last executing test programs:

966.580173ms ago: executing program 2 (id=4448):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0x1, 0x0, 0xb0})
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@broadcast, @in6=@private1}}, {{@in6=@initdev}, 0x0, @in6=@private0}}, &(0x7f0000000140)=0xe8)
socket$nl_route(0x10, 0x3, 0x0)

965.484563ms ago: executing program 2 (id=4451):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000170067636d296165732900000000000000000000000000000000000000000000612321f1f1382e1d94810483442000001c220000e3de3d7b4cd07ec3ee"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) (async)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83b23dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c11160fb20b1c581e7b0915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab3aa32f948c06b59b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2abd18cae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e26d0a5752813bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a7237841cef384b22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c74f0e2a9bf62ffec6459db40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced84680900000000000000d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d2782a70cf44ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d767671414c99d4894edff8249dc1e3428d2129369ee1b85af1eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038deb359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491dc6aaee0d40973109644fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f77abb21338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e155f455010b0cb578af7dc7d5e87d4cd376444e2de02f47c61e8e84ff828de453f3489460fd83210e95307e676e1fb4d5865c0ca177a4c7fbb4e62b4450900576b2b5cc7f819abd0f885cc4806f47ffbff01000054f5a2d3875e46000000000000e734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329a18cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481ed51a6359cade91fd645c6d924f36a86bf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf817becd9e5a225d67521d1128eac7d80a6225c3e2f0932223bfbf69ff861f4394836ddf128d6d19079e64336e09000000c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661fdcfa68f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b98a8bf6c747d9a1cc500bb892c3a16ff10feea20bdac89afb758cfa10000000000000000000000000200000000000000ed713df0c59e38928511a64845f1b21ed03369719fa905909d8ce35b42761c46d040e53a0a227e9cecd4d414231baa4894a13763ea5de7a52e61a588babaf5da9a28f477e032400938116cb294447898039724881de3ba3dd5e5e115b58d438b17ad11bf1b1f1ed057d89ec46b2b9bb434e9187a728d1136333958469b22d2126664b5299cc3167ac9a4d501638b978e1c692da5261dae5c9d13065b8ed8b358e7273dfa1e9a8dc1d16aa1edd0c274dedb7cd7e4753c152b4e0e3d124e561420587b9b00ab68c32d6b397c5e7cc4e803e6b6e8ed547e2875372023d111e64cd9ee3635888ecbc7352fd60f348456d74e9e7c09ee202dd09524ecfd3d8c836c0a13a9a45a7e2cec88fa2710ee35c9ed1b824fe4fe68849eee41b5e335aeec0f27053b3a07a001ffe29c5cc3a0ccdcc74330c2a995378d225495c5a543519d952c96da9257f47acc29c48d48b22b1f502b9d743d352de56efbb1b15158c4f0107ba5b3394d4cad4f0a1d31f694d0f559e7f82682775ec7569eeb7ef643dbcbafc4c1c5cbb0ad02dd2a69c5f2b5350049a817b546cf734a746a1cc147a6050bd16598e8e3a5c3515d0edc23e66bbdc6c117559357f49c59208af1162ba1d6667e3ab6bb1696c32dc3bcb2c8ab30d28265ff55c8a80c8e3ce29b2f576ea686d351a8cdb808739ed1a7022fb6e4e834593279c791085e49d1b8124adaf0010790e72ef2035e3da7ebb117c1a032a7378d5c62bb1a4e212618113bbd688091273028a44abfe09067e22fda361d6769d1f44bb06ca0cb9a14a54a8ba0dcb5445c4b368bd1dcce7500"/2356], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x18000000000002a0, 0x5f, 0x0, &(0x7f0000000540)="4762e1b0ba4c58e77b298a21dc40ccad538466e7a27d78b73cd927541846ba05692e200d211f524b4760363e990fea596506cef18c000bd948f9bf42fe2e5f4db9ac90bd8ca17efa3558da6d107f224b8e17441b4dedd5812f6e7eccf21023", 0x0, 0x7f, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r3 = socket(0x27, 0xa, 0x4)
getpeername$packet(r3, 0x0, 0x0) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='xprtrdma_reply\x00', r5, 0x0, 0x100000000}, 0x18) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
socket$key(0xf, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0xb8, @remote, 0x4e23, 0x6, 'nq\x00', 0x1, 0x80005, 0x20}, 0x2c) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) (async)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000000414200029bd7000ffdbdf25083ac8000100000008000100020000000800010000000000080001000200000008000100020000000800010001000000"], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x40)
syz_80211_inject_frame(&(0x7f00000000c0), 0x0, 0x36) (async)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x10, 0x0, 0x0, 0xfffffbfe, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfc, 0x29, 0x0, @loopback, @multicast1}}}})

879.454222ms ago: executing program 2 (id=4454):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty}}}}}, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000200)={0x38, 0x5f, 0x1, 0x70bd2a, 0x0, {}, [@typed={0x24, 0x2, 0x0, 0x0, @str='\xd8&\xfc,FG\x87\x8c\xa2A\xa3\xc6\x94\x90\r\xa0J\xf9G\x8d\xf5\xd1u\xb1o\xe9\x1a\xb5\t\xfb\xca\xb4'}]}, 0x38}}, 0x4000800)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r4, 0x1, 0xffffffff, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}}, 0x40000)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty}}}}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) (async)
socket(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000200)={0x38, 0x5f, 0x1, 0x70bd2a, 0x0, {}, [@typed={0x24, 0x2, 0x0, 0x0, @str='\xd8&\xfc,FG\x87\x8c\xa2A\xa3\xc6\x94\x90\r\xa0J\xf9G\x8d\xf5\xd1u\xb1o\xe9\x1a\xb5\t\xfb\xca\xb4'}]}, 0x38}}, 0x4000800) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r4, 0x1, 0xffffffff, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}}, 0x40000) (async)
socket$inet(0x2, 0x2, 0x0) (async)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) (async)

693.162754ms ago: executing program 2 (id=4458):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x30000000, 0x12)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0)

621.612837ms ago: executing program 2 (id=4461):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0}}], 0x1, 0x24040890)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03234e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}]}, 0x34}}, 0x0)

299.791716ms ago: executing program 0 (id=4468):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080)=0x4)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x4, 0x0, 0x9, 0x484, 0x28, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x0, 0x9, 0x6}})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000180)={<r4=>0x0, 0xf1, 0x8, 0x0, 0x4, 0x7, 0x1, 0x10000, {<r5=>0x0, @in6={{0xa, 0x4e21, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}, 0xfffffffd, 0x1, 0x3, 0xab0}}, &(0x7f0000000240)=0xb0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000280)={<r6=>r5, @in6={{0xa, 0x4e21, 0x1ff, @remote, 0x6}}}, &(0x7f0000000340)=0x84)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000380)={r4, @in6={{0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}}, &(0x7f0000000440)=0x84)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r0)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000680)={&(0x7f0000000480), 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x10c, r8, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x1}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @ETHTOOL_A_EEE_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x8}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xe}, @ETHTOOL_A_EEE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xcf77}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x1}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40800}, 0x81)
bind$alg(r0, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-ce\x00'}, 0x58)
setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000740)=0x1, 0x4)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000000780)={r6, 0x2, 0x82a}, 0x8)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000009c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000800)={0x16c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x5d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5fda03ca275759fc2bc0298566c882f9dbe782f8b2e375f0"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f5a3743429146f7148533651cd17b7c42ea80be66d3f35cd"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "03fe4ab413e4cbb3c05fac586a02a5a6dcebd4d1bad112b9"}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "dc4a78076b297fc67faa0d5e13835a7949fc26b91d44ebd3"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fd2ff2baf7021f9e22b327c2a016358c44f0391ed1296022"}]]}, 0x16c}, 0x1, 0x0, 0x0, 0x20000841}, 0x6040011)
r9 = openat$cgroup_ro(r0, &(0x7f0000000a00)='blkio.bfq.time\x00', 0x0, 0x0)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r9)
sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r10, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x44081)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000bc0)={<r11=>r4, 0x20, &(0x7f0000000b80)=[@in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e24, @multicast2}]}, &(0x7f0000000c00)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x73, &(0x7f0000000c40)={r11, 0xffff, 0x10, 0x4}, &(0x7f0000000c80)=0x18)
sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d00)={0x1e8, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4008810}, 0x4095)
socket(0x3, 0xa, 0x8)
r12 = socket$nl_crypto(0x10, 0x3, 0x15)
connect$netlink(r12, &(0x7f0000000f80)=@kern={0x10, 0x0, 0x0, 0x10000000}, 0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000fc0))
r13 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
poll(&(0x7f0000001000)=[{}, {r1, 0x1b10c}, {r13, 0x3042}, {r3, 0x619}, {r3, 0x8006}, {r0, 0x20}], 0x6, 0x6)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r12, 0xd000943d, &(0x7f0000001040)={0x10000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r14=>0x0}], 0x4, "9dc8a306a9c01b"})
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000002040)={{r14, 0x1, 0x8, 0x6, 0x44, 0xef, 0x7810, 0xb5c, 0x401, 0x9, 0x6, 0x8, 0x8, 0xab, 0x5}})
ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000003040))
ioctl$sock_inet_SIOCGIFADDR(r7, 0x8915, &(0x7f0000003080)={'wg0\x00', {0x2, 0x0, @broadcast}})

192.978212ms ago: executing program 1 (id=4469):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x1}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x81}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x2}]}}}]}, 0x5c}, 0x1, 0x406, 0x0, 0x20000cc0}, 0x44804)

192.459462ms ago: executing program 0 (id=4470):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x4, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x40040)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socket(0x400000000010, 0x3, 0x0) (async)
socket$unix(0x1, 0x5, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x4, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x40040) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) (async)

192.060027ms ago: executing program 1 (id=4471):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c6ea090000000000000100000000e01f00000000000000ff0200"/51], 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x34)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r5 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0), 0x10, 0x7ff}, 0x94)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800646e47bbef388dbf6f00001c00", @ANYRESDEC=r7, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f00000005000100010000000400"], 0x48}}, 0x0)
sendmmsg$alg(r5, &(0x7f0000006ac0), 0x6, 0x640400c0)
r8 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r9=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x14, 0x4, 0x8, 0xa, 0x804}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r9, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000002200201c29bd7000d5c31e2d00000000"], 0x14}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r10 = socket(0x2b, 0x80000, 0x3)
socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c0c1}, 0x0)

143.028993ms ago: executing program 0 (id=4472):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
r4 = epoll_create1(0x80000) (async)
nanosleep(&(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000180)) (async)
unshare(0x6a040000) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r5=>0xffffffffffffffff}) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r6}, &(0x7f0000000040), &(0x7f0000000940)=r5}, 0x20) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x803e, r6, 0x15633000) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@newlink={0xffffffd5, 0x10, 0x400, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0x0, 0x1, 'BATMAN_V'}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@initdev, @in=@loopback}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000700)=0xe8) (async)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000380001070000ef067c6c580e08"], 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r9)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x10000000})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000800)=ANY=[@ANYBLOB="490130ae5ca204aff5f63ebd1c06dff77db14b803129b8f4a9c89cf655f6d4c8cce473464841078f40bfa2b28cef256fd9e22fecfef23d70db288dddc197125696982df4681cc2ac7ac8aa3ac30b9f0ce289f12fdfe985b087768f", @ANYRES16=r10, @ANYBLOB="000029bd7000fedbdf2537030000000000000074993f7b000000080026006c0900000800a0004effffffff002600fa0900000800a00000100000"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000010)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000000a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac141400000000000000000000000000000000000000000011000a00ff010000000000000000000000000001ffffffff"], 0xec}}, 0x0)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000780)={0x0, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @broadcast}, 0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)='dvmrp1\x00', 0x8000, 0x3f716dde, 0xba5}) (async)
r12 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r12, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) (async)
getsockopt$XDP_STATISTICS(r12, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x18)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400061d00010000000000000008000000000804"], 0x14}}, 0x0)

142.618906ms ago: executing program 0 (id=4473):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0x6da443c8}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0xa, [@restrict={0x0, 0x0, 0x0, 0xb, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x1c}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0xe}}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x7}, {0x3}, {0xa, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000940)=""/53, 0x82, 0x35, 0x1}, 0x20) (async)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'team_slave_1\x00', {0x2, 0x4e22, @multicast2}})
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) (async)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_TABLE(r7, 0x0, 0xd1, &(0x7f0000000300)=0xffffffff, 0x4) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

72.510896ms ago: executing program 1 (id=4474):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r1, 0x0)
ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x67, 0x0, 0x4, 0xd, 0x81, 0x81})
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'ip6_vti0\x00', <r3=>0x0, 0x2f, 0x2, 0xfc, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x7800, 0x10, 0x5, 0x2}}) (async)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@typedef={0xb, 0x0, 0x0, 0x8, 0x4}, @enum={0xf, 0x4, 0x0, 0x6, 0x4, [{0x1}, {0x0, 0x3}, {0x6, 0x80}, {0x10, 0xfffffff1}]}]}, {0x0, [0x61]}}, &(0x7f0000000580)=""/115, 0x53, 0x73, 0x0, 0x7fffffff}, 0x28) (async)
r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x7, 0x18}, 0xc) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) (async)
sendfile(r6, r7, 0x0, 0xffffffff004) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x6, &(0x7f0000000240)=@raw=[@ldst={0x1, 0x0, 0x0, 0x4, 0xb, 0x2, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @call={0x85, 0x0, 0x0, 0x73}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}], &(0x7f0000000300)='GPL\x00', 0x1, 0xcb, &(0x7f0000000340)=""/203, 0x40f00, 0x3, '\x00', r3, @fallback=0xf, r4, 0x8, &(0x7f0000000640)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[r5, r7], 0x0, 0x10, 0xd200}, 0x94)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async)
close(0x4) (async)
ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f00000000c0))

69.602781ms ago: executing program 0 (id=4475):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x2, 0x3, 0xff)
close(0x3)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0)

69.123792ms ago: executing program 1 (id=4476):
r0 = socket(0x2, 0x2, 0x0)
getsockopt$nfc_llcp(r0, 0x88, 0x68, 0x0, 0xfffffffffffffc9a)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0)

2.70152ms ago: executing program 1 (id=4477):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r2, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r3=>0x0})
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000001480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001440)={&(0x7f0000000340)=ANY=[@ANYBLOB="c8100000130000022bbd7000ffdbdf25080804064e224e23f8ffffff0800000002000000fefffffffd010000090000000200000006000000", @ANYRES32=r3, @ANYBLOB="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"], 0x10c8}}, 0x20000000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000241360a1e3a2338700be0619be6bfafcb41e9e7bc814e4b5ce61200786b5a03e906aa286fa7a4ed7f7f58ba439ec2172b767f0acde60a66cd25fffb4d6400fe138015ddb64236319a2d4007dbe9b24c7c4fa99bc208d1940dbf38a7352e7302a02ee347c65d032c571694dc838a4b1167916332a14335f7a99a48328be0df02434d5b19510822af57a95ea82140749e77de07b92aede4ea3668ebdcc78f971f0c1829e10dfd976e9246d1713e0f232fbd72ae96cf2870f42a47ad2ad12408812c5e98891223c5d7cac73627a8874a54be57b05bfe2c6", @ANYRES32=0x0, @ANYBLOB="00000000003f0000280012800b00010062726964676500001800028006000900020000000c002e000100000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x44000, 0x0)
ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000140)={0x8, &(0x7f0000000040)=[{0x3f8a, 0x60, 0x5, 0x7}, {0x0, 0x0, 0x6, 0x4}, {0x1, 0x4, 0x3, 0x4}, {0x5, 0xd, 0xa, 0x4}, {0xc3, 0x3, 0x0, 0x3}, {0x7ff, 0x1, 0xc, 0x6}, {0x8000, 0x5, 0x7, 0xfffffff8}, {0x0, 0x4, 0x59, 0xb}]})
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9)

