last executing test programs:

1.339117625s ago: executing program 1 (id=3340):
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x9e43522028e06143}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000fbdbdf254300000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990004010000000000000000580027000000000000000c0058007a000000000000000100"/48], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000fde100cc0000000000002c000000000000000000860090780000000000000000000000000000ee3f000000002b"], 0xfdef)

1.190300572s ago: executing program 1 (id=3343):
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, &(0x7f00000000c0))
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x403, 0x70bd2d, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x100, 0xa608}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x8000}, 0x10)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000000c0)=0x3, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x20}}, 0x40448d0)

1.130430601s ago: executing program 2 (id=3345):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@deltclass={0x24, 0x29, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xf, 0x10}, {0xffff, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x54}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newnexthop={0x24, 0x68, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004001}, 0x40)
close(r0)

1.12872054s ago: executing program 0 (id=3346):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) (async)
accept4(r0, 0x0, 0x0, 0x800) (async, rerun: 64)
socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 64)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) (async, rerun: 64)
accept4(r1, 0x0, 0x0, 0x800) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) (async)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000011002901000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800068004000500080000003e"], 0x44}}, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) (async, rerun: 32)
close(r2) (rerun: 32)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f00000001c0)={0x40000008})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r7 = openat$cgroup_devices(r6, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='b ', @ANYRESOCT], 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0x53b, 0x0, 0x0, {0x9}}, 0x14}}, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

1.127297357s ago: executing program 1 (id=3347):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000600)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000640)="20d1dd4e", 0x4}], 0x1}}], 0x1, 0x20000080)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r1, &(0x7f0000000140)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r1)
syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb8100000086dd6d4f022c001800fffc020000000000000000000000000001fc010000000000000000000000000001060105"], 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$unix(r2, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
setsockopt(r1, 0x1, 0x8, &(0x7f00000008c0)="c3e9d6dc45af689f5dc10160e0e9b93f95e787338d0cd175ef553ea598773b1eb4f1d5be84ea1b81b10a0b1fa50aa43d20f3a70042d62918fec346f54ef3a01b1aea03bb65f2fae2c3531709667b45dbb0e51908b45c32ea051ab852803dae1e5df6038d0b96fdeaa68065567875e84cb902c9dfacf1b0ebbea99d3cc8759892d2e318a62f55c332d2ec662a97db84c8321a02be6adf4046db9b54aafc839a889288c7ec00d29c9d0bd42863d086ac7e226147f033f7fc0f3269508f97e5b58b4d3126339f40cd8b13315a17226e01720ae5790311f4d954f6343a77e9365b541f506cf433c147a331b9132cc8d1b446c82301f6e3e07afe72ad11d28ecda7b4e2419b75941bf6375987df8694dc0fabdea8c3ab40819cd00cf633e9cc657076b058aa73e4051a9efecb50e4f5ef79241e46793c2962d95f53c32fefd0afc9be0cbfe95937d0a8a1234870dc8b3a5755c414695b37d958f89ea2e8733bd05be0dae268e0e9105935cfcdcbb9df93d14d985d7fffd38066fb166f92905b75d8c9d670a78984cc6c416102e69cecb9624fb3b2b6243cea48b034ebf9a2aa3031cdb5921bb1a220fe0204275e1f38fc9825c7f2676919d98f19b0fda6a24774bf457f1466e7c22cd4ef61db327e7d8a7fb5c0631da65b93792f02f6e79b6ae0ef5f99b575d61b7f87bf2b06384968283063171821ad45afe4c88fde7e558e2eb9f497f6f2dc737964d674771e5ebe29aa60a8ef3f82848b5ca04d890919605acd89839d113b4b7789cb4b51425c28290f1f246b790895cb5fc4c7a1d6e8c34abb2c2da07403977a0d009622e4a6c956033223c5e9d00bcbcec83e9f82b9c13d581b3e9bf0af0aa079b5baa003c95cf510f0c86115f5edbb85498a0e7263301ab1853e6d1c04eaee021806228e379a00b2f8bd7d71ea5fade56b04a7f735908dd57d39b76e1c1737cd0b034cf45f1eef0ce2b3cf9bcf0ed40b031dbd7adf5ce71bf61bca7f720017c3359a15541f1830c0794848f313d972189398fe17faf3161c5299d90a4dfb1ec54c1c68207f76eea822799c73dfb65cc6635b7fb034cd02b0c3ebde05227fe14cf09cb8424edb3aacdc55dee725d47089963fc407b64373b4f791cf23dfc352166fd2a8a02b8862ccd76ffca0233025cc80ff86c92c93847e2e6f9160accadc6e907edbce9eba7891834f2e9758e4117980ada7f57273700be573bf3a7deb020227501d251695d1e936c302463030a67085aced89cf2ecc6bc04972d5f9fb07598315daf26853aa3ecfccb7aa4566c44e55dc35125ee763bfbfb7a6d7a9bb084e09b37583826fe7e29a91a312a6f66f2f6caeecbf303079cfe6c41bb084e06809dad0e87659722e34b3549bca53f36713daa42ca5b094f0f997eaf0d277e045b479957f9a04b35665d00550fe473744cefa37150bcab0a8bc5db4944e1600b45ecb8ab99ee931662778b553481ffc0ffbfdee435a8ac29b802cf1bcc6a952a95fea7171438440c329755baf757e733d821865b9430b0c78c1668de5d3bba2b8e4f78638d03254c4e79547903ea65cafa5fe6ffd305ccd736c287a420b0bd148e7eef7cc06b39c1ed1b3d4b342bf0848a250b159378671625b6dd3d53e92a8ba72bcd7ee4ab1f93eec902cc27b6ac55acc2125ebc3b6b30ed66b7041ba41c074c4e578c0dbdbb5ea96e284a076e27489d08ca8352e45c0c703213582521d466f25e90cb2b61c25406a9848d9119d3f65b194e8434ca77324b3732071a0b442f6801afd336440b047e8b7145cda3225c6b0b8218cb42a9188d39f87736d157f0550d2472c7529babd8a6f2d50645cea0bb77b880499fbd04d5c434235c54836bf459512426372ba8315c874e5cf9f1b6b3cf8e8896c379a5c16c34f66fc719c39899e808639bafab49a3a0201c58917691b3f77376d9e340588d3734cb3be87a89f41b7b14c0b967a50c1066168e07c5bde27b2fe824a2750156283f79205111fb875f85284bfe83e3acb6973f86eb7753a7142a11bdd35776d5b228d6f454633eb4bfcf48a7d2e4492269a08999f5239f4728d6d334f4cc0d00aa2bf1e62e577b121a9cd4cc417aafec6237cb383c4b6f4d1d79581e4e99100b30a1ed30ca599e9c66fdbab9f51b1f4802bcab70779904c5c4f0f914ca46f06a05dec06953a73cf642ea50f2312742265429a196385af71febf065ca5a28aa44e8bddd444c4f4e68863fe5d0b290500b0df0d88b9b04a9aeac2b8f3f863b41affb9465db0e4cfe4d177838d1f8d002c1b134dad34b66b34c1b48c51e962b6124fcf5117c53e7534a5f915209e045c7d3d26bb6bafce82a68d85123b0fa716a6417ecc0aba89db465099f683c20d51c67112f975064393371e2f3c5d9138a9a4c7b03d2f9a269c6dc1a912d36fa21d0cb5ec6133cbf5eb325a482c5058f19b6c0c68a6136be73a27ec3e9321cf6d1d73a4bde47e26aa87c8637ae054bd267217d19b610e5b3d3672ccc021477b23d5222d768688986771ba0fb232915eae271d65c1e60c777b3e75c41c2beb47363a528b41d3cf7b1f0bff77995debcfeb159558e895b860d2ab997db0752381e50d22ec279c7a14aa7689cecbb0a5d030dd7921217fc2caaf3064971d27f9a33f4b6b2f5c937882769588065e2bad1ea8619fb48f80632d39063d7bed2ab50ba6ec263f9f34ad02d1f6f1bca99211f1eb619fc073ec04a26f1318b8d0e885f692bcdf1b264d6b2625c6d42fd9052d1d1f241415d70f6a123fcc32b8a468f65745d2e4a7c975c6460441dce4f816b007742af080019f20ba74942dea0c9538e7d2425c726dd0868fc7c562daebc1dd48208380f79c50e9904563fdc0b5fea03cfb603d814594d0c6d178a8b56ddbfe7cf3903044bae5cccfcc52bcb6033db0bfa2414db86d5b855eb070b10232507b37070744f44b5f35b4f2d12ca945e521027ae9dcb9d59b197c17c77d7013325a0c12e6c02d0afaa91fad943df8aa7750f682245da4ebd8863b5bfb8db4a7af739d1346ebc81b6229b3f545f9b7ab6d4fc093cbc7e24fa9e4e8dcab05fd824ad058954a3bb21c747972f7b77e55ba069e3bf7ec127ecdfca5b5ed09fdda71c3e0e8aaadbc986284fe50f60a984bb26625bb1e4c4028638543217e738de644f551590e5721b4f8e13b05bc38e6d5fa19b5b563f268173c6d4fee3d1a22b3fc48a4dffd7984db3f788b106b0d16fbd06e83eb9ae6f492f012562d237d812cfd138fd8e59f28eebe752ff7623e3951c7414ba19a00451da6edb1c1bbfead05e25496a25b0f4eb65e80c76c99d85cef96531fe8547bab02d8c986e03cba34a68a99a3477591bb781be4f757b28a943d915bae7de1351437b39392109167a4f02b3bd5ff1ea0891f8af750027ad0bfaadf92f6aad865d12d9ceadd49bff5bd9214973d3bd62924af780709b6937529b672a5ccb665b737634e978824e880864a0560d7ce18710d33fe8fc655e651a11a016a67203315dc182cdb0674e57f11f6776085ce1cbd01cfa9c7b27d27bcef7b11fa01f8463597c1e8a5e40cfbadf490680c0aa11603b2db034010be0155d3f29c813e379cdd95ab29aa9fb1d63f3def01fd8ca30faffccba15a2596f955362595f46bd5abca47f26485bb33393e2331687849bfcb8a8047bcc6a82656e9e9b99a1b3b68e4b881bc86e5108e32fbb348b1749c3f6cd5724852c25acb43397beaa52bd69ea8b313010cebaac8cf5a3f021990d8a20e1279ce1d80635f624e1ea82edcfb78406b58f67b105601732bd3f1fa5ac9fdb11d591c8cd29ed01aec9f0378359ab724b2e2f94a9183207e10e63ce8ccb2df9c26e4415ef7b636b8267930c1555759f37515f90c84cb2150730548c974087b661fdef77a558efbb9de36bd64c7211899e4a050798daf8f282db971c5e152964381e7b3356118dbc47902af960647028d288280d7a9f6fdc7ff3044b67c69e8e45875f72f27fa95bb6e8bef5527b8aaef50d75f51e57ca30a873c7b1be64d792dcd7e3fd39f8a786b20141e4b1e2dadb233a1bcb50bb5e641789ce5023ffb39e26993c03411f57b9c48f783b6355f36256168625aa9ef7d49c56579fd3504bb3ed1a2d1763be30d0708ac0743643172a2542f1fbbcf411e5d0f5301fcc47e56878f22b777427cf0d9d01b6a4519431e795c1f32e612b2da8b4f932a9c1b7d0f49e02afedd42e835ab124e779897499414b05d98d5f107479e5d16a56c965575f97c95a0f15d8745f2101ee5dbc01ee0e0384c7ae2589f4ef176714b54a102f742be9418578244430551e32b179197b74e7ae5364abd85015c4ac308106dd55f739a5c80109efedc4f681931af1e9d9dfec170a1d2359be015cc640350dbf5d568f12080260463a45ff9024d751cdf94afc48e66e5b7ac852560b07c2a55bf44b0650ea5fdc5cab73c146b3867407797167714bc6bd4c2ccbbd938f98142d86fe5222d0abd7f3fe8d37feafa6d680baf8685c30657326e1c4c2b3a157f8c24fcfc239cece664f5980846c9ee1c382d630e094ba89d87d1afeb8d18ccdee159b0f4eba572f441def6130739385573ba26c35ce137ea880ab790ea146807703958a68d7f7b1838506a95bc054481670f96e1527310b0475efa71c6021840a5becffd3a55d94c8028b93a9079ea81ee5927a925b7dfa9daa3c254eb8eccf7ca7034de33bc432d01f43e27d67b845e67c7c8d589946904dcc04f5054b1e3a6b79904bdddb9ebf7603154be4c89c9ca71f48fba0841990ed6938bd1186bc72ec7b322169778c3c8fe9370ff280f478272584d6c32e5e64ff3c291b66c5922b5d0295cef8c6f43e366697e3a46c98e203aedc8bfbc827eef39224a6f0ffb06e1bbe2387c04c597a6e1aada3c60498533ad39d72f9ee051f89c4a3610a52ccb2e17720fcca1ca7fba93036df7e211ce013d177f115c4d001be4be28bb7980376e5a2ff8f8652e5872cd9512c03cf258cd38e2dcacd6ad3b4a5a57ae79e9bd020900be9725030aeb522d3738ca8c31473283c4372c1d6d3cebff5ab309cdbb1606fffea307d423942192104fd5a3622664415e84e43ccb91343549929b3e7be71bb3dcc1456b2a85c68c22b35f6e3a8ca4c498793d09579b4396af22cb3097de6bcc68364d4e21981c531a98ddb5438359c57f019dfbcdc3814effefbbc3301fb557d1cce8c9b2f6844dd011fad09d0840536e281d602e41787e467f4b9f491969151055b9df3da98252dd8243725d7022c15092fd0b6bab4e5267d03aeddc74dbf3f1ea3c3e44de16c253864b7cde930ca5af8987e05e35537d5fbe462fdc9211daadfda13e660b805bcd92a8a674eea07a09b57ebc6c858ae1e9e13dfb5271e5f235dfff48c3949f3ff25ff542d8d93b3664cda070aba77223dc23c5e2590f288c34b822d28f617dcaf56ebb4206108ac026c200e90b0d1d2b4aa139ea0b6a969d99051264b7e4ca849fdf4ea183fd4e2b49be14b87bdbcd2587937a62877a31629495b493e3a41b6c50e9b3451b19cdc4f3125c042dcb73c0166f836b813b4dcaf95e34593efbc5758d26c636478e877c20a7567c32b7d2459c2066acb444c0d9572b05d64b26a2a9d305cbd568148b5da4ca5dfa794c8016deaf9aaf3a8b38d5e4662975cf33a9e2c366f84a345fe634405d1d222593d2d9540af3a59e936435019e15f623419bbdfb990510bdfccdfea26db923bc5545a3a53ca2a3ac56aa83b286b94453126735bc26428681851f1ec9657edf9abb30ea760304210e06f1ad46316e6bf066", 0x1000)
r3 = socket(0x15, 0x80005, 0x0)
getsockopt(r3, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x24, &(0x7f0000000300)=0x100000001, 0x4)
recvfrom$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x88885}, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10)
sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r8 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r7}, 0x8)
close(r8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x20000000000003cb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000009500"/96], &(0x7f0000000000)='GPL\x00'}, 0x94)
r9 = socket$tipc(0x1e, 0x4, 0x0)
bind$tipc(r9, 0x0, 0x0)
r10 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000a8d0}, 0x0)

