0 UID: 0 PID: 11468 Comm: syz.0.2424 Not tainted syzkaller #0 PREEMPT(full) 
[  120.400217][T11468] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  120.404330][T11468] Call Trace:
[  120.405517][T11468]  <TASK>
[  120.406591][T11468]  dump_stack_lvl+0x99/0x250
[  120.408207][T11468]  ? __asan_memcpy+0x40/0x70
[  120.410110][T11468]  ? __pfx_dump_stack_lvl+0x10/0x10
[  120.412366][T11468]  ? __pfx__printk+0x10/0x10
[  120.414383][T11468]  vpanic+0x281/0x750
[  120.416159][T11468]  ? preempt_schedule+0xae/0xc0
[  120.418207][T11468]  ? __pfx_vpanic+0x10/0x10
[  120.419930][T11468]  ? preempt_schedule_common+0x83/0xd0
[  120.422314][T11468]  ? preempt_schedule+0xae/0xc0
[  120.424441][T11468]  ? __pfx_preempt_schedule+0x10/0x10
[  120.426805][T11468]  panic+0xb9/0xc0
[  120.428450][T11468]  ? __pfx_panic+0x10/0x10
[  120.430374][T11468]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  120.432972][T11468]  ? xfrm_state_find+0x2cf2/0x5400
[  120.434918][T11468]  check_panic_on_warn+0x89/0xb0
[  120.437096][T11468]  ? xfrm_state_find+0x2cf2/0x5400
[  120.438797][T11468]  end_report+0x78/0x160
[  120.440523][T11468]  kasan_report+0x129/0x150
[  120.442182][T11468]  ? xfrm_state_find+0x2cf2/0x5400
[  120.443985][T11468]  xfrm_state_find+0x2cf2/0x5400
[  120.445744][T11468]  ? xfrm_state_find+0x1da/0x5400
[  120.447803][T11468]  ? __pfx_xfrm_state_find+0x10/0x10
[  120.450091][T11468]  ? xfrm4_get_saddr+0xd5/0x140
[  120.452169][T11468]  ? __pfx_xfrm4_get_saddr+0x10/0x10
[  120.454429][T11468]  ? lock_acquire+0x5f/0x360
[  120.456438][T11468]  ? rcu_is_watching+0x15/0xb0
[  120.458402][T11468]  ? lock_release+0x4b/0x3e0
[  120.460121][T11468]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  120.462699][T11468]  ? __ip_dev_find+0xa2/0x4e0
[  120.464781][T11468]  ? rcu_is_watching+0x15/0xb0
[  120.466774][T11468]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  120.469549][T11468]  ? rcu_is_watching+0x15/0xb0
[  120.471610][T11468]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  120.473817][T11468]  ? rcu_is_watching+0x15/0xb0
[  120.475815][T11468]  ? rcu_is_watching+0x15/0xb0
[  120.477826][T11468]  ? xfrm_selector_match+0xbcf/0x1140
[  120.480178][T11468]  ? lock_release+0x4b/0x3e0
[  120.482114][T11468]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  120.484475][T11468]  ? rcu_is_watching+0x15/0xb0
[  120.486532][T11468]  ? xfrm_expand_policies+0x41f/0x6a0
[  120.488860][T11468]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  120.491113][T11468]  ? ip_route_output_key_hash+0xde/0x2e0
[  120.493442][T11468]  ? ip_route_output_key_hash+0x24e/0x2e0
[  120.495825][T11468]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  120.498168][T11468]  ? rcuref_put+0x1b7/0x210
[  120.500076][T11468]  ? __pfx_rcuref_put+0x10/0x10
[  120.502068][T11468]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  120.504377][T11468]  xfrm_lookup_route+0x3c/0x1c0
[  120.506454][T11468]  __ip4_datagram_connect+0x9a5/0x1270
[  120.508709][T11468]  __ip6_datagram_connect+0x9f0/0x1150
[  120.510958][T11468]  ? __pfx___ip6_datagram_connect+0x10/0x10
[  120.513512][T11468]  ? __local_bh_enable_ip+0x12d/0x1c0
[  120.515786][T11468]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  120.517828][T11468]  ip6_datagram_connect_v6_only+0x63/0xa0
[  120.520198][T11468]  __sys_connect+0x316/0x440
[  120.522092][T11468]  ? __pfx___sys_connect+0x10/0x10
[  120.524192][T11468]  ? rcu_is_watching+0x15/0xb0
[  120.526200][T11468]  __x64_sys_connect+0x7a/0x90
[  120.528231][T11468]  do_syscall_64+0xfa/0x3b0
[  120.530078][T11468]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.532344][T11468]  ? exc_page_fault+0x9f/0xf0
[  120.534101][T11468]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.536219][T11468] RIP: 0033:0x7ff1bd58ebe9
[  120.538209][T11468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  120.546433][T11468] RSP: 002b:00007ff1be337038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  120.549720][T11468] RAX: ffffffffffffffda RBX: 00007ff1bd7b5fa0 RCX: 00007ff1bd58ebe9
[  120.552895][T11468] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000004
[  120.555661][T11468] RBP: 00007ff1bd611e19 R08: 0000000000000000 R09: 0000000000000000
[  120.558311][T11468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  120.561458][T11468] R13: 00007ff1bd7b6038 R14: 00007ff1bd7b5fa0 R15: 00007ffed922d218
[  120.564741][T11468]  </TASK>
[  120.566847][T11468] Kernel Offset: disabled
[  120.568772][T11468] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:20:02  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffd4000892f91 RBX=ffffea0004497c88 RCX=dffffc0000000000 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffc9000675f978 RBP=ffffc9000675f890 RSP=ffffc9000675f5e0
R8 =ffffea0004497c73 R9 =1ffffd4000892f8e R10=dffffc0000000000 R11=fffff94000892f8f
R12=00007fabce200000 R13=00007fabce160000 R14=ffffea0004497c80 R15=ffffc9000675faa0
RIP=ffffffff82094878 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555574a47500 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b33b22ff8 CR3=0000000106bbe000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f8c74412e53
XMM06=0000000000000000 00007f8c74412e4d XMM07=0000000000000000 00007f8c74412e61
XMM08=0000000000000000 00007f8c74412ee7 XMM09=0000000000000000 00007f8c74412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000061 RBX=0000000000000061 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000013a6 RDI=00000000000013a7 RBP=00000000000003f8 RSP=ffffc9000676ed10
R8 =ffff888106a58237 R9 =1ffff11020d4b046 R10=dffffc0000000000 R11=ffffffff854f2040
R12=dffffc0000000000 R13=ffffffff99afb8e7 R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f20bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff1be3376c0 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2e1781 CR3=0000000035e80000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007ff1bd787498 00007ff1bd787470 XMM03=00007ff1bd7874a8 00007ff1bd7874a0
XMM04=00007ff1be2ed100 00007ff1bd787460 XMM05=00007ff1bd787478 00007ff1bd7874c0
XMM06=00007ff1bd7874b8 00007ff1bd7874b0 XMM07=00007ff1bd7874a8 00007ff1bd7874a0
XMM08=0000000000000000 00007ff1bd612ee7 XMM09=0000000000000000 00007ff1bd612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