1.150958ms ago: executing program 0 (id=4478):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x5)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, &(0x7f0000000b40)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x200, @dev={0xfe, 0x80, '\x00', 0x29}, 0x3}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000680)="e8d5b23341ca2005478d63675bfb46a8a8408192aecbe47fa8e33d5d858c35f387817d3ea8a3190bb0ba482b1fe0a41ae2e41c60772cc4c4df594be54e217521", 0x40}, {&(0x7f0000000700)="de06d7c0f63c8dcf89efd1ecec11bc5e44b55ed2ef610a4b8e0dc68d8656264f7ceab08fa652088b32e084028fea254a162e5305554212296838ae98d5decb63197b2cf60134a1b9cb080b4e851cf7faefc889dec38fec7874038c79f9f19af85fd7aea4b7ffd3fd929264013aa452020d84b2e03fb4fd5912fecf4116cf42dd65a1333afbcffd305105474f12174cc7e9a3346f1b28", 0x96}, {&(0x7f00000007c0)="ba8ca6c0964f7c73e4bc27b0d660fa7abfb79523b174e410f27b", 0x1a}, {&(0x7f0000000800)="de2a616c70b6c0dcb80516b26aba51bce3025a7df1053327a75b45cdb19d77cc84b00a0dde561852a5f9974f5741037cb844873c52d3435e0d0c48f79c220e14e3e042123ef376b5e8d7dbf3806074c614b40b709805830780ce801264a66c273c7a13bbc4f712818992f8511046021cbf3607d0ace2a052cc4244dc59667a137aa944cead541cb09b1359320522a9d6e38783012b5bf9f91977d8e4356a578e4690a9834d7913da936f0302a0a157347f7e746b209f8582d3558c41a82e020623", 0xc1}, {&(0x7f0000000900)="330373b6204d692464b27dafc0befa100925116ec43e4eb1e765384b5ef0f9bb4c09a152c8eb", 0x26}], 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0xf0}}], 0x3, 0x24000045)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
accept(r0, &(0x7f0000000080)=@can, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a00170000000004003700090003002e2e2564b758b9a64411f6bb744dc48f57", 0x39}], 0x1)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000005000000000000000100000d000000000200002e2e2000000000000000"], 0x0, 0x31, 0x0, 0x1, 0x7}, 0x28)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x2a0f5, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x30000000, @loopback}, 0x1c)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0)

618.96µs ago: executing program 2 (id=4479):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r1=>0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000021000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3, 0xffffffffffffffff, 0x500}, 0x57)
syz_emit_ethernet(0x56, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0xa, 0xf989, "f16d73c0e798"}]}}}}}}}}, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c)
setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x80, @empty}, 0x1c)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000ffdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="04000280"], 0x20}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xd4, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x98, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_NAME={0xc, 0x7, './file1\x00'}, @TCA_BPF_ACT={0x78, 0x1, [@m_police={0x40, 0x12, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x13, 0x6, "4e9244ac8a03f83f2db21ac3a8814b"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r6 = socket(0x15, 0x1, 0x800)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x6}, 0x8)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r7, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r1, {0xfffd, 0x1}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840)
close(0x3)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc0118000000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r9, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r9, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r9, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)

0s ago: executing program 1 (id=4480):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendto$inet(r0, &(0x7f0000000040)="8932ff0f6d7ff1cec4", 0x9, 0x6000c804, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f00000001c0)=0x8, 0x4)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0xfffffffffffffd52}], 0x1, 0x2}}], 0x48}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000050000000c00020000000000000000000c00060000000000000000000400078008000100", @ANYRES32], 0x38}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0xffffe000)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000000100001040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002e000300000003000000"], 0x40}}, 0x0)

kernel console output (not intermixed with test programs):

 netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.575667][ T5865] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 19999 - 0
[  153.671056][ T5865] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  153.674472][ T5865] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.680527][ T5865] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 19999 - 0
[  153.808579][T12024] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1919'.
[  153.812820][T12024] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1919'.
[  153.839428][T12027] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 2, id = 0
[  153.839531][T12015] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1917'.
[  153.846744][T12015] 8021q: VLANs not supported on ip6gre0
[  153.885731][T12029] bridge154: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  153.924221][T12031] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1922'.
[  153.976319][T12041] validate_nla: 5 callbacks suppressed
[  153.976328][T12041] netlink: 'syz.2.1923': attribute type 4 has an invalid length.
[  153.983510][T12040] gretap0: entered promiscuous mode
[  154.045770][T12044] netlink: 'syz.2.1923': attribute type 4 has an invalid length.
[  154.358879][T12063] gretap0: left promiscuous mode
[  154.360860][T12063] erspan0: left allmulticast mode
[  154.375276][T12063] tipc: Resetting bearer <eth:team0>
[  154.381875][T12063] xfrm0: left promiscuous mode
[  154.383819][T12063] xfrm0: left allmulticast mode
[  154.386467][T12063] vlan0: left promiscuous mode
[  154.399397][T12063] macsec2: left promiscuous mode
[  154.407252][T12063] tipc: Resetting bearer <eth:syzkaller0>
[  154.411129][T12063] bond2: left promiscuous mode
[  154.413048][T12063] bridge56: left promiscuous mode
[  154.416451][T12063] macsec3: left promiscuous mode
[  154.424378][T12063] veth3: left promiscuous mode
[  154.426377][T12063] veth5: left promiscuous mode
[  154.435422][T12063] bond8: left promiscuous mode
[  154.440387][T12063] geneve2: left promiscuous mode
[  154.445014][T12063] bond12: left promiscuous mode
[  154.450324][T12063] batadv1: left promiscuous mode
[  154.452167][T12063] batadv1: left allmulticast mode
[  154.454275][T12063] veth7: left promiscuous mode
[  154.470178][T12063] veth9: left promiscuous mode
[  154.483978][T12063] veth11: left promiscuous mode
[  154.488097][ T5868] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  154.491259][ T5868] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  154.494396][ T5868] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  154.497398][ T5868] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  154.502479][ T5868] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  154.505937][ T5868] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  154.509481][ T5868] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  154.512766][ T5868] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  154.776361][T12083] dvmrp1: tun_chr_ioctl cmd 1074025677
[  154.778715][T12083] dvmrp1: linktype set to 773
[  155.476721][T12125] bridge273: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  155.547837][T11307] wlan0: Trigger new scan to find an IBSS to join
[  155.964064][T12157] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  155.986055][T12157] syzkaller0: entered promiscuous mode
[  155.990107][T12157] syzkaller0: entered allmulticast mode
[  156.063320][T12164] netlink: 'syz.0.1965': attribute type 8 has an invalid length.
[  156.241479][T12186] nbd: must specify a size in bytes for the device
[  156.402721][T12194] bridge105: entered allmulticast mode
[  156.414234][T12194] dvmrp8: entered allmulticast mode
[  156.426701][T12194] bridge105: left allmulticast mode
[  156.428987][T12194] dvmrp8: left allmulticast mode
[  156.479204][T12197] netlink: 'syz.2.1973': attribute type 23 has an invalid length.
[  156.823905][T12215] netlink: 'syz.1.1980': attribute type 11 has an invalid length.
[  157.127059][T12242] netlink: 'syz.1.1991': attribute type 1 has an invalid length.
[  157.142756][T12242] 8021q: adding VLAN 0 to HW filter on device bond20
[  157.161179][T12242] veth13: entered promiscuous mode
[  157.165941][T12242] bond20: (slave veth13): Enslaving as an active interface with a down link
[  157.220890][T12253] bridge164: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  157.240825][T12255] macsec1: entered promiscuous mode
[  157.242677][T12255] team0: entered promiscuous mode
[  158.007005][T12290] __nla_validate_parse: 24 callbacks suppressed
[  158.007018][T12290] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2005'.
[  158.007746][T12291] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2005'.
[  158.189723][T12302] bridge276: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  158.255389][T12305] 8021q: adding VLAN 0 to HW filter on device bond20
[  158.357208][T12315] netlink: 'syz.2.2014': attribute type 1 has an invalid length.
[  158.394554][T12315] bond16: entered promiscuous mode
[  158.396449][T12315] 8021q: adding VLAN 0 to HW filter on device bond16
[  158.411298][T12315] 8021q: adding VLAN 0 to HW filter on device bond16
[  158.413826][T12315] bond16: (slave wireguard1): The slave device specified does not support setting the MAC address
[  158.417587][T12315] bond16: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  158.427044][T12315] bond16: (slave wireguard1): making interface the new active one
[  158.430540][T12321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2016'.
[  158.431408][T12315] wireguard1: entered promiscuous mode
[  158.436260][T12315] bond16: (slave wireguard1): Enslaving as an active interface with an up link
[  158.474186][T12325] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2017'.
[  158.491286][T12325] netlink: 464 bytes leftover after parsing attributes in process `syz.2.2017'.
[  158.497376][T12325] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2017'.
[  158.503531][T12327] bridge166: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  158.507289][T12325] 0: renamed from hsr0
[  158.514746][T12325] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  158.518191][T12325] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  158.521637][T12325] 0: entered allmulticast mode
[  158.523313][T12325] hsr_slave_0: entered allmulticast mode
[  158.525251][T12325] hsr_slave_1: entered allmulticast mode
[  158.528899][T12325] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  158.553343][T12329] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2019'.
[  158.597992][T10371] wlan0: Trigger new scan to find an IBSS to join
[  158.728859][T12342] netlink: 'syz.2.2023': attribute type 10 has an invalid length.
[  158.734131][T12342] netlink: 'syz.2.2023': attribute type 1 has an invalid length.
[  158.906738][T12352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2026'.
[  158.927446][T12358] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2027'.
[  159.387926][   T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  159.397877][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[  159.472496][T12383] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2036'.
[  159.511043][T12388] netlink: 'syz.0.2037': attribute type 11 has an invalid length.
[  159.549433][T10371] wlan1: Trigger new scan to find an IBSS to join
[  159.644640][T12396] bridge117: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  160.067172][T12434] netlink: 'syz.1.2052': attribute type 7 has an invalid length.
[  160.074851][T12434] : entered promiscuous mode
[  160.090691][T12439] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  160.094041][T12439] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  160.096805][T12439] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  160.101434][T12439] tipc: Resetting bearer <eth:syzkaller0>
[  160.292210][T12455] netlink: 'syz.2.2060': attribute type 13 has an invalid length.
[  160.451547][T12455] ip6gretap0: left allmulticast mode
[  160.481268][ T5865] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  160.484300][ T5865] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  160.494554][ T5865] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  160.497427][ T5865] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  160.524239][T12474] netlink: 'syz.2.2065': attribute type 2 has an invalid length.
[  160.527579][T12474] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  160.571500][T12481] netlink: 'syz.1.2068': attribute type 1 has an invalid length.
[  160.589704][T12481] 8021q: adding VLAN 0 to HW filter on device bond21
[  160.606975][T12481] 8021q: adding VLAN 0 to HW filter on device bond21
[  160.610475][T12481] bond21: (slave vxcan1): The slave device specified does not support setting the MAC address
[  160.614791][T12481] bond21: (slave vxcan1): Error -95 calling set_mac_address
[  160.716625][T12481] veth17: entered promiscuous mode
[  160.723432][T12481] bond21: (slave veth17): Enslaving as an active interface with a down link
[  160.729646][T11308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.733462][T11308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.903027][T12511] netlink: 'syz.0.2076': attribute type 10 has an invalid length.
[  160.956961][T12515] bridge172: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  161.194963][T12524] netlink: 'syz.0.2081': attribute type 12 has an invalid length.
[  161.461799][T12558] netlink: 'syz.1.2095': attribute type 2 has an invalid length.
[  161.466875][   T10] IPVS: starting estimator thread 0...
[  161.475980][T12558] k*]: entered promiscuous mode
[  161.496287][T12558] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.500612][T12558] 8021q: adding VLAN 0 to HW filter on device team0
[  161.504442][T12558] tipc: Resetting bearer <eth:team0>
[  161.506718][T12558] tipc: Resetting bearer <eth:team0>
[  161.511251][T12558] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  161.557944][T12559] IPVS: using max 80 ests per chain, 192000 per kthread
[  161.695193][T12578] netlink: 'syz.1.2097': attribute type 1 has an invalid length.
[  161.741739][T12583] bond0: (slave gretap0): Opening slave failed
[  161.843062][T12600] netlink: 'syz.2.2106': attribute type 1 has an invalid length.
[  161.979781][T12612] pim6reg1: entered promiscuous mode
[  161.982035][T12612] pim6reg1: entered allmulticast mode
[  161.992692][T12612] batadv0: entered promiscuous mode
[  161.994454][T12612] batadv0: entered allmulticast mode
[  162.507965][T11308] wlan1: Trigger new scan to find an IBSS to join
[  162.602260][T12639] bridge176: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  163.010466][T12679] IPVS: stopping backup sync thread 12027 ...
[  163.017031][T12679] __nla_validate_parse: 32 callbacks suppressed
[  163.017043][T12679] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2126'.
[  163.026327][T12679] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2126'.
[  163.048754][T12686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2129'.
[  163.049796][T12687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2129'.
[  163.064707][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2129'.
[  163.069148][T12686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2129'.
[  163.157315][T12686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2129'.
[  163.362311][T12706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2135'.
[  163.365272][T12706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2135'.
[  163.415398][T12714] bridge177: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  163.424146][T11309] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  163.504340][T12721] bridge178: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  163.525956][T12723] can: request_module (can-proto-0) failed.
[  163.529463][T12723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2140'.
[  163.533246][T12723] openvswitch: netlink: IP tunnel dst address not specified
[  163.751024][T12740] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  163.775927][T12740] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.786345][T12740] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  163.791401][T12740] bond0: (slave wlan1): Opening slave failed
[  163.800971][T12740] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  163.804512][T12740] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  163.819841][T12744] bridge179: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  163.823224][T12744] bridge179: entered promiscuous mode
[  163.901866][T12746] tipc: Resetting bearer <eth:team0>
[  163.930045][T12746] tipc: Resetting bearer <eth:syzkaller0>
[  164.104775][T12759] openvswitch: netlink: Missing valid actions attribute.
[  164.107156][T12759] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.256790][T12766] bridge283: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  164.260996][T12766] bridge283: entered allmulticast mode
[  164.290309][T12761] delete_channel: no stack
[  164.504887][T12785] bridge285: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  165.196178][T12873] syzkaller0: mtu less than device minimum
[  165.918480][T12876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  166.022285][T12883] netlink: zone id is out of range
[  166.024384][T12883] netlink: zone id is out of range
[  166.026189][T12883] netlink: zone id is out of range
[  166.030872][T12883] netlink: zone id is out of range
[  166.032673][T12883] netlink: zone id is out of range
[  166.034284][T12883] netlink: zone id is out of range
[  166.060997][T12892] bridge288: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  166.483085][T12922] bridge182: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  166.622524][T12940] validate_nla: 9 callbacks suppressed
[  166.622533][T12940] netlink: 'syz.2.2204': attribute type 7 has an invalid length.
[  166.627010][T12940] netlink: 'syz.2.2204': attribute type 8 has an invalid length.
[  166.676409][T12942] ip6gretap3: entered promiscuous mode
[  166.806211][T12948] bridge125: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  166.809591][T12948] bridge125: entered promiscuous mode
[  167.000508][T12966] 0X: renamed from caif0
[  167.003809][T12966] 0X: entered allmulticast mode
[  167.174404][T12981] netlink: 'syz.0.2222': attribute type 1 has an invalid length.
[  167.314608][T12991] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  167.873061][T13001] bridge183: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  168.260683][T13038] batadv1: entered promiscuous mode
[  168.262567][T13038] batadv1: entered allmulticast mode
[  168.270369][T13039] batadv1: entered promiscuous mode
[  168.272378][T13039] batadv1: entered allmulticast mode
[  168.595674][T13050] __nla_validate_parse: 24 callbacks suppressed
[  168.595684][T13050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2244'.
[  168.712429][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2245'.
[  168.900697][T13056] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2246'.
[  168.913255][T13056] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2246'.
[  169.086178][T13067] netlink: 'syz.2.2250': attribute type 4 has an invalid length.
[  169.092963][T13065] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2249'.
[  169.100582][T13065] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2249'.
[  169.100666][T13067] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2250'.
[  169.152457][T13069] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2251'.
[  169.279534][T13079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2255'.
[  169.407323][T13091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2258'.
[  169.513484][T13090] tipc: Resetting bearer <eth:syzkaller0>
[  169.651916][T13104] _Z`Ԁ@S!: entered promiscuous mode
[  169.888616][T13120] netlink: 'syz.0.2267': attribute type 10 has an invalid length.
[  169.892439][T13120] bond0: (slave wlan1): refused to change device type
[  169.897344][T13120] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  169.904717][T13120] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  170.163005][T13128] sctp: [Deprecated]: syz.2.2271 (pid 13128) Use of int in maxseg socket option.
[  170.163005][T13128] Use struct sctp_assoc_value instead
[  170.253878][T13135] can: request_module (can-proto-0) failed.
[  170.259923][T13135] net_ratelimit: 2 callbacks suppressed
[  170.259932][T13135] openvswitch: netlink: IP tunnel dst address not specified
[  170.481531][T13151] bond23 (unregistering): Released all slaves
[  170.604638][T13168] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  170.610275][T13168] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  170.706243][T13176] bridge294: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  170.809334][T13187] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  170.886734][T13194] bridge130: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  171.035120][T13205] netlink: 'syz.0.2295': attribute type 10 has an invalid length.
[  171.042304][T13205] bond0: (slave wlan1): refused to change device type
[  171.047602][T13205] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  171.051317][T13205] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  171.055355][T13205] tipc: Resetting bearer <eth:syzkaller0>
[  171.339625][T13231] tipc: Enabling of bearer <ib:ip6gre0> rejected, max 3 bearers permitted
[  171.343471][T13233] tipc: Enabling of bearer <ib:ip6gre0> rejected, max 3 bearers permitted
[  171.794570][T13261] bridge188: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  171.927281][T13271] netlink: 'syz.2.2315': attribute type 2 has an invalid length.
[  172.080889][T13279] netlink: 'syz.1.2317': attribute type 1 has an invalid length.
[  172.083718][T13279] netlink: 'syz.1.2317': attribute type 1 has an invalid length.
[  172.244295][T13292] netlink: 'syz.2.2319': attribute type 16 has an invalid length.
[  172.246975][T13292] netlink: 'syz.2.2319': attribute type 3 has an invalid length.
[  172.340668][T13296] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  172.583865][T13316] netlink: 'syz.1.2329': attribute type 13 has an invalid length.
[  172.587254][T13316] netlink: 'syz.1.2329': attribute type 17 has an invalid length.
[  172.724600][T13316] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.729081][T13316] 8021q: adding VLAN 0 to HW filter on device team0
[  172.732642][T13316] tipc: Resetting bearer <eth:team0>
[  172.735320][T13316] tipc: Resetting bearer <eth:team0>
[  172.742679][T13316] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  172.874834][T13342] bond0: entered promiscuous mode
[  172.876787][T13342] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  172.890928][T13342] bond0: left promiscuous mode
[  172.893273][T13342] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  173.142672][T13361] netlink: 'syz.0.2343': attribute type 1 has an invalid length.
[  173.146272][T13359] bridge_slave_0: entered promiscuous mode
[  173.149972][T13359] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  173.196357][T13362] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.196641][T13368] netlink: 'syz.2.2345': attribute type 1 has an invalid length.
[  173.213176][T13368] 8021q: adding VLAN 0 to HW filter on device bond18
[  173.259133][T13368] 8021q: adding VLAN 0 to HW filter on device bond18
[  173.261592][T13368] bond18: (slave vxcan5): The slave device specified does not support setting the MAC address
[  173.268320][T13368] bond18: (slave vxcan5): Error -95 calling set_mac_address
[  173.303621][T13381] bond18: (slave bridge297): Enslaving as an active interface with a down link
[  173.315312][T13380] netlink: 'syz.1.2349': attribute type 2 has an invalid length.
[  173.464685][T13396] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  173.525619][T13396] tipc: Resetting bearer <eth:team0>
[  173.598572][T13402] syzkaller0: Caught tx_queue_len zero misconfig
[  173.657854][T13408] __nla_validate_parse: 28 callbacks suppressed
[  173.657869][T13408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2357'.
[  173.733610][T13414] syzkaller1: entered promiscuous mode
[  173.735924][T13414] syzkaller1: entered allmulticast mode
[  173.795347][T13418] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2359'.
[  173.818112][T13418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2359'.
[  173.954881][T13429] netlink: 191388 bytes leftover after parsing attributes in process `syz.0.2362'.
[  174.102174][T13436] veth0_to_bond: left allmulticast mode
[  174.104244][T13436] veth0_to_bond: left promiscuous mode
[  174.106267][T13436] bridge261: port 1(veth0_to_bond) entered disabled state
[  174.115193][T13436] bond11: (slave gretap2): Releasing active interface
[  174.128826][T13436] bond13: (slave ip6gretap2): Releasing backup interface
[  174.133429][T13436] bond16: (slave wireguard1): Releasing backup interface
[  174.136098][T13436] wireguard1: left promiscuous mode
[  174.151923][T13436] bond18: (slave bridge297): Releasing active interface
[  174.175816][T13436] team0: Failed to send options change via netlink (err -105)
[  174.191639][T13436] team0: Failed to send options change via netlink (err -105)
[  174.194605][T13436] team0: Mode changed to "activebackup"
[  174.241373][T13447] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.268475][T13449] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.476727][T13464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2375'.
[  174.493136][T13466] ip6tnl0: Caught tx_queue_len zero misconfig
[  174.507428][T13468] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  174.746302][T13489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2383'.
[  174.828437][T13491] bridge136: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  175.000354][T13501] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2387'.
[  175.043357][T13504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2388'.
[  175.332384][T13537] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  175.403403][T13548] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  175.406162][T13548] CPU: 1 UID: 0 PID: 13548 Comm: syz.1.2400 Not tainted syzkaller #0 PREEMPT(full) 
[  175.406173][T13548] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  175.406178][T13548] Call Trace:
[  175.406182][T13548]  <TASK>
[  175.406186][T13548]  dump_stack_lvl+0x189/0x250
[  175.406202][T13548]  ? __pfx_dump_stack_lvl+0x10/0x10
[  175.406212][T13548]  ? __pfx__printk+0x10/0x10
[  175.406224][T13548]  ? kernfs_path_from_node+0x2f/0x290
[  175.406233][T13548]  ? kernfs_path_from_node+0x250/0x290
[  175.406240][T13548]  ? kernfs_path_from_node+0x2f/0x290
[  175.406250][T13548]  sysfs_warn_dup+0x8e/0xa0
[  175.406259][T13548]  sysfs_do_create_link_sd+0xc0/0x110
[  175.406268][T13548]  device_add_class_symlinks+0x1cf/0x240
[  175.406277][T13548]  device_add+0x475/0xb50
[  175.406286][T13548]  wiphy_register+0x1ba6/0x28d0
[  175.406303][T13548]  ? __pfx_wiphy_register+0x10/0x10
[  175.406313][T13548]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  175.406325][T13548]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  175.406336][T13548]  ieee80211_register_hw+0x3484/0x4100
[  175.406351][T13548]  ? ieee80211_register_hw+0x1451/0x4100
[  175.406364][T13548]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  175.406374][T13548]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  175.406386][T13548]  ? __hrtimer_setup+0x187/0x210
[  175.406393][T13548]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  175.406405][T13548]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  175.406426][T13548]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  175.406435][T13548]  ? trace_kmalloc+0x1f/0xd0
[  175.406442][T13548]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  175.406451][T13548]  ? kstrndup+0xbf/0x160
[  175.406462][T13548]  hwsim_new_radio_nl+0xea4/0x1b10
[  175.406473][T13548]  ? __pfx___nla_validate_parse+0x10/0x10
[  175.406489][T13548]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  175.406504][T13548]  ? __nla_parse+0x40/0x60
[  175.406515][T13548]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  175.406527][T13548]  genl_family_rcv_msg_doit+0x215/0x300
[  175.406538][T13548]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  175.406552][T13548]  ? bpf_lsm_capable+0x9/0x20
[  175.406560][T13548]  ? security_capable+0x7e/0x2e0
[  175.406573][T13548]  genl_rcv_msg+0x60e/0x790
[  175.406583][T13548]  ? __pfx_genl_rcv_msg+0x10/0x10
[  175.406591][T13548]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  175.406605][T13548]  netlink_rcv_skb+0x208/0x470
[  175.406614][T13548]  ? __lock_acquire+0xab9/0xd20
[  175.406624][T13548]  ? __pfx_genl_rcv_msg+0x10/0x10
[  175.406632][T13548]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  175.406657][T13548]  ? down_read+0x1ad/0x2e0
[  175.406665][T13548]  genl_rcv+0x28/0x40
[  175.406673][T13548]  netlink_unicast+0x82f/0x9e0
[  175.406686][T13548]  ? __pfx_netlink_unicast+0x10/0x10
[  175.406697][T13548]  ? netlink_sendmsg+0x642/0xb30
[  175.406702][T13548]  ? skb_put+0x11b/0x210
[  175.406712][T13548]  netlink_sendmsg+0x805/0xb30
[  175.406723][T13548]  ? __pfx_netlink_sendmsg+0x10/0x10
[  175.406732][T13548]  ? aa_sock_msg_perm+0xf1/0x1d0
[  175.406740][T13548]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  175.406748][T13548]  ? __pfx_netlink_sendmsg+0x10/0x10
[  175.406755][T13548]  __sock_sendmsg+0x21c/0x270