1.009776458s ago: executing program 0 (id=3348):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @null, @netrom={'nr', 0x0}, 0x7, 'syz1\x00', @default, 0x55ba, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv6_newnexthop={0x2c, 0x68, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_FDB={0x4}, @NHA_OIF={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0)

1.009416371s ago: executing program 0 (id=3349):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x62000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004)
r1 = socket(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r3], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000000000103000000000000000000000000003c0001802c000180140003000000000000000000000000000000000014000400ff01000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400000000000000000000000000000000000c00028005000b5bd2225eb7f598010000000000080007400000000008001a4000000003f456666c4958663c3d7070aad43f5efe0bd8ef7b"], 0x9c}}, 0x0) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0xf7, 0x0, 0x1, 0x20, 0x6, @local}, 0x14)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r8, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r9, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc000008000900050000000800070098010000200001"], 0x234}}, 0x0)
r10 = socket$inet6(0xa, 0x3, 0x6)
getsockopt$sock_int(r10, 0x1, 0x6, 0x0, &(0x7f0000000240)) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000500)='kvm_dirty_ring_exit\x00', r6}, 0x18) (async)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0x3, 0x9, 0x81, 0x3, 0x60, 0x7, 0x1}, 0x1c) (async)
r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r11, 0x10c, 0x3, &(0x7f0000000040), 0x4) (async)
connect$llc(r11, &(0x7f00000004c0)={0x1a, 0x1, 0xc0, 0x1, 0x3f, 0x0, @remote}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008"], 0x38}}, 0x10)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc)

1.009141855s ago: executing program 2 (id=3350):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x9, 0x0, 0x61, 0x9}]}}]}}]}, 0x44}}, 0x2004c850)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x3, 0x7f, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4004810)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x4000000}, 0x0)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00'})

900.409396ms ago: executing program 0 (id=3351):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x108, 0x2, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_PROTOINFO={0x5c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x58, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x1d}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xffffffffffffffff}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x5e0a6b74}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x1}]}}, @CTA_MARK={0x8}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10001}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6955}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffffb}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xa}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}, @CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xa06}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x48}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x820}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x62e}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x9}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x81}]}, 0x108}, 0x1, 0x0, 0x0, 0x40440c4}, 0x840) (async)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000100), 0x4) (async)
sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x2, 0x9, 0x201, 0x0, 0x0, {0x8, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0xc4002}, 0x8000) (async)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x3, 0x0, 0xffdfffff}, 0x10) (async)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r2, @ANYBLOB="15a4402e13bfac9652cb7a18447f1b0c6de3709b3139173abf6fcb1848d3c71bf49cfed15179be2672382c1bf9a16556f1fcc8071d28081cbf670b58dbe9303976f9ba4199713734782819d22c21ebb4aee00da1d8ad47aed7929ad0c202362ff94e7c5e"], 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x4002001) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) (async)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r3, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0xfffe, 0x0, @private2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="280000000000000029000000390000008402020100000000ff02000000000000000000000000310118000000000000002900000002"], 0x40}, 0x24004800) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000004000000080001000200000004000b"], 0x24}}, 0x0)

900.052165ms ago: executing program 0 (id=3352):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=<r3=>r2, @ANYBLOB="ae1e020000000000"], 0x20}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r8=>0xffffffffffffffff})
r9 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000200)={0x0, 0x22, &(0x7f0000000200), 0x1000000000000074}, 0x1)
r11 = socket$unix(0x1, 0x2, 0x0)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRESDEC=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000800"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r13)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00'})

