last executing test programs:

1.20830498s ago: executing program 0 (id=1722):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32fffffff584000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000f080003400000000108000440000000220500020083000000240001800a00010072656469720000001400028008000140000000140800e18295d600160900010073797a3000000000140000001100010000000000000000000000000a"], 0xf8}, 0x1, 0x0, 0x0, 0x40000c0}, 0x40)

1.207950536s ago: executing program 0 (id=1723):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000005600000095"], &(0x7f0000000000)='GPL\x00', 0xe, 0x0, 0x0, 0x40f00}, 0x94) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000703"], 0x0, 0x4e, 0x0, 0x1}, 0x28) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={0x44, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x40080)

1.138130834s ago: executing program 0 (id=1724):
getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, 0x0, &(0x7f00000000c0))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r0], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r1}, &(0x7f0000000980), &(0x7f00000009c0)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r1, &(0x7f0000000680), 0x0}, 0x20)
unshare(0x2c060000)
unshare(0x22020600)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x18)
r3 = getpid()
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000000)=r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x3c, r5, 0x633d41a77d0888ff, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2001}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20048844)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x100000800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0xfffffffffffffffe, 0x1000000000, 0xfffffffffffffffc, 0xfffffffffffffffe}, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r9, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001014010026bd7000fddbdf250800030004000000080001000000000083f4000c821029e3ba07137ccab8f872dc71e411b468833776e3afd3fe98bf0a48dec409b6c575c291149ce3c536e932312a5a8dcff5fbeb07228299f25554708885cdd0bc6236b5034664c6a5eed0a7f5beabce420693a9c4f9a4f55a10ce60"], 0x20}, 0x1, 0x0, 0x0, 0x8090}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r7, 0x20, 0x2000, 0x2, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x3}, @NL80211_ATTR_TXQ_LIMIT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000)
sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="ed8d63d3b721096097bb3e53ae1c11de365be13a486a3746fa558af12ae0f6d1b3"], 0x28}, 0x1, 0x6c00}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r7, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xbcac, 0x10}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xb, 0x2, "ecbc03d1e3368e"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5814}, 0x4000041)

787.672777ms ago: executing program 2 (id=1730):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000080000", 0x58}], 0x1)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={<r4=>0x0, 0x1, 0x0, 0x5, 0x7, 0x5}, &(0x7f0000000040)=0x14)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000100)={0x7fff, 0x2, 0x8200, 0x3, 0x0, 0x7fff, 0x95, 0xd, r4}, 0x20)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f00000001c0)={'wg1\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002b00)=@newlink={0x44, 0x10, 0x1, 0x4, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @remote}]}]}, @IFLA_MTU={0x8}]}, 0x44}}, 0x0)
ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}})
bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r5, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
shutdown(r5, 0x1)
sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x34, r1, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)

477.68006ms ago: executing program 2 (id=1736):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004780)=ANY=[@ANYBLOB="340000003e000701feffffff00017cefff030042800c0048040000018004001400"], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001400000000514000000110001"], 0xe8}}, 0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
r4 = socket$alg(0x26, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000000c0)={'team0\x00', <r5=>0x0})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r8=>0x0})
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
sendmmsg$inet(r9, &(0x7f0000000800)=[{{&(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000004c0)="0713c1751d78df93d07918837f207037ca2c72a60a9cdfc205aef09ef9dfaf370dd89866050b89d48487080e8090a8138f7d38874ee00c28695b685cb3555d8e1bc29f6e2f3ff756c3e48a3573b157da4e78be71fd67e1d835c7d0bb13b236aa449c8b4015387bb24039149a9b5a086d22960e5c12a40e90ee0fa8813697c866d64394d0f4b02e928d814cbbd090a66b864b19f389a88c0ff67153a5c8", 0x9d}, {&(0x7f0000002280)="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", 0x1000}, {&(0x7f0000000580)="b08f194ebca942a2817b4572dd95a1f7078067b995f618a2ec147143a4d55000e44b2e091a6f7adb19b55fff968be2617fbad01e3e9a048771b8a05bc4dd57a0d028b1415df9e417c9350b146664f3e66a7de6d49a4650886b326cb8e9fdc3c665a6f417d077bda895136e235633", 0x6e}, {&(0x7f0000000600)="3fa1229aae18ff443e9310cf1589300eafc132a6aa4906fc3d15eb9e80d946b645f8334ee3fe9d013dc77caaea3e16d31df6be56ad3a8ece6bdd405492326e2b5976f803c9a7287c8c555443ff97ceecd1fb5f70aa5768997211ce8aeec3e27e052e6b5d7e6f40497706d21aee8bc97e234847bd7c8b2e2e0d0b37426f33a9ab49a884fbec71d789ddf007069bab0ac1cc4a3a41302d8cac6017bc25647067bc3f5baff6d42158845cd1a6a66d7d708d2af4e6c97937f750179200", 0xbb}], 0x4, &(0x7f0000000700)=[@ip_retopts={{0x28, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0xcf, 0x0, 0x4, [0x5, 0xfffffe01, 0x400]}, @rr={0x7, 0x7, 0x93, [@multicast1]}]}}}], 0x28}}, {{&(0x7f0000000740)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000780), 0x0, &(0x7f0000000940)=[@ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xf40}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0x20, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x1c, 0x0, 0x2, [0x0, 0x10000, 0x4]}]}}}, @ip_retopts={{0x64, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0x10, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010101, @remote]}, @rr={0x7, 0xf, 0x83, [@broadcast, @remote, @rand_addr=0x64010102]}, @cipso={0x86, 0x13, 0x1, [{0x7, 0xd, "2ff871b05daf552b4e9da0"}]}, @ssrr={0x89, 0x13, 0x81, [@dev={0xac, 0x14, 0x14, 0x23}, @loopback, @loopback, @broadcast]}, @ra={0x94, 0x4, 0x1}, @end, @generic={0x82, 0x3, "19"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast1, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}], 0x128}}], 0x2, 0x801)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7000000010000100000000180000000000000000", @ANYRES32=r8, @ANYBLOB="000000002f95abbe480012800e0001006970366772657461700000003400028008000100", @ANYRES32=r8, @ANYBLOB="14000600fe80000000000000000000000000000014000700ff050000000000000000000000000001080004"], 0x70}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6})
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
ioctl$VHOST_SET_LOG_BASE(r6, 0x4008af04, &(0x7f0000000200)=&(0x7f00000001c0))
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r11)
sendmsg$NFC_CMD_DEV_DOWN(r11, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010028bd7000fbdbdf250300"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x1, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x20004051)
ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x4000, 0xd8e0})
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf254c0000000e00a800664a7273746e616d650000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x40080)

397.958867ms ago: executing program 2 (id=1739):
r0 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
socket(0x15, 0x5, 0x0) (async)
r1 = socket(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x3f, &(0x7f0000000000)=0x1, 0x4) (async)
setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x3f, &(0x7f0000000000)=0x1, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xe, 0x4, 0x4, 0xfffffff8}, 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xe, 0x4, 0x4, 0xfffffff8}, 0x48)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4) (async)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) (async)
setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6e", 0xaf)
r5 = socket$inet6(0xa, 0x3, 0x26)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@private1={0xfc, 0x1, '\x00', 0x2}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa}, {0x9, 0x0, 0x0, 0x800000, 0x0, 0x5853, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@empty, 0x800, 0x33}, 0xa, @in=@empty, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@private1={0xfc, 0x1, '\x00', 0x2}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa}, {0x9, 0x0, 0x0, 0x800000, 0x0, 0x5853, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@empty, 0x800, 0x33}, 0xa, @in=@empty, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8)
sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0)
r6 = socket(0x40000000015, 0x5, 0x0)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000005440)={0x0, 0x0, &(0x7f0000005400)={&(0x7f00000053c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010001007001040000000000000008000400ff03000004000180"], 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x4008040)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x11)
bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async)
bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg(r6, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x10, 0x88, 0x2}, {0x10, 0x114, 0x5}], 0x20}, 0x0) (async)
sendmsg(r6, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x10, 0x88, 0x2}, {0x10, 0x114, 0x5}], 0x20}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x6}, 0x10}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
socket$igmp(0x2, 0x3, 0x2) (async)
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r9, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (async)
setsockopt$inet_mreq(r9, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)

286.564303ms ago: executing program 2 (id=1741):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "19043afa4e73af90f9a5934dc991b6e6c1951797a8731294c882d0682c8b4bb5", "69149538925f54617ba6147929ebe3906c18e8d7f8759272ba2f60f53625083a", "8f28b09041758bd665265c34fe3dda2fb1b17739c0aa28ed0f61b2ced1b58ac3", "e8c724c96666753bba0e168469483285cbfe90f288bb43198af1d5201287f775", "0feab4fa61465b1b9efa12c0a6ee58dc82d539d7de3460bba117763f7b6560a0", "0afd74f3fdffffff00", 0x21440, 0x81, 0x8001, 0x6, 0x4}})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x58, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5}]}, @CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x58}}, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x20, 0x0, 0x1, 0x1, 0x25dfd3fe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0)
ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000000)={0x2b, 0x1})
accept(r2, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000140)=0x80)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000005, 0x30, r3, 0xe37e2000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff)
socket(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4ad}]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}]}]}, 0x50}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01040000000002000000010080030900010073797a300000000008000240000000012c000000030a01010000000000000000010000000900010073797a30000000000900030073397a320000000034000000030a050000000000000000000100000508000540000000000c00024000000000000000010900010073797a3000000000140000001100010000000000000000000700000a"], 0xb0}}, 0x0)

285.730162ms ago: executing program 1 (id=1743):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000006280), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000006400)={0x0, 0x0, &(0x7f00000063c0)={&(0x7f00000062c0)={0x44, r1, 0x601, 0x70bd28, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x4000010)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)
sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1d0, r3, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb95}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_MEDIA={0xec, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xddee}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1a2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x850}, 0x20040000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000006280), 0xffffffffffffffff) (async)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000006400)={0x0, 0x0, &(0x7f00000063c0)={&(0x7f00000062c0)={0x44, r1, 0x601, 0x70bd28, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x4000010) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) (async)
sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1d0, r3, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb95}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_MEDIA={0xec, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xddee}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1a2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x850}, 0x20040000) (async)

285.168621ms ago: executing program 0 (id=1744):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(r2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000fdffffff0600000000001000000000000000000030835098a7fde53833abe2040b87e1fb5a9f822c57fb4e985778d1b7476432532b64bb3e2c6142d7d8a7abba734f597adf8905d441f999891c8d6108c6f509bb15a522bbdc761fbbec76c601175780b48a340fe9b912b90c2975024295ea627a574cf1250da1a57d153b1101edf322f60a127b23a468ebf9fea712f46527073cd5fe387a9f6274e56d3fe2ffaf4162947ac1501f0f0340260592500d25ce4d1fa416127300b033e68b"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="3000017c0000000000000000"], 0x30}], 0x1, 0x0)
setsockopt(r0, 0x84, 0x82, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000005104f08978660a053310463728cd6902fa72678ca4ecc368a8506b764dc165a2d9059859c60ce4c2869fb78d93bc6749fc70d8b6f1214a95c9ce40179a94017f3e88a4dbef97cca3d69cfd090a74e327e002", @ANYRES16=r5, @ANYBLOB="010000000000000000004c0000000500a800000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}}, 0x0)

221.132279ms ago: executing program 1 (id=1745):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3bd8692474244bacd8c4b0e92881cab671e636d30dae868779c0e96d82150258161b3b1ddd723ae32f1735846693922ca488", @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf254c0000002f00a900a0be56190a1973b9a082fe35468118f44c2f4424cd1191aaec0a3aba93d2d53a5956dd88d34f1c42da00e6000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x40080)

8.400822ms ago: executing program 0 (id=1746):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bind$unix(r2, &(0x7f0000000f80)=@file={0x1, './file0\x00'}, 0x6e)
unshare(0x400)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
read(r3, &(0x7f0000000100)=""/41, 0x29)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x37, 0x2, {0xe, 0x10, 0xbb2f, 0x7}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x84}}, 0x0)
sendmmsg$unix(r1, &(0x7f000000c940)=[{{&(0x7f0000001280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20002801}}, {{&(0x7f0000000b80)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x28004044}}], 0x2, 0x4000000)
splice(0xffffffffffffffff, &(0x7f0000000000)=0x6, r2, &(0x7f0000000040)=0x7fff, 0x1, 0xd)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

7.991267ms ago: executing program 1 (id=1747):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x5, 0xa8, @random='\x00'}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0)

7.699186ms ago: executing program 2 (id=1748):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x300, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xe00, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c)

7.367693ms ago: executing program 1 (id=1749):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket(0x10, 0x5, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x2c}}, 0x4004)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000004a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x24}}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000400)={r6}, 0x8)
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x70200, 0x440}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004c0000000508a800000000000e0001006e657464657673696d0000000f0002006e657464657473696d300000c647a71b2eec75ef16106f60cf83a405fe2a588d3c5bd9dbaf75371757208164d1e3c5232e9598462e0a3430693f39eefafb5787134b99b467"], 0x3c}}, 0x0)

6.967479ms ago: executing program 1 (id=1750):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0)
sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0000001b", @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf254d0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x4)