[  175.406766][T13548]  ____sys_sendmsg+0x505/0x830
[  175.406776][T13548]  ? __pfx_____sys_sendmsg+0x10/0x10
[  175.406788][T13548]  ? import_iovec+0x74/0xa0
[  175.406797][T13548]  ___sys_sendmsg+0x21f/0x2a0
[  175.406805][T13548]  ? __pfx____sys_sendmsg+0x10/0x10
[  175.406828][T13548]  ? __fget_files+0x2a/0x420
[  175.406837][T13548]  ? __fget_files+0x3a0/0x420
[  175.406851][T13548]  __x64_sys_sendmsg+0x19b/0x260
[  175.406859][T13548]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  175.406871][T13548]  ? rcu_is_watching+0x15/0xb0
[  175.406880][T13548]  ? do_syscall_64+0xbe/0x3b0
[  175.406888][T13548]  do_syscall_64+0xfa/0x3b0
[  175.406893][T13548]  ? lockdep_hardirqs_on+0x9c/0x150
[  175.406903][T13548]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.406909][T13548]  ? exc_page_fault+0x9f/0xf0
[  175.406919][T13548]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.406926][T13548] RIP: 0033:0x7f1b2218ebe9
[  175.406934][T13548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  175.406940][T13548] RSP: 002b:00007f1b22f8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  175.406948][T13548] RAX: ffffffffffffffda RBX: 00007f1b223c5fa0 RCX: 00007f1b2218ebe9
[  175.406953][T13548] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000b
[  175.406957][T13548] RBP: 00007f1b22211e19 R08: 0000000000000000 R09: 0000000000000000
[  175.406961][T13548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  175.406965][T13548] R13: 00007f1b223c6038 R14: 00007f1b223c5fa0 R15: 00007ffedd2fe0a8
[  175.407004][T13548]  </TASK>
[  175.693042][T13560] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2402'.
[  175.696331][T13560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2402'.
[  175.807584][T13564] veth19: entered promiscuous mode
[  175.833573][T13564] bond23: (slave veth19): Enslaving as a backup interface with a down link
[  175.845284][T13564] 8021q: adding VLAN 0 to HW filter on device bond23
[  175.896396][T13581] bridge300: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  175.915040][T13584] erspan0: left promiscuous mode
[  175.924647][T13584] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.931218][T13584] 8021q: adding VLAN 0 to HW filter on device team0
[  175.938618][T13584] 0X: left allmulticast mode
[  175.940723][T13584] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  176.011759][T13584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  176.074335][T13598] bridge191: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  176.122514][T13604] bridge192: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  176.163774][T13606] dvmrp1: entered allmulticast mode
[  176.216446][T13616] bridge301: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  176.362682][T13633] : renamed from veth0_to_bond
[  176.385596][T13635] bond0: Caught tx_queue_len zero misconfig
[  176.420651][T13638] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  176.602091][T13640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  176.917350][T13655] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  177.198763][T13675] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  177.201810][T13675] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  177.224322][T13674] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  177.687154][T13715] ip6tnl2: entered promiscuous mode
[  177.689735][T13715] ip6tnl2: entered allmulticast mode
[  177.913328][T13722] bond0: (slave rose0): Error: Device can not be enslaved while up
[  177.963932][T13729] bridge198: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  177.972398][T13731] validate_nla: 5 callbacks suppressed
[  177.972408][T13731] netlink: 'syz.0.2455': attribute type 4 has an invalid length.
[  177.975816][T13729] smc: net device bond0 erased user defined pnetid SYZ2
[  177.991236][T13736] bridge199: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  178.439625][T13777] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  178.604528][T13796] IPVS: Unknown mcast interface: bridge_slave_0
[  178.846601][T13824] netlink: 'syz.2.2480': attribute type 1 has an invalid length.
[  178.851857][T13824] netlink: 'syz.2.2480': attribute type 11 has an invalid length.
[  178.852984][T13825] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  178.854880][T13824] __nla_validate_parse: 32 callbacks suppressed
[  178.854890][T13824] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2480'.
[  178.869520][T13825] erspan0: entered allmulticast mode
[  178.987298][T13843] netlink: 'syz.0.2484': attribute type 10 has an invalid length.
[  179.044793][T13851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2487'.
[  179.056347][T13851] dummy0: entered promiscuous mode
[  179.062714][T13851] macvtap0: entered promiscuous mode
[  179.064630][T13851] macvtap0: entered allmulticast mode
[  179.066570][T13851] dummy0: entered allmulticast mode
[  179.072476][T13851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2487'.
[  179.079531][T13851] dummy0: left allmulticast mode
[  179.081844][T13851] dummy0: left promiscuous mode
[  179.083844][T13848] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2486'.
[  179.116310][T13848] 8021q: adding VLAN 0 to HW filter on device bond20
[  179.214154][T13863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2491'.
[  179.235502][T13858] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2489'.
[  179.437360][T13871] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2493'.
[  179.439206][T13875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2493'.
[  179.509991][T13877] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2495'.
[  179.514045][T13877] 8021q: VLANs not supported on ip_vti0
[  179.525406][T13877] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2495'.
[  179.719273][T13895] bridge144: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  179.896385][T13914] bridge306: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  180.011788][T13919] netlink: 'syz.0.2510': attribute type 15 has an invalid length.
[  180.170345][T13935] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  180.344473][T13948] tap0: tun_chr_ioctl cmd 1074025677
[  180.346569][T13948] tap0: linktype set to 804
[  180.463829][T13961] netlink: 'syz.2.2520': attribute type 1 has an invalid length.
[  180.466627][T13962] netlink: 'syz.2.2520': attribute type 1 has an invalid length.
[  180.668131][T13915] Bluetooth: hci1: command 0x0406 tx timeout
[  180.776725][T13991] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  181.111205][T14006] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  181.133258][T14006] ip6gretap0: left promiscuous mode
[  181.137004][T14006] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.140748][T14006] 8021q: adding VLAN 0 to HW filter on device team0
[  181.144703][T14006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  181.550545][T14031] vlan5: entered promiscuous mode
[  181.553396][T14031] bridge0: port 1(vlan5) entered blocking state
[  181.556292][T14031] bridge0: port 1(vlan5) entered disabled state
[  181.562647][T14031] vlan5: entered allmulticast mode
[  181.564787][T14031] bridge0: entered allmulticast mode
[  181.570491][T14031] vlan5: left allmulticast mode
[  181.572458][T14031] bridge0: left allmulticast mode
[  181.923871][T14053] netlink: 'syz.2.2546': attribute type 1 has an invalid length.
[  181.969739][T14053] 8021q: adding VLAN 0 to HW filter on device bond21
[  181.983551][T14053] 8021q: adding VLAN 0 to HW filter on device bond21
[  181.986102][T14053] bond21: (slave vxcan9): The slave device specified does not support setting the MAC address
[  181.991830][T14053] bond21: (slave vxcan9): Error -95 calling set_mac_address
[  182.599907][T14070] bridge311: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  182.604560][T14070] bridge311: entered promiscuous mode
[  182.606689][T14070] bridge311: entered allmulticast mode
[  182.700892][T14081] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  182.918657][T14097] netlink: 'syz.2.2558': attribute type 1 has an invalid length.
[  183.807447][T14125] gtp2: entered promiscuous mode
[  184.256989][T14154] bridge312: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  184.262586][T14154] bridge312: entered promiscuous mode
[  184.264411][T14154] bridge312: entered allmulticast mode
[  184.283062][T14156] __nla_validate_parse: 20 callbacks suppressed
[  184.283073][T14156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2575'.
[  184.301028][T14156] netlink: 'syz.1.2575': attribute type 1 has an invalid length.
[  184.312125][T14158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2576'.
[  184.315299][T14158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2576'.
[  184.341313][T14164] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  184.360542][T14166] veth21: entered allmulticast mode
[  184.371598][T14167] veth23: entered allmulticast mode
[  184.400445][T14168] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2578'.
[  184.428174][T14172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2580'.
[  184.464826][T14174] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2581'.
[  184.582507][T14180] bond0: default FDB implementation only supports local addresses
[  184.585691][T14181] bond0: default FDB implementation only supports local addresses
[  184.622678][T14183] netlink: 'syz.1.2585': attribute type 1 has an invalid length.
[  184.806793][T14190] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2587'.
[  184.882729][T14192] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  184.886829][T14192] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  185.255095][T14199] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2589'.
[  185.754993][T14204] erspan0: left allmulticast mode
[  185.773713][T14204] tipc: Resetting bearer <eth:team0>
[  185.794703][T14204] tipc: Resetting bearer <eth:syzkaller0>
[  185.798611][T14204] syzkaller0: left promiscuous mode
[  185.800964][T14204] syzkaller0: left allmulticast mode
[  185.819713][T14204] veth13: left promiscuous mode
[  185.823268][T14204] veth17: left promiscuous mode
[  185.826219][T14204] bridge179: left promiscuous mode
[  185.833864][T14204] ip6gretap3: left promiscuous mode
[  185.845128][T14204] veth19: left promiscuous mode
[  185.854566][T14204] gtp2: left promiscuous mode
[  185.862540][T14204] veth21: left allmulticast mode
[  185.864782][T14204] veth23: left allmulticast mode
[  186.087612][T14217] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2596'.
[  186.277595][T14235] netlink: 'syz.1.2602': attribute type 2 has an invalid length.
[  186.281406][T14235] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2602'.
[  186.284436][T14235] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  186.437347][T14254] .70: renamed from 70
[  186.440262][T14254] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  186.443917][T14254] .70: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  186.463739][T14254] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[  188.096919][T14298] hsr_slave_0: left promiscuous mode
[  188.102750][T14298] hsr_slave_1: left promiscuous mode
[  188.181431][T14302] openvswitch: netlink: Flow actions attr not present in new flow.
[  188.327372][T14309] bridge314: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  188.882315][T14322] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  188.946369][T14326] tipc: Resetting bearer <eth:syzkaller0>
[  188.950110][T14326] tipc: Resetting bearer <eth:syzkaller0>
[  189.350801][T14355] __nla_validate_parse: 14 callbacks suppressed
[  189.350942][T14355] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2635'.
[  189.359419][T14356] pim6reg1: entered promiscuous mode
[  189.361510][T14356] pim6reg1: entered allmulticast mode
[  189.434494][T14361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2637'.
[  189.692591][T14382] geneve4: entered promiscuous mode
[  189.694748][T14382] geneve4: entered allmulticast mode
[  189.827602][T14389] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2645'.
[  190.015846][T14397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2648'.
[  190.019157][T14397] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  190.052190][T14400] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  190.057435][T14400] bond19: (slave erspan0): Releasing active interface
[  190.060116][T14400] ip6gretap2: entered promiscuous mode
[  190.064212][T14400] bond0: (slave wlan1): Releasing backup interface
[  190.069740][T14400] bond16: (slave veth9): Releasing active interface
[  190.074348][T14400] team0: Port device batadv2 removed
[  190.078079][T14400] team0: Port device bond17 removed
[  190.081092][T14400] bond19: (slave ip6gretap2): Releasing active interface
[  190.083817][T14400] bond19: (slave ip6gretap2): the permanent HWaddr of slave - e2:15:1a:59:34:42 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  190.092311][T14400] ip6gretap2: left promiscuous mode
[  190.096233][T14400] bond19: (slave veth11): Releasing active interface
[  190.100773][T14400] bond20: (slave veth13): Releasing active interface
[  190.104487][T14400] bond21: (slave veth17): Releasing active interface
[  190.113844][T14400] bond23: (slave veth19): Releasing backup interface
[  190.149372][T14400] netlink: 'syz.1.2649': attribute type 10 has an invalid length.
[  190.154172][T14400] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  190.160276][T14400] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  190.163775][T14400] netlink: 'syz.1.2649': attribute type 1 has an invalid length.
[  190.169470][T14400] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  190.173558][T14400] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  190.223605][T14404] team0: Mode changed to "loadbalance"
[  190.585743][T14421] netlink: 'syz.2.2654': attribute type 5 has an invalid length.
[  190.589475][T14421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2654'.
[  190.926725][T14447] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2662'.
[  190.976113][T14459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2665'.
[  191.079283][T14467] netlink: 18 bytes leftover after parsing attributes in process `syz.2.2663'.
[  191.812967][T14478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2668'.
[  191.914629][T14481] team0: Mode changed to "activebackup"
[  191.961748][T14491] netlink: 'syz.0.2672': attribute type 21 has an invalid length.
[  191.972145][T14491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  192.000111][T14494] bridge210: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  192.003641][T14496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2674'.
[  192.512233][T14508] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  192.587903][T10378] wlan1: Trigger new scan to find an IBSS to join
[  192.855994][T14512] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  192.861778][T14512] IPv6: addrconf: prefix option has invalid lifetime
[  193.050923][T14530] netlink: 'syz.2.2685': attribute type 1 has an invalid length.
[  193.070966][T14530] 8021q: adding VLAN 0 to HW filter on device bond22
[  193.097470][T14530] bond22: (slave veth9): Enslaving as an active interface with a down link
[  193.115351][T14534] _Z`Ԁ@: entered promiscuous mode
[  193.130875][T14530] gretap6: entered promiscuous mode
[  193.135386][T14530] bond22: (slave gretap6): making interface the new active one
[  193.140087][T14530] bond22: (slave gretap6): Enslaving as an active interface with an up link
[  193.185655][T14536] tipc: Resetting bearer <eth:syzkaller0>
[  193.225692][T14536] bridge125: left promiscuous mode
[  193.234524][T14536] macvtap0: left promiscuous mode
[  193.236412][T14536] macvtap0: left allmulticast mode
[  193.250530][T14530] macvlan0: entered promiscuous mode
[  193.252757][T14530] macvlan0: entered allmulticast mode
[  193.256579][T14530] bond22: entered promiscuous mode
[  193.263542][T14530] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  193.266426][T14530] bond22: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  193.273109][T14530] bond22: left promiscuous mode
[  193.301020][T14536] bond0: left promiscuous mode
[  193.524824][T14569] netlink: 'syz.1.2696': attribute type 7 has an invalid length.
[  194.034676][T14612] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  194.131410][T14619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  194.249613][T14626] netlink: 'syz.2.2714': attribute type 6 has an invalid length.
[  194.426010][T14634] netlink: 'syz.2.2717': attribute type 1 has an invalid length.
[  194.430539][T14634] netlink: 'syz.2.2717': attribute type 3 has an invalid length.
[  194.433239][T14634] __nla_validate_parse: 261 callbacks suppressed
[  194.433246][T14634] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2717'.
[  194.463322][T14636] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2718'.
[  194.530152][T14638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2719'.
[  194.610909][T14640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2720'.
[  194.704719][T14643] netlink: 'syz.2.2721': attribute type 16 has an invalid length.
[  194.709361][T14643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2721'.
[  194.723588][T14643] bond23: entered promiscuous mode
[  194.725862][T14643] bond23: entered allmulticast mode
[  194.735595][T14643] bridge322: entered promiscuous mode
[  194.737440][T14643] bridge322: entered allmulticast mode
[  194.747074][T14643] bond23: (slave bridge322): making interface the new active one
[  194.752218][T14643] bond23: (slave bridge322): Enslaving as an active interface with an up link
[  194.821256][T14646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2722'.
[  194.856351][T14650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2723'.
[  194.883371][T14650] bond24: entered promiscuous mode
[  194.977332][T14655] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001
[  194.980898][T14655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2725'.
[  195.080768][T14660] nbd: device at index 2 is going down
[  195.255962][T14667] bridge323: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  195.312196][T14669] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2729'.
[  195.401312][T14671] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2730'.
[  195.405313][T14671] validate_nla: 1 callbacks suppressed
[  195.405328][T14671] netlink: 'syz.2.2730': attribute type 15 has an invalid length.
[  195.503114][T14678] openvswitch: netlink: Key 4 has unexpected len 1028 expected 12
[  195.658118][T14692] netlink: 'syz.0.2737': attribute type 2 has an invalid length.
[  195.849919][T14703] netlink: 'syz.0.2740': attribute type 12 has an invalid length.
[  196.162995][T14723] bridge325: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  196.283642][T14733] netlink: 'syz.2.2746': attribute type 1 has an invalid length.
[  196.306093][T14736] syzkaller1: entered promiscuous mode
[  196.318191][T14736] syzkaller1: entered allmulticast mode
[  196.424187][T14747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  196.914515][T14774] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  196.917198][T14774] team0: Device macvtap1 is already an upper device of the team interface
[  197.095957][T14786] netlink: 'syz.0.2761': attribute type 9 has an invalid length.
[  197.513527][T14815] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  197.526543][T14815] Bluetooth: MGMT ver 1.23
[  197.682151][T14833] netlink: 'syz.2.2776': attribute type 1 has an invalid length.
[  197.697950][T14834] netlink: 'syz.2.2776': attribute type 1 has an invalid length.
[  197.712078][T14837] bridge151: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  197.998728][T14868] netlink: 'syz.0.2786': attribute type 1 has an invalid length.
[  198.888644][T14906] tunl0: Caught tx_queue_len zero misconfig
[  198.924110][T14911] netlink: 'syz.1.2797': attribute type 18 has an invalid length.
[  199.176676][T14938] 8021q: adding VLAN 0 to HW filter on device bond26
[  199.229181][T14948] netlink: 'syz.1.2805': attribute type 1 has an invalid length.
[  199.254439][T14948] 8021q: adding VLAN 0 to HW filter on device bond27
[  199.286247][T14948] veth27: entered promiscuous mode
[  199.359348][T14948] erspan0: entered allmulticast mode
[  199.394294][T14963] bridge216: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  199.463788][T14974] bridge217: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  199.549124][   T54] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  199.557839][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  199.602146][T14980] syzkaller1: entered promiscuous mode
[  199.604267][T14980] syzkaller1: entered allmulticast mode
[  199.713434][T14993] bridge218: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  199.811123][T15000] __nla_validate_parse: 53 callbacks suppressed
[  199.811134][T15000] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2821'.
[  199.817036][T15000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2821'.
[  199.928507][T15003] bridge220: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  200.187324][T15010] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  200.432622][T15025] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2830'.
[  200.544760][T15032] bridge328: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  200.591888][T15037] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2835'.
[  200.695881][T15047] bridge329: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  200.696447][T15046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2837'.
[  200.825215][   T56] block nbd1: Receive control failed (result -32)
[  200.889576][T15048] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2834'.
[  201.036207][T15076] netlink: 'syz.2.2847': attribute type 1 has an invalid length.
[  201.056519][T15074] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2846'.
[  201.061744][T15074] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2846'.
[  201.343098][T15101] bridge227: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  201.502353][T15110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2858'.
[  201.870818][T15121] sctp: [Deprecated]: syz.0.2861 (pid 15121) Use of struct sctp_assoc_value in delayed_ack socket option.
[  201.870818][T15121] Use struct sctp_sack_info instead
[  201.888523][T15121] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2861'.
[  202.207114][T15149] netlink: 'syz.2.2871': attribute type 2 has an invalid length.
[  202.212489][T15149] netlink: 'syz.2.2871': attribute type 2 has an invalid length.
[  202.412023][T15168] bond28: entered promiscuous mode
[  202.414046][T15168] 8021q: adding VLAN 0 to HW filter on device bond28
[  202.443764][T15171] A link change request failed with some changes committed already. Interface [SRW may have been left with an inconsistent configuration, please check.
[  202.683027][T15188] netlink: 'syz.1.2884': attribute type 1 has an invalid length.
[  202.691384][T15188] workqueue: Failed to create a rescuer kthread for wq "bond29": -EINTR
[  202.702422][T15191] bridge158: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  202.769321][T15200] bridge231: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  203.030897][T15221] netlink: 'syz.1.2896': attribute type 32 has an invalid length.
[  203.036057][T15221] (unnamed net_device) (uninitialized): option coupled_control: invalid value (32)
[  203.151508][T15237] batman_adv: batadv0: Adding interface: ip6gretap2
[  203.154179][T15237] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.164073][T15237] batman_adv: batadv0: Interface activated: ip6gretap2
[  203.170614][T15236] syzkaller0: entered promiscuous mode
[  203.172359][T15236] syzkaller0: entered allmulticast mode
[  203.259832][T15252] bridge234: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  203.371942][T15265] block nbd0: NBD_DISCONNECT
[  203.374206][T15265] block nbd0: Send disconnect failed -32
[  203.377488][T15265] block nbd0: shutting down sockets
[  203.391346][T15253] bridge_slave_0: left promiscuous mode
[  203.395086][T15253] xfrm0: left promiscuous mode
[  203.396736][T15253] xfrm0: left allmulticast mode
[  203.400551][T15253] .70: left allmulticast mode
[  203.402173][T15253] hsr_slave_0: left allmulticast mode
[  203.403985][T15253] hsr_slave_1: left allmulticast mode
[  203.432085][T15253] macsec0: left promiscuous mode
[  203.433888][T15253] macsec0: left allmulticast mode
[  203.436350][T15253] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  203.439572][T15253] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  203.443211][T15253] bond16: left promiscuous mode
[  203.450728][T15253] bridge283: left allmulticast mode
[  203.478427][T15253] ip6tnl2: left promiscuous mode
[  203.480349][T15253] ip6tnl2: left allmulticast mode
[  203.489952][T15253] bridge311: left promiscuous mode
[  203.491912][T15253] bridge311: left allmulticast mode
[  203.497273][T15253] bridge312: left promiscuous mode
[  203.499376][T15253] bridge312: left allmulticast mode
[  203.513673][T15253] bond23: left promiscuous mode
[  203.516195][T15253] bond23: left allmulticast mode
[  203.518999][T15253] bridge322: left promiscuous mode
[  203.520714][T15253] bridge322: left allmulticast mode
[  203.523795][T15253] bond24: left promiscuous mode