829.855704ms ago: executing program 2 (id=3353):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x24, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0xd}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000b40)={0x1348, 0x12, 0x100, 0x70bd29, 0x25dfdbfe, {0x32, 0xa, 0x5f, 0x8, {0x4e20, 0x4e20, [0x10, 0x8, 0x0, 0x9], [0x4d, 0x39, 0x1, 0x4], r4, [0x101, 0x4]}, 0x10000, 0x2c37}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xb8, 0x1, "715fe5921122b06d68aeb4595261d249c6e63a323ba6e73b028186d51d8f928195d69c446b489f768dd5e98ccc60cf2de98b39aa8af0ca75f4b6682459be7590b925a0570c2d4db9b77d2d521dc514b4d71c4d4f765b44c0241aa961dc781efa3df8881234d720b11440c1b8098a890c2ab3d97773406e0c84887ca437abf569baa3f88bf648ed5641ca67c5e0e7df521404f540133bd730664fdc05e8eb04857b63dd86e85bfadf190bc50274183895ab59ffe3"}, @INET_DIAG_REQ_BYTECODE={0xc5, 0x1, "d2a46d3969a69648efde7fe43688d5778f15b137e478b2b2232fa8d4fbba16c37149d86d7086d082116d36937362daabe8ae3ed6e1235a5e6d187b35324c37f03fde1f38779c2da944418e28e47a983bc408e44346d19bc0333e90ba2d9ba9effa1fe30a5744311389dd7fa0fdb7718b6e1691d89432fd19e333a639ce9271e75a6ec94ddbc7b198692df9d5d078b295a6fb2aa65a3273e3d3be16c9235bcec34b24eb693e33a6969b408f5c809b54a0c6966aae59266e8019ad33dd18b63bdb7d"}, @INET_DIAG_REQ_BYTECODE={0xde, 0x1, "163206a7838b25b26583e01e5fcca081d44b3e620886780d2666fe716a3be2db51664af2d3d8b146c42bf182321ad360045b6975cc4dcea0835321ab81bf0a5d25b4014810ad643fff9010e88f52701db2e0a2bc962a21528ca0000c205e41a2ec5d705234b04c28233a3e771621c6051e66f77102de65a32d2c16d595ef3da522164230621a3c02f2e0daec1057c6e0b75448961c2a6cfdb1af215c067eaa318d4d7ae891b747cdd83a8e8477386d99043ef50a70999ab8ab7f9b4e6b9c2e065c96544067cc09cf472b0765cab03ca896f3b81d746567fc4b70"}, @INET_DIAG_REQ_BYTECODE={0x95, 0x1, "5975e5e1c7368b09831c9d85bdb3051ae0c8d7e67798821cda75e426fd2feffc0bc485f5d354a68c25674a80910ea7bc14c1bdf672f880db1b89dd9e93f085c6222c576cafc23ef63b7884c3861e12fe28a0dca63693fccbf025076aa12c58cce9168f40967e620e613c5dab348de9be369c2842b71d32ecbba4c8bcddf80c13163dd6eba9ec6cebba5181e8ec72724697"}]}, 0x1348}, 0x1, 0x0, 0x0, 0x80}, 0x42)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800)

740.264878ms ago: executing program 2 (id=3354):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2000c058)
epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e20, @rand_addr=0x64010100}, {0x0, @local}, 0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, 'xfrm0\x00'})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="11000000680001"], 0x24}}, 0x0)

739.099686ms ago: executing program 2 (id=3355):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000330000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newnexthop={0x30, 0x68, 0x1, 0x100003, 0x25dfdbfc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_CSUM_MODE={0x5}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)

670.137536ms ago: executing program 2 (id=3356):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b004000000000000003000000000000000800800000000000"], 0x20}}, 0x0)
unshare(0x68040200)
socket$inet(0x2, 0x3, 0x7)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r6 = socket(0x1e, 0x4, 0x0)
r7 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}], 0x1}}], 0x1, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000000)=@req={0x6, 0x5, 0x1, 0x1}, 0x10)
recvmmsg$unix(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, 0x0, 0x0)
close(0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1)

196.52991ms ago: executing program 1 (id=3357):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)={0x1c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0x5, 0x108b, 0x0, 0x1, [@generic="11"]}]}, 0x1c}}, 0x0)
r3 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000040)='\x81', 0x1)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400030000", @ANYRES32=0x0, @ANYBLOB="04000d80080005"], 0x24}, 0x1, 0x5502000000000000}, 0x0)
socket(0x10, 0x3, 0x0) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r1, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)={0x1c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0x5, 0x108b, 0x0, 0x1, [@generic="11"]}]}, 0x1c}}, 0x0) (async)
socket$rxrpc(0x21, 0x2, 0x2) (async)
setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000040)='\x81', 0x1) (async)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400030000", @ANYRES32=0x0, @ANYBLOB="04000d80080005"], 0x24}, 0x1, 0x5502000000000000}, 0x0) (async)

149.862054ms ago: executing program 1 (id=3358):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000340)={'tunl0\x00', <r2=>0x0, 0x1, 0x7800, 0x6, 0x4d1, {{0x4b, 0x4, 0x1, 0x1d, 0x12c, 0x65, 0x0, 0x8, 0x29, 0x0, @private=0xa010100, @local, {[@timestamp_addr={0x44, 0x1c, 0xc7, 0x1, 0x2, [{@multicast1, 0x8}, {@rand_addr=0x64010102, 0x1}, {@empty, 0x7fff}]}, @cipso={0x86, 0x26, 0x3, [{0x5, 0x5, "2d00ab"}, {0x6, 0x3, ']'}, {0x2, 0x11, "a7ec1c08e6307a279785f3d6a6d1c2"}, {0x2, 0x7, "8a1ad47fed"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0x1c, 0x3, 0x0, [{@rand_addr=0x64010100, 0xd8a3}, {@multicast1, 0xb}, {@multicast2, 0x5}, {@multicast2, 0x2}, {@empty, 0x6}]}, @timestamp_addr={0x44, 0x14, 0x2e, 0x1, 0x7, [{@private=0xa010100, 0x2}, {@multicast1, 0x80000000}]}, @timestamp_addr={0x44, 0x3c, 0x3d, 0x1, 0x4, [{@rand_addr=0x64010102, 0x3}, {@rand_addr=0x64010102, 0x263}, {@private=0xa010102, 0x9}, {@multicast1, 0x2}, {@broadcast, 0x25f0}, {@broadcast, 0xc}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x5}]}, @timestamp_prespec={0x44, 0x54, 0x57, 0x3, 0xc, [{@private=0xa010101, 0xff}, {@local, 0x10}, {@remote, 0x400}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x10}, {@multicast1, 0xe}, {@broadcast, 0x8}, {@loopback, 0x7}, {@multicast2, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}]}}}}})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x9, '\x00', r2, r0, 0x2, 0x5, 0x3}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x11}, 0x20)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000000c0)={0x60001}, 0x8)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r4)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="4d7e00000000000000002a00000008002f00ffffffff05003600ff000000ffcaf1b61e97cc4afc0c0005000000000200000000050037000000000006000600fe0000000a0001007770616e31000000"], 0x4c}, 0x4, 0x700000000000000}, 0x0)
shutdown(r3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
syz_init_net_socket$llc(0x1a, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=@ipv4_newnexthop={0x30, 0x68, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2, 0x0, 0x3}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x20}}, @NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

89.518958ms ago: executing program 1 (id=3359):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
syz_emit_ethernet(0x6a, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r4, 0x3, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000280012800b0001006d61637365630000180002800c0004000200000100c28000080005000300000008000500", @ANYRES32=r3, @ANYBLOB="13a3338fe8675441ae40bae9aaae5068f404f8c17aa45d2e233bf6d768e60eac958307748fa2814e8c0672de6f988ebd6de547fb65c842d0bb2a44163d7b0a2d725697e72d5a3e0d30356f2091b4928322832abda2ff616e092cd0939c3655ff7266a1bf8cc4a18a8ed898a0ffd9520cb896c45dfc6d5ea5b30bbc2968144c86150ce9f4f63d58cbf9004f2ee84578e2d7edf15239d9d12798ffa181119b8a0339b8cdbdd521"], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r5, &(0x7f0000000080)={0x1f, @none, 0xd}, 0xa)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="924016c29c99b475a6652c43fa2a2a819e4617b0c7ec8e24e3225e7a042396d9f1e1cdee0d487cd5706e1b702318cc7266672638d02fbd7d94be8996cad76152237ac716ebba90a30017026590e46c2f33af63ac95c2d373670e414288b9b3a9b3486fbfb2cb595b27091cd4e802d7b626608cdac25956ca10d9583c46496174af497a919b0b2343f578c18616b6fec46dd758f0690ddd5f437e", @ANYBLOB="01000000ffffff7f000000000000280017db2c955f26c824683a766c616e30000000140002800800010012100000060003ea"], 0x3c}}, 0xc020)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r7)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5d7238f96712e159dce4040000000000008e131c28590d0cb61078", @ANYRES16=r8, @ANYBLOB="07ef28bd7000fbdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x45080)
r9 = socket(0xa, 0x2, 0x4)
setsockopt$inet_int(r9, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4)
r10 = socket(0x10, 0x803, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_MARK={0x10, 0xa, {0x0, 0x6}}]}}]}, 0x84}}, 0x24040084)
bind$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0xc, @empty, 0x7}, 0x1c)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, &(0x7f0000000040), &(0x7f00000001c0)=0x4)
connect$bt_rfcomm(r5, &(0x7f0000000240)={0x1f, @any, 0x6}, 0xa)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xec, 0x200, 0x80000a, 0x0, 0x1, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x6, 0xc, 0x18, 0x8, 0x1, 0x8, 0x2}}, {0x4}}]}]}, 0x68}}, 0x0)

0s ago: executing program 0 (id=3360):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a00)=@newsa={0x184, 0x10, 0x1, 0xfffffffe, 0x0, {{@in=@broadcast, @in6=@private1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x0, 0x6c}, @in=@multicast1, {0x0, 0x40, 0x0, 0x0, 0x80000000, 0x1f6}, {}, {}, 0x0, 0x3505, 0xa, 0x1, 0x0, 0x55}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'blake2s-256-arm\x00'}, 0x0, 0x80}}]}, 0x184}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmmsg$inet(r3, &(0x7f0000001180)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast1=0x3000000}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x10)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x6c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = accept$unix(0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000300)=0x6e)
connect$unix(r5, &(0x7f0000001440)=@file={0x1, './file0\x00'}, 0x6e)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = socket(0x40000000015, 0x5, 0x0)
r8 = accept$netrom(r7, &(0x7f0000000180)={{0x3, @netrom}, [@default, @bcast, @null, @bcast, @bcast, @bcast, @null, @null]}, &(0x7f0000000080)=0x48)
recvmmsg(r8, &(0x7f0000001940), 0x0, 0x40000240, 0x0)
connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
recvmmsg(r7, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffcf61}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r9, 0x0, 0x6}, 0x18)
r10 = socket$caif_stream(0x25, 0x1, 0x0)
sendmmsg$inet(r10, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x7c9ce320e12d300)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x8}}, 0x18}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, 0x0, 0x0)

kernel console output (not intermixed with test programs):