6.359567ms ago: executing program 0 (id=1751):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b52f00100000000000000cc000000000c000000000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000080000000300"/28], 0x50) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110040", @ANYRES32=r1], 0x0}, 0x94) (async)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004780), &(0x7f00000047c0)=0xc)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@private, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000600)=0xe8) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280)={<r6=>0x0, <r7=>0x0, <r8=>0x0}, &(0x7f00000013c0)=0xc)
sendmmsg$unix(r5, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}], 0x20, 0x40044}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="06", 0x1}], 0x1, 0x0, 0x0, 0x4004}}], 0x2, 0x4)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x2800, 0x0)
pwritev(r9, 0x0, 0x0, 0xe5, 0x1) (async)
getpid() (async)
r10 = syz_init_net_socket$ax25(0x3, 0x2, 0x1)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000000)={0x0, <r11=>0x0}, &(0x7f0000000080)=0xc)
ioctl$SIOCAX25ADDUID(r10, 0x89e1, &(0x7f0000000040)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r11})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000280)={<r13=>0x0, <r14=>0x0, <r15=>0x0}, &(0x7f00000013c0)=0xc)
sendmmsg$unix(r12, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @rights={{0x14, 0x1, 0x1, [r12]}}], 0x38, 0x40044}}], 0x1, 0x4)
r16 = socket$nl_route(0x10, 0x3, 0x0) (async)
r17 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r17, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @empty, 0x9}, 0x1c) (async)
setsockopt$inet6_int(r17, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4) (async)
sendto$inet6(r17, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)
r18 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000000240)={0x0, <r19=>0x0, <r20=>0x0}, &(0x7f0000000400)=0xc)
sendmsg$nl_route(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006540)=ANY=[@ANYBLOB="500000002100010026bd7000fddbdf250a141007040000031000010014000213fe8000000000000000000000000000bb14000100000000000000000000000000000000010c0014000ec14649684ea42b40301704f5ee5440972554d3625f1a7bf6ad5379952138610c87e8763bec377c87f57739c16c55e56ebb146f0c7fd1d226c666b03b740dbf1a60b6e1e9a68253a2474566d009471727fbefdb7c70d0466683946091cbde108c5b0959f13f5032c6f7945bee6748d870015a8dbe2632be0f2b729e5ba83627660ff9", @ANYRES32=0x0, @ANYRES32=r19, @ANYBLOB], 0x50}}, 0x4850) (async)
getgid()
r21 = socket(0x15, 0x6, 0x2)
sendmmsg$unix(r0, &(0x7f00000005c0)=[{{&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000002240)="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", 0x1000}, {&(0x7f0000000500)="eae09ffe0c4dde9d96efce549c804fd08c0322fa866edcdc5eedf8649daf5c2b356457b1ccabf0894be136852d1ed927af090f452a4b4afe542bed9af3611ad4bf0879d0ed0424c3eba5410b76c643396f67400e00284cca051bc492f2d08a2844da0c792b0ce30b7e5da2972216f9a752307076acf3884be137d1269988c0963169194d35d16dea0fb0cfb12e00de00b66be04b9691fd58126d70c8c8415338fe0465281b66cc202967a5d37d4a12", 0xaf}, {&(0x7f0000000780)="99bf3735662821640f9882f35911a091a643b625fc2007626426b182b1ef4fe1d4e73e62c42455e474bfa93670c2594eda4ffaa8b69535833b1657dff00329c2aab7efe5e0a9e4a5d0931db453a93c30d40f2d5f3007234d0c1ee527b95ea39f0c5f7eb406007e7375f609132fdd4c749f8ea03c0304cef8a938663577ef1d04439a48358eca85335b3ca6169c70803e5ce7bae2eaa5ad8954f561e8b48ecca274f630c84fce34a054537bccd53fdc008b01dfcf55512004f3e3c9ff71dd31c9ee194969189209073bb53214f32384d2fdb815d2aae318a4cb6a4983f2d8d2c063b7f8e7fc439d9619d046adafe25abf2fd82d", 0xf3}, {&(0x7f0000000140)="68e55c62364978dcc266d6a472ba21691523fd2935a9272bc27346ab0b41daf8bc1e126ad9c8108179f1c5bde8e8", 0x2e}], 0x4, &(0x7f0000000680)=[@rights={{0x24, 0x1, 0x1, [r16, r18, r0, r4, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r3, r20}}}, @rights={{0x34, 0x1, 0x1, [r9, r1, r21, 0xffffffffffffffff, 0xffffffffffffffff, r16, r18, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r13, r3, r15}}}], 0xa0, 0x20040000}}], 0x1, 0x24044004)
socket$nl_generic(0x10, 0x3, 0x10)

373.817µs ago: executing program 1 (id=1752):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x80)
r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r3, 0x25, 0x8, @void}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000000200)=r5, 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in6=@mcast2, 0x1, 0x32}, 0x2, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0xc090)