[  203.633689][T15278] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  203.639431][T15278] tipc: Failed to remove unknown binding: 66,1,1/3988950906:532982414/532982416
[  203.643981][T15278] tipc: Failed to remove unknown binding: 66,1,1/3988950906:532982414/532982416
[  203.647209][T15278] tipc: Failed to remove unknown binding: 66,1,1/3988950906:532982414/532982416
[  204.052629][T15319] netlink: 'syz.1.2925': attribute type 29 has an invalid length.
[  204.155531][T15329] netlink: 'syz.0.2928': attribute type 1 has an invalid length.
[  204.162456][T15336] netlink: 'syz.0.2928': attribute type 1 has an invalid length.
[  204.165503][T15329] netlink: 'syz.0.2928': attribute type 4 has an invalid length.
[  204.167240][T15336] netlink: 'syz.0.2928': attribute type 4 has an invalid length.
[  204.315860][T15344] sctp: [Deprecated]: syz.0.2929 (pid 15344) Use of struct sctp_assoc_value in delayed_ack socket option.
[  204.315860][T15344] Use struct sctp_sack_info instead
[  204.465674][T15349] _Z`Ԁ@: entered promiscuous mode
[  204.608275][T15367] team0: Caught tx_queue_len zero misconfig
[  204.802357][T15379] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  204.805634][T15379] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  204.808965][T15379] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  204.816229][T15379] tipc: Resetting bearer <eth:syzkaller0>
[  204.826102][T15381] __nla_validate_parse: 90 callbacks suppressed
[  204.826111][T15381] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2941'.
[  204.891589][T15383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2942'.
[  204.932341][T15385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2944'.
[  204.935539][T15385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2944'.
[  205.037366][T15396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2947'.
[  205.125320][T15401] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2949'.
[  205.129726][T15401] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2949'.
[  205.231686][T15414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2955'.
[  205.254535][T15417] bridge105: entered allmulticast mode
[  205.274342][T15417] dvmrp8: entered allmulticast mode
[  205.279364][T15417] bridge105: left allmulticast mode
[  205.281233][T15417] dvmrp8: left allmulticast mode
[  205.284593][T15422] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2954'.
[  205.461640][T15434] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2959'.
[  205.497425][T15438] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  205.500312][T15438] IPv6: NLM_F_CREATE should be set when creating new route
[  205.502973][T15438] IPv6: NLM_F_CREATE should be set when creating new route
[  205.596196][T15440] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  205.616558][T15440] tipc: Failed to remove unknown binding: 66,1,1/3988950906:1127519284/1127519287
[  205.667184][T15449] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  205.675485][T15449] team0: entered promiscuous mode
[  205.744245][T15449] team0 (unregistering): left promiscuous mode
[  205.755256][T15449] tipc: Disabling bearer <eth:team0>
[  205.863036][T15464] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  206.185949][T15480] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  206.194240][T15480] bond0: (slave wlan1): Releasing backup interface
[  206.217115][T15480] validate_nla: 6 callbacks suppressed
[  206.217124][T15480] netlink: 'syz.1.2974': attribute type 10 has an invalid length.
[  206.227010][T15480] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  206.241182][T15480] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  206.245258][T15480] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  206.607287][T15496] bridge333: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  206.972727][T15511] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  207.025614][T15513] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.035758][T15513] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  207.039958][T15513] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  207.045278][T15513] tipc: Resetting bearer <eth:syzkaller0>
[  207.331181][T15538] netlink: 'syz.1.2994': attribute type 1 has an invalid length.
[  207.369881][T15538] 8021q: adding VLAN 0 to HW filter on device bond29
[  207.391428][T15538] veth27: entered promiscuous mode
[  207.466888][T15549] netlink: 'syz.2.2998': attribute type 3 has an invalid length.
[  207.527194][T15557] bond22: (slave veth9): Releasing active interface
[  207.532727][T15557] bond22: (slave veth9): the permanent HWaddr of slave - 3e:dd:c9:fb:37:59 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  207.542039][T15557] bond22: (slave gretap6): Releasing active interface
[  207.544692][T15557] gretap6: left promiscuous mode
[  207.548474][T15557] bond23: (slave bridge322): Releasing backup interface
[  207.552609][T15560] bond0: (slave wlan1): Releasing backup interface
[  207.646130][T15568] bridge240: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  207.986747][T15599] netlink: 'syz.2.3012': attribute type 1 has an invalid length.
[  208.249190][T15610] tipc: Resetting bearer <eth:syzkaller0>
[  208.547564][T15623] bond20: (slave ip6gretap3): Enslaving as a backup interface with an up link
[  208.761479][T15634] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  208.763816][T15634] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  209.724358][T15667] bridge165: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  209.734057][T15669] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  209.751839][T15669] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  209.755267][T15669] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  209.836869][T15672] 8021q: adding VLAN 0 to HW filter on device bond24
[  210.180501][T15702] __nla_validate_parse: 16 callbacks suppressed
[  210.180512][T15702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3039'.
[  210.217087][T15706] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3041'.
[  210.300170][T15714] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3044'.
[  210.387570][T15715] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  210.400691][T15715] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  210.404751][T15715] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3042'.
[  210.423971][T15726] netlink: 'syz.1.3047': attribute type 1 has an invalid length.
[  210.453231][T15726] 8021q: adding VLAN 0 to HW filter on device bond30
[  210.470479][T15726] veth29: entered promiscuous mode
[  210.475983][T15726] bond30: (slave veth29): Enslaving as an active interface with a down link
[  210.530356][T15732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3048'.
[  210.670132][T15739] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3050'.
[  210.889966][T15744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3051'.
[  210.951477][T15744] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3051'.
[  211.069605][T15751] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.3053'.
[  211.158256][T15760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3056'.
[  211.203608][T15770] netlink: 'syz.0.3060': attribute type 10 has an invalid length.
[  211.210121][T15770] team0: Device dummy0 failed to register rx_handler
[  211.214016][T15770] netlink: 'syz.0.3060': attribute type 10 has an invalid length.
[  211.675073][T15818] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  211.682660][T15818] batman_adv: batadv0: Removing interface: ip6gretap2
[  211.695427][T15818] netlink: 'syz.0.3076': attribute type 10 has an invalid length.
[  211.700681][T15818] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  211.705090][T15818] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  211.739592][T15818] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  211.742666][T15818] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  211.802351][T15829] bridge340: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  212.454671][T15891] netlink: 'syz.1.3097': attribute type 1 has an invalid length.
[  212.552411][T15898] netlink: 'syz.2.3100': attribute type 1 has an invalid length.
[  212.555018][T15898] netlink: 'syz.2.3100': attribute type 1 has an invalid length.
[  212.570328][T15901] netlink: 'syz.1.3101': attribute type 39 has an invalid length.
[  212.613601][T15898] 8021q: adding VLAN 0 to HW filter on device bond27
[  212.720868][T15912] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  212.775321][T15914] IPv6: sit3: Disabled Multicast RS
[  212.912070][T15942] sctp: [Deprecated]: syz.1.3113 (pid 15942) Use of int in maxseg socket option.
[  212.912070][T15942] Use struct sctp_assoc_value instead
[  212.980035][T15948] batman_adv: batadv0: Adding interface: dummy0
[  212.982412][T15948] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  212.993676][T15950] batman_adv: batadv0: Adding interface: ip6gretap6
[  212.995942][T15950] batman_adv: batadv0: The MTU of interface ip6gretap6 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1462.
[  213.004106][T15950] batman_adv: batadv0: Interface activated: ip6gretap6
[  213.035290][T15949] erspan0: mtu less than device minimum
[  213.054306][T15955] bridge167: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  213.111797][T15959] bridge168: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  213.323951][T15982] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  213.332828][T15982] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  213.480908][T16006] bridge169: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  213.873746][T16032] vlan0: entered promiscuous mode
[  213.875532][T16032] hsr_slave_1: entered promiscuous mode
[  213.877492][T16032] vlan0: entered allmulticast mode
[  213.879532][T16032] hsr_slave_1: entered allmulticast mode
[  213.972354][T16036] bond0: (slave wlan1): Releasing backup interface
[  213.982768][T16036] netlink: 'syz.0.3145': attribute type 10 has an invalid length.
[  213.989348][T16036] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  213.995386][T16036] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  213.999282][T16036] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  214.075311][T16041] lo speed is unknown, defaulting to 1000
[  214.077326][T16041] lo speed is unknown, defaulting to 1000
[  214.086039][T16041] lo speed is unknown, defaulting to 1000
[  214.094628][T16041] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  214.111208][T16041] lo speed is unknown, defaulting to 1000
[  214.114427][T16041] lo speed is unknown, defaulting to 1000
[  214.117165][T16041] lo speed is unknown, defaulting to 1000
[  214.139120][T16041] netlink: 'syz.2.3148': attribute type 4 has an invalid length.
[  214.297599][T16061] syzkaller1: entered promiscuous mode
[  214.302550][T16061] syzkaller1: entered allmulticast mode
[  214.484458][T16080] batadv4: entered promiscuous mode
[  214.486287][T16080] batadv4: entered allmulticast mode
[  214.687153][T16089] bridge105: entered allmulticast mode
[  214.695500][T16089] dvmrp1: entered allmulticast mode
[  214.704795][T16088] bridge105: left allmulticast mode
[  214.731051][T16093] netlink: 'syz.1.3165': attribute type 12 has an invalid length.
[  214.816339][T16103] netlink: 'syz.0.3167': attribute type 1 has an invalid length.
[  214.841301][T16103] 8021q: adding VLAN 0 to HW filter on device bond25
[  214.851263][T16105] bridge253: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  214.907568][T16113] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  215.001971][T16123] lo speed is unknown, defaulting to 1000
[  215.006579][T16128] netlink: 'syz.2.3174': attribute type 10 has an invalid length.
[  215.071985][T16130] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  215.349510][T16150] __nla_validate_parse: 105 callbacks suppressed
[  215.349519][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3184'.
[  215.355278][T16150] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  215.360637][T16150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3184'.
[  215.594941][T16170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3190'.
[  215.631697][T16179] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  215.669617][T16179] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3193'.
[  215.757220][T16195] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  215.781736][T16199] bridge173: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  215.926740][T16212] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3202'.
[  215.934720][T16217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3203'.
[  215.939942][T16212] geneve4: entered promiscuous mode
[  215.942781][ T5865] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  215.945521][ T5865] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  215.976554][ T5865] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  215.979553][ T5865] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  215.986379][T16214] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  215.989080][T16214] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  216.090055][T16225] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3206'.
[  216.205541][T16238] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  216.228718][T16244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3209'.
[  216.263741][T16248] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3214'.
[  216.266814][T16248] gretap0: entered promiscuous mode
[  226.660232][T16257] can: request_module (can-proto-0) failed.
[  226.671909][T16252] vlan0: entered promiscuous mode
[  226.674210][T16252] batadv_slave_0: entered promiscuous mode
[  226.676836][T16262] validate_nla: 1 callbacks suppressed
[  226.676847][T16262] netlink: 'syz.2.3218': attribute type 2 has an invalid length.
[  226.684413][T16262] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3218'.
[  226.692254][T16257] can: request_module (can-proto-0) failed.
[  226.750941][T16266] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3219'.
[  226.916147][T16279] netlink: 'syz.1.3224': attribute type 1 has an invalid length.
[  226.920491][T16281] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3225'.
[  226.937220][T16279] tipc: Resetting bearer <eth:syzkaller0>
[  226.985157][T16279] batman_adv: batadv0: Interface deactivated: ip6gretap6
[  227.151388][T16304] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.156426][T16306] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3232'.
[  227.305615][T16324] netlink: 'syz.1.3238': attribute type 1 has an invalid length.
[  227.310223][T16324] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3238'.
[  227.347600][T16321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3236'.
[  227.373025][T16334] netlink: 'syz.1.3241': attribute type 1 has an invalid length.
[  227.420263][T16334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3241'.
[  227.475928][T16346] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.493029][T16346] tipc: Resetting bearer <eth:syzkaller0>
[  227.495505][T16334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3241'.
[  227.583154][T16355] tipc: Resetting bearer <eth:syzkaller0>
[  227.613268][T16362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3249'.
[  227.616235][T16362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3249'.
[  227.621261][T16362] netlink: 'syz.1.3249': attribute type 18 has an invalid length.
[  227.685220][T16372] bridge259: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  227.805325][T16368] macsec2: entered promiscuous mode
[  227.810379][T16368] batman_adv: batadv0: Adding interface: macsec2
[  227.813398][T16368] batman_adv: batadv0: The MTU of interface macsec2 is too small (267) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.824193][T16368] batman_adv: batadv0: Interface activated: macsec2
[  227.963783][T16395] netlink: 'syz.2.3261': attribute type 1 has an invalid length.
[  227.971674][T16395] pim6reg99999999: entered allmulticast mode
[  228.017512][T16403] netlink: 'syz.0.3264': attribute type 2 has an invalid length.
[  228.431652][T16451] bond0: (slave wlan1): Releasing backup interface
[  228.439892][T16453] netlink: 'syz.1.3279': attribute type 1 has an invalid length.
[  228.442718][T16453] netlink: 'syz.1.3279': attribute type 2 has an invalid length.
[  228.451102][T16451] batman_adv: batadv0: Interface deactivated: macsec2
[  228.453444][T16451] batman_adv: batadv0: Removing interface: macsec2
[  228.462789][T16451] team0: Unable to change to the same mode the team is in
[  228.471476][T16451] vlan0: entered promiscuous mode
[  228.473444][T16451] veth1: entered promiscuous mode
[  228.476885][T16451] tipc: Enabled bearer <eth:team0>, priority 1
[  228.610291][T16463] team0 (unregistering): left promiscuous mode
[  228.619896][T16463] tipc: Disabling bearer <eth:team0>
[  228.784226][T16475] netlink: 'syz.2.3286': attribute type 1 has an invalid length.
[  229.472212][T16540] 8021q: adding VLAN 0 to HW filter on device bond28
[  229.495334][T16540] veth11: entered promiscuous mode
[  229.517828][T16540] bond28: (slave veth11): Enslaving as an active interface with an up link
[  229.560449][T16546] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.564879][T16546] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  229.615837][T16550] bridge178: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  229.757358][T16569] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  229.763269][T16569] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  229.765940][T16569] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  230.241070][T16617] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  230.803985][T16662] lo speed is unknown, defaulting to 1000
[  230.828008][T16667] lo speed is unknown, defaulting to 1000
[  230.852003][T16668] tipc: Resetting bearer <ib:caif0>
[  231.016385][T16675] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  231.019629][T16675] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  231.048583][T16675] veth11: left promiscuous mode
[  231.259080][T16690] bridge262: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  231.274308][T16692] bridge180: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  231.493602][T16709] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  231.565414][T16709] tipc: Resetting bearer <eth:syzkaller0>
[  231.636657][T16719] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  231.645454][T16719] tipc: Resetting bearer <eth:syzkaller0>
[  231.764904][T16724] __nla_validate_parse: 130 callbacks suppressed
[  231.764918][T16724] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3354'.
[  231.790650][T16724] validate_nla: 7 callbacks suppressed
[  231.790665][T16724] netlink: 'syz.1.3354': attribute type 39 has an invalid length.
[  231.934114][T16751] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3362'.
[  231.935139][T16752] dvmrp1: left allmulticast mode
[  231.937502][T16751] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3362'.
[  231.940663][T16753] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3362'.
[  231.946333][T16753] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3362'.
[  231.960204][T16755] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3363'.
[  231.981769][T16755] bond29: entered allmulticast mode
[  231.985796][T16755] 8021q: adding VLAN 0 to HW filter on device bond29
[  231.990042][T16755] bond0: (slave bond29): Enslaving as an active interface with an up link
[  232.056587][T16761] tipc: Resetting bearer <eth:syzkaller0>
[  232.063394][T16763] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.074513][T16761] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  232.082726][T16761] vlan0: left promiscuous mode
[  232.084410][T16761] veth1: left promiscuous mode
[  232.091788][T16765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3365'.
[  232.109012][T16761] geneve4: left promiscuous mode
[  232.114388][T16761] macsec2: left promiscuous mode
[  232.137408][ T5852] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  232.142482][ T5852] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  232.201156][ T5852] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  232.204428][ T5852] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  232.322744][T16771] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  232.328463][T16771] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3367'.
[  232.332065][T16771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3367'.
[  232.336956][T16771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3367'.
[  232.781668][T16792] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  232.856918][T16795] vlan1: entered promiscuous mode
[  232.860346][T16795] macvtap0: entered promiscuous mode
[  233.440432][T16823] bridge267: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  233.484036][T16827] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  233.707118][T16845] bridge364: port 1(veth0_to_bond) entered blocking state
[  233.709671][T16845] bridge364: port 1(veth0_to_bond) entered disabled state
[  233.712031][T16845] veth0_to_bond: entered allmulticast mode
[  233.714730][T16845] veth0_to_bond: entered promiscuous mode
[  233.739128][T16846] lo speed is unknown, defaulting to 1000
[  233.771370][T16848] bridge365: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  234.363429][T16881] netlink: 'syz.0.3404': attribute type 1 has an invalid length.
[  234.409635][T16881] 8021q: adding VLAN 0 to HW filter on device bond26
[  234.423856][T16881] bond26: (slave gretap4): making interface the new active one
[  234.427214][T16881] bond26: (slave gretap4): Enslaving as an active interface with an up link
[  234.473971][T16893] netlink: 'syz.0.3407': attribute type 1 has an invalid length.
[  234.494254][T16893] netlink: 'syz.0.3407': attribute type 1 has an invalid length.
[  234.552694][T16904] bridge182: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  234.572725][T16901] netlink: 'syz.1.3409': attribute type 1 has an invalid length.
[  234.604479][T16901] 8021q: adding VLAN 0 to HW filter on device bond32
[  234.697439][T16920] netlink: 'syz.2.3414': attribute type 1 has an invalid length.
[  234.845038][T16926] netlink: 'syz.0.3417': attribute type 1 has an invalid length.
[  234.910333][T16935] bridge369: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  235.010400][T16941] netlink: 'syz.2.3422': attribute type 10 has an invalid length.
[  235.408860][T16979] 8021q: VLANs not supported on bond0
[  235.589298][T16992] netlink: 'syz.1.3436': attribute type 1 has an invalid length.
[  235.624441][T16995] bridge374: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  235.950771][T17021] lo speed is unknown, defaulting to 1000
[  236.047586][T17031] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  236.085607][T17031] lo speed is unknown, defaulting to 1000
[  236.211830][T17040] tipc: Resetting bearer <eth:syzkaller0>
[  236.286813][T17040] geneve3: entered promiscuous mode
[  236.289646][T17040] geneve3: entered allmulticast mode
[  236.333220][ T9757] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  236.336242][T17048] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  236.346344][ T9757] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  236.363877][ T9757] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  236.377547][T17048] netlink: 'syz.1.3453': attribute type 7 has an invalid length.
[  236.380346][ T9757] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  236.473327][T17058] bridge186: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  236.611104][T17070] bond26: (slave gretap4): Releasing active interface
[  236.636788][T17072] 8021q: adding VLAN 0 to HW filter on device bond30
[  236.751469][T17085] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  236.776978][T17092] __nla_validate_parse: 39 callbacks suppressed
[  236.776988][T17092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3468'.
[  236.827236][T17101] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  236.945354][T17115] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3471'.
[  237.023583][T17122] bridge187: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  237.103583][T17128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3476'.
[  237.138872][T17126] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3475'.
[  237.142493][T17126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3475'.
[  237.160119][T17130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3477'.
[  237.192167][T17132] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3478'.
[  237.271474][T17130] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3477'.
[  237.340282][T17145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3482'.
[  237.340819][T17146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3483'.
[  237.343178][T17145] validate_nla: 1 callbacks suppressed
[  237.343186][T17145] netlink: 'syz.0.3482': attribute type 15 has an invalid length.
[  237.443681][T17165] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  237.495464][T17173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  237.548737][T17181] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  237.551601][T17181] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  238.063875][T17209] sit0: entered promiscuous mode
[  238.065634][T17209] sit0: entered allmulticast mode