_to_bridge, syncid = 512, id = 0
[  154.200211][T11477] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  154.207299][T11476] IPVS: stopping backup sync thread 11477 ...
[  154.249376][T11480] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  154.249419][T11479] IPVS: stopping backup sync thread 11480 ...
[  154.823155][T11533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1520'.
[  154.840457][T11533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1520'.
[  154.867877][T11539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1521'.
[  155.024121][T11552] hsr_slave_0: left allmulticast mode
[  155.026385][T11552] hsr_slave_0: left promiscuous mode
[  155.028761][T11552] bridge0: port 1(hsr_slave_0) entered disabled state
[  155.141798][T11560] lo speed is unknown, defaulting to 1000
[  155.264480][T11570] bond10: (slave vxcan9): The slave device specified does not support setting the MAC address
[  155.275775][T11570] bond10: (slave vxcan9): Error -95 calling set_mac_address
[  155.392650][T11581] IPv6: sit4: Disabled Multicast RS
[  155.397290][T11581] sit4: entered allmulticast mode
[  155.574772][T11599] IPVS: stopping backup sync thread 11600 ...
[  155.575415][T11600] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  156.124734][T11623] bridge0: entered allmulticast mode
[  156.151044][ T5856] Bluetooth: hci0: command 0x0c1a tx timeout
[  156.152846][   T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  156.400715][T11648] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  156.406057][T11647] IPVS: stopping backup sync thread 11648 ...
[  156.463737][T11651] validate_nla: 4 callbacks suppressed
[  156.463751][T11651] netlink: 'syz.0.1549': attribute type 1 has an invalid length.
[  156.490445][T11650] lo speed is unknown, defaulting to 1000
[  156.756268][T11664] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  156.760599][T11663] IPVS: stopping backup sync thread 11664 ...
[  157.344091][T11678] lo speed is unknown, defaulting to 1000
[  157.573758][T11689] netlink: 'syz.1.1559': attribute type 5 has an invalid length.
[  157.588426][T11689] netlink: 'syz.1.1559': attribute type 10 has an invalid length.
[  157.699905][T11699] syz_tun: left allmulticast mode
[  157.707273][T11699] syz_tun: left promiscuous mode
[  157.711275][T11699] bridge0: port 1(syz_tun) entered disabled state
[  157.943283][T11709] syzkaller0: entered promiscuous mode
[  157.945659][T11709] syzkaller0: entered allmulticast mode
[  157.981465][T11709] IPVS: stopping backup sync thread 11715 ...
[  157.981891][T11715] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  158.105869][T11725] __nla_validate_parse: 10 callbacks suppressed
[  158.105879][T11725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1568'.
[  158.107368][T11729] ieee802154 phy0 wpan0: encryption failed: -22
[  158.257433][T11743] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  158.259341][T11742] IPVS: stopping backup sync thread 11743 ...
[  158.277189][T11733] lo speed is unknown, defaulting to 1000
[  158.290527][T11742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1575'.
[  158.384277][T11748] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1577'.
[  158.388490][T11748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1577'.
[  158.398378][T11748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1577'.
[  158.402395][T11748] netlink: 'syz.2.1577': attribute type 18 has an invalid length.
[  158.489338][T11755] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.493509][T11755] syzkaller0: entered promiscuous mode
[  158.496010][T11755] syzkaller0: entered allmulticast mode
[  158.504010][T11755] tipc: Resetting bearer <eth:syzkaller0>
[  158.508057][T11754] tipc: Resetting bearer <eth:syzkaller0>
[  158.518136][T11754] tipc: Disabling bearer <eth:syzkaller0>
[  158.715906][T11773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  158.723901][T11774] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1585'.
[  158.883674][T11788] netlink: 'syz.1.1589': attribute type 1 has an invalid length.
[  158.889669][T11792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1590'.
[  158.914755][T11786] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  158.977436][T11798] IPv6: sit5: Disabled Multicast RS
[  159.003792][T11801] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1593'.
[  159.006828][T11801] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1593'.
[  159.011168][T11801] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1593'.
[  159.044660][T11805] lo speed is unknown, defaulting to 1000
[  159.118052][T11816] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  159.127276][T11815] IPVS: stopping backup sync thread 11816 ...
[  159.210880][T11825] netlink: 'syz.0.1598': attribute type 1 has an invalid length.
[  159.414247][T11840] veth0_to_team: left promiscuous mode
[  159.419466][T11840] veth0_to_team: left allmulticast mode
[  159.426330][T11840] ipvlan2: left allmulticast mode
[  159.428103][T11840] bond12: left allmulticast mode
[  159.430124][T11840] vlan0: left promiscuous mode
[  159.433988][T11840] bond0: left promiscuous mode
[  159.435763][T11840] vlan0: left allmulticast mode
[  159.437530][T11840] bond0: left allmulticast mode
[  159.439510][T11840] bond13: left promiscuous mode
[  159.442712][T11840] bond14: left promiscuous mode
[  159.448133][T11840] bridge6: left promiscuous mode
[  159.449785][T11840] bridge6: left allmulticast mode
[  159.539909][T11853] netlink: 'syz.0.1601': attribute type 1 has an invalid length.
[  159.562498][T11853] bond11: entered promiscuous mode
[  159.564171][T11853] bond11: entered allmulticast mode
[  159.566451][T11853] 8021q: adding VLAN 0 to HW filter on device bond11
[  159.727800][T11868] 8021q: adding VLAN 0 to HW filter on device bond7
[  159.778718][T11870] warn_alloc: 1 callbacks suppressed
[  159.778732][T11870] syz.1.1604: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  159.789563][T11870] CPU: 0 UID: 0 PID: 11870 Comm: syz.1.1604 Not tainted syzkaller #0 PREEMPT(full) 
[  159.789581][T11870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  159.789589][T11870] Call Trace:
[  159.789594][T11870]  <TASK>
[  159.789600][T11870]  dump_stack_lvl+0x189/0x250
[  159.789641][T11870]  ? __pfx_dump_stack_lvl+0x10/0x10
[  159.789662][T11870]  ? __pfx__printk+0x10/0x10
[  159.789679][T11870]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  159.789694][T11870]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  159.789710][T11870]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  159.789726][T11870]  warn_alloc+0x214/0x310
[  159.789749][T11870]  ? __pfx_warn_alloc+0x10/0x10
[  159.789774][T11870]  ? __get_vm_area_node+0x28f/0x300
[  159.789791][T11870]  ? xskq_create+0xbf/0x170
[  159.789806][T11870]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  159.789845][T11870]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  159.789868][T11870]  ? __kasan_kmalloc+0x93/0xb0
[  159.789887][T11870]  vmalloc_user_noprof+0xad/0xf0
[  159.789905][T11870]  ? xskq_create+0xbf/0x170
[  159.789917][T11870]  xskq_create+0xbf/0x170
[  159.789958][T11870]  xsk_init_queue+0xb0/0x110
[  159.789973][T11870]  xsk_setsockopt+0x57b/0x8d0
[  159.789993][T11870]  ? __pfx_xsk_setsockopt+0x10/0x10
[  159.790011][T11870]  ? __pfx_aa_sk_perm+0x10/0x10
[  159.790032][T11870]  ? __fget_files+0x2a/0x420
[  159.790042][T11870]  ? aa_sock_opt_perm+0xff/0x1b0
[  159.790057][T11870]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  159.790070][T11870]  ? __pfx_xsk_setsockopt+0x10/0x10
[  159.790088][T11870]  do_sock_setsockopt+0x17c/0x1b0
[  159.790107][T11870]  __x64_sys_setsockopt+0x13f/0x1b0
[  159.790126][T11870]  do_syscall_64+0xfa/0x3b0
[  159.790138][T11870]  ? lockdep_hardirqs_on+0x9c/0x150
[  159.790151][T11870]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.790162][T11870]  ? exc_page_fault+0x9f/0xf0
[  159.790176][T11870]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.790187][T11870] RIP: 0033:0x7f7e6bb8eba9
[  159.790198][T11870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  159.790209][T11870] RSP: 002b:00007f7e6cafb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  159.790223][T11870] RAX: ffffffffffffffda RBX: 00007f7e6bdd5fa0 RCX: 00007f7e6bb8eba9
[  159.790232][T11870] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004
[  159.790239][T11870] RBP: 00007f7e6bc11e19 R08: 0000000000000004 R09: 0000000000000000
[  159.790246][T11870] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  159.790253][T11870] R13: 00007f7e6bdd6038 R14: 00007f7e6bdd5fa0 R15: 00007ffe452519f8
[  159.790275][T11870]  </TASK>
[  159.790733][T11870] Mem-Info:
[  159.892028][T11870] active_anon:5801 inactive_anon:0 isolated_anon:0
[  159.892028][T11870]  active_file:1504 inactive_file:38282 isolated_file:0
[  159.892028][T11870]  unevictable:1768 dirty:128 writeback:0
[  159.892028][T11870]  slab_reclaimable:10666 slab_unreclaimable:128787
[  159.892028][T11870]  mapped:18508 shmem:2432 pagetables:1065
[  159.892028][T11870]  sec_pagetables:0 bounce:0
[  159.892028][T11870]  kernel_misc_reclaimable:0
[  159.892028][T11870]  free:216906 free_pcp:22235 free_cma:0
[  159.909667][T11870] Node 0 active_anon:13164kB inactive_anon:0kB active_file:2928kB inactive_file:134320kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38152kB dirty:340kB writeback:0kB shmem:4916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6400kB pagetables:2320kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  159.921219][T11870] Node 1 active_anon:10040kB inactive_anon:0kB active_file:3088kB inactive_file:18808kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35880kB dirty:172kB writeback:0kB shmem:4812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7984kB pagetables:1940kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  159.933749][T11870] Node 0 DMA free:7168kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  159.944570][T11870] lowmem_reserve[]: 0 811 811 811 811
[  159.946651][T11870] Node 0 DMA32 free:73804kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13164kB inactive_anon:0kB active_file:2928kB inactive_file:134320kB unevictable:3536kB writepending:340kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:57240kB local_pcp:38012kB free_cma:0kB
[  159.969272][T11870] lowmem_reserve[]: 0 0 0 0 0
[  159.971020][T11870] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  159.981706][T11870] lowmem_reserve[]: 0 0 854 854 854
[  159.983477][T11870] Node 1 Normal free:327940kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9904kB inactive_anon:0kB active_file:3088kB inactive_file:18808kB unevictable:3536kB writepending:172kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:31840kB local_pcp:17492kB free_cma:0kB
[  159.994438][T11870] lowmem_reserve[]: 0 0 0 0 0
[  159.996062][T11870] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 1*4096kB (M) = 7168kB