0s ago: executing program 2 (id=1753):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0xc000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "c5f217b60ff6c55e", "f8a55970d22431f9cf69d905a799a12fe6a84fb068cf6644c85c19fa2b8d06c2", "6e8be4a9", "871af287f7feb153"}, 0x38)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:9796' (ED25519) to the list of known hosts.
syzkaller login: [   49.055748][ T5774] cgroup: Unknown subsys name 'net'
[   49.215842][ T5774] cgroup: Unknown subsys name 'cpuset'
[   49.220176][ T5774] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.714722][ T5774] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.579056][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.582477][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.585456][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.588598][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.591906][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.595648][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.598367][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.601154][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.613407][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.616135][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.666601][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.673429][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.676527][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.682498][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.685680][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.881606][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   56.981804][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   57.054759][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.057902][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.060850][ T5846] bridge_slave_0: entered allmulticast mode
[   57.063879][ T5846] bridge_slave_0: entered promiscuous mode
[   57.069756][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.073753][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.076554][ T5846] bridge_slave_1: entered allmulticast mode
[   57.079564][ T5846] bridge_slave_1: entered promiscuous mode
[   57.126379][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.131936][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.135374][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   57.228138][ T5846] team0: Port device team_slave_0 added
[   57.255449][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.258403][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.261308][ T5842] bridge_slave_0: entered allmulticast mode
[   57.266596][ T5842] bridge_slave_0: entered promiscuous mode
[   57.271947][ T5846] team0: Port device team_slave_1 added
[   57.284611][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.287665][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.290369][ T5842] bridge_slave_1: entered allmulticast mode
[   57.293551][ T5842] bridge_slave_1: entered promiscuous mode
[   57.307863][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.310103][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.313234][ T5851] bridge_slave_0: entered allmulticast mode
[   57.315969][ T5851] bridge_slave_0: entered promiscuous mode
[   57.319248][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.321572][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.324154][ T5851] bridge_slave_1: entered allmulticast mode
[   57.326915][ T5851] bridge_slave_1: entered promiscuous mode
[   57.348488][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.350950][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.359412][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.398115][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.403093][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.405885][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.415417][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.423994][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.429168][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.441834][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.490542][ T5842] team0: Port device team_slave_0 added
[   57.496339][ T5842] team0: Port device team_slave_1 added
[   57.508894][ T5851] team0: Port device team_slave_0 added
[   57.526531][ T5851] team0: Port device team_slave_1 added
[   57.561536][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.564646][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.575359][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.587016][ T5846] hsr_slave_0: entered promiscuous mode
[   57.590282][ T5846] hsr_slave_1: entered promiscuous mode
[   57.609795][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.613162][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.621033][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.637657][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.639836][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.648065][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.653108][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.655690][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.663740][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.761663][ T5851] hsr_slave_0: entered promiscuous mode
[   57.764911][ T5851] hsr_slave_1: entered promiscuous mode
[   57.767816][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   57.770163][ T5851] Cannot create hsr debugfs directory
[   57.777552][ T5842] hsr_slave_0: entered promiscuous mode
[   57.780326][ T5842] hsr_slave_1: entered promiscuous mode
[   57.782804][ T5842] debugfs: 'hsr0' already exists in 'hsr'
[   57.784673][ T5842] Cannot create hsr debugfs directory
[   58.126655][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.138084][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.144773][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.158195][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.208370][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.225128][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.230748][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.239526][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.286509][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.293293][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.304084][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.319501][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.460171][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.470926][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.505542][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   58.513027][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.519785][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   58.534365][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.537348][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.553017][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.555352][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.561093][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.563960][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.573398][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   58.580040][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.582803][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.603153][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.605682][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.632950][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.635833][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.702362][ T5847] Bluetooth: hci1: command tx timeout
[   58.704992][ T5847] Bluetooth: hci0: command tx timeout
[   58.772689][ T5847] Bluetooth: hci2: command tx timeout
[   58.881934][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.888018][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.910824][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.959312][ T5851] veth0_vlan: entered promiscuous mode
[   58.968168][ T5846] veth0_vlan: entered promiscuous mode
[   58.980806][ T5851] veth1_vlan: entered promiscuous mode
[   58.989134][ T5846] veth1_vlan: entered promiscuous mode
[   59.002539][ T5842] veth0_vlan: entered promiscuous mode
[   59.011413][ T5842] veth1_vlan: entered promiscuous mode
[   59.034081][ T5851] veth0_macvtap: entered promiscuous mode
[   59.049462][ T5851] veth1_macvtap: entered promiscuous mode
[   59.053953][ T5846] veth0_macvtap: entered promiscuous mode
[   59.059555][ T5846] veth1_macvtap: entered promiscuous mode
[   59.081536][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.090080][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.096179][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.101839][ T5842] veth0_macvtap: entered promiscuous mode
[   59.110663][ T5842] veth1_macvtap: entered promiscuous mode
[   59.117753][ T5872] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.125843][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.133365][ T5872] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.145256][ T5872] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.148803][ T5872] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.159646][ T5872] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.169698][ T5872] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.174153][ T5872] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.177607][ T5872] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.204872][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.223178][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.250960][ T5872] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.265142][ T5872] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.271876][ T5872] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.290031][ T5872] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.334707][  T284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.337773][  T284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.395143][ T3638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.400598][ T3638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.408582][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.411743][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.448221][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.451328][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.494097][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.496963][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.510901][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.550029][  T284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.559033][  T284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.612675][ T5916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   59.621566][ T5916] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   59.624659][ T5916] IPv6: NLM_F_CREATE should be set when creating new route
[   59.641574][ T5916] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   59.644571][ T5916] IPv6: NLM_F_CREATE should be set when creating new route
[   59.657502][ T5920] netlink: 'syz.1.2': attribute type 10 has an invalid length.
[   59.660966][ T5920] team0: Device ipvlan1 failed to register rx_handler
[   59.680462][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   59.694639][ T5920] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2'.
[   59.881893][ T5934] netlink: 'syz.2.9': attribute type 21 has an invalid length.
[   59.885577][ T5934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'.
[   59.906157][ T5872] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   59.907382][ T5934] netlink: 'syz.2.9': attribute type 21 has an invalid length.
[   59.912102][ T5872] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   59.916466][ T5872] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   59.920048][ T5934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'.
[   59.931911][ T5934] Zero length message leads to an empty skb
[   59.934869][ T5936] netlink: 'syz.2.9': attribute type 153 has an invalid length.
[   59.936712][ T5872] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   60.046619][ T5941] syz_tun: entered allmulticast mode
[   60.067910][ T5941] dvmrp1: entered allmulticast mode
[   60.075929][ T5941] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.084122][ T5940] syz_tun: left allmulticast mode
[   60.386657][ T5960] netlink: 'syz.1.16': attribute type 178 has an invalid length.
[   60.403816][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17'.
[   60.406632][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17'.
[   60.514227][ T5969] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20'.
[   60.705539][ T5993] netlink: 32 bytes leftover after parsing attributes in process `syz.2.28'.
[   60.772774][ T5847] Bluetooth: hci1: command tx timeout
[   60.779976][ T6002] tipc: Started in network mode
[   60.781848][ T6002] tipc: Node identity 3e50f909f264, cluster identity 4711
[   60.785233][ T5847] Bluetooth: hci0: command tx timeout
[   60.787086][ T6002] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.790017][ T6003] ip_vti0: entered allmulticast mode
[   60.808419][ T6003] tipc: Disabling bearer <eth:syzkaller0>
[   60.853947][ T5847] Bluetooth: hci2: command tx timeout
[   60.890554][ T6009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32'.
[   61.639375][ T6030] tipc: Failed to obtain node identity
[   61.641609][ T6030] tipc: Enabling of bearer <ib:caif0> rejected, failed to enable media
[   61.678068][ T6032] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.726608][   T10] cfg80211: failed to load regulatory.db
[   61.745240][ T6032] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.799028][ T6032] batman_adv: batadv0: Removing interface: batadv_slave_1
[   61.855211][ T6035] Illegal XDP return value 65535 on prog  (id 8) dev N/A, expect packet loss!
[   61.953050][ T6042] syz.2.44 uses obsolete (PF_INET,SOCK_PACKET)
[   62.196810][ T6054] delete_channel: no stack
[   62.473929][ T6069] bridge_slave_0: left allmulticast mode
[   62.476265][ T6069] bridge_slave_0: left promiscuous mode
[   62.478651][ T6069] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.487293][ T6069] bridge_slave_1: left allmulticast mode
[   62.492098][ T6069] bridge_slave_1: left promiscuous mode
[   62.494015][ T6069] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.529249][ T6069] bond0: (slave bond_slave_0): Releasing backup interface
[   62.548860][ T6069] bond0: (slave bond_slave_1): Releasing backup interface
[   62.564874][ T6069] team0: Port device team_slave_0 removed
[   62.573689][ T6069] team0: Port device team_slave_1 removed
[   62.576041][ T6069] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.579062][ T6069] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.585572][ T6069] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.589765][ T6069] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.751700][ T6092] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[   62.762544][ T6092] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.814178][ T6094] netlink: 'syz.2.63': attribute type 178 has an invalid length.
[   62.852334][ T5847] Bluetooth: hci0: command tx timeout
[   62.852364][   T55] Bluetooth: hci1: command tx timeout
[   62.932183][   T55] Bluetooth: hci2: command tx timeout
[   63.985961][ T6191] netlink: 'syz.2.74': attribute type 1 has an invalid length.
[   63.988528][ T6191] netlink: 'syz.2.74': attribute type 1 has an invalid length.
[   64.826713][ T6242] __nla_validate_parse: 37 callbacks suppressed
[   64.826729][ T6242] netlink: 36 bytes leftover after parsing attributes in process `syz.1.77'.
[   64.844568][ T6239] netlink: 60 bytes leftover after parsing attributes in process `syz.2.76'.
[   64.934875][   T55] Bluetooth: hci1: command tx timeout
[   64.935205][ T5847] Bluetooth: hci0: command tx timeout
[   64.945130][ T6254] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   65.024190][ T5847] Bluetooth: hci2: command tx timeout
[   65.045879][ T6265] warning: `syz.1.85' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.050051][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.86'.
[   65.078507][ T6264] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   65.097300][ T6264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.86'.