[  238.163966][T17223] veth0: entered promiscuous mode
[  238.184596][T17223] veth0 (unregistering): left promiscuous mode
[  238.204679][T17225] team0: Refused to change device type
[  238.425113][T17240] bridge268: entered allmulticast mode
[  238.943275][T17280] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  238.995142][T17280] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  239.024352][T17286] bridge382: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  239.115593][T17280] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  239.194838][T17280] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  239.240643][ T9757] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  239.249613][ T9757] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  239.274866][T17297] sit0: left promiscuous mode
[  239.276936][T17297] sit0: left allmulticast mode
[  239.286736][T17297] 8021q: adding VLAN 0 to HW filter on device bond0
[  239.293281][T17297] 8021q: adding VLAN 0 to HW filter on device team0
[  239.299114][T17297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  239.305403][ T9757] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  239.321429][  T975] lo speed is unknown, defaulting to 1000
[  239.322437][T17299] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  239.329469][  T975] syz2: Port: 1 Link ACTIVE
[  239.338065][ T9757] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  239.379718][T17302] netlink: 'syz.2.3536': attribute type 3 has an invalid length.
[  239.410273][T17302] netlink: 'syz.2.3536': attribute type 1 has an invalid length.
[  239.414668][T17303] netlink: 'syz.2.3536': attribute type 3 has an invalid length.
[  239.418772][T17303] netlink: 'syz.2.3536': attribute type 1 has an invalid length.
[  239.612941][T17317] bridge270: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  239.810400][T17327] netlink: 'syz.0.3544': attribute type 1 has an invalid length.
[  240.032913][T17338] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  240.035771][T17339] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  240.056183][T17334] 8021q: adding VLAN 0 to HW filter on device bond0
[  240.074719][T17334] bond0: (slave rose0): Enslaving as an active interface with an up link
[  240.172795][T17345] lo speed is unknown, defaulting to 1000
[  240.408071][T17362] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  240.417383][T17362] openvswitch: netlink: Message has 252 unknown bytes.
[  240.763707][T17389] netlink: 'syz.0.3557': attribute type 1 has an invalid length.
[  241.240009][T17426] lo speed is unknown, defaulting to 1000
[  241.324981][T17430] hsr_slave_1 (unregistering): left promiscuous mode
[  241.622305][T17444] netlink: 'syz.2.3576': attribute type 30 has an invalid length.
[  241.887529][T17454] netlink: 'syz.0.3580': attribute type 1 has an invalid length.
[  241.927189][T17457] bridge389: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  241.990976][T17463] __nla_validate_parse: 34 callbacks suppressed
[  241.990991][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3583'.
[  242.026345][T17466] netlink: 'syz.1.3584': attribute type 1 has an invalid length.
[  242.278189][T17485] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3588'.
[  242.296184][T17463] vlan0: entered promiscuous mode
[  242.302986][T17463] veth1: entered promiscuous mode
[  242.393976][T17507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3590'.
[  242.410938][T17510] batadv0: entered promiscuous mode
[  242.412720][T17510] batadv0: entered allmulticast mode
[  242.495162][T17514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3594'.
[  242.495171][T17515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3594'.
[  242.566929][T17527] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3598'.
[  242.572318][T17527] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3598'.
[  242.576244][T17527] dvmrp1: left allmulticast mode
[  242.594201][T17530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3599'.
[  242.624974][T17537] netlink: 'syz.1.3600': attribute type 9 has an invalid length.
[  242.635751][T17527] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  242.658004][T17534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3601'.
[  242.706409][T17544] bridge272: entered allmulticast mode
[  242.717550][T17545] bridge273: entered allmulticast mode
[  242.745053][T17549] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3605'.
[  242.754513][T17551] _Z`Ԁ@: entered promiscuous mode
[  242.852130][T17564] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  242.945572][T17574] netlink: 'syz.0.3613': attribute type 10 has an invalid length.
[  243.082939][T17590] netlink: 'syz.0.3617': attribute type 1 has an invalid length.
[  243.115698][T17590] 8021q: adding VLAN 0 to HW filter on device bond28
[  243.127973][T17593] 8021q: adding VLAN 0 to HW filter on device bond28
[  243.130406][T17593] bond28: (slave vxcan3): The slave device specified does not support setting the MAC address
[  243.134524][T17593] bond28: (slave vxcan3): Error -95 calling set_mac_address
[  243.177386][T17603] bridge274: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  243.343848][T17628] bridge392: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  243.472210][T17640] netlink: 'syz.1.3637': attribute type 4 has an invalid length.
[  243.528352][T17652] bridge105: entered allmulticast mode
[  243.536276][T17654] bridge194: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  243.586807][T17662] netlink: 'syz.2.3640': attribute type 13 has an invalid length.
[  243.658581][T17664] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  243.661813][T17664] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  243.664312][T17664] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  243.666713][T17664] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  243.672697][T17664] tipc: Resetting bearer <eth:syzkaller0>
[  243.792863][T17678] smc: net device bond0 applied user defined pnetid SYZ2
[  243.795920][T17678] smc: net device bond0 erased user defined pnetid SYZ2
[  244.153616][T17705] netlink: 'syz.2.3658': attribute type 9 has an invalid length.
[  244.250414][T17708] lo speed is unknown, defaulting to 1000
[  244.477903][T17727] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  244.499083][T17727] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[  244.611081][T17737] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  244.622137][T17734] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  244.681691][T17742] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  244.685822][T17743] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  244.884901][T17769] bridge197: entered promiscuous mode
[  244.887274][T17769] bridge197: entered allmulticast mode
[  245.241820][T17798] bond0: Caught tx_queue_len zero misconfig
[  245.382890][T17813] bridge276: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  245.396654][T17809] tipc: Enabling of bearer <et:g> rejected, media not registered
[  245.399820][T17810] tipc: Enabling of bearer <et:g> rejected, media not registered
[  245.502004][T17821] lo speed is unknown, defaulting to 1000
[  245.538826][T17823] netlink: 'syz.2.3690': attribute type 1 has an invalid length.
[  245.541473][T17823] netlink: 'syz.2.3690': attribute type 2 has an invalid length.
[  245.849354][T17844] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  246.262229][T17887] delete_channel: no stack
[  246.644567][T17908] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  246.682517][T17914] bridge281: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  246.837169][T17922] smc: net device bond0 applied user defined pnetid SYZ2
[  246.840906][T17922] smc: net device bond0 erased user defined pnetid SYZ2
[  246.973953][T17933] bridge282: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  246.979417][T17928] lo speed is unknown, defaulting to 1000
[  247.033340][T17937] __nla_validate_parse: 109 callbacks suppressed
[  247.033354][T17937] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3723'.
[  247.159716][T17943] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3726'.
[  247.163345][T17943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3726'.
[  247.164561][T17950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3729'.
[  247.255270][T17960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3730'.
[  247.255276][T17962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3730'.
[  247.263552][T17962] netlink: 396 bytes leftover after parsing attributes in process `syz.2.3730'.
[  247.267627][T17963] netlink: 396 bytes leftover after parsing attributes in process `syz.2.3730'.
[  247.273491][T17962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3730'.
[  247.313012][T17965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3731'.
[  247.475869][T17985] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  247.503697][T17987] openvswitch: netlink: Multiple metadata blocks provided
[  247.550781][T17991] netlink: 'syz.2.3739': attribute type 16 has an invalid length.
[  247.554085][T17991] netlink: 'syz.2.3739': attribute type 17 has an invalid length.
[  250.821495][T18022] dvmrp1: tun_chr_ioctl cmd 1074025677
[  250.823529][T18022] dvmrp1: linktype set to 768
[  251.226052][T18057] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  251.230190][T18057] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  251.691573][T18079] 8021q: VLANs not supported on nr0
[  251.753508][T18082] vlan1: entered promiscuous mode
[  251.906864][T18094] bridge398: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  252.085643][T18107] netlink: 'syz.0.3772': attribute type 3 has an invalid length.
[  252.089289][T18107] __nla_validate_parse: 12 callbacks suppressed
[  252.089302][T18107] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3772'.
[  252.141119][T18118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3776'.
[  252.144821][T18119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3776'.
[  252.362269][T18133] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3779'.
[  252.366068][T18133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3779'.
[  252.504977][   T33] audit: type=1804 audit(1757081595.249:2): pid=18135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3780" name="/newroot/1349/memory.events" dev="tmpfs" ino=6892 res=1 errno=0
[  252.513060][   T33] audit: type=1800 audit(1757081595.249:3): pid=18135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3780" name="memory.events" dev="tmpfs" ino=6892 res=0 errno=0
[  252.597305][T18146] netlink: 'syz.1.3783': attribute type 1 has an invalid length.
[  252.600988][T18146] netlink: 'syz.1.3783': attribute type 4 has an invalid length.
[  252.604168][T18146] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3783'.
[  252.635585][T18150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3784'.
[  252.963094][T18162] netlink: 'syz.0.3787': attribute type 4 has an invalid length.
[  253.606529][T18170] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3790'.
[  253.615758][T18170] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3790'.
[  253.637635][T18174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3788'.
[  253.648085][T18175] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  253.806317][T18193] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  253.832086][T18185] geneve0: entered promiscuous mode
[  253.835625][ T5852] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  253.841606][ T5852] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  253.846872][ T5852] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  253.865636][T18185] bridge400: entered allmulticast mode
[  253.871745][ T5852] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  254.134210][T18208] tipc: Resetting bearer <eth:syzkaller0>
[  254.152070][T18207] bridge401: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  254.178107][T18210] geneve4: entered promiscuous mode
[  254.182614][ T9757] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  254.185961][ T9757] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  254.190038][ T9757] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  254.193516][ T9757] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  254.260607][T18215] netlink: 'syz.2.3804': attribute type 2 has an invalid length.
[  254.271524][T18215] : entered promiscuous mode
[  254.669831][T18237] netlink: 'syz.1.3810': attribute type 5 has an invalid length.
[  254.714853][T18246] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg1, syncid = 3, id = 0
[  254.789776][T18255] openvswitch: netlink: Flow key attribute not present in set flow.
[  254.849206][T18267] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4)
[  254.865458][T18270] pim6reg1: entered promiscuous mode
[  254.867212][T18270] pim6reg1: entered allmulticast mode
[  254.989612][T18283] bridge202: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  255.042086][T18292] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  255.109868][T18300] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  255.267523][T18322] netlink: 'syz.0.3836': attribute type 1 has an invalid length.
[  255.286649][T18322] 8021q: adding VLAN 0 to HW filter on device bond29
[  255.381792][T18337] pimreg: entered allmulticast mode
[  255.452570][T18345] bridge404: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  255.545481][T18363] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  255.562418][T18363] syzkaller0: mtu greater than device maximum
[  255.661041][T18378] netlink: 'syz.1.3852': attribute type 21 has an invalid length.
[  255.704977][T18380] tipc: Resetting bearer <eth:syzkaller0>
[  255.714400][T18380] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  255.716978][T18380] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  255.723723][T18380] vlan0: left promiscuous mode
[  255.725636][T18380] veth1: left promiscuous mode
[  255.753118][T18380] bridge197: left promiscuous mode
[  255.755024][T18380] bridge197: left allmulticast mode
[  255.769536][T18384] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  256.224690][T18405] bridge289: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  256.399479][T18426] netlink: 'syz.2.3869': attribute type 1 has an invalid length.
[  256.451665][T18426] bond32: (slave veth15): Enslaving as an active interface with a down link
[  256.468771][T18433] 8021q: adding VLAN 0 to HW filter on device bond30
[  256.472212][T18426] 8021q: adding VLAN 0 to HW filter on device bond32
[  256.517416][T18439] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  256.722941][T18451] veth0_to_bond: left allmulticast mode
[  256.724968][T18451] veth0_to_bond: left promiscuous mode
[  256.727012][T18451] bridge364: port 1(veth0_to_bond) entered disabled state
[  256.733996][T18451] bond20: (slave ip6gretap3): Releasing backup interface
[  256.740300][T18451] bond28: (slave veth11): Releasing backup interface
[  256.743795][T18451] bond0: (slave bond29): Releasing backup interface
[  256.748135][T18451] bond32: (slave veth15): Releasing active interface
[  256.756337][T18451] netlink: 'syz.2.3874': attribute type 9 has an invalid length.
[  256.760640][T18462] geneve5: entered promiscuous mode
[  256.763580][ T5852] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  256.766739][ T5852] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  256.774230][ T5852] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  256.777040][ T5852] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  256.835078][T18451] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  256.838563][T18451] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  257.219781][T18486] dvmrp1: tun_chr_ioctl cmd 1074025677
[  257.222517][T18486] dvmrp1: linktype set to 768
[  257.397443][T18490] __nla_validate_parse: 30 callbacks suppressed
[  257.397453][T18490] netlink: 212112 bytes leftover after parsing attributes in process `syz.1.3884'.
[  257.526086][T18511] bridge405: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  257.606393][T18520] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3891'.
[  257.620785][T18520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3891'.
[  257.741187][T18540] bridge206: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  257.749639][T18535] validate_nla: 1 callbacks suppressed
[  257.749648][T18535] netlink: 'syz.1.3896': attribute type 1 has an invalid length.
[  257.754011][T18535] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3896'.
[  257.788924][T18544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3899'.
[  257.812705][T18535] "syz.1.3896" (18535) uses obsolete ecb(arc4) skcipher
[  257.862900][T18541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3898'.
[  257.868620][T18554] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3900'.
[  258.140379][T18585] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3908'.
[  258.284282][T18609] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3916'.
[  258.302000][T18600] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3913'.
[  258.376380][T18623] bond0: entered promiscuous mode
[  258.393134][T18625] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  258.423046][T18634] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  258.611488][T18651] ..0: renamed from .70
[  258.614128][T18651] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  258.617378][T18651] ..0: entered allmulticast mode
[  258.620104][T18651] hsr_slave_0: entered allmulticast mode
[  258.622750][T18651] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  258.745720][ T9757] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  258.749187][ T9757] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  258.753978][ T9757] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  258.756863][ T9757] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  258.773011][T18664] tipc: Resetting bearer <eth:syzkaller0>
[  258.790960][ T9757] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 19999 - 0
[  258.794407][ T9757] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  258.797250][ T9757] netdevsim netdevsim1 eth0: unset [1, 2] type 2 family 0 port 6081 - 0
[  258.800512][ T9757] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 19999 - 0
[  258.803369][ T9757] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  258.806422][ T9757] netdevsim netdevsim1 eth1: unset [1, 2] type 2 family 0 port 6081 - 0
[  258.816553][ T9757] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 19999 - 0
[  258.820786][T18666] netlink: 'syz.0.3933': attribute type 10 has an invalid length.
[  258.828317][ T9757] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  258.831505][ T9757] netdevsim netdevsim1 eth2: unset [1, 2] type 2 family 0 port 6081 - 0
[  258.836638][ T9757] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 19999 - 0
[  258.839644][ T9757] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  258.842424][ T9757] netdevsim netdevsim1 eth3: unset [1, 2] type 2 family 0 port 6081 - 0
[  258.850072][T18666] netlink: 'syz.0.3933': attribute type 10 has an invalid length.
[  260.260645][T18779] geneve6: entered promiscuous mode
[  260.263741][ T5852] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  260.268061][ T5852] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  260.271126][ T5852] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  260.273898][ T5852] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  260.306362][T18783] openvswitch: netlink: Multiple metadata blocks provided
[  260.393307][T18794] netlink: 'syz.1.3971': attribute type 3 has an invalid length.
[  260.396725][T18794] netlink: 'syz.1.3971': attribute type 3 has an invalid length.
[  261.387867][T13915] Bluetooth: hci2: command 0x0405 tx timeout
[  261.430544][T18839] gretap0: left promiscuous mode
[  261.433472][T18839] erspan0: left allmulticast mode
[  261.449176][T18839] 8021q: adding VLAN 0 to HW filter on device bond0
[  261.452356][T18839] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  261.873797][T18883] netlink: 'syz.0.3998': attribute type 11 has an invalid length.
[  261.924418][T18888] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  261.929715][T18888] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  261.991025][T18892] netlink: 'syz.2.4005': attribute type 1 has an invalid length.
[  262.021358][T18892] veth17: entered promiscuous mode
[  262.025609][T18892] bond33: (slave veth17): Enslaving as a backup interface with a down link
[  262.033620][T18899] dvmrp0: entered allmulticast mode
[  262.038960][T18892] 8021q: adding VLAN 0 to HW filter on device bond33
[  262.174964][T18906] netlink: 'syz.2.4009': attribute type 21 has an invalid length.
[  262.181613][T18906] ipvlan0: entered promiscuous mode
[  262.184432][T18906] bridge0: port 1(ipvlan0) entered blocking state
[  262.187349][T18906] bridge0: port 1(ipvlan0) entered disabled state
[  262.196894][T18906] ipvlan0: entered allmulticast mode
[  262.201346][T18906] gretap0: entered allmulticast mode
[  262.204890][T18906] ipvlan0: left allmulticast mode
[  262.206589][T18906] gretap0: left allmulticast mode
[  262.403959][T18912] __nla_validate_parse: 36 callbacks suppressed
[  262.403976][T18912] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4011'.
[  262.448359][T18914] IPv6: Can't replace route, no match found
[  262.624847][T18931] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  262.768721][T18945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4021'.
[  262.842837][T18936] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4021'.
[  263.045370][T18955] tipc: Resetting bearer <eth:syzkaller0>
[  263.106976][T18965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4030'.
[  263.187620][T18969] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4031'.
[  263.237383][T18978] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4033'.
[  263.246024][T18978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4033'.
[  263.278966][T18988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4036'.
[  263.335877][T18991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4037'.
[  263.384272][T18992] tipc: Resetting bearer <eth:syzkaller0>
[  263.401384][ T9757] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  263.407865][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  263.414232][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  263.416992][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  263.451300][T18991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4037'.
[  263.504038][T19004] vlan0: entered allmulticast mode
[  263.505818][T19004] gretap0: entered allmulticast mode
[  263.834608][T19024] netlink: 'syz.1.4046': attribute type 10 has an invalid length.
[  263.842610][T19024] 8021q: adding VLAN 0 to HW filter on device batadv0
[  263.848886][T19024] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  264.378657][T19057] netlink: 'syz.0.4056': attribute type 10 has an invalid length.
[  264.381469][T19057] netlink: 'syz.0.4056': attribute type 10 has an invalid length.
[  264.769440][T19091] syzkaller0: left promiscuous mode
[  264.771495][T19091] syzkaller0: left allmulticast mode
[  265.064792][T19110] team0: entered promiscuous mode
[  265.066664][T19110] team0: entered allmulticast mode
[  265.069117][T19110] 8021q: adding VLAN 0 to HW filter on device team0
[  265.139272][T19112] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.280232][T19120] netlink: 'syz.0.4076': attribute type 12 has an invalid length.
[  265.716148][T19158] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  265.719693][T19158] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  265.726486][T19158] tipc: Resetting bearer <eth:syzkaller0>
[  265.735171][T19158] tipc: Resetting bearer <eth:syzkaller0>
[  265.822042][T19168] syzkaller0: Caught tx_queue_len zero misconfig
[  265.851090][T19171] bond33: (slave veth17): Releasing backup interface
[  265.857669][T19171] team0: Mode changed to "broadcast"
[  265.860460][T19171] tipc: Enabled bearer <eth:team0>, priority 0
[  265.941470][T19164] netlink: 'syz.0.4092': attribute type 10 has an invalid length.
[  265.950038][T19164] netlink: 'syz.0.4092': attribute type 10 has an invalid length.
[  266.205638][T19201] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  266.215592][T19201] syzkaller0: entered promiscuous mode
[  266.218120][T19201] syzkaller0: entered allmulticast mode
[  266.276619][T19204] netlink: 'syz.1.4105': attribute type 1 has an invalid length.
[  266.319454][T19204] bond34: entered promiscuous mode
[  266.324382][T19204] bond34: entered allmulticast mode
[  266.326549][T19204] 8021q: adding VLAN 0 to HW filter on device bond34
[  266.339261][T19204] tipc: Resetting bearer <eth:syzkaller0>
[  266.371050][T19214] bridge211: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  266.565813][T19225] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  266.664130][T19228] batadv1: entered promiscuous mode
[  266.665870][T19228] batadv1: entered allmulticast mode
[  267.011389][T19275] IPv6: Can't replace route, no match found