[  160.000130][T11870] Node 0 DMA32: 77*4kB (M) 61*8kB (UME) 40*16kB (UME) 40*32kB (ME) 29*64kB (UME) 73*128kB (UME) 32*256kB (UME) 17*512kB (UM) 10*1024kB (UM) 6*2048kB (UM) 5*4096kB (UM) = 73820kB
[  160.006275][T11870] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  160.013852][T11870] Node 1 Normal: 1735*4kB (UM) 731*8kB (UME) 253*16kB (UME) 199*32kB (UME) 215*64kB (UME) 51*128kB (UME) 6*256kB (UME) 10*512kB (UM) 19*1024kB (UME) 10*2048kB (UME) 58*4096kB (M) = 327652kB
[  160.021339][T11870] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  160.025016][T11870] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  160.028456][T11870] 42218 total pagecache pages
[  160.030312][T11870] 0 pages in swap cache
[  160.032053][T11870] Free swap  = 124996kB
[  160.033523][T11870] Total swap = 124996kB
[  160.035077][T11870] 786301 pages RAM
[  160.036411][T11870] 0 pages HighMem/MovableOnly
[  160.038127][T11870] 241346 pages reserved
[  160.039605][T11870] 0 pages cma reserved
[  160.101213][T11884] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.103841][T11884] syzkaller0: entered promiscuous mode
[  160.105806][T11884] syzkaller0: entered allmulticast mode
[  160.148713][T11891] Bluetooth: MGMT ver 1.23
[  160.150263][T11891] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  160.153244][ T5856] Bluetooth: hci0: command 0x0c1a tx timeout
[  160.155796][   T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  160.156020][T11884] tipc: Resetting bearer <eth:syzkaller0>
[  160.175947][T11884] tipc: Disabling bearer <eth:syzkaller0>
[  160.508190][T11932] smc: net device bond0 erased user defined pnetid SYZ2
[  160.605852][T11941] openvswitch: netlink: Invalid VLAN frame
[  160.663504][T11936] lo speed is unknown, defaulting to 1000
[  160.830807][T11950] netlink: 'syz.0.1627': attribute type 2 has an invalid length.
[  161.389296][T11959] lo speed is unknown, defaulting to 1000
[  161.624453][T11971] netlink: 'syz.1.1635': attribute type 11 has an invalid length.
[  161.628737][T11968] netlink: 'syz.2.1634': attribute type 1 has an invalid length.
[  161.628981][T11971] netlink: 'syz.1.1635': attribute type 11 has an invalid length.
[  161.635314][T11972] netlink: 'syz.1.1635': attribute type 11 has an invalid length.
[  161.638129][T11972] netlink: 'syz.1.1635': attribute type 11 has an invalid length.
[  161.788254][T11988] lo speed is unknown, defaulting to 1000
[  161.925001][T11997] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  161.929675][T11996] IPVS: stopping backup sync thread 11997 ...
[  162.007512][T12006] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  162.007583][T12005] IPVS: stopping backup sync thread 12006 ...
[  162.108199][T12011] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  162.411120][T12016] netlink: 'syz.0.1645': attribute type 6 has an invalid length.
[  162.631547][ T5856] Bluetooth: hci0: command 0x0c1a tx timeout
[  162.631730][   T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  162.687600][T12019] lo speed is unknown, defaulting to 1000
[  162.844769][T12025] Bluetooth: MGMT ver 1.23
[  163.156801][T12045] __nla_validate_parse: 143 callbacks suppressed
[  163.156815][T12045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1651'.
[  163.230804][T12052] netlink: 'syz.1.1654': attribute type 2 has an invalid length.
[  163.240061][T12052] : entered promiscuous mode
[  163.539079][T12085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1662'.
[  163.589855][T12079] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  163.766763][T12101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1665'.
[  163.954292][T12112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1668'.
[  164.118235][T12117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.175043][T12123] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1672'.
[  164.356829][T12125] tipc: Resetting bearer <eth:syzkaller0>
[  164.378265][ T5920] lo speed is unknown, defaulting to 1000
[  164.381475][ T5865] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  164.386237][ T5920] syz1: Port: 1 Link DOWN
[  164.391061][ T5865] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  164.394210][ T5865] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  164.397556][ T5865] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  164.403516][ T5865] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  164.406318][ T5865] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  164.409309][ T5865] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  164.412644][ T5865] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  164.535579][T12149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1680'.
[  164.544922][T12149] macvlan0: left allmulticast mode
[  164.554488][T12149] gretap1: left promiscuous mode
[  164.562122][T12149] bond11: left promiscuous mode
[  164.564266][T12149] bond11: left allmulticast mode
[  164.602126][T12154] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1681'.
[  164.719150][T12170] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1685'.
[  164.728539][T12172] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1686'.
[  164.734020][T12172] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1686'.
[  164.771469][T12172] lo speed is unknown, defaulting to 1000
[  164.858535][T12188] bridge0: entered allmulticast mode
[  164.872154][   T54] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  164.872701][ T5859] Bluetooth: hci2: command 0x0401 tx timeout
[  165.051374][T12198] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  165.113808][T12204] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  165.113980][T12200] IPVS: stopping backup sync thread 12204 ...
[  165.178161][T12205] netlink: 'syz.1.1686': attribute type 6 has an invalid length.
[  165.204357][T12216] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.208633][T12216] syzkaller0: entered promiscuous mode
[  165.211124][T12216] syzkaller0: entered allmulticast mode
[  165.224449][T12215] tipc: Resetting bearer <eth:syzkaller0>
[  165.244584][T12215] tipc: Disabling bearer <eth:syzkaller0>
[  165.315904][T12219] lo speed is unknown, defaulting to 1000
[  165.849254][T12237] netlink: 'syz.1.1700': attribute type 1 has an invalid length.
[  165.864340][T12235] lo speed is unknown, defaulting to 1000
[  166.071090][ T5859] Bluetooth: hci0: command 0x0c1a tx timeout
[  166.074382][ T5856] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  166.239762][T12252] netlink: 'syz.2.1706': attribute type 1 has an invalid length.
[  166.247021][T12254] netlink: 'syz.1.1707': attribute type 10 has an invalid length.
[  166.249921][T12254] team0: entered promiscuous mode
[  166.253264][T12254] 8021q: adding VLAN 0 to HW filter on device team0
[  166.289039][T12258] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  166.384966][T12270] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  166.388490][T12269] IPVS: stopping backup sync thread 12270 ...
[  167.297054][T12305] lo speed is unknown, defaulting to 1000
[  167.359121][T12310] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  167.732100][T12326] netlink: 'syz.0.1730': attribute type 3 has an invalid length.
[  167.799187][T12305] netlink: 'syz.1.1725': attribute type 6 has an invalid length.
[  168.151137][ T5859] Bluetooth: hci0: command 0x0c1a tx timeout
[  168.204950][T12344] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  168.209534][T12342] IPVS: stopping backup sync thread 12344 ...
[  168.384387][T12350] __nla_validate_parse: 11 callbacks suppressed
[  168.384401][T12350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1736'.
[  168.668469][T12369] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.737794][T12381] team0: left promiscuous mode
[  168.757151][T12381] tipc: Resetting bearer <eth:syzkaller0>
[  168.760124][T12381] syzkaller0: left promiscuous mode
[  168.763906][T12381] syzkaller0: left allmulticast mode
[  168.768041][T12381] vlan2: left allmulticast mode
[  168.769676][T12381] batadv0: left allmulticast mode
[  168.771686][T12381] xfrm1: left allmulticast mode
[  168.773434][T12381] geneve5: left promiscuous mode
[  168.775098][T12381] geneve5: left allmulticast mode
[  168.777565][T12381] bond9: left promiscuous mode
[  168.779171][T12381] bond9: left allmulticast mode
[  168.782798][T12381] sit4: left allmulticast mode
[  168.846002][T12389] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  168.899958][T12393] bond0: (slave rose0): Error: Device can not be enslaved while up
[  169.012550][T12400] netlink: 'syz.0.1752': attribute type 1 has an invalid length.
[  169.064051][T12400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1752'.
[  169.096631][T12404] can: request_module (can-proto-0) failed.
[  169.105043][T12407] netlink: 'syz.0.1753': attribute type 1 has an invalid length.
[  169.314202][T12414] IPVS: stopping backup sync thread 12310 ...
[  169.367665][T12416] syzkaller0: entered promiscuous mode
[  169.369590][T12416] syzkaller0: entered allmulticast mode
[  169.498224][T12418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1758'.
[  169.513230][T12418] lo speed is unknown, defaulting to 1000
[  169.749355][T12423] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1759'.
[  169.843780][T12427] netlink: 'syz.0.1758': attribute type 6 has an invalid length.
[  169.847161][T12431] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1760'.
[  170.007239][T12444] lo speed is unknown, defaulting to 1000
[  170.078955][T12448] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1764'.
[  170.135415][T12453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1765'.
[  170.240718][T12463] netlink: 'syz.1.1770': attribute type 2 has an invalid length.
[  170.264048][T12463] netlink: 'syz.1.1770': attribute type 1 has an invalid length.
[  170.289639][T12463] 8021q: adding VLAN 0 to HW filter on device bond11
[  170.300627][T12463] bond11: (slave wlan0): Opening slave failed
[  170.387081][T12470] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  170.424067][T12472] IPVS: stopping backup sync thread 12473 ...
[  170.479032][T12477] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  170.496441][T12482] batadv_slave_0: entered promiscuous mode
[  170.507420][T12482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1772'.
[  170.509236][T12481] netlink: 'syz.2.1776': attribute type 1 has an invalid length.
[  170.531198][T12477] netlink: 'syz.0.1775': attribute type 10 has an invalid length.
[  170.543197][T12477] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  170.547869][T12477] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  170.552093][T12477] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  170.554738][T12481] bond17: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  170.563201][ T5889] bond17: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  170.563962][T12481] 8021q: adding VLAN 0 to HW filter on device bond17
[  170.588910][T12481] veth9: entered promiscuous mode