[   65.193379][ T6277] netlink: 64 bytes leftover after parsing attributes in process `syz.0.91'.
[   65.198833][ T6278] sctp: [Deprecated]: syz.1.90 (pid 6278) Use of int in maxseg socket option.
[   65.198833][ T6278] Use struct sctp_assoc_value instead
[   65.208545][ T6279] netlink: 64 bytes leftover after parsing attributes in process `syz.0.91'.
[   65.211382][ T6279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.91'.
[   65.217179][ T6279] netlink: 20 bytes leftover after parsing attributes in process `syz.0.91'.
[   65.222496][ T6277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.91'.
[   65.229211][ T6277] netlink: 20 bytes leftover after parsing attributes in process `syz.0.91'.
[   65.263217][ T6282] bridge0: port 3(syz_tun) entered blocking state
[   65.265523][ T6282] bridge0: port 3(syz_tun) entered disabled state
[   65.268435][ T6282] syz_tun: entered allmulticast mode
[   65.273878][ T6282] syz_tun: entered promiscuous mode
[   65.276227][ T6282] bridge0: port 3(syz_tun) entered blocking state
[   65.278576][ T6282] bridge0: port 3(syz_tun) entered forwarding state
[   65.299635][ T6285] netlink: 'syz.1.93': attribute type 5 has an invalid length.
[   65.314432][ T6285] netlink: 'syz.1.93': attribute type 1 has an invalid length.
[   65.458718][ T6300] syz_tun: entered allmulticast mode
[   65.470749][ T6298] Bluetooth: MGMT ver 1.23
[   65.486794][ T6300] dvmrp1: entered allmulticast mode
[   65.514560][ T6299] syz_tun: left allmulticast mode
[   65.760946][ T6323] syz_tun: entered allmulticast mode
[   65.776201][ T6323] dvmrp1: entered allmulticast mode
[   65.781328][ T6322] syz_tun: left allmulticast mode
[   65.858674][ T6330] openvswitch: netlink: Missing valid actions attribute.
[   65.858683][ T6329] openvswitch: netlink: Missing valid actions attribute.
[   65.860949][ T6330] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   65.875179][ T6329] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   65.892483][ T6333] : entered promiscuous mode
[   65.925592][ T6333] tipc: Enabling of bearer <et:g> rejected, media not registered
[   66.152260][ T6351] openvswitch: netlink: IP tunnel dst address not specified
[   66.169924][ T6356] netlink: 'syz.1.119': attribute type 4 has an invalid length.
[   67.388616][ T6410] netlink: 'syz.1.134': attribute type 178 has an invalid length.
[   67.492996][ T6422] netlink: 'syz.1.139': attribute type 12 has an invalid length.
[   67.555043][ T6431] netlink: 'syz.1.144': attribute type 178 has an invalid length.
[   67.588432][ T6424] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   67.594067][ T6424] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.694502][ T6424] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   67.698515][ T6424] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.771541][ T6424] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   67.775845][ T6424] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.820930][ T6424] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   67.825520][ T6424] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.903934][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   67.907400][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.925794][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   67.928901][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.941887][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   67.951919][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.964613][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   67.968953][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.017194][ T6450] netlink: 'syz.1.148': attribute type 1 has an invalid length.
[   68.020221][ T6450] netlink: 'syz.1.148': attribute type 1 has an invalid length.
[   68.280237][ T6458] netlink: 'syz.2.153': attribute type 1 has an invalid length.
[   68.291755][ T6458] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   68.313596][ T6458] netlink: 'syz.2.153': attribute type 178 has an invalid length.
[   68.333573][ T6458] syz.2.153 (6458) used greatest stack depth: 17896 bytes left
[   68.473844][ T6466] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[   68.474493][ T6460] IPVS: stopping master sync thread 6466 ...
[   69.250077][ T6508] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[   69.451564][ T6522] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   69.837171][ T6548] syz_tun: entered allmulticast mode
[   69.845017][ T6547] syz_tun: left allmulticast mode
[   69.981957][ T6561] __nla_validate_parse: 14 callbacks suppressed
[   69.985894][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'.
[   70.009800][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'.
[   70.026617][ T6565] IPVS: stopping backup sync thread 6566 ...
[   70.028794][ T6566] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   70.111228][ T5911] hid-generic 0005:15C2:5505.0001: unknown main item tag 0x0
[   70.120960][ T5911] hid-generic 0005:15C2:5505.0001: unknown main item tag 0x0
[   70.125635][ T5911] hid-generic 0005:15C2:5505.0001: reserved main item tag 0xe
[   70.135306][ T5911] hid-generic 0005:15C2:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   70.135843][ T6571] netlink: 28 bytes leftover after parsing attributes in process `syz.2.193'.
[   70.174914][ T6571] netlink: 48 bytes leftover after parsing attributes in process `syz.2.193'.
[   71.015867][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.018568][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.228849][ T6589] can: request_module (can-proto-0) failed.
[   71.238403][ T6589] netlink: 60 bytes leftover after parsing attributes in process `syz.0.200'.
[   71.284868][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'.
[   71.340248][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'.
[   71.360405][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'.
[   71.364715][ T6602] netlink: 16 bytes leftover after parsing attributes in process `syz.1.205'.
[   71.388110][ T6602] netlink: 32 bytes leftover after parsing attributes in process `syz.1.205'.
[   71.407962][ T6597] bridge0: port 4(batadv1) entered blocking state
[   71.410656][ T6597] bridge0: port 4(batadv1) entered disabled state
[   71.427095][ T6597] batadv1: entered allmulticast mode
[   71.430672][ T6597] batadv1: entered promiscuous mode
[   71.702958][ T6634] syz_tun: entered allmulticast mode
[   71.708269][ T6633] syz_tun: left allmulticast mode
[   71.780257][ T6639] validate_nla: 5 callbacks suppressed
[   71.780287][ T6639] netlink: 'syz.0.219': attribute type 1 has an invalid length.
[   71.926483][   T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[   71.929563][   T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[   72.607317][   T10] IPVS: starting estimator thread 0...
[   72.702173][ T6690] IPVS: using max 51 ests per chain, 122400 per kthread
[   73.415883][ T6764] syz_tun: entered allmulticast mode
[   73.423384][ T6763] syz_tun: left allmulticast mode
[   73.456253][ T6766] netlink: 'syz.0.251': attribute type 2 has an invalid length.
[   73.459327][ T6766] netlink: 'syz.0.251': attribute type 1 has an invalid length.
[   73.501035][ T6768] syzkaller1: entered promiscuous mode
[   73.503295][ T6768] syzkaller1: entered allmulticast mode
[   73.774885][ T6773] netlink: 'syz.0.254': attribute type 1 has an invalid length.
[   73.779145][ T6773] netlink: 'syz.0.254': attribute type 1 has an invalid length.
[   74.066727][ T6793] netlink: 'syz.2.261': attribute type 178 has an invalid length.
[   74.447653][ T6823] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.451271][ T6823] syzkaller0: entered promiscuous mode
[   74.465101][ T6823] syzkaller0: entered allmulticast mode
[   74.482857][ T6823] tipc: Resetting bearer <eth:syzkaller0>
[   74.492290][ T6822] tipc: Resetting bearer <eth:syzkaller0>
[   74.528002][ T6822] tipc: Disabling bearer <eth:syzkaller0>
[   74.633987][ T6838] netlink: 'syz.2.276': attribute type 4 has an invalid length.
[   74.644700][ T6838] netlink: 'syz.2.276': attribute type 178 has an invalid length.
[   75.061331][ T6882] __nla_validate_parse: 18 callbacks suppressed
[   75.061342][ T6882] netlink: 48 bytes leftover after parsing attributes in process `syz.1.290'.
[   75.125410][ T6889] netlink: 'syz.1.293': attribute type 178 has an invalid length.
[   75.143564][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.293'.
[   75.148791][ T6889] netlink: 24 bytes leftover after parsing attributes in process `syz.1.293'.
[   75.165397][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.293'.
[   75.174150][ T6889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.293'.
[   75.200940][ T6889] netlink: 'syz.1.293': attribute type 2 has an invalid length.
[   75.261169][ T6895] netlink: 16 bytes leftover after parsing attributes in process `syz.2.294'.
[   75.277809][ T6896] netlink: 16 bytes leftover after parsing attributes in process `syz.2.294'.
[   75.425172][ T5911] IPVS: starting estimator thread 0...
[   75.513690][ T6914] IPVS: using max 33 ests per chain, 79200 per kthread
[   75.527840][ T6918] netlink: 16 bytes leftover after parsing attributes in process `syz.0.301'.
[   75.535632][ T6918] netlink: 44 bytes leftover after parsing attributes in process `syz.0.301'.
[   75.706834][ T6933] netlink: 232 bytes leftover after parsing attributes in process `syz.0.307'.
[   75.749164][ T6931] syz.1.305 uses old SIOCAX25GETINFO
[   76.106018][ T6970] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   76.400537][ T6990] openvswitch: netlink: ct_state flags 7fffffff unsupported
[   76.710071][ T7010] delete_channel: no stack
[   76.839098][ T7027] validate_nla: 1 callbacks suppressed
[   76.839110][ T7027] netlink: 'syz.1.337': attribute type 178 has an invalid length.
[   77.149302][ T7062] IPv6: sit1: Disabled Multicast RS
[   77.152525][ T7062] sit1: entered allmulticast mode
[   77.324339][ T7075] openvswitch: netlink: EtherType 50a is less than min 600
[   77.327990][ T7075] netlink: 'syz.2.355': attribute type 178 has an invalid length.
[   77.767083][ T7109] netlink: 'syz.2.368': attribute type 1 has an invalid length.
[   77.849578][ T7113] netlink: 'syz.1.371': attribute type 1 has an invalid length.
[   77.859997][ T7113] netlink: 'syz.1.371': attribute type 2 has an invalid length.
[   77.909646][ T7118] syz_tun: entered allmulticast mode
[   77.931458][ T7117] syz_tun: left allmulticast mode
[   78.156363][ T7133] team0: Device gtp0 is up. Set it down before adding it as a team port
[   78.247922][ T7135] openvswitch: netlink: Flow actions attr not present in new flow.
[   78.714809][ T7174] netlink: 'syz.2.392': attribute type 178 has an invalid length.
[   78.743972][ T7177] tipc: Started in network mode
[   78.745666][ T7177] tipc: Node identity 7f000001, cluster identity 4711
[   78.748775][ T7177] tipc: Enabled bearer <udp:syz2>, priority 10
[   78.808970][ T7183] trusted_key: syz.2.396 sent an empty control message without MSG_MORE.
[   78.891395][ T7189] syz_tun: entered allmulticast mode
[   78.899539][ T7188] syz_tun: left allmulticast mode
[   78.967960][ T7193] bond1: entered promiscuous mode
[   78.970013][ T7193] bond1: entered allmulticast mode
[   78.972199][ T7193] 8021q: adding VLAN 0 to HW filter on device bond1
[   79.377997][ T7217] syz_tun: entered allmulticast mode
[   79.386161][ T7216] syz_tun: left allmulticast mode
[   79.529684][ T7222] team1: entered promiscuous mode
[   79.531764][ T7222] team1: entered allmulticast mode
[   79.537291][ T7222] 8021q: adding VLAN 0 to HW filter on device team1
[   79.864553][   T24] tipc: Node number set to 2130706433
[   79.977037][ T7250] infiniband syz!: set active
[   79.979179][ T7250] infiniband syz!: added team_slave_0
[   80.030739][ T7250] RDS/IB: syz!: added
[   80.040475][ T7250] smc: adding ib device syz! with port count 1
[   80.044124][ T7250] smc:    ib device syz! port 1 has pnetid 
[   80.078699][ T7272] netlink: 'syz.1.428': attribute type 21 has an invalid length.
[   80.082982][ T7272] __nla_validate_parse: 18 callbacks suppressed
[   80.082996][ T7272] netlink: 132 bytes leftover after parsing attributes in process `syz.1.428'.
[   80.330269][ T7286] syzkaller0: entered promiscuous mode
[   80.339441][ T7286] syzkaller0: entered allmulticast mode
[   80.533758][ T7298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.436'.
[   80.767429][ T7314] netlink: 16 bytes leftover after parsing attributes in process `syz.0.442'.
[   80.906140][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.445'.
[   80.909529][ T7320] netlink: 'syz.0.445': attribute type 29 has an invalid length.
[   80.917282][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.445'.
[   80.935278][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[   81.337079][ T7355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.455'.
[   81.375278][ T7357] netlink: 'syz.2.456': attribute type 9 has an invalid length.
[   81.377799][ T7357] netlink: 212160 bytes leftover after parsing attributes in process `syz.2.456'.
[   81.440005][ T7363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.456'.
[   81.445246][ T7363] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.467433][ T7363] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.491921][ T7365] netlink: 32 bytes leftover after parsing attributes in process `syz.0.458'.
[   82.156067][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.466'.
[   82.651401][ T7435] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.660155][ T7435] tipc: Resetting bearer <eth:syzkaller0>
[   82.675335][ T7434] tipc: Disabling bearer <eth:syzkaller0>
[   82.733664][ T7439] netlink: 'syz.2.483': attribute type 178 has an invalid length.
[   83.018299][ T7455] netlink: 'syz.1.488': attribute type 1 has an invalid length.
[   83.020843][ T7455] netlink: 'syz.1.488': attribute type 1 has an invalid length.
[   83.275049][ T7468] netlink: 'syz.0.494': attribute type 178 has an invalid length.
[   84.447501][ T7495] netlink: 'syz.0.500': attribute type 12 has an invalid length.
[   84.491629][ T7500] netlink: 'syz.2.502': attribute type 178 has an invalid length.
[   84.751217][ T7526] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.774899][ T7529] netlink: 'syz.0.510': attribute type 178 has an invalid length.
[   84.822822][ T7535] netlink: 'syz.2.512': attribute type 5 has an invalid length.
[   84.825746][ T7535] netlink: 'syz.2.512': attribute type 5 has an invalid length.
[   84.829104][ T7534] netlink: 'syz.2.512': attribute type 5 has an invalid length.
[   85.087086][ T7557] 8021q: adding VLAN 0 to HW filter on device bond2
[   85.095861][ T7557] __nla_validate_parse: 3 callbacks suppressed
[   85.095876][ T7557] netlink: 28 bytes leftover after parsing attributes in process `syz.0.520'.
[   85.111654][ T7557] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   85.507237][ T7571] syzkaller0: entered promiscuous mode
[   85.509838][ T7571] syzkaller0: entered allmulticast mode
[   85.514231][ T7570] tipc: Started in network mode
[   85.516227][ T7570] tipc: Node identity 0690c1fd30b5, cluster identity 4711
[   85.519151][ T7570] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.543848][ T7570] tipc: Resetting bearer <eth:syzkaller0>
[   85.558223][ T7570] tipc: Disabling bearer <eth:syzkaller0>
[   85.743086][ T7584] syzkaller1: tun_chr_ioctl cmd 1074025677
[   85.745522][ T7584] syzkaller1: linktype set to 778
[   85.747926][ T7583] syzkaller1: tun_chr_ioctl cmd 1074025673
[   85.926608][ T7584] syz.1.528: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   85.933914][ T7584] CPU: 0 UID: 0 PID: 7584 Comm: syz.1.528 Not tainted syzkaller #0 PREEMPT(full) 
[   85.933933][ T7584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   85.933941][ T7584] Call Trace:
[   85.933947][ T7584]  <TASK>
[   85.933954][ T7584]  dump_stack_lvl+0x189/0x250
[   85.933972][ T7584]  ? __pfx_dump_stack_lvl+0x10/0x10
[   85.933981][ T7584]  ? __pfx__printk+0x10/0x10
[   85.933992][ T7584]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   85.934002][ T7584]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   85.934011][ T7584]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   85.934021][ T7584]  warn_alloc+0x214/0x310
[   85.934036][ T7584]  ? __pfx_warn_alloc+0x10/0x10
[   85.934051][ T7584]  ? __get_vm_area_node+0x28f/0x300
[   85.934062][ T7584]  ? xskq_create+0xbf/0x170