[  267.041057][T19279] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  267.053980][T19270] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  267.087414][T19279] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  267.156561][T19279] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  267.245566][T19279] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  267.403184][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  267.416915][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  267.425932][ T5852] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  267.432497][T19309] netlink: 'syz.0.4136': attribute type 11 has an invalid length.
[  267.439784][ T5852] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  267.443177][T19309] __nla_validate_parse: 38 callbacks suppressed
[  267.443188][T19309] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4136'.
[  267.505651][T19314] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4137'.
[  267.514611][T19314] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4137'.
[  267.521545][T19314] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4137'.
[  267.557087][T19318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4140'.
[  267.570508][T19321] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4139'.
[  267.614379][T19324] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4142'.
[  267.626016][T19326] netlink: 360 bytes leftover after parsing attributes in process `syz.1.4143'.
[  267.873167][T19347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4151'.
[  267.900418][T19351] ..0: left allmulticast mode
[  267.902192][T19351] hsr_slave_0: left allmulticast mode
[  267.934189][T19351] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  267.936407][T19351] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  267.946430][T19351] bond29: left allmulticast mode
[  267.958196][T19351] geneve0: left promiscuous mode
[  267.965499][T19351] bridge400: left allmulticast mode
[  267.982004][T19351] veth17: left promiscuous mode
[  267.987351][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  267.992147][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  267.999723][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  268.003326][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  268.021525][T19354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4151'.
[  268.176867][T19377] bridge216: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  268.436647][T19389] delete_channel: no stack
[  268.544145][T19398] pim6reg1: entered promiscuous mode
[  268.546397][T19398] pim6reg1: entered allmulticast mode
[  269.024035][T19436] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  269.207212][T19443] bridge219: entered promiscuous mode
[  269.209886][T19443] bridge219: entered allmulticast mode
[  269.552946][T19484] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  269.837030][T19502] netlink: 'syz.0.4202': attribute type 10 has an invalid length.
[  270.139549][T19531] lo speed is unknown, defaulting to 1000
[  270.141760][T19531] lo speed is unknown, defaulting to 1000
[  270.144174][T19531] lo speed is unknown, defaulting to 1000
[  270.154416][T19531] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  270.167103][T19531] lo speed is unknown, defaulting to 1000
[  270.170689][T19531] lo speed is unknown, defaulting to 1000
[  270.174382][T19531] lo speed is unknown, defaulting to 1000
[  270.529240][T19581] openvswitch: netlink: IPv4 tun info is not correct
[  270.566777][T19584] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  270.781605][T19599] geneve7: entered promiscuous mode
[  270.783497][T19599] geneve7: entered allmulticast mode
[  270.786779][ T5865] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  270.793653][ T5865] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  270.798127][ T5865] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  270.800991][ T5865] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  271.003996][T19610] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.042474][T19610] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.092273][T19610] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.144108][T19610] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.195347][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  271.204495][ T5865] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  271.212227][ T5865] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  271.222001][ T5865] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  271.304797][T19625] lo speed is unknown, defaulting to 1000
[  271.314388][T19617] lo speed is unknown, defaulting to 1000
[  271.413095][T19627] ip6tnl3: entered promiscuous mode
[  271.415425][T19627] ip6tnl3: entered allmulticast mode
[  272.322032][T19639] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  272.446578][T19645] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  272.516447][T19659] __nla_validate_parse: 35 callbacks suppressed
[  272.516458][T19659] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4245'.
[  272.537595][T19655] 8021q: adding VLAN 0 to HW filter on device bond32
[  272.561366][T19663] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4246'.
[  272.754452][T19670] netlink: 'syz.1.4249': attribute type 272 has an invalid length.
[  272.758378][T19670] netlink: 'syz.1.4249': attribute type 10 has an invalid length.
[  272.904616][T19697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4255'.
[  272.929560][T19691] tipc: Resetting bearer <eth:syzkaller0>
[  272.965436][T19700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4253'.
[  272.974011][T19701] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  272.995269][ T5852] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  273.000679][ T5865] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  273.009286][ T5865] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  273.012575][ T5865] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  273.032065][T19709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4258'.
[  273.097554][T19718] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  273.163172][T19722] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4262'.
[  273.407206][T19757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4268'.
[  273.427127][T19759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4270'.
[  273.472453][T19767] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4273'.
[  273.635750][T19790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4279'.
[  273.748948][T19804] netlink: 'syz.2.4284': attribute type 1 has an invalid length.
[  273.750365][T19800] netlink: 'syz.0.4283': attribute type 18 has an invalid length.
[  273.822856][T19811] sctp: [Deprecated]: syz.2.4286 (pid 19811) Use of int in max_burst socket option.
[  273.822856][T19811] Use struct sctp_assoc_value instead
[  273.859978][T19814] netlink: 'syz.0.4287': attribute type 11 has an invalid length.
[  273.875823][T19814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.383421][T19842] netlink: 'syz.2.4296': attribute type 1 has an invalid length.
[  274.436935][T19844] chnl_net:caif_netlink_parms(): no params data found
[  274.641367][T19864] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  274.816483][T19883] netlink: 'syz.0.4311': attribute type 10 has an invalid length.
[  275.042609][T19910] bridge428: the hash_elasticity option has been deprecated and is always 16
[  275.049982][T19905] IPVS: set_ctl: invalid protocol: 11612 172.20.20.187:21
[  275.059648][T19907] lo speed is unknown, defaulting to 1000
[  275.169431][T19923] netlink: 'syz.1.4320': attribute type 1 has an invalid length.
[  275.187535][T19923] 8021q: adding VLAN 0 to HW filter on device bond35
[  275.208536][T19923] 8021q: adding VLAN 0 to HW filter on device bond35
[  275.211064][T19923] bond35: (slave vxcan1): The slave device specified does not support setting the MAC address
[  275.215985][T19923] bond35: (slave vxcan1): Error -95 calling set_mac_address
[  275.255599][T19925] veth1: entered promiscuous mode
[  275.259360][T19925] bond35: (slave veth1): Enslaving as an active interface with a down link
[  275.264491][T19925] 8021q: adding VLAN 0 to HW filter on device bond35
[  275.637168][T19961] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  275.813364][T19977] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  276.575930][T20023] macvlan0: entered promiscuous mode
[  276.578159][T20023] vlan0: entered promiscuous mode
[  276.579851][T20023] dummy0: entered promiscuous mode
[  276.600167][T20025] netlink: 'syz.0.4348': attribute type 1 has an invalid length.
[  276.650641][T20033] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  277.210820][T20066] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  277.240952][   T54] Bluetooth: hci2: link tx timeout
[  277.250692][   T54] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  277.354816][T20079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  277.362132][T20081] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  277.530117][T20094] netlink: 'syz.0.4368': attribute type 1 has an invalid length.
[  277.577417][T20094] bond33: entered promiscuous mode
[  277.580561][T20094] bond33: entered allmulticast mode
[  277.583158][T20094] 8021q: adding VLAN 0 to HW filter on device bond33
[  277.608754][T20094] tipc: Resetting bearer <eth:syzkaller0>
[  277.748652][T20109] syzkaller1: entered promiscuous mode
[  277.750816][T20109] syzkaller1: entered allmulticast mode
[  278.146621][T20115] tipc: Resetting bearer <eth:syzkaller0>
[  278.192307][T20123] __nla_validate_parse: 64 callbacks suppressed
[  278.192317][T20123] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4378'.
[  278.646236][T20148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4386'.
[  278.715519][T20152] bridge434: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  278.742619][T20154] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4389'.
[  278.776412][T20157] bridge436: entered promiscuous mode
[  278.801278][T20160] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4391'.
[  278.973224][T20167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4393'.
[  278.977340][T20167] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4393'.
[  279.187275][T20176] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  279.318771][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  279.329560][T20188] bridge323: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  279.335938][T20186] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4399'.
[  279.353433][T20191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4399'.
[  279.439996][T20198] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  279.529349][T20215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4407'.
[  279.533026][T20216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4407'.
[  279.537178][T20215] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  279.556367][T20215] netlink: 'syz.0.4407': attribute type 10 has an invalid length.
[  279.556383][T20216] netlink: 'syz.0.4407': attribute type 10 has an invalid length.
[  279.560118][T20215] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  279.561392][T20215] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  279.569314][T20215] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  279.576361][T20216] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  279.580451][T20216] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  280.545951][T20278] syzkaller1: entered promiscuous mode
[  280.548062][T20278] syzkaller1: entered allmulticast mode
[  280.748698][T20285] macsec1: entered promiscuous mode
[  280.751021][T20285] macsec1: entered allmulticast mode
[  280.841946][T20294] netlink: 'syz.0.4428': attribute type 83 has an invalid length.
[  281.064061][T20324] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  281.148815][T20330] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  281.153006][T20330] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  281.238117][T20341] sock: sock_timestamping_bind_phc: sock not bind to device
[  281.264364][T20343] netlink: 'syz.1.4447': attribute type 3 has an invalid length.
[  281.385395][T20360] tipc: Resetting bearer <eth:syzkaller0>
[  281.526611][T20364] netlink: 'syz.2.4454': attribute type 4 has an invalid length.
[  281.589420][T20374] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  281.593095][T20374] veth0_to_bridge: entered promiscuous mode
[  281.595685][T20374] veth0_to_bridge: entered allmulticast mode
[  281.752913][T20385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  281.763321][T20385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  281.778857][T20391] lo speed is unknown, defaulting to 1000
[  282.080459][T20419] bridge328: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.343972][T20454] ==================================================================
[  282.346819][T20454] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  282.350035][T20454] Read of size 1 at addr ffff888033913930 by task syz.2.4479/20454
[  282.353658][T20454] 
[  282.354669][T20454] CPU: 1 UID: 0 PID: 20454 Comm: syz.2.4479 Not tainted syzkaller #0 PREEMPT(full) 
[  282.354681][T20454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  282.354686][T20454] Call Trace:
[  282.354690][T20454]  <TASK>
[  282.354694][T20454]  dump_stack_lvl+0x189/0x250
[  282.354706][T20454]  ? __kasan_check_byte+0x12/0x40
[  282.354717][T20454]  ? __pfx_dump_stack_lvl+0x10/0x10
[  282.354726][T20454]  ? lock_release+0x4b/0x3e0
[  282.354738][T20454]  ? __virt_addr_valid+0x4a5/0x5c0
[  282.354747][T20454]  print_report+0xca/0x240
[  282.354754][T20454]  ? xfrm_state_find+0x2cf2/0x5400
[  282.354762][T20454]  kasan_report+0x118/0x150
[  282.354776][T20454]  ? xfrm_state_find+0x2cf2/0x5400
[  282.354788][T20454]  xfrm_state_find+0x2cf2/0x5400
[  282.354797][T20454]  ? check_path+0x21/0x40
[  282.354803][T20454]  ? check_noncircular+0xe0/0x160
[  282.354812][T20454]  ? xfrm_state_find+0x1da/0x5400
[  282.354821][T20454]  ? __pfx_xfrm_state_find+0x10/0x10
[  282.354832][T20454]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  282.354851][T20454]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  282.354863][T20454]  ? seqcount_lockdep_reader_access+0x174/0x1c0
[  282.354878][T20454]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  282.354892][T20454]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  282.354905][T20454]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  282.354917][T20454]  ? lockdep_hardirqs_on+0x9c/0x150
[  282.354936][T20454]  ? rt_set_nexthop+0x693/0xa80
[  282.354953][T20454]  ? xfrm_expand_policies+0x41f/0x6a0
[  282.354966][T20454]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  282.354982][T20454]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  282.354994][T20454]  ? __lock_acquire+0xab9/0xd20
[  282.355010][T20454]  xfrm_lookup_route+0x3c/0x1c0
[  282.355024][T20454]  __ip4_datagram_connect+0x9a5/0x1270
[  282.355043][T20454]  udp_connect+0x33/0x1f0
[  282.355055][T20454]  __sys_connect+0x316/0x440
[  282.355076][T20454]  ? __pfx___sys_connect+0x10/0x10
[  282.355097][T20454]  ? rcu_is_watching+0x15/0xb0
[  282.355110][T20454]  __x64_sys_connect+0x7a/0x90
[  282.355127][T20454]  do_syscall_64+0xfa/0x3b0
[  282.355136][T20454]  ? lockdep_hardirqs_on+0x9c/0x150
[  282.355152][T20454]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.355191][T20454]  ? exc_page_fault+0x9f/0xf0
[  282.355210][T20454]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.355221][T20454] RIP: 0033:0x7f168518ebe9
[  282.355233][T20454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  282.355245][T20454] RSP: 002b:00007f1685fe0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  282.355258][T20454] RAX: ffffffffffffffda RBX: 00007f16853c5fa0 RCX: 00007f168518ebe9
[  282.355268][T20454] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000007
[  282.355275][T20454] RBP: 00007f1685211e19 R08: 0000000000000000 R09: 0000000000000000
[  282.355284][T20454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  282.355291][T20454] R13: 00007f16853c6038 R14: 00007f16853c5fa0 R15: 00007ffe5681f5d8
[  282.355304][T20454]  </TASK>
[  282.355309][T20454] 
[  282.471561][T20454] Allocated by task 18917:
[  282.473180][T20454]  kasan_save_track+0x3e/0x80
[  282.474793][T20454]  __kasan_slab_alloc+0x6c/0x80
[  282.476501][T20454]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  282.478431][T20454]  xfrm_state_alloc+0x24/0x2f0
[  282.480049][T20454]  xfrm_add_sa+0x17d1/0x4070
[  282.481614][T20454]  xfrm_user_rcv_msg+0x7a3/0xab0
[  282.483258][T20454]  netlink_rcv_skb+0x208/0x470
[  282.485041][T20454]  xfrm_netlink_rcv+0x79/0x90
[  282.486655][T20454]  netlink_unicast+0x82f/0x9e0
[  282.488234][T20454]  netlink_sendmsg+0x805/0xb30
[  282.489732][T20454]  __sock_sendmsg+0x21c/0x270
[  282.491223][T20454]  ____sys_sendmsg+0x505/0x830
[  282.492745][T20454]  ___sys_sendmsg+0x21f/0x2a0
[  282.494634][T20454]  __x64_sys_sendmsg+0x19b/0x260
[  282.496279][T20454]  do_syscall_64+0xfa/0x3b0
[  282.497730][T20454]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.499632][T20454] 
[  282.500432][T20454] Freed by task 975:
[  282.501743][T20454]  kasan_save_track+0x3e/0x80
[  282.503398][T20454]  kasan_save_free_info+0x46/0x50
[  282.505068][T20454]  __kasan_slab_free+0x5b/0x80
[  282.506665][T20454]  kmem_cache_free+0x18f/0x400
[  282.508269][T20454]  xfrm_state_gc_task+0x52d/0x6b0
[  282.509941][T20454]  process_scheduled_works+0xae1/0x17b0
[  282.511771][T20454]  worker_thread+0x8a0/0xda0
[  282.513428][T20454]  kthread+0x711/0x8a0
[  282.515067][T20454]  ret_from_fork+0x3fc/0x770
[  282.516643][T20454]  ret_from_fork_asm+0x1a/0x30
[  282.518253][T20454] 
[  282.519055][T20454] The buggy address belongs to the object at ffff888033913600
[  282.519055][T20454]  which belongs to the cache xfrm_state of size 928
[  282.523498][T20454] The buggy address is located 816 bytes inside of
[  282.523498][T20454]  freed 928-byte region [ffff888033913600, ffff8880339139a0)
[  282.527947][T20454] 
[  282.528749][T20454] The buggy address belongs to the physical page:
[  282.530789][T20454] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888033910900 pfn:0x33910
[  282.534354][T20454] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  282.537223][T20454] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  282.539638][T20454] page_type: f5(slab)
[  282.540937][T20454] raw: 00fff00000000040 ffff88801af8f780 dead000000000122 0000000000000000
[  282.543807][T20454] raw: ffff888033910900 00000000800e0008 00000000f5000000 0000000000000000
[  282.546662][T20454] head: 00fff00000000040 ffff88801af8f780 dead000000000122 0000000000000000
[  282.549524][T20454] head: ffff888033910900 00000000800e0008 00000000f5000000 0000000000000000
[  282.552374][T20454] head: 00fff00000000002 ffffea0000ce4401 00000000ffffffff 00000000ffffffff
[  282.555238][T20454] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  282.558090][T20454] page dumped because: kasan: bad access detected
[  282.560186][T20454] page_owner tracks the page as allocated
[  282.562014][T20454] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6142, tgid 6135 (syz.1.57), ts 61704754888, free_ts 61029805802
[  282.568429][T20454]  post_alloc_hook+0x240/0x2a0
[  282.570038][T20454]  get_page_from_freelist+0x21e4/0x22c0
[  282.571890][T20454]  __alloc_frozen_pages_noprof+0x181/0x370
[  282.573906][T20454]  alloc_pages_mpol+0x232/0x4a0
[  282.575567][T20454]  allocate_slab+0x8a/0x370
[  282.577068][T20454]  ___slab_alloc+0xbeb/0x1410
[  282.578649][T20454]  kmem_cache_alloc_noprof+0x283/0x3c0
[  282.580476][T20454]  xfrm_state_alloc+0x24/0x2f0
[  282.582081][T20454]  xfrm_state_find+0x37d4/0x5400
[  282.583977][T20454]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  282.586131][T20454]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  282.587924][T20454]  xfrm_lookup_route+0x3c/0x1c0
[  282.589558][T20454]  ip6_datagram_dst_update+0x75c/0xcb0
[  282.591372][T20454]  __ip6_datagram_connect+0xbd1/0x1150
[  282.593150][T20454]  ip6_datagram_connect_v6_only+0x63/0xa0
[  282.595016][T20454]  __sys_connect+0x316/0x440
[  282.596590][T20454] page last free pid 6083 tgid 6082 stack trace:
[  282.598671][T20454]  __free_frozen_pages+0xbc4/0xd30
[  282.600300][T20454]  __put_partials+0x156/0x1a0
[  282.601832][T20454]  put_cpu_partial+0x17c/0x250
[  282.603519][T20454]  __slab_free+0x2d5/0x3c0
[  282.605270][T20454]  qlist_free_all+0x97/0x140
[  282.606824][T20454]  kasan_quarantine_reduce+0x148/0x160
[  282.608685][T20454]  __kasan_slab_alloc+0x22/0x80
[  282.610315][T20454]  kmem_cache_alloc_lru_noprof+0x1c6/0x3d0
[  282.612223][T20454]  sock_alloc_inode+0x28/0xc0
[  282.613802][T20454]  alloc_inode+0x6a/0x1b0
[  282.615254][T20454]  __sock_create+0x12d/0x9f0
[  282.616773][T20454]  __sys_socket+0xd7/0x1b0
[  282.618274][T20454]  __x64_sys_socket+0x7a/0x90
[  282.619770][T20454]  do_syscall_64+0xfa/0x3b0
[  282.621205][T20454]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.623133][T20454] 
[  282.624198][T20454] Memory state around the buggy address:
[  282.626180][T20454]  ffff888033913800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  282.628812][T20454]  ffff888033913880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  282.631449][T20454] >ffff888033913900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  282.634010][T20454]                                      ^
[  282.635794][T20454]  ffff888033913980: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  282.638522][T20454]  ffff888033913a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  282.641180][T20454] ==================================================================
[  282.648156][T20454] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  282.650669][T20454] CPU: 1 UID: 0 PID: 20454 Comm: syz.2.4479 Not tainted syzkaller #0 PREEMPT(full) 
[  282.653963][T20454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  282.657339][T20454] Call Trace:
[  282.658439][T20454]  <TASK>
[  282.659394][T20454]  dump_stack_lvl+0x99/0x250
[  282.660868][T20454]  ? __asan_memcpy+0x40/0x70
[  282.662369][T20454]  ? __pfx_dump_stack_lvl+0x10/0x10
[  282.664083][T20454]  ? __pfx__printk+0x10/0x10
[  282.665627][T20454]  vpanic+0x281/0x750
[  282.666913][T20454]  ? preempt_schedule+0xae/0xc0
[  282.668484][T20454]  ? __pfx_vpanic+0x10/0x10
[  282.669928][T20454]  ? preempt_schedule_common+0x83/0xd0
[  282.671789][T20454]  ? preempt_schedule+0xae/0xc0
[  282.673652][T20454]  ? __pfx_preempt_schedule+0x10/0x10
[  282.675714][T20454]  panic+0xb9/0xc0
[  282.676943][T20454]  ? __pfx_panic+0x10/0x10
[  282.678398][T20454]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  282.680390][T20454]  ? xfrm_state_find+0x2cf2/0x5400
[  282.682002][T20454]  check_panic_on_warn+0x89/0xb0
[  282.683667][T20454]  ? xfrm_state_find+0x2cf2/0x5400
[  282.685353][T20454]  end_report+0x78/0x160
[  282.686681][T20454]  kasan_report+0x129/0x150
[  282.688111][T20454]  ? xfrm_state_find+0x2cf2/0x5400
[  282.689792][T20454]  xfrm_state_find+0x2cf2/0x5400
[  282.691454][T20454]  ? check_path+0x21/0x40
[  282.692832][T20454]  ? check_noncircular+0xe0/0x160
[  282.694455][T20454]  ? xfrm_state_find+0x1da/0x5400
[  282.696175][T20454]  ? __pfx_xfrm_state_find+0x10/0x10
[  282.697867][T20454]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  282.699840][T20454]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  282.701779][T20454]  ? seqcount_lockdep_reader_access+0x174/0x1c0
[  282.703835][T20454]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  282.705933][T20454]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  282.707915][T20454]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  282.709912][T20454]  ? lockdep_hardirqs_on+0x9c/0x150
[  282.711666][T20454]  ? rt_set_nexthop+0x693/0xa80
[  282.713323][T20454]  ? xfrm_expand_policies+0x41f/0x6a0
[  282.715117][T20454]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  282.716877][T20454]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  282.718751][T20454]  ? __lock_acquire+0xab9/0xd20
[  282.720382][T20454]  xfrm_lookup_route+0x3c/0x1c0
[  282.722019][T20454]  __ip4_datagram_connect+0x9a5/0x1270
[  282.723854][T20454]  udp_connect+0x33/0x1f0
[  282.725324][T20454]  __sys_connect+0x316/0x440
[  282.726966][T20454]  ? __pfx___sys_connect+0x10/0x10
[  282.728725][T20454]  ? rcu_is_watching+0x15/0xb0
[  282.730352][T20454]  __x64_sys_connect+0x7a/0x90
[  282.731960][T20454]  do_syscall_64+0xfa/0x3b0
[  282.733542][T20454]  ? lockdep_hardirqs_on+0x9c/0x150
[  282.735297][T20454]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.737253][T20454]  ? exc_page_fault+0x9f/0xf0
[  282.738739][T20454]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.740682][T20454] RIP: 0033:0x7f168518ebe9
[  282.742178][T20454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  282.748376][T20454] RSP: 002b:00007f1685fe0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  282.751077][T20454] RAX: ffffffffffffffda RBX: 00007f16853c5fa0 RCX: 00007f168518ebe9
[  282.753741][T20454] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000007
[  282.756329][T20454] RBP: 00007f1685211e19 R08: 0000000000000000 R09: 0000000000000000
[  282.758866][T20454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  282.761520][T20454] R13: 00007f16853c6038 R14: 00007f16853c5fa0 R15: 00007ffe5681f5d8
[  282.764284][T20454]  </TASK>
[  282.766083][T20454] Kernel Offset: disabled
[  282.767537][T20454] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:13:45  Registers:
info registers vcpu 0