[  170.592434][T12481] bond17: (slave veth9): Enslaving as a backup interface with a down link
[  170.615013][T12487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1777'.
[  170.644765][T12489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1778'.
[  170.664257][T12489] vlan2: entered allmulticast mode
[  170.667423][T12489] bond18: entered allmulticast mode
[  170.682340][ T5889] bond17: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  170.858758][T12503] 8021q: adding VLAN 0 to HW filter on device bond1
[  170.872851][T12503] bond1: (slave ip6gretap4): Enslaving as an active interface with an up link
[  171.119400][T12521] netlink: 'syz.1.1790': attribute type 12 has an invalid length.
[  171.218777][T12525] lo speed is unknown, defaulting to 1000
[  171.727998][T12553] team0: Mode changed to "random"
[  171.849647][T12562] veth0_to_bond: entered promiscuous mode
[  172.010028][T12574] lo speed is unknown, defaulting to 1000
[  172.442673][T12602] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  172.478520][T12604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  172.632197][T12610] lo speed is unknown, defaulting to 1000
[  173.320974][T12623] batadv_slave_1: entered promiscuous mode
[  173.486354][T12629] __nla_validate_parse: 10 callbacks suppressed
[  173.486364][T12629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1823'.
[  173.486362][T12623] batadv_slave_1: left promiscuous mode
[  173.593192][T12643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1824'.
[  173.775946][T12645] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.781475][T12645] syzkaller0: entered promiscuous mode
[  173.785273][T12645] syzkaller0: entered allmulticast mode
[  173.791416][T12644] tipc: Resetting bearer <eth:syzkaller0>
[  173.799844][T12644] tipc: Disabling bearer <eth:syzkaller0>
[  173.804203][T12654] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  173.804249][T12653] IPVS: stopping backup sync thread 12654 ...
[  173.920139][T12669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1835'.
[  173.961058][T12676] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1837'.
[  174.017024][T12683] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1837'.
[  174.052392][T12683] lo speed is unknown, defaulting to 1000
[  174.103205][T12691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1840'.
[  174.107012][T12691] veth0_to_bond: left promiscuous mode
[  174.224178][T12695] lo speed is unknown, defaulting to 1000
[  174.288729][T12698] validate_nla: 1 callbacks suppressed
[  174.288738][T12698] netlink: 'syz.2.1844': attribute type 10 has an invalid length.
[  174.400301][T12700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1845'.
[  174.667959][T12715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1848'.
[  174.671297][T12715] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1848'.
[  174.679492][T12715] bond0: Device is already in use.
[  174.966401][T12735] lo speed is unknown, defaulting to 1000
[  175.096020][T12746] lo speed is unknown, defaulting to 1000
[  175.112966][T12749] netlink: 'syz.0.1860': attribute type 1 has an invalid length.
[  175.143051][T12749] 8021q: adding VLAN 0 to HW filter on device bond13
[  175.168000][T12749] bond13: (slave veth9): Enslaving as an active interface with a down link
[  175.190517][T12749] macvlan2: entered promiscuous mode
[  175.192967][T12749] macvlan2: entered allmulticast mode
[  175.195584][T12749] bond13: entered promiscuous mode
[  175.197729][T12749] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  175.200881][T12749] bond13: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  175.207591][T12749] bond13: left promiscuous mode
[  175.280838][T12756] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1861'.
[  175.367757][T12762] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.371829][T12762] syzkaller0: entered promiscuous mode
[  175.374188][T12762] syzkaller0: entered allmulticast mode
[  175.388250][T12762] tipc: Resetting bearer <eth:syzkaller0>
[  175.395345][T12761] tipc: Resetting bearer <eth:syzkaller0>
[  175.407497][T12761] tipc: Disabling bearer <eth:syzkaller0>
[  175.544452][T12773] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.547366][T12773] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.551018][T12773] syzkaller0: entered promiscuous mode
[  175.552945][T12773] syzkaller0: entered allmulticast mode
[  175.557718][T12773] netlink: 'syz.0.1867': attribute type 1 has an invalid length.
[  175.582011][T12773] bond14: (slave geneve5): making interface the new active one
[  175.584766][T12773] bond14: (slave geneve5): Enslaving as an active interface with an up link
[  175.591295][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0
[  175.597952][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0
[  175.601957][T12773] tipc: Resetting bearer <eth:syzkaller0>
[  175.604030][ T5889] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0
[  175.607171][ T5889] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0
[  175.613552][T12776] openvswitch: netlink: IP tunnel dst address not specified
[  175.617553][T12772] tipc: Resetting bearer <eth:syzkaller0>
[  175.628020][T12772] tipc: Disabling bearer <eth:syzkaller0>
[  175.643796][ T5889] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  175.659142][ T5889] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  175.665062][ T5889] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  175.667758][ T5889] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  175.737671][T12782] GUP no longer grows the stack in syz.1.1870 (12782): 200000003000-20000000a000 (200000001000)
[  175.742843][T12782] CPU: 0 UID: 0 PID: 12782 Comm: syz.1.1870 Not tainted syzkaller #0 PREEMPT(full) 
[  175.742862][T12782] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  175.742869][T12782] Call Trace:
[  175.742875][T12782]  <TASK>
[  175.742880][T12782]  dump_stack_lvl+0x189/0x250
[  175.742903][T12782]  ? __pfx_dump_stack_lvl+0x10/0x10
[  175.742917][T12782]  ? __pfx__printk+0x10/0x10
[  175.742932][T12782]  ? find_vma+0xe7/0x160
[  175.742960][T12782]  __get_user_pages+0x24d0/0x2ce0
[  175.742974][T12782]  ? __lock_acquire+0xab9/0xd20
[  175.743011][T12782]  ? __gup_longterm_locked+0xc68/0x1660
[  175.743032][T12782]  __gup_longterm_locked+0xde9/0x1660
[  175.743057][T12782]  ? sanity_check_pinned_pages+0x123a/0x1300
[  175.743079][T12782]  gup_fast_fallback+0x1e6a/0x2010
[  175.743119][T12782]  ? __pfx_gup_fast_fallback+0x10/0x10
[  175.743132][T12782]  ? stack_trace_save+0x9c/0xe0
[  175.743147][T12782]  ? __pfx_stack_trace_save+0x10/0x10
[  175.743170][T12782]  ? pin_user_pages_fast+0x4d/0xb0
[  175.743187][T12782]  iov_iter_extract_pages+0x35a/0x5e0
[  175.743211][T12782]  extract_iter_to_sg+0xe46/0x24e0
[  175.743237][T12782]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  175.743264][T12782]  ? __asan_memset+0x22/0x50
[  175.743280][T12782]  af_alg_get_rsgl+0x436/0x810
[  175.743332][T12782]  aead_recvmsg+0x4cc/0x13f0
[  175.743354][T12782]  ? rcu_is_watching+0x15/0xb0
[  175.743373][T12782]  ? __pfx_aead_recvmsg+0x10/0x10
[  175.743388][T12782]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  175.743403][T12782]  ? __pfx_aead_recvmsg+0x10/0x10
[  175.743416][T12782]  sock_recvmsg_nosec+0x186/0x1c0
[  175.743439][T12782]  ____sys_recvmsg+0x3aa/0x460
[  175.743462][T12782]  ? __pfx_____sys_recvmsg+0x10/0x10
[  175.743489][T12782]  ? import_iovec+0x74/0xa0
[  175.743508][T12782]  ___sys_recvmsg+0x1b5/0x510
[  175.743527][T12782]  ? __pfx____sys_recvmsg+0x10/0x10
[  175.743568][T12782]  ? __might_fault+0xb0/0x130
[  175.743587][T12782]  do_recvmmsg+0x307/0x770
[  175.743610][T12782]  ? __pfx_do_recvmmsg+0x10/0x10
[  175.743625][T12782]  ? vm_mmap_pgoff+0x350/0x4d0
[  175.743648][T12782]  ? __pfx_do_futex+0x10/0x10
[  175.743662][T12782]  ? vm_mmap_pgoff+0x38e/0x4d0
[  175.743687][T12782]  __x64_sys_recvmmsg+0x190/0x240
[  175.743706][T12782]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  175.743721][T12782]  ? rcu_is_watching+0x15/0xb0
[  175.743737][T12782]  ? do_syscall_64+0xbe/0x3b0
[  175.743755][T12782]  do_syscall_64+0xfa/0x3b0
[  175.743798][T12782]  ? lockdep_hardirqs_on+0x9c/0x150
[  175.743811][T12782]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.743824][T12782]  ? exc_page_fault+0x9f/0xf0
[  175.743838][T12782]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.743849][T12782] RIP: 0033:0x7f7e6bb8eba9
[  175.743860][T12782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  175.743870][T12782] RSP: 002b:00007f7e6cada038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  175.743885][T12782] RAX: ffffffffffffffda RBX: 00007f7e6bdd6090 RCX: 00007f7e6bb8eba9
[  175.743894][T12782] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000009
[  175.743901][T12782] RBP: 00007f7e6bc11e19 R08: 0000000000000000 R09: 0000000000000000
[  175.743909][T12782] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  175.743916][T12782] R13: 00007f7e6bdd6128 R14: 00007f7e6bdd6090 R15: 00007ffe452519f8
[  175.743937][T12782]  </TASK>
[  176.258028][T12805] netlink: 'syz.0.1875': attribute type 4 has an invalid length.
[  176.262790][T12805] netlink: 'syz.0.1875': attribute type 4 has an invalid length.
[  176.441741][T12800] lo speed is unknown, defaulting to 1000
[  176.571960][T12816] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  176.580289][T12809] netlink: 'syz.1.1873': attribute type 6 has an invalid length.
[  176.596585][T12819] netlink: 'syz.0.1876': attribute type 5 has an invalid length.
[  176.604801][T12819] geneve6: entered promiscuous mode
[  176.606742][T12819] geneve6: entered allmulticast mode
[  176.615216][   T13] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  176.618343][   T13] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  176.624523][   T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  176.643333][T12816] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  176.647212][T12816] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  176.675811][T12818] lo speed is unknown, defaulting to 1000
[  176.732430][T12816] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  176.736102][T12816] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  176.837454][T12816] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  176.858783][T12816] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  176.934024][ T6167] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  176.936969][ T6167] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  176.985807][ T6167] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  176.995789][ T6167] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  177.015836][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  177.021516][   T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  177.038463][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  177.041521][   T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  177.139809][T12825] netlink: 'syz.2.1878': attribute type 4 has an invalid length.