[   85.934076][ T7584]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   85.934100][ T7584]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   85.934114][ T7584]  ? __kasan_kmalloc+0x93/0xb0
[   85.934126][ T7584]  vmalloc_user_noprof+0xad/0xf0
[   85.934137][ T7584]  ? xskq_create+0xbf/0x170
[   85.934148][ T7584]  xskq_create+0xbf/0x170
[   85.934160][ T7584]  xsk_init_queue+0xb0/0x110
[   85.934171][ T7584]  xsk_setsockopt+0x57b/0x8d0
[   85.934183][ T7584]  ? __pfx_xsk_setsockopt+0x10/0x10
[   85.934193][ T7584]  ? __pfx_aa_sk_perm+0x10/0x10
[   85.934206][ T7584]  ? __fget_files+0x2a/0x420
[   85.934212][ T7584]  ? aa_sock_opt_perm+0xff/0x1b0
[   85.934221][ T7584]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   85.934229][ T7584]  ? __pfx_xsk_setsockopt+0x10/0x10
[   85.934239][ T7584]  do_sock_setsockopt+0x17c/0x1b0
[   85.934250][ T7584]  __x64_sys_setsockopt+0x13f/0x1b0
[   85.934260][ T7584]  do_syscall_64+0xfa/0x3b0
[   85.934268][ T7584]  ? lockdep_hardirqs_on+0x9c/0x150
[   85.934279][ T7584]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.934312][ T7584]  ? exc_page_fault+0x9f/0xf0
[   85.934326][ T7584]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.934333][ T7584] RIP: 0033:0x7fb867b8eba9
[   85.934341][ T7584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   85.934348][ T7584] RSP: 002b:00007fb8689cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   85.934357][ T7584] RAX: ffffffffffffffda RBX: 00007fb867dd6090 RCX: 00007fb867b8eba9
[   85.934362][ T7584] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000010
[   85.934366][ T7584] RBP: 00007fb867c11e19 R08: 0000000000000004 R09: 0000000000000000
[   85.934371][ T7584] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[   85.934375][ T7584] R13: 00007fb867dd6128 R14: 00007fb867dd6090 R15: 00007fffbb39a668
[   85.934388][ T7584]  </TASK>
[   85.934391][ T7584] Mem-Info:
[   86.028500][ T7584] active_anon:5722 inactive_anon:0 isolated_anon:0
[   86.028500][ T7584]  active_file:1436 inactive_file:38245 isolated_file:0
[   86.028500][ T7584]  unevictable:1768 dirty:255 writeback:0
[   86.028500][ T7584]  slab_reclaimable:9807 slab_unreclaimable:54444
[   86.028500][ T7584]  mapped:18306 shmem:2437 pagetables:944
[   86.028500][ T7584]  sec_pagetables:0 bounce:0
[   86.028500][ T7584]  kernel_misc_reclaimable:0
[   86.028500][ T7584]  free:296925 free_pcp:18033 free_cma:0
[   86.043938][ T7584] Node 0 active_anon:12048kB inactive_anon:0kB active_file:3680kB inactive_file:100172kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38248kB dirty:504kB writeback:0kB shmem:5056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6316kB pagetables:2032kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   86.055013][ T7584] Node 1 active_anon:10840kB inactive_anon:0kB active_file:2064kB inactive_file:52808kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34976kB dirty:516kB writeback:0kB shmem:4692kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5428kB pagetables:1744kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   86.066907][ T7584] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   86.077422][ T7584] lowmem_reserve[]: 0 811 811 811 811
[   86.079341][ T7584] Node 0 DMA32 free:305300kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12048kB inactive_anon:0kB active_file:3680kB inactive_file:100172kB unevictable:3536kB writepending:504kB present:1556484kB managed:830904kB mlocked:0kB bounce:0kB free_pcp:38704kB local_pcp:21184kB free_cma:0kB
[   86.090257][ T7584] lowmem_reserve[]: 0 0 0 0 0
[   86.091850][ T7584] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   86.102405][ T7584] lowmem_reserve[]: 0 0 854 854 854
[   86.104256][ T7584] Node 1 Normal free:408548kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10840kB inactive_anon:0kB active_file:2064kB inactive_file:52808kB unevictable:3536kB writepending:516kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:33300kB local_pcp:19868kB free_cma:0kB
[   86.114567][ T7584] lowmem_reserve[]: 0 0 0 0 0
[   86.116253][ T7584] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   86.120481][ T7584] Node 0 DMA32: 1166*4kB (UM) 458*8kB (UME) 192*16kB (UME) 79*32kB (UME) 31*64kB (UME) 21*128kB (UM) 10*256kB (ME) 3*512kB (M) 6*1024kB (UM) 3*2048kB (UME) 66*4096kB (M) = 305320kB
[   86.141604][ T7584] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   86.149725][ T7584] Node 1 Normal: 686*4kB (UME) 314*8kB (UME) 249*16kB (UME) 67*32kB (UME) 88*64kB (UM) 23*128kB (UM) 14*256kB (UM) 8*512kB (UME) 2*1024kB (UE) 3*2048kB (M) 91*4096kB (M) = 408568kB
[   86.157623][ T7584] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   86.161164][ T7584] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   86.164739][ T7584] 42118 total pagecache pages
[   86.169897][ T7584] 0 pages in swap cache
[   86.171615][ T7584] Free swap  = 124996kB
[   86.175797][ T7584] Total swap = 124996kB
[   86.177644][ T7584] 786301 pages RAM
[   86.179223][ T7584] 0 pages HighMem/MovableOnly
[   86.182110][ T7584] 241343 pages reserved
[   86.183941][ T7584] 0 pages cma reserved
[   86.261302][ T7597] netlink: 32 bytes leftover after parsing attributes in process `syz.0.532'.
[   86.346882][ T7603] netlink: 16 bytes leftover after parsing attributes in process `syz.1.534'.
[   86.495974][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.540'.
[   86.594217][ T7627] geneve2: entered promiscuous mode
[   86.618343][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.546'.
[   86.621873][ T7627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.544'.
[   87.563328][ T7707] netlink: 72 bytes leftover after parsing attributes in process `syz.2.571'.
[   87.714393][ T7725] netlink: 20 bytes leftover after parsing attributes in process `syz.2.577'.
[   87.717901][ T7725] netlink: 32 bytes leftover after parsing attributes in process `syz.2.577'.
[   87.795237][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.579'.
[   87.848371][ T7737] validate_nla: 5 callbacks suppressed
[   87.848383][ T7737] netlink: 'syz.0.582': attribute type 178 has an invalid length.
[   87.858110][ T7735] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[   87.956421][ T7755] netlink: 'syz.0.589': attribute type 178 has an invalid length.
[   88.029247][ T7766] netlink: 'syz.1.592': attribute type 178 has an invalid length.
[   88.350601][ T7785] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.364595][ T7785] tipc: Resetting bearer <eth:syzkaller0>
[   88.370791][ T7784] tipc: Disabling bearer <eth:syzkaller0>
[   88.479400][ T7792] netlink: 'syz.0.603': attribute type 15 has an invalid length.
[   88.885782][ T7809] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.890701][ T7809] tipc: Resetting bearer <eth:syzkaller0>
[   88.895696][ T7808] tipc: Disabling bearer <eth:syzkaller0>
[   89.040136][ T7816] tipc: New replicast peer: 255.255.255.255
[   89.044235][ T7816] tipc: Enabled bearer <udp:syz2>, priority 10
[   89.048271][ T7815] netlink: 'syz.2.611': attribute type 178 has an invalid length.
[   89.700909][ T7843] netlink: 'syz.0.618': attribute type 12 has an invalid length.
[   89.704758][ T7843] netlink: 'syz.0.618': attribute type 11 has an invalid length.
[   89.790508][ T7851] sctp: [Deprecated]: syz.0.620 (pid 7851) Use of struct sctp_assoc_value in delayed_ack socket option.
[   89.790508][ T7851] Use struct sctp_sack_info instead
[   90.027077][ T7874] syzkaller0: entered promiscuous mode
[   90.029204][ T7874] syzkaller0: entered allmulticast mode
[   90.119384][ T7878] __nla_validate_parse: 6 callbacks suppressed
[   90.119399][ T7878] netlink: 112 bytes leftover after parsing attributes in process `syz.0.629'.
[   90.163569][   T24] tipc: Node number set to 3426023689
[   91.379532][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.635'.
[   91.529416][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.640'.
[   91.537265][ T7906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.640'.
[   91.706155][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.644'.
[   91.838497][ T7933] netlink: 48 bytes leftover after parsing attributes in process `syz.0.647'.
[   92.036518][ T7946] netlink: 'syz.1.651': attribute type 178 has an invalid length.
[   92.064540][    T9] IPVS: starting estimator thread 0...
[   92.072857][ T7948] ieee802154 phy0 wpan0: encryption failed: -22
[   92.152480][ T7949] IPVS: using max 39 ests per chain, 93600 per kthread
[   92.588122][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'.
[   92.808014][ T7986] IPVS: set_ctl: invalid protocol: 1 172.20.20.10:20000
[   92.827087][ T7987] IPVS: set_ctl: invalid protocol: 1 172.20.20.10:20000
[   92.881796][ T7989] macsec1: entered allmulticast mode
[   92.890794][ T7989] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   92.958595][ T7995] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   93.121171][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'.
[   93.532408][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.678'.
[   93.536505][ T8036] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   93.540136][ T8036] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.618476][ T8040] netlink: 'syz.0.680': attribute type 3 has an invalid length.
[   93.749363][ T8051] netlink: 5308 bytes leftover after parsing attributes in process `syz.2.684'.
[   94.020599][ T8072] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20003
[   94.199012][ T8093] openvswitch: netlink: Flow actions attr not present in new flow.
[   94.211416][ T8092] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.218981][ T8092] syzkaller0: entered promiscuous mode
[   94.221137][ T8092] syzkaller0: entered allmulticast mode
[   94.251425][ T8092] tipc: Resetting bearer <eth:syzkaller0>
[   94.261041][ T8090] tipc: Resetting bearer <eth:syzkaller0>
[   94.280342][ T8090] tipc: Disabling bearer <eth:syzkaller0>
[   94.631239][ T8122] netlink: 'syz.0.706': attribute type 178 has an invalid length.
[   94.699750][ T8125] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.710952][ T8125] syzkaller0: entered promiscuous mode
[   94.718952][ T8125] syzkaller0: entered allmulticast mode
[   94.738507][ T8125] tipc: Resetting bearer <eth:syzkaller0>
[   94.744916][ T8124] tipc: Resetting bearer <eth:syzkaller0>
[   94.748104][ T8129] netlink: 'syz.2.709': attribute type 178 has an invalid length.
[   94.758394][ T8124] tipc: Disabling bearer <eth:syzkaller0>
[   94.987090][ T8151] netlink: 'syz.2.718': attribute type 29 has an invalid length.
[   95.133961][ T8170] netlink: 'syz.2.724': attribute type 178 has an invalid length.
[   95.141724][ T8172] netlink: 'syz.0.725': attribute type 21 has an invalid length.
[   95.145379][ T8172] netlink: 'syz.0.725': attribute type 22 has an invalid length.
[   95.148451][ T8172] netlink: 'syz.0.725': attribute type 23 has an invalid length.
[   95.152720][ T8172] __nla_validate_parse: 6 callbacks suppressed
[   95.152728][ T8172] netlink: 136 bytes leftover after parsing attributes in process `syz.0.725'.
[   95.394065][ T8191] pim6reg1: entered promiscuous mode
[   95.395829][ T8191] pim6reg1: entered allmulticast mode
[   95.469632][ T8200] netlink: 'syz.2.735': attribute type 178 has an invalid length.
[   95.588823][ T8210] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.591596][ T8210] syzkaller0: entered promiscuous mode
[   95.594038][ T8210] syzkaller0: entered allmulticast mode
[   95.637895][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.738'.
[   95.826700][ T8228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.742'.
[   95.854285][ T8227] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1815685925)
[   95.858076][ T8227] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[   95.864119][ T8227] netlink: 32 bytes leftover after parsing attributes in process `syz.0.740'.
[   95.868458][ T8227] IPv6: Can't replace route, no match found
[   96.098091][ T8237] pimreg: tun_chr_ioctl cmd 1074025677
[   96.100546][ T8237] pimreg: linktype set to 780
[   96.104243][ T8237] pimreg: tun_chr_ioctl cmd 35111
[   96.311453][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.749'.
[   96.359943][ T8246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.749'.
[   96.466439][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.752'.
[   96.477377][ T8257] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[   96.478407][ T8255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.752'.
[   96.491855][ T8255] netlink: 16 bytes leftover after parsing attributes in process `syz.0.752'.
[   96.500637][ T8255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.752'.
[   96.531831][ T8260] tun0: tun_chr_ioctl cmd 1074025675
[   96.536601][ T8260] tun0: persist enabled
[   96.538728][ T8260] tun0: tun_chr_ioctl cmd 1074025675
[   96.540762][ T8260] tun0: persist disabled
[   96.547777][ T8208] tipc: Resetting bearer <eth:syzkaller0>
[   96.566125][ T8208] tipc: Disabling bearer <eth:syzkaller0>
[   96.713862][ T8265] netlink: 'syz.1.756': attribute type 4 has an invalid length.
[   96.843943][ T8268] dvmrp8: entered allmulticast mode
[   96.905389][ T8268] dvmrp8: left allmulticast mode
[   97.569296][ T8325] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.573065][ T8325] syzkaller0: entered promiscuous mode
[   97.575353][ T8325] syzkaller0: entered allmulticast mode
[   97.580071][ T8326] Bluetooth: MGMT ver 1.23
[   97.590539][ T8326] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[   97.597107][ T8325] syzkaller0: MTU too low for tipc bearer
[   97.599669][ T8325] tipc: Disabling bearer <eth:syzkaller0>
[   97.731417][ T5872] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   99.135749][ T8400] syzkaller0: entered promiscuous mode
[   99.137862][ T8400] syzkaller0: entered allmulticast mode
[   99.153622][ T8400] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.160364][ T8399] tipc: Resetting bearer <eth:syzkaller0>
[   99.175796][ T8399] tipc: Disabling bearer <eth:syzkaller0>
[   99.183879][ T8403] validate_nla: 1 callbacks suppressed
[   99.183889][ T8403] netlink: 'syz.0.795': attribute type 1 has an invalid length.
[   99.190421][ T8403] netlink: 'syz.0.795': attribute type 1 has an invalid length.
[   99.320937][ T8414] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.331820][ T8414] syzkaller0: entered promiscuous mode
[   99.334462][ T8414] syzkaller0: entered allmulticast mode
[   99.361807][ T8413] tipc: Resetting bearer <eth:syzkaller0>
[   99.374917][ T8413] tipc: Disabling bearer <eth:syzkaller0>
[   99.386876][ T8416] netlink: 'syz.1.802': attribute type 178 has an invalid length.
[   99.462713][ T8422] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.465403][ T8422] syzkaller0: entered promiscuous mode
[   99.467692][ T8422] syzkaller0: entered allmulticast mode
[   99.478516][ T8422] tipc: Resetting bearer <eth:syzkaller0>
[   99.487799][ T8421] tipc: Resetting bearer <eth:syzkaller0>
[   99.498116][ T8421] tipc: Disabling bearer <eth:syzkaller0>
[   99.547442][ T8426] tc_dump_action: action bad kind
[   99.689934][ T8432] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  100.661699][ T8483] __nla_validate_parse: 13 callbacks suppressed
[  100.661715][ T8483] netlink: 24 bytes leftover after parsing attributes in process `syz.0.824'.
[  100.667658][ T8480] delete_channel: no stack
[  100.791948][    C0] vcan0: j1939_tp_rxtimer: 0xffff888027a9a400: rx timeout, send abort
[  100.796838][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888027a9a400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session.
[  100.905573][ T8495] netlink: 28 bytes leftover after parsing attributes in process `syz.2.826'.
[  100.924997][ T8499] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.968005][ T8499] syzkaller0: entered promiscuous mode
[  100.970267][ T8499] syzkaller0: entered allmulticast mode
[  101.010151][ T8499] tipc: Resetting bearer <eth:syzkaller0>
[  101.027502][ T8498] tipc: Resetting bearer <eth:syzkaller0>
[  101.059963][ T8507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.832'.
[  101.067596][ T8498] tipc: Disabling bearer <eth:syzkaller0>
[  101.096837][ T8507] netlink: 'syz.0.832': attribute type 74 has an invalid length.
[  101.205227][ T8511] netlink: 16 bytes leftover after parsing attributes in process `syz.0.834'.
[  101.208552][ T8513] netlink: 40 bytes leftover after parsing attributes in process `syz.1.835'.
[  101.304741][ T8517] netlink: 'syz.1.837': attribute type 5 has an invalid length.