CPU#0
RAX=00000000000a97ee RBX=dffffc0000000000 RCX=cc39ec79268c5500 RDX=00000000000a7d94
RSI=ffffffff8be337e0 RDI=ffffffff8be337a0 RBP=ffffffff90e482ac RSP=ffffc900077b7158
R8 =0000000000038803 R9 =ffffffff8172c195 R10=ffffc900077b7278 R11=ffffffff81ac3820
R12=ffffffff82183d80 R13=00000000000387fa R14=ffffc900077b7228 R15=000000000001183d
RIP=ffffffff8172c345 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f00c63ad6c0 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000086e000 CR3=000000004579a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f1b22212e53
XMM06=0000000000000000 00007f1b22212e4d XMM07=0000000000000000 00007f1b22212e61
XMM08=0000000000000000 00007f1b22212ee7 XMM09=0000000000000000 00007f1b22212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33be460 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=00000000000012d1 RDI=00000000000012d2 RBP=ffffffff99df26b0 RSP=ffffc90007576db0
R8 =ffff888106bb8237 R9 =1ffff11020d77046 R10=dffffc0000000000 R11=ffffffff854f37f0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f3867 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f1685fe06c0 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000002840 CR3=00000001286c8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f1685397498 00007f1685397470 XMM03=00007f16853974a8 00007f16853974a0
XMM04=00007f1685efd100 00007f1685397460 XMM05=00007f1685397478 00007f16853974c0
XMM06=00007f16853974b8 00007f16853974b0 XMM07=00007f16853974a8 00007f16853974a0
XMM08=0000000000000000 00007f1685212ee7 XMM09=0000000000000000 00007f1685212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