[  177.151746][T12825] netlink: 'syz.2.1878': attribute type 4 has an invalid length.
[  177.223726][T12839] netlink: 'syz.2.1882': attribute type 1 has an invalid length.
[  177.462618][T12851] lo speed is unknown, defaulting to 1000
[  177.519524][T12868] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  177.733905][T12884] tap0: tun_chr_ioctl cmd 1074025680
[  177.743101][T12884] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  177.827337][T12883] tipc: Disabling bearer <eth:syzkaller0>
[  177.839627][T12895] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  177.843304][T12894] IPVS: stopping backup sync thread 12895 ...
[  177.885887][T12897] : entered promiscuous mode
[  178.198720][T12923] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  178.203263][T12923] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  178.269977][T12923] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  178.275147][T12923] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  178.312028][T12923] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  178.317947][T12923] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  178.359002][T12923] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  178.362873][T12923] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  178.379411][T12926] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.388626][T12926] syzkaller0: entered promiscuous mode
[  178.390562][T12926] syzkaller0: entered allmulticast mode
[  178.411983][T12926] syzkaller0: mtu less than device minimum
[  178.415360][T12925] tipc: Resetting bearer <eth:syzkaller0>
[  178.427178][T12925] tipc: Disabling bearer <eth:syzkaller0>
[  178.440303][ T5889] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  178.447790][ T5889] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  178.460165][ T5889] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  178.467312][ T5889] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  178.476148][ T5889] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  178.479626][ T5889] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  178.489372][ T6167] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  178.492965][ T6167] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  179.060235][T12939] lo speed is unknown, defaulting to 1000
[  179.423772][T12959] __nla_validate_parse: 22 callbacks suppressed
[  179.423782][T12959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1922'.
[  179.428614][T12959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1922'.
[  179.432275][T12959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1922'.
[  179.435170][T12959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1922'.
[  179.438132][T12956] validate_nla: 1 callbacks suppressed
[  179.438141][T12956] netlink: 'syz.0.1921': attribute type 30 has an invalid length.
[  179.445344][T12956] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  179.449250][T12956] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  179.625209][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1926'.
[  179.708845][T12978] netlink: 'syz.0.1928': attribute type 1 has an invalid length.
[  179.734905][T12978] bond15: entered promiscuous mode
[  179.737220][T12978] bond15: entered allmulticast mode
[  179.739692][T12978] 8021q: adding VLAN 0 to HW filter on device bond15
[  179.745774][T12978] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2)
[  179.756713][T12978] bridge0: entered promiscuous mode
[  179.758590][T12978] bridge0: entered allmulticast mode
[  179.762829][T12978] bond15: (slave bridge0): Enslaving as a backup interface with an up link
[  179.794208][T12981] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1929'.
[  179.798220][T12982] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1929'.
[  179.820382][T12987] netlink: 212264 bytes leftover after parsing attributes in process `syz.0.1931'.
[  179.841702][ T5889] bond15: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  179.968891][T12994] bond1: (slave macvlan5): Releasing backup interface
[  179.972205][ T6167] bond15: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  179.979836][T12994] team0: Port device bridge6 removed
[  179.984613][T12994] bond17: (slave ip6gretap1): Removing an active aggregator
[  179.988829][T12994] bond17: (slave ip6gretap1): Releasing backup interface
[  179.991776][T12994] bond17: (slave ip6gretap1): the permanent HWaddr of slave - 7e:21:6f:18:15:f9 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  180.002199][T12994] bond17: (slave veth9): Releasing backup interface
[  180.353603][T13015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1939'.
[  180.364025][T13010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1939'.
[  180.599368][T13030] netlink: 'syz.2.1945': attribute type 1 has an invalid length.
[  180.600031][T13031] netlink: 'syz.2.1945': attribute type 1 has an invalid length.
[  180.626082][T13030] 8021q: adding VLAN 0 to HW filter on device bond19
[  180.647929][T13031] 8021q: adding VLAN 0 to HW filter on device bond19
[  180.651566][T13031] bond19: (slave vxcan5): The slave device specified does not support setting the MAC address
[  180.656856][T13031] bond19: (slave vxcan5): Error -95 calling set_mac_address
[  180.685861][T13030] bond19: (slave vxcan5): The slave device specified does not support setting the MAC address
[  180.690633][T13030] bond19: (slave vxcan5): Error -95 calling set_mac_address
[  180.711107][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[  180.721243][ T5856] Bluetooth: hci1: command 0x0401 tx timeout
[  180.830879][T13040] lo speed is unknown, defaulting to 1000
[  180.950026][T13040] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  180.991425][T13043] block nbd1: shutting down sockets
[  181.155361][T13049] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  181.180819][T13054] pim6reg1: entered promiscuous mode
[  181.186829][T13054] pim6reg1: entered allmulticast mode
[  181.278221][T13051] lo speed is unknown, defaulting to 1000
[  181.297106][T13058] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.308403][T13058] syzkaller0: entered promiscuous mode
[  181.310571][T13058] syzkaller0: entered allmulticast mode
[  181.321253][T13058] tipc: Resetting bearer <eth:syzkaller0>
[  181.324183][T13057] tipc: Resetting bearer <eth:syzkaller0>
[  181.330611][T13057] tipc: Disabling bearer <eth:syzkaller0>
[  181.514568][T13074] lo speed is unknown, defaulting to 1000
[  181.695766][T13094] lo speed is unknown, defaulting to 1000
[  182.724625][T13128] sctp: [Deprecated]: syz.2.1975 (pid 13128) Use of int in maxseg socket option.
[  182.724625][T13128] Use struct sctp_assoc_value instead
[  182.743768][T13128] netlink: 'syz.2.1975': attribute type 1 has an invalid length.
[  182.760810][T13131] 8021q: adding VLAN 0 to HW filter on device bond16
[  182.770317][T13123] bond16: (slave batadv1): Opening slave failed
[  182.781844][T13134] lo speed is unknown, defaulting to 1000
[  183.028317][T13158] netlink: 'syz.1.1986': attribute type 10 has an invalid length.
[  183.064795][T13163] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  183.069603][T13162] IPVS: stopping backup sync thread 13163 ...
[  183.078353][T13154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  183.936652][T13186] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  183.939947][T13187] syzkaller0: entered promiscuous mode
[  183.943326][T13187] syzkaller0: entered allmulticast mode
[  183.958551][T13187] tipc: Resetting bearer <eth:syzkaller0>
[  183.973437][T13187] tipc: Disabling bearer <eth:syzkaller0>
[  184.055501][T13197] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  184.058780][T13197] syzkaller0: entered promiscuous mode
[  184.060568][T13197] syzkaller0: entered allmulticast mode
[  184.211520][ T5865] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  184.214741][ T5865] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  184.241244][  T794] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  184.636989][T13207] __nla_validate_parse: 11 callbacks suppressed
[  184.637002][T13207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2000'.
[  184.643393][T13207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2000'.
[  184.791223][  T794] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  184.884554][T13215] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.893390][T13215] syzkaller0: entered promiscuous mode
[  184.895657][T13215] syzkaller0: entered allmulticast mode
[  184.904224][T13215] tipc: Resetting bearer <eth:syzkaller0>
[  184.915844][T13214] tipc: Resetting bearer <eth:syzkaller0>
[  184.929808][T13214] tipc: Disabling bearer <eth:syzkaller0>
[  184.957326][T13217] lo speed is unknown, defaulting to 1000
[  184.988057][T13218] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2003'.
[  185.111401][  T794] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  185.267621][T13233] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  185.272199][T13232] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  185.307663][T13247] syzkaller0: entered promiscuous mode
[  185.310304][T13247] syzkaller0: entered allmulticast mode
[  185.386674][T13256] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  186.489384][T13286] netlink: 'syz.0.2024': attribute type 1 has an invalid length.
[  186.493186][T13286] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2024'.
[  186.496752][T13286] netlink: 'syz.0.2024': attribute type 1 has an invalid length.
[  186.500136][T13286] netlink: 'syz.0.2024': attribute type 21 has an invalid length.
[  186.505712][T13286] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2024'.
[  186.513579][T13286] netlink: 'syz.0.2024': attribute type 4 has an invalid length.
[  186.516899][T13286] netlink: 'syz.0.2024': attribute type 5 has an invalid length.
[  186.520006][T13286] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2024'.
[  186.745460][T13301] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2028'.
[  186.749972][T13301] IPVS: stopping backup sync thread 12868 ...
[  186.882891][T13305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2029'.
[  186.905425][T13305] bond15: (slave bridge0): Removing an active aggregator
[  186.908211][T13305] bond15: (slave bridge0): Releasing backup interface
[  186.911488][T13305] bridge0 (unregistering): left promiscuous mode
[  186.914305][T13305] bridge0 (unregistering): left allmulticast mode
[  187.035470][T13309] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2030'.
[  187.080345][T13312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2031'.
[  187.100729][T13311] bond17: entered promiscuous mode
[  187.103577][T13311] 8021q: adding VLAN 0 to HW filter on device bond17
[  187.123442][T13312] bond18: entered promiscuous mode
[  187.125585][T13312] 8021q: adding VLAN 0 to HW filter on device bond18