[  101.757587][ T8549] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002
[  101.819101][ T8551] netlink: 'syz.0.850': attribute type 1 has an invalid length.
[  101.822511][ T8551] netlink: 172 bytes leftover after parsing attributes in process `syz.0.850'.
[  101.826281][ T8551] netlink: 'syz.0.850': attribute type 1 has an invalid length.
[  101.883598][ T8555] 8021q: VLANs not supported on vcan0
[  101.928259][ T8562] netlink: 36 bytes leftover after parsing attributes in process `syz.1.854'.
[  101.937175][ T8562] netlink: 20 bytes leftover after parsing attributes in process `syz.1.854'.
[  101.994960][ T8566] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.000103][ T8566] syzkaller0: entered promiscuous mode
[  102.007717][ T8566] syzkaller0: entered allmulticast mode
[  102.025754][ T8566] tipc: Resetting bearer <eth:syzkaller0>
[  102.029433][ T8565] tipc: Resetting bearer <eth:syzkaller0>
[  102.040646][ T8565] tipc: Disabling bearer <eth:syzkaller0>
[  102.223733][ T8584] unsupported nla_type 52263
[  102.246003][ T8584] vti0: entered promiscuous mode
[  102.426375][ T8596] netlink: 'syz.0.869': attribute type 4 has an invalid length.
[  103.031571][ T8605] netlink: 'syz.2.872': attribute type 178 has an invalid length.
[  103.068554][ T8608] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.081129][ T8608] syzkaller0: entered promiscuous mode
[  103.093829][ T8608] syzkaller0: entered allmulticast mode
[  103.123005][ T8608] tipc: Resetting bearer <eth:syzkaller0>
[  103.129146][ T8607] tipc: Resetting bearer <eth:syzkaller0>
[  103.145026][ T8607] tipc: Disabling bearer <eth:syzkaller0>
[  103.203588][ T8619] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  103.221330][ T8621] netlink: 64 bytes leftover after parsing attributes in process `syz.0.879'.
[  103.362908][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.882'.
[  103.924934][ T8653] bridge_slave_0: invalid flags given to default FDB implementation
[  104.046667][ T8661] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.050084][ T8661] syzkaller0: entered promiscuous mode
[  104.058188][ T8661] syzkaller0: entered allmulticast mode
[  104.087555][ T8661] tipc: Resetting bearer <eth:syzkaller0>
[  104.092976][ T8660] tipc: Resetting bearer <eth:syzkaller0>
[  104.120792][ T8660] tipc: Disabling bearer <eth:syzkaller0>
[  104.197261][ T8671] IPVS: lblc: TCP 172.20.20.170:0 - no destination available
[  104.324797][ T8688] !: renamed from dummy0 (while UP)
[  104.732907][ T8713] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.736427][ T8713] batadv_slave_0: entered promiscuous mode
[  104.736716][ T8715] netlink: 'syz.2.912': attribute type 178 has an invalid length.
[  104.739819][ T8713] syzkaller0: entered promiscuous mode
[  104.746041][ T8713] syzkaller0: entered allmulticast mode
[  105.573228][ T8712] batadv_slave_0: left promiscuous mode
[  105.580461][ T8712] tipc: Resetting bearer <eth:syzkaller0>
[  105.623334][ T8712] tipc: Disabling bearer <eth:syzkaller0>
[  105.765617][ T8742] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  105.947860][ T8763] __nla_validate_parse: 5 callbacks suppressed
[  105.947876][ T8763] netlink: 16 bytes leftover after parsing attributes in process `syz.2.927'.
[  105.955684][ T8763] netlink: 64 bytes leftover after parsing attributes in process `syz.2.927'.
[  105.964776][ T8764] netlink: 'syz.1.922': attribute type 1 has an invalid length.
[  105.968424][ T8764] netlink: 'syz.1.922': attribute type 1 has an invalid length.
[  105.971148][ T8764] netlink: 224 bytes leftover after parsing attributes in process `syz.1.922'.
[  106.203361][ T8782] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  106.207537][ T8782] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  106.409290][ T8795] netlink: 'syz.0.937': attribute type 178 has an invalid length.
[  106.468427][ T8798] netlink: 'syz.2.938': attribute type 178 has an invalid length.
[  106.580571][ T8806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.941'.
[  106.586902][ T8806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.941'.
[  106.886820][ T8841] netlink: 32 bytes leftover after parsing attributes in process `syz.1.951'.
[  107.039589][ T8850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.954'.
[  107.049802][ T8850] lo: entered allmulticast mode
[  107.053140][ T8850] dvmrp1: left allmulticast mode
[  107.118610][ T8851] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  107.131553][ T8851] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  107.209230][ T8848] lo: left allmulticast mode
[  107.340467][ T8856] bond0: mtu less than device minimum
[  107.587880][ T8876] netlink: 32 bytes leftover after parsing attributes in process `syz.1.964'.
[  107.697465][ T8883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.967'.
[  107.888776][ T8896] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.891760][ T8896] syzkaller0: entered promiscuous mode
[  107.896505][ T8896] syzkaller0: entered allmulticast mode
[  107.913682][ T8896] syzkaller0: mtu greater than device maximum
[  107.930274][ T8895] tipc: Resetting bearer <eth:syzkaller0>
[  107.953999][ T8895] tipc: Disabling bearer <eth:syzkaller0>
[  107.996214][ T8907] netlink: 124 bytes leftover after parsing attributes in process `syz.1.977'.
[  108.237488][ T8931] netlink: 'syz.1.985': attribute type 30 has an invalid length.
[  108.280458][ T8936] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.287988][ T8936] syzkaller0: mtu greater than device maximum
[  109.362659][ T9029] netlink: 'syz.1.1018': attribute type 1 has an invalid length.
[  109.365633][ T9029] netlink: 'syz.1.1018': attribute type 1 has an invalid length.
[  109.464942][ T9031] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  109.488607][ T9031] tipc: Resetting bearer <eth:syzkaller0>
[  110.082407][ T9045] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20002
[  110.088020][ T9045] netlink: 'syz.1.1024': attribute type 2 has an invalid length.
[  110.129442][ T9047] netlink: 'syz.1.1025': attribute type 178 has an invalid length.
[  110.201447][ T9057] tipc: Can't bind to reserved service type 1
[  110.670765][ T9096] netlink: 'syz.1.1041': attribute type 178 has an invalid length.
[  111.504270][ T9108] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  111.509056][ T9115] netlink: 'syz.2.1048': attribute type 1 has an invalid length.
[  111.512785][ T9115] __nla_validate_parse: 15 callbacks suppressed
[  111.512798][ T9115] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1048'.
[  111.524961][ T9115] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1048'.
[  112.311319][ T9175] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1065'.
[  112.418616][ T9181] netlink: 'syz.2.1068': attribute type 1 has an invalid length.
[  112.421516][ T9181] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1068'.
[  112.766744][ T9190] syz.1.1070 (9190) used obsolete PPPIOCDETACH ioctl
[  112.896840][ T9202] IPVS: lc: FWM 3 0x00000003 - no destination available
[  113.725778][ T9206] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  113.951311][ T9227] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1082'.
[  114.001713][ T9227] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1082'.
[  114.335040][ T9251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1092'.
[  114.354463][ T9253] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1093'.
[  114.374825][ T9251] netlink: 'syz.1.1092': attribute type 3 has an invalid length.
[  114.377935][ T9251] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1092'.
[  114.513874][ T9268] netlink: 'syz.2.1097': attribute type 178 has an invalid length.
[  114.608150][ T9279] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1100'.
[  114.766109][ T9291] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  114.898322][ T9299] openvswitch: netlink: Message has 5 unknown bytes.
[  114.959273][ T9299] netlink: 'syz.0.1110': attribute type 12 has an invalid length.
[  115.235530][ T9325] netlink: 'syz.1.1118': attribute type 12 has an invalid length.
[  115.584936][ T9369] 0X: renamed from caif0
[  115.590963][ T9369] 0X: entered allmulticast mode
[  115.596230][ T9369] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  115.701848][ T9380] xt_limit: Overflow, try lower: 604147548/4200216962
[  116.049007][ T9396] netlink: 'syz.1.1142': attribute type 178 has an invalid length.
[  116.181770][ T9407] netlink: 'syz.0.1146': attribute type 178 has an invalid length.
[  116.251573][ T9412] netlink: 'syz.0.1148': attribute type 178 has an invalid length.
[  116.326407][ T9418] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  116.331593][ T9418] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  116.492208][ T9431] ieee802154 phy1 wpan1: encryption failed: -22
[  116.505545][ T9431] ieee802154 phy1 wpan1: encryption failed: -22
[  116.583886][ T9437] netlink: 'syz.1.1157': attribute type 178 has an invalid length.
[  116.746721][ T9451] bridge_slave_0: invalid flags given to default FDB implementation
[  116.748095][ T9439] __nla_validate_parse: 10 callbacks suppressed
[  116.748108][ T9439] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1158'.
[  116.770942][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1161'.
[  116.774307][ T9450] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1162'.
[  116.789143][ T9451] netlink: 'syz.1.1161': attribute type 19 has an invalid length.
[  116.796840][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1161'.
[  116.841589][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  116.845543][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  116.848995][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  116.854052][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  116.861250][ T9450] hsr0: entered promiscuous mode
[  116.872453][ T9450] hsr0: entered allmulticast mode
[  116.874518][ T9450] hsr_slave_0: entered allmulticast mode
[  116.876762][ T9450] hsr_slave_1: entered allmulticast mode
[  117.018479][ T9462] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1164'.
[  117.128590][ T9471] tc_dump_action: action bad kind
[  117.321274][ T9487] bridge_slave_0: left allmulticast mode
[  117.326555][ T9487] bridge_slave_0: left promiscuous mode
[  117.329014][ T9487] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.339627][ T9487] bridge_slave_1: left allmulticast mode
[  117.341909][ T9487] bridge_slave_1: left promiscuous mode
[  117.355837][ T9487] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.384722][ T9487] bond0: (slave bond_slave_0): Releasing backup interface
[  117.396511][ T9487] bond0: (slave bond_slave_1): Releasing backup interface
[  117.408898][ T9487] team0: Port device team_slave_0 removed
[  117.419304][ T9497] netlink: 'syz.0.1173': attribute type 10 has an invalid length.
[  117.424619][ T9487] team0: Port device team_slave_1 removed
[  117.427929][ T9487] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.430948][ T9487] batman_adv: batadv0: Removing interface: batadv_slave_0
[  117.446201][ T9487] bond2: (slave geneve2): Releasing backup interface
[  119.181576][ T9534] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.187759][ T9534] syzkaller0: entered promiscuous mode
[  119.202938][ T9534] syzkaller0: entered allmulticast mode
[  119.207941][ T9539] netlink: 516 bytes leftover after parsing attributes in process `syz.0.1190'.
[  119.248395][ T9534] syzkaller0: mtu greater than device maximum
[  119.259930][ T9531] tipc: Resetting bearer <eth:syzkaller0>
[  119.299139][ T9531] tipc: Disabling bearer <eth:syzkaller0>
[  119.378435][ T9548] netlink: del zone limit has 4 unknown bytes
[  119.514873][ T9558] geneve3: entered promiscuous mode
[  119.516978][ T9558] geneve3: entered allmulticast mode
[  119.521798][   T13] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 36210 - 0
[  119.526900][   T13] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 43002 - 0
[  119.530332][   T13] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 36210 - 0
[  119.534185][   T13] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 43002 - 0
[  119.542445][   T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 36210 - 0
[  119.545370][   T13] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 43002 - 0
[  119.548380][   T13] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 36210 - 0
[  119.551056][   T13] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 43002 - 0
[  119.612496][ T9571] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1125
[  119.794266][ T9586] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1205'.
[  119.841927][ T9589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1204'.
[  119.860315][ T9593] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1207'.
[  120.030293][ T9613] netlink: 'syz.0.1212': attribute type 29 has an invalid length.
[  120.141345][ T9619] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  120.451454][ T9633] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1219'.
[  120.875219][ T9653] vlan2: entered promiscuous mode
[  120.877044][ T9653] team0: entered promiscuous mode
[  121.869081][ T9730] macvlan2: entered promiscuous mode
[  121.871253][ T9730] vlan0: entered promiscuous mode
[  121.957876][ T9740] IPVS: set_ctl: invalid protocol: 11612 100.1.1.1:21
[  121.960471][ T9740] IPVS: set_ctl: invalid protocol: 11612 100.1.1.1:21
[  121.971260][ T9740] IPVS: set_ctl: invalid protocol: 11612 100.1.1.1:21
[  121.980302][ T9740] IPVS: set_ctl: invalid protocol: 11612 100.1.1.1:21
[  121.985641][ T9740] IPVS: set_ctl: invalid protocol: 11612 100.1.1.1:21
[  122.002081][ T9740] IPVS: set_ctl: invalid protocol: 11612 100.1.1.1:21
[  122.012807][ T9740] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:21
[  122.014956][ T9738] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  122.138414][ T9762] openvswitch: netlink: IPv4 tun info is not correct
[  122.161721][ T9762] netlink: 'syz.2.1272': attribute type 1 has an invalid length.
[  122.172384][ T9762] __nla_validate_parse: 5 callbacks suppressed
[  122.172397][ T9762] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1272'.
[  122.174775][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1273'.
[  122.391684][    C1] vcan0: j1939_tp_rxtimer: 0xffff888036890000: rx timeout, send abort
[  122.510499][ T9790] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1284'.
[  122.514854][ T9791] netlink: 'syz.1.1280': attribute type 1 has an invalid length.
[  122.517649][ T9791] netlink: 'syz.1.1280': attribute type 1 has an invalid length.
[  122.520903][ T9790] netlink: 'syz.0.1284': attribute type 178 has an invalid length.
[  122.524503][ T9791] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1280'.
[  122.697112][ T9799] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1286'.
[  122.700991][ T9799] Set syz0 is full, maxelem 0 reached
[  122.892338][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811c9eb000: rx timeout, send abort
[  122.895058][    C1] vcan0: j1939_tp_rxtimer: 0xffff888036890000: abort rx timeout. Force session deactivation
[  123.395029][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811c9eb000: abort rx timeout. Force session deactivation
[  123.587246][ T9826] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1296'.
[  123.626179][ T9826] netlink: 'syz.0.1296': attribute type 29 has an invalid length.
[  123.642258][ T9826] netlink: 'syz.0.1296': attribute type 29 has an invalid length.
[  123.651676][ T9826] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1296'.
[  123.671703][ T9833] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.799547][ T9828] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1297'.
[  123.871556][ T9847] netlink: 'syz.2.1301': attribute type 13 has an invalid length.
[  123.880327][ T9847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1301'.
[  123.890229][ T9847] netlink: 'syz.2.1301': attribute type 13 has an invalid length.
[  123.893548][ T9847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1301'.
[  123.935321][ T9847] netlink: 'syz.2.1301': attribute type 178 has an invalid length.
[  124.499113][ T9895] netlink: 'syz.1.1317': attribute type 10 has an invalid length.
[  124.514351][ T9895] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  124.820573][ T9912] bond0: option all_slaves_active: invalid value (3)
[  125.870796][ T9983] openvswitch: netlink: Multiple metadata blocks provided
[  126.119344][ T9996] team2: entered promiscuous mode
[  126.132063][ T9996] team2: entered allmulticast mode
[  126.134454][ T9996] 8021q: adding VLAN 0 to HW filter on device team2
[  126.173387][T10004] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  126.370812][T10016] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  126.387092][T10016] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  126.460932][T10021] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.512420][T10012] macvlan2: entered promiscuous mode
[  126.514713][T10012] macvlan2: entered allmulticast mode
[  126.517436][T10012] bond1: (slave macvlan2): Error -98 calling set_mac_address
[  127.202636][T10058] Set syz0 is full, maxelem 0 reached
[  127.206329][T10060] lo speed is unknown, defaulting to 1000
[  127.208740][T10060] lo speed is unknown, defaulting to 1000
[  127.222863][T10060] lo speed is unknown, defaulting to 1000
[  127.265009][T10060] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  127.317726][T10060] lo speed is unknown, defaulting to 1000
[  127.344426][T10060] lo speed is unknown, defaulting to 1000
[  127.349876][T10060] lo speed is unknown, defaulting to 1000
[  127.564826][T10082] __nla_validate_parse: 20 callbacks suppressed
[  127.564837][T10082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1376'.
[  127.637263][T10090] netlink: 428 bytes leftover after parsing attributes in process `syz.2.1378'.
[  127.641001][T10090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1378'.
[  127.658233][T10090] validate_nla: 4 callbacks suppressed
[  127.658247][T10090] netlink: 'syz.2.1378': attribute type 178 has an invalid length.
[  127.759590][T10106] netlink: 'syz.2.1385': attribute type 178 has an invalid length.
[  127.979638][T10131] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1394'.
[  127.985114][T10124] delete_channel: no stack
[  127.994086][T10131] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1394'.
[  128.003625][T10131] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1394'.
[  128.304496][T10164] netlink: 'syz.0.1406': attribute type 1 has an invalid length.
[  128.332770][T10164] bond3: (slave bridge2): making interface the new active one
[  128.337320][T10164] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  128.438349][T10179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1411'.
[  128.452308][T10179] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1411'.
[  128.455850][T10179] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1411'.
[  128.480292][T10185] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1414'.
[  128.487130][T10185] netlink: 'syz.0.1414': attribute type 23 has an invalid length.
[  128.553248][T10194] Set syz0 is full, maxelem 0 reached
[  128.618336][T10201] vti0: entered promiscuous mode
[  128.838918][T10222] netlink: 'syz.1.1420': attribute type 1 has an invalid length.
[  128.842430][T10222] netlink: 'syz.1.1420': attribute type 1 has an invalid length.
[  129.034113][T10220] lo speed is unknown, defaulting to 1000
[  129.211855][T10239] smc: net device bond0 applied user defined pnetid SYZ2
[  129.631750][T10263] netlink: 'syz.2.1436': attribute type 178 has an invalid length.
[  129.658694][T10251] netlink: 'syz.0.1432': attribute type 4 has an invalid length.
[  129.747786][T10271] netlink: 'syz.1.1440': attribute type 178 has an invalid length.
[  129.949427][T10292] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  130.407534][T10325] netlink: 'syz.2.1460': attribute type 1 has an invalid length.
[  130.840045][T10342] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.843429][T10342] syzkaller0: entered promiscuous mode
[  130.845184][T10342] syzkaller0: entered allmulticast mode
[  130.854720][T10342] tipc: Resetting bearer <eth:syzkaller0>
[  130.859650][T10341] tipc: Resetting bearer <eth:syzkaller0>
[  130.883785][T10341] tipc: Disabling bearer <eth:syzkaller0>
[  131.268364][T10375] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  131.760072][T10414] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  131.775576][T10414] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.836769][T10414] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  131.840616][T10414] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.902300][T10414] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  131.906273][T10414] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.963040][T10414] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  131.966587][T10414] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.081943][ T5875] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  132.085348][ T5875] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.126853][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  132.135849][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  132.165745][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  132.173829][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.177240][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  132.180662][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.464964][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.588207][T10459] __nla_validate_parse: 17 callbacks suppressed
[  132.588219][T10459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1504'.
[  132.595568][T10459] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  132.780095][T10478] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1510'.
[  132.822578][T10478] sctp: [Deprecated]: syz.1.1510 (pid 10478) Use of struct sctp_assoc_value in delayed_ack socket option.
[  132.822578][T10478] Use struct sctp_sack_info instead
[  133.069685][T10487] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  133.076361][T10487] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.100716][T10488] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1514'.
[  133.110196][T10488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1514'.
[  133.153740][T10487] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  133.157405][T10487] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.245837][T10494] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1517'.
[  133.250773][T10487] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  133.254876][T10487] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.331258][T10487] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  133.335799][T10487] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.438272][ T5872] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  133.443450][ T5872] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  133.458225][ T5872] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  133.461423][ T5872] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  133.499060][ T5872] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  133.522814][ T5872] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  133.526070][ T5872] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  133.529318][ T5872] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  133.602199][T10509] validate_nla: 5 callbacks suppressed
[  133.602217][T10509] netlink: 'syz.1.1524': attribute type 178 has an invalid length.
[  133.625253][T10510] netlink: 'syz.0.1522': attribute type 1 has an invalid length.
[  133.627729][T10510] netlink: 'syz.0.1522': attribute type 1 has an invalid length.
[  133.636615][T10510] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1522'.
[  133.726720][T10519] syzkaller1: entered promiscuous mode
[  133.729441][T10519] syzkaller1: entered allmulticast mode
[  134.449692][T10540] netlink: 'syz.0.1534': attribute type 13 has an invalid length.
[  135.073616][T10540] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  135.143260][ T5872] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.146087][ T5872] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 36210 - 0
[  135.148832][ T5872] netdevsim netdevsim0 netdevsim0: unset [1, 2] type 2 family 0 port 43002 - 0
[  135.151536][ T5872] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.155763][ T5872] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 36210 - 0
[  135.159237][ T5872] netdevsim netdevsim0 netdevsim1: unset [1, 2] type 2 family 0 port 43002 - 0
[  135.163417][ T5872] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.166880][ T5872] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 36210 - 0
[  135.170341][ T5872] netdevsim netdevsim0 netdevsim2: unset [1, 2] type 2 family 0 port 43002 - 0
[  135.174337][ T5872] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.177794][ T5872] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 36210 - 0
[  135.181309][ T5872] netdevsim netdevsim0 netdevsim3: unset [1, 2] type 2 family 0 port 43002 - 0
[  136.364199][T10557] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1540'.
[  136.368641][T10560] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  136.371041][T10560] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  136.378530][T10560] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  136.473917][T10568] xt_l2tp: missing protocol rule (udp|l2tpip)
[  136.495342][T10571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1545'.
[  136.549992][T10577] netlink: 'syz.2.1546': attribute type 12 has an invalid length.
[  136.565987][T10577] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1546'.
[  136.599025][T10579] !: renamed from dummy0
[  136.673083][T10585] netlink: 'syz.2.1549': attribute type 12 has an invalid length.
[  136.683406][T10585] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1549'.
[  136.919796][T10582] lo speed is unknown, defaulting to 1000
[  137.173412][T10600] netlink: 'syz.2.1554': attribute type 1 has an invalid length.
[  137.176416][T10600] netlink: 'syz.2.1554': attribute type 1 has an invalid length.
[  137.606577][T10607] lo speed is unknown, defaulting to 1000
[  137.989209][T10626] __nla_validate_parse: 3 callbacks suppressed
[  137.989220][T10626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1564'.
[  137.994823][T10626] nbd: illegal input index -1845493760
[  138.000661][T10626] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  138.004726][T10626] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.098913][T10626] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  138.104064][T10626] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.113691][T10636] netlink: 'syz.1.1568': attribute type 178 has an invalid length.
[  138.165959][T10626] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  138.168975][T10626] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.220315][T10626] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  138.226198][T10648] netlink: 'syz.0.1572': attribute type 2 has an invalid length.
[  138.227463][T10626] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.229400][T10648] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1572'.
[  138.241326][T10648] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  138.398504][ T5872] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  138.401050][ T5872] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.405078][ T5872] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  138.408167][ T5872] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.411141][ T5872] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  138.415208][ T5872] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.424845][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  138.431059][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.456739][T10662] IPVS: lc: FWM 3 0x00000003 - no destination available
[  138.605954][T10677] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1582'.
[  138.692290][T10681] ip_vti0: left allmulticast mode
[  138.739061][T10681] bridge0: port 3(syz_tun) entered disabled state
[  138.755530][T10681] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.758772][T10681] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.804158][T10681] 0X: left allmulticast mode
[  138.909767][T10681] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.955583][T10681] hsr0: left promiscuous mode
[  138.957514][T10681] hsr0: left allmulticast mode
[  138.959417][T10681] hsr_slave_0: left allmulticast mode
[  138.961527][T10681] hsr_slave_1: left allmulticast mode
[  139.087754][T10681] vlan0: left promiscuous mode
[  139.090239][T10681] macvlan2: left promiscuous mode
[  139.106077][T10681] vti0: left promiscuous mode
[  139.110927][ T5911] lo speed is unknown, defaulting to 1000
[  139.114594][ T5911] syz1: Port: 1 Link DOWN
[  139.116947][ T5872] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  139.120251][ T5872] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.123829][ T5872] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  139.127083][ T5872] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.130351][ T5872] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  139.134384][ T5872] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.137832][ T5872] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  139.141125][ T5872] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.236600][T10698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1586'.
[  139.295038][T10699] validate_nla: 1 callbacks suppressed
[  139.295049][T10699] netlink: 'syz.0.1586': attribute type 4 has an invalid length.
[  139.409826][T10705] netlink: 'syz.1.1591': attribute type 178 has an invalid length.
[  139.531845][T10719] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1595'.
[  139.583851][T10723] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1597'.
[  140.080158][T10755] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20004
[  140.168590][T10757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1609'.
[  140.271353][T10763] nbd: must specify a size in bytes for the device
[  140.347805][T10765] sctp: Trying to GSO but underlying device doesn't support it.
[  140.349821][T10765] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1612'.
[  140.433884][T10769] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1614'.
[  140.586037][T10776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1617'.
[  141.028500][T10817] nbd: must specify a size in bytes for the device
[  141.100124][T10826] netlink: 'syz.1.1631': attribute type 1 has an invalid length.
[  141.102776][T10826] netlink: 'syz.1.1631': attribute type 1 has an invalid length.
[  141.107458][T10826] netlink: 'syz.1.1631': attribute type 1 has an invalid length.
[  141.127792][T10826] 8021q: adding VLAN 0 to HW filter on device bond2
[  141.135215][T10826] bond2: (slave wlan0): Enslaving as an active interface with a down link
[  141.904725][T10880] netlink: 'syz.1.1648': attribute type 1 has an invalid length.
[  141.907757][T10880] netlink: 'syz.1.1648': attribute type 2 has an invalid length.
[  142.183507][T10907] netlink: 'syz.0.1657': attribute type 1 has an invalid length.
[  142.216584][T10910] netlink: 'syz.1.1653': attribute type 4 has an invalid length.
[  142.311553][T10912] 8021q: adding VLAN 0 to HW filter on device bond0
[  142.467802][T10924] netlink: 'syz.1.1662': attribute type 178 has an invalid length.
[  142.845949][T10950] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  142.994189][T10961] __nla_validate_parse: 12 callbacks suppressed
[  142.994205][T10961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1674'.
[  143.178962][T10977] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1679'.
[  143.188930][T10966] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1676'.
[  143.279391][T10990] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.285304][T10990] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  143.287963][T10990] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  143.296417][T10991] tipc: Resetting bearer <eth:syzkaller0>
[  143.632849][T11029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1694'.
[  143.771300][T11043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1699'.
[  143.890366][T11061] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1706'.
[  144.107608][T11084] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1711'.
[  144.232722][T11092] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1718'.
[  144.276356][T11094] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1719'.
[  144.292384][ T5911] tipc: Node number set to 908444157
[  144.325144][T11096] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.336130][T11096] validate_nla: 6 callbacks suppressed
[  144.336145][T11096] netlink: 'syz.0.1720': attribute type 178 has an invalid length.
[  144.660257][T11112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1724'.
[  144.803564][T11116] syz_tun: left allmulticast mode
[  144.805863][T11116] syz_tun: left promiscuous mode
[  144.808193][T11116] bridge0: port 3(syz_tun) entered disabled state
[  144.815431][T11116] bridge_slave_0: left allmulticast mode
[  144.817911][T11116] bridge_slave_0: left promiscuous mode
[  144.820555][T11116] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.828840][T11116] bridge_slave_1: left allmulticast mode
[  144.831176][T11116] bridge_slave_1: left promiscuous mode
[  144.834557][T11116] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.846888][T11116] bond0: (slave bond_slave_0): Releasing backup interface
[  144.856233][T11116] bond0: (slave bond_slave_1): Releasing backup interface
[  144.865017][T11116] team0: Port device team_slave_0 removed
[  144.869246][T11116] team0: Port device team_slave_1 removed
[  144.873330][T11116] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.877192][T11116] batadv1: left allmulticast mode
[  144.879388][T11116] batadv1: left promiscuous mode
[  144.881656][T11116] bridge0: port 4(batadv1) entered disabled state
[  144.896800][T11116] netlink: 'syz.2.1726': attribute type 10 has an invalid length.
[  144.904993][T11116] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  144.988367][T11125] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  145.294716][T11141] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  145.829871][T11191] ==================================================================
[  145.832911][T11191] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  145.835958][T11191] Read of size 1 at addr ffff88802930d9b0 by task syz.1.1752/11191
[  145.839797][T11191] 
[  145.840752][T11191] CPU: 1 UID: 0 PID: 11191 Comm: syz.1.1752 Not tainted syzkaller #0 PREEMPT(full) 
[  145.840771][T11191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  145.840780][T11191] Call Trace:
[  145.840787][T11191]  <TASK>
[  145.840794][T11191]  dump_stack_lvl+0x189/0x250
[  145.840816][T11191]  ? __kasan_check_byte+0x12/0x40
[  145.840838][T11191]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.840853][T11191]  ? lock_release+0x4b/0x3e0
[  145.840876][T11191]  ? __virt_addr_valid+0x4a5/0x5c0
[  145.840894][T11191]  print_report+0xca/0x240
[  145.840907][T11191]  ? xfrm_state_find+0x2cf2/0x5400
[  145.840922][T11191]  kasan_report+0x118/0x150
[  145.840943][T11191]  ? xfrm_state_find+0x2cf2/0x5400
[  145.840959][T11191]  xfrm_state_find+0x2cf2/0x5400
[  145.840980][T11191]  ? xfrm_state_find+0x1da/0x5400
[  145.840996][T11191]  ? __pfx_xfrm_state_find+0x10/0x10
[  145.841011][T11191]  ? trace_fib_table_lookup+0x85/0x200
[  145.841027][T11191]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  145.841055][T11191]  ? fib_rules_lookup+0xc55/0xe90
[  145.841070][T11191]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  145.841087][T11191]  ? __lock_acquire+0xab9/0xd20
[  145.841113][T11191]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  145.841134][T11191]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  145.841152][T11191]  ? xfrm_expand_policies+0x41f/0x6a0
[  145.841170][T11191]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  145.841190][T11191]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  145.841207][T11191]  ? rcuref_put+0x1b7/0x210
[  145.841222][T11191]  ? __pfx_rcuref_put+0x10/0x10
[  145.841238][T11191]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  145.841259][T11191]  xfrm_lookup_route+0x3c/0x1c0
[  145.841276][T11191]  __ip4_datagram_connect+0x9a5/0x1270
[  145.841299][T11191]  __ip6_datagram_connect+0x9f0/0x1150
[  145.841321][T11191]  ? __pfx___ip6_datagram_connect+0x10/0x10
[  145.841340][T11191]  ? __local_bh_enable_ip+0x12d/0x1c0
[  145.841352][T11191]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  145.841369][T11191]  ip6_datagram_connect_v6_only+0x63/0xa0
[  145.841388][T11191]  __sys_connect+0x316/0x440
[  145.841402][T11191]  ? __pfx___sys_connect+0x10/0x10
[  145.841416][T11191]  ? rcu_is_watching+0x15/0xb0
[  145.841434][T11191]  __x64_sys_connect+0x7a/0x90
[  145.841448][T11191]  do_syscall_64+0xfa/0x3b0
[  145.841462][T11191]  ? lockdep_hardirqs_on+0x9c/0x150
[  145.841481][T11191]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.841495][T11191]  ? exc_page_fault+0x9f/0xf0
[  145.841515][T11191]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.841527][T11191] RIP: 0033:0x7fb867b8eba9
[  145.841541][T11191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  145.841553][T11191] RSP: 002b:00007fb8689cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  145.841568][T11191] RAX: ffffffffffffffda RBX: 00007fb867dd6090 RCX: 00007fb867b8eba9
[  145.841578][T11191] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000008
[  145.841587][T11191] RBP: 00007fb867c11e19 R08: 0000000000000000 R09: 0000000000000000
[  145.841596][T11191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  145.841604][T11191] R13: 00007fb867dd6128 R14: 00007fb867dd6090 R15: 00007fffbb39a668
[  145.841619][T11191]  </TASK>
[  145.841623][T11191] 
[  145.964414][T11191] Allocated by task 6829:
[  145.966135][T11191]  kasan_save_track+0x3e/0x80
[  145.967984][T11191]  __kasan_slab_alloc+0x6c/0x80
[  145.969978][T11191]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  145.972199][T11191]  xfrm_state_alloc+0x24/0x2f0
[  145.974131][T11191]  __find_acq_core+0x8a7/0x1c00
[  145.976112][T11191]  xfrm_find_acq+0x78/0xa0
[  145.977954][T11191]  xfrm_alloc_userspi+0x6b3/0xc90
[  145.980013][T11191]  xfrm_user_rcv_msg+0x7a3/0xab0
[  145.982000][T11191]  netlink_rcv_skb+0x208/0x470
[  145.983915][T11191]  xfrm_netlink_rcv+0x79/0x90
[  145.985786][T11191]  netlink_unicast+0x82f/0x9e0
[  145.987725][T11191]  netlink_sendmsg+0x805/0xb30
[  145.989584][T11191]  __sock_sendmsg+0x21c/0x270
[  145.991464][T11191]  ____sys_sendmsg+0x505/0x830
[  145.993368][T11191]  ___sys_sendmsg+0x21f/0x2a0
[  145.995246][T11191]  __x64_sys_sendmsg+0x19b/0x260
[  145.997204][T11191]  do_syscall_64+0xfa/0x3b0
[  145.998975][T11191]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.001298][T11191] 
[  146.002266][T11191] Freed by task 9:
[  146.003746][T11191]  kasan_save_track+0x3e/0x80
[  146.005579][T11191]  kasan_save_free_info+0x46/0x50
[  146.007570][T11191]  __kasan_slab_free+0x5b/0x80
[  146.009438][T11191]  kmem_cache_free+0x18f/0x400
[  146.011280][T11191]  xfrm_state_gc_task+0x52d/0x6b0
[  146.013229][T11191]  process_scheduled_works+0xae1/0x17b0
[  146.015406][T11191]  worker_thread+0x8a0/0xda0
[  146.017170][T11191]  kthread+0x711/0x8a0
[  146.018745][T11191]  ret_from_fork+0x3fc/0x770
[  146.020504][T11191]  ret_from_fork_asm+0x1a/0x30
[  146.022397][T11191] 
[  146.023350][T11191] The buggy address belongs to the object at ffff88802930d680
[  146.023350][T11191]  which belongs to the cache xfrm_state of size 928
[  146.028828][T11191] The buggy address is located 816 bytes inside of
[  146.028828][T11191]  freed 928-byte region [ffff88802930d680, ffff88802930da20)
[  146.034131][T11191] 
[  146.035091][T11191] The buggy address belongs to the physical page:
[  146.037656][T11191] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802930c000 pfn:0x2930c
[  146.041441][T11191] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  146.044685][T11191] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  146.047646][T11191] page_type: f5(slab)
[  146.049225][T11191] raw: 00fff00000000040 ffff88801af96640 dead000000000122 0000000000000000
[  146.052589][T11191] raw: ffff88802930c000 00000000800e000c 00000000f5000000 0000000000000000
[  146.055950][T11191] head: 00fff00000000040 ffff88801af96640 dead000000000122 0000000000000000
[  146.059225][T11191] head: ffff88802930c000 00000000800e000c 00000000f5000000 0000000000000000
[  146.062600][T11191] head: 00fff00000000002 ffffea0000a4c301 00000000ffffffff 00000000ffffffff
[  146.065973][T11191] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  146.069252][T11191] page dumped because: kasan: bad access detected
[  146.071702][T11191] page_owner tracks the page as allocated
[  146.073908][T11191] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6250, tgid 6249 (syz.1.79), ts 64917319824, free_ts 64904443677
[  146.081175][T11191]  post_alloc_hook+0x240/0x2a0
[  146.083128][T11191]  get_page_from_freelist+0x21e4/0x22c0
[  146.085339][T11191]  __alloc_frozen_pages_noprof+0x181/0x370
[  146.087650][T11191]  alloc_pages_mpol+0x232/0x4a0
[  146.089477][T11191]  allocate_slab+0x8a/0x370
[  146.091254][T11191]  ___slab_alloc+0xbeb/0x1420
[  146.093151][T11191]  kmem_cache_alloc_noprof+0x283/0x3c0
[  146.095293][T11191]  xfrm_state_alloc+0x24/0x2f0
[  146.097195][T11191]  __find_acq_core+0x8a7/0x1c00
[  146.099149][T11191]  xfrm_find_acq+0x78/0xa0
[  146.100933][T11191]  pfkey_getspi+0x65d/0xee0
[  146.102753][T11191]  pfkey_sendmsg+0xbfe/0x1090
[  146.104602][T11191]  __sock_sendmsg+0x21c/0x270
[  146.106496][T11191]  ____sys_sendmsg+0x505/0x830
[  146.108409][T11191]  ___sys_sendmsg+0x21f/0x2a0
[  146.110276][T11191]  __x64_sys_sendmsg+0x19b/0x260
[  146.112245][T11191] page last free pid 5851 tgid 5851 stack trace:
[  146.114730][T11191]  __free_frozen_pages+0xbc4/0xd30
[  146.116691][T11191]  __slab_free+0x303/0x3c0
[  146.118380][T11191]  qlist_free_all+0x97/0x140
[  146.120218][T11191]  kasan_quarantine_reduce+0x148/0x160
[  146.122375][T11191]  __kasan_slab_alloc+0x22/0x80
[  146.124309][T11191]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  146.126444][T11191]  mas_dup_build+0x154/0xfe0
[  146.128298][T11191]  __mt_dup+0x137/0x220
[  146.129965][T11191]  dup_mmap+0x3c5/0x1ac0
[  146.131666][T11191]  copy_mm+0x13c/0x4b0
[  146.133299][T11191]  copy_process+0x1706/0x3c00
[  146.135165][T11191]  kernel_clone+0x21e/0x840
[  146.136952][T11191]  __x64_sys_clone+0x18b/0x1e0
[  146.138832][T11191]  do_syscall_64+0xfa/0x3b0
[  146.140582][T11191]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.142903][T11191] 
[  146.143868][T11191] Memory state around the buggy address:
[  146.146079][T11191]  ffff88802930d880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  146.149236][T11191]  ffff88802930d900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  146.152398][T11191] >ffff88802930d980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  146.155519][T11191]                                      ^
[  146.157750][T11191]  ffff88802930da00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  146.160907][T11191]  ffff88802930da80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  146.164060][T11191] ==================================================================
[  146.203527][T11191] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  146.206415][T11191] CPU: 1 UID: 0 PID: 11191 Comm: syz.1.1752 Not tainted syzkaller #0 PREEMPT(full) 
[  146.210074][T11191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  146.213913][T11191] Call Trace:
[  146.215237][T11191]  <TASK>
[  146.216407][T11191]  dump_stack_lvl+0x99/0x250
[  146.218256][T11191]  ? __asan_memcpy+0x40/0x70
[  146.220111][T11191]  ? __pfx_dump_stack_lvl+0x10/0x10
[  146.222185][T11191]  ? __pfx__printk+0x10/0x10
[  146.224035][T11191]  vpanic+0x281/0x750
[  146.225638][T11191]  ? preempt_schedule+0xae/0xc0
[  146.227561][T11191]  ? __pfx_vpanic+0x10/0x10
[  146.229288][T11191]  ? preempt_schedule_common+0x83/0xd0
[  146.231409][T11191]  ? preempt_schedule+0xae/0xc0
[  146.233299][T11191]  ? __pfx_preempt_schedule+0x10/0x10
[  146.235338][T11191]  panic+0xb9/0xc0
[  146.236843][T11191]  ? __pfx_panic+0x10/0x10
[  146.238549][T11191]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  146.240901][T11191]  ? xfrm_state_find+0x2cf2/0x5400
[  146.242924][T11191]  check_panic_on_warn+0x89/0xb0
[  146.244804][T11191]  ? xfrm_state_find+0x2cf2/0x5400
[  146.246825][T11191]  end_report+0x78/0x160
[  146.248502][T11191]  kasan_report+0x129/0x150
[  146.250326][T11191]  ? xfrm_state_find+0x2cf2/0x5400
[  146.252153][T11191]  xfrm_state_find+0x2cf2/0x5400
[  146.254122][T11191]  ? xfrm_state_find+0x1da/0x5400
[  146.256113][T11191]  ? __pfx_xfrm_state_find+0x10/0x10
[  146.258198][T11191]  ? trace_fib_table_lookup+0x85/0x200
[  146.260274][T11191]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  146.262757][T11191]  ? fib_rules_lookup+0xc55/0xe90
[  146.264744][T11191]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  146.267191][T11191]  ? __lock_acquire+0xab9/0xd20
[  146.268709][T11191]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  146.270543][T11191]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  146.272523][T11191]  ? xfrm_expand_policies+0x41f/0x6a0
[  146.274668][T11191]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  146.276702][T11191]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  146.278941][T11191]  ? rcuref_put+0x1b7/0x210
[  146.280868][T11191]  ? __pfx_rcuref_put+0x10/0x10
[  146.282719][T11191]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  146.284762][T11191]  xfrm_lookup_route+0x3c/0x1c0
[  146.286685][T11191]  __ip4_datagram_connect+0x9a5/0x1270
[  146.288843][T11191]  __ip6_datagram_connect+0x9f0/0x1150
[  146.290999][T11191]  ? __pfx___ip6_datagram_connect+0x10/0x10
[  146.293335][T11191]  ? __local_bh_enable_ip+0x12d/0x1c0
[  146.295476][T11191]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  146.297725][T11191]  ip6_datagram_connect_v6_only+0x63/0xa0
[  146.299959][T11191]  __sys_connect+0x316/0x440
[  146.301749][T11191]  ? __pfx___sys_connect+0x10/0x10
[  146.303765][T11191]  ? rcu_is_watching+0x15/0xb0
[  146.305663][T11191]  __x64_sys_connect+0x7a/0x90
[  146.307498][T11191]  do_syscall_64+0xfa/0x3b0
[  146.309243][T11191]  ? lockdep_hardirqs_on+0x9c/0x150
[  146.311052][T11191]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.313289][T11191]  ? exc_page_fault+0x9f/0xf0
[  146.315160][T11191]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.317421][T11191] RIP: 0033:0x7fb867b8eba9
[  146.319160][T11191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  146.326578][T11191] RSP: 002b:00007fb8689cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  146.329926][T11191] RAX: ffffffffffffffda RBX: 00007fb867dd6090 RCX: 00007fb867b8eba9
[  146.333050][T11191] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000008
[  146.336206][T11191] RBP: 00007fb867c11e19 R08: 0000000000000000 R09: 0000000000000000
[  146.339159][T11191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  146.342121][T11191] R13: 00007fb867dd6128 R14: 00007fb867dd6090 R15: 00007fffbb39a668
[  146.345187][T11191]  </TASK>
[  146.347153][T11191] Kernel Offset: disabled
[  146.348859][T11191] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:09:21  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81000101 RBX=000000000000000c RCX=0000000000000001 RDX=0000000000000001
RSI=000000000000000c RDI=ffffc900024bf430 RBP=ffffc900024bf658 RSP=ffffc900024bf398
R8 =0000000000000000 R9 =ffffffff81cea4e6 R10=ffffc900024bf338 R11=ffffffff81ac3ae0
R12=000000000000000c R13=dffffc0000000000 R14=ffffc900024bf430 R15=ffffc900024bf490
RIP=ffffffff81ac46fb RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff82222ff8 CR3=0000000039408000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000ff0000000000 0000000000000000
XMM02=0000000000000000 ff00000000000000 XMM03=ffff000000000000 00000000ff000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000145f RDI=0000000000001460 RBP=00000000000003f8 RSP=ffffc9000299ed10
R8 =ffff888107088237 R9 =1ffff11020e11046 R10=dffffc0000000000 R11=ffffffff854f4700
R12=dffffc0000000000 R13=ffffffff99afd90f R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f477c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb8689cf6c0 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb8689cefc8 CR3=00000000386aa000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fb867da7498 00007fb867da7470 XMM03=00007fb867da74a8 00007fb867da74a0
XMM04=00007fb86890d100 00007fb867da7460 XMM05=00007fb867da7478 00007fb867da74c0
XMM06=00007fb867da74b8 00007fb867da74b0 XMM07=00007fb867da74a8 00007fb867da74a0
XMM08=0000000000000000 00007fb867c12ee7 XMM09=0000000000000000 00007fb867c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