[  187.166856][T13317] IPVS: length: 24 != 49176
[  187.174736][T13317] netlink: zone id is out of range
[  187.177325][T13317] netlink: zone id is out of range
[  187.180117][T13317] netlink: zone id is out of range
[  187.183830][T13317] netlink: zone id is out of range
[  187.206182][T13317] netlink: set zone limit has 4 unknown bytes
[  187.210322][T13317] netlink: del zone limit has 4 unknown bytes
[  187.412251][T13326] lo speed is unknown, defaulting to 1000
[  187.459017][T13328] lo speed is unknown, defaulting to 1000
[  187.712910][T13334] netlink: 'syz.2.2037': attribute type 1 has an invalid length.
[  187.716403][T13334] netlink: 'syz.2.2037': attribute type 1 has an invalid length.
[  187.764074][T13339] netlink: 'syz.2.2038': attribute type 21 has an invalid length.
[  187.804315][T13341] netlink: 'syz.2.2039': attribute type 1 has an invalid length.
[  187.817712][T13341] 8021q: adding VLAN 0 to HW filter on device bond22
[  187.829796][T13341] bond22: (slave veth11): Enslaving as an active interface with a down link
[  187.840451][T13341] 8021q: adding VLAN 0 to HW filter on device batadv3
[  187.843118][T13341] bond22: (slave batadv3): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  187.973430][T13347] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20004
[  187.979779][T13349] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  187.982287][T13347] IPVS: stopping backup sync thread 13349 ...
[  188.151011][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  188.430417][T13387] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  188.435411][T13387] bond22: (slave veth11): Releasing active interface
[  188.451057][T13388] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  188.496607][T13389] netlink: 'syz.2.2052': attribute type 10 has an invalid length.
[  188.499978][T13389] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  189.025418][T13408] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  189.225957][T13414] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  189.293995][T13439] netlink: 'syz.0.2066': attribute type 11 has an invalid length.
[  189.621377][T13455] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.717816][T13460] __nla_validate_parse: 8 callbacks suppressed
[  189.717831][T13460] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2074'.
[  189.935512][T13464] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  190.099248][T13479] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2079'.
[  190.155690][T13483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2081'.
[  190.166687][T13483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2081'.
[  190.170609][ T5889] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  190.176131][ T5889] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  190.189842][ T5889] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  190.198519][ T5889] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  190.207744][T13484] lo speed is unknown, defaulting to 1000
[  190.496440][T13501] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2089'.
[  190.505746][T13503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2087'.
[  190.519146][T13503] lo speed is unknown, defaulting to 1000
[  190.601230][T13503] netlink: ct family unspecified
[  191.006224][T13510] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2091'.
[  191.081775][T13511] lo speed is unknown, defaulting to 1000
[  191.443205][T13517] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2093'.
[  191.467663][T13515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2092'.
[  191.519834][ T6167] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  191.527044][ T6167] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  191.530591][ T6167] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  191.537538][ T6167] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  191.548218][T13520] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  191.553283][T13519] IPVS: stopping backup sync thread 13520 ...
[  191.656316][T13522] validate_nla: 3 callbacks suppressed
[  191.656326][T13522] netlink: 'syz.2.2095': attribute type 3 has an invalid length.
[  191.661274][T13522] netlink: 196688 bytes leftover after parsing attributes in process `syz.2.2095'.
[  191.664956][T13522] 8021q: VLANs not supported on gre0
[  191.679169][T13522] lo speed is unknown, defaulting to 1000
[  191.794403][T13532] ipvlan3: entered promiscuous mode
[  191.896356][T13542] netlink: 'syz.0.2101': attribute type 10 has an invalid length.
[  191.906735][T13541] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  192.019022][T13550] syzkaller0: entered promiscuous mode
[  192.021771][T13550] syzkaller0: entered allmulticast mode
[  192.083786][T13550] netlink: 'syz.2.2103': attribute type 8 has an invalid length.
[  192.083786][T13551] netlink: 'syz.2.2103': attribute type 8 has an invalid length.
[  192.151878][ T5856] Bluetooth: hci2: command 0x0401 tx timeout
[  192.312505][ T5856] Bluetooth: hci0: command 0x0c1a tx timeout
[  192.314262][ T5859] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  193.202063][T13568] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  193.203189][T13567] IPVS: stopping backup sync thread 13568 ...
[  193.277242][T13574] netlink: 'syz.0.2110': attribute type 9 has an invalid length.
[  193.454840][T13598] syzkaller0: Caught tx_queue_len zero misconfig
[  193.543747][T13590] lo speed is unknown, defaulting to 1000
[  193.591092][    C0] net_ratelimit: 2 callbacks suppressed
[  193.591105][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  193.733467][T13614] netlink: 'syz.2.2121': attribute type 9 has an invalid length.
[  193.745853][T13612] lo speed is unknown, defaulting to 1000
[  193.949440][T13620] lo speed is unknown, defaulting to 1000
[  193.997562][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.100066][T13628] netlink: 'syz.0.2119': attribute type 6 has an invalid length.
[  194.169630][T13633] veth0_to_bond: entered allmulticast mode
[  194.319280][T13638] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  194.323395][T13637] IPVS: stopping backup sync thread 13638 ...
[  194.630991][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  194.821537][T13673] delete_channel: no stack
[  194.853022][T13693] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  194.857126][T13692] IPVS: stopping backup sync thread 13693 ...
[  194.859969][T13692] __nla_validate_parse: 14 callbacks suppressed
[  194.859980][T13692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2140'.
[  194.939850][T13705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2144'.
[  194.946378][T13705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2144'.
[  194.949288][T13705] netlink: 'syz.2.2144': attribute type 18 has an invalid length.
[  194.958873][T13702] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2139'.
[  195.193026][T13723] netlink: 'syz.0.2150': attribute type 10 has an invalid length.
[  195.198014][T13723] netlink: 5852 bytes leftover after parsing attributes in process `syz.0.2150'.
[  195.234717][T13727] netlink: 'syz.0.2151': attribute type 21 has an invalid length.
[  195.237369][T13727] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2151'.
[  195.383569][T13738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2154'.
[  195.387858][T13738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2154'.
[  195.470638][T13743] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2155'.
[  195.671002][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.766619][T13769] x9: renamed from bridge_slave_0
[  195.820202][T13774] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  195.911036][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  195.932647][T13787] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2168'.
[  196.012416][T13791] lo speed is unknown, defaulting to 1000
[  196.110083][T13799] batadv_slave_0: left promiscuous mode
[  196.112521][T13799] syzkaller0: left promiscuous mode
[  196.114973][T13799] ipvlan3: left promiscuous mode
[  196.143662][  T794] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  196.252893][T13814] RDS: rds_bind could not find a transport for fe80::2a, load rds_tcp or rds_rdma?
[  196.385371][T13827] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  196.568534][T13841] batadv_slave_0: entered promiscuous mode
[  196.585786][T13841] batadv_slave_0: left promiscuous mode
[  196.711049][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  196.951801][    T9] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  197.143227][T13886] tun0: tun_chr_ioctl cmd 1074025675
[  197.145272][T13886] tun0: persist disabled
[  197.207086][T13889] syzkaller0: entered promiscuous mode
[  197.335881][T13895] lo speed is unknown, defaulting to 1000
[  197.751202][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  197.974406][T13942] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  198.054915][T13949] IPv6: sit6: Disabled Multicast RS
[  198.105786][T13953] smc: net device bond0 applied user defined pnetid SYZ2
[  198.353247][T13975] lo speed is unknown, defaulting to 1000
[  198.418800][T13987] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  198.418823][T13986] IPVS: stopping backup sync thread 13987 ...
[  198.479298][T13977] validate_nla: 3 callbacks suppressed
[  198.479308][T13977] netlink: 'syz.0.2225': attribute type 10 has an invalid length.
[  198.483401][T13993] lo speed is unknown, defaulting to 1000
[  198.484349][T13977] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  198.494541][T13977] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  198.497703][T13977] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  198.626765][T13993] netlink: 'syz.1.2228': attribute type 6 has an invalid length.
[  198.791216][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  199.247401][T14006] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  199.248350][T14005] IPVS: stopping backup sync thread 14006 ...
[  199.419790][T14013] lo speed is unknown, defaulting to 1000
[  199.529688][T14024] lo speed is unknown, defaulting to 1000
[  199.832085][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  200.646063][T14078] __nla_validate_parse: 28 callbacks suppressed
[  200.646079][T14078] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2254'.
[  200.714164][T14082] lo speed is unknown, defaulting to 1000
[  200.871107][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  200.967698][T14101] IPVS: stopping backup sync thread 14102 ...
[  200.973860][T14102] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  200.989437][T14101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2261'.
[  200.994847][T14101] netlink: 'syz.0.2261': attribute type 5 has an invalid length.
[  200.999090][T14101] netlink: 'syz.0.2261': attribute type 4 has an invalid length.
[  201.092672][T14082] netlink: 'syz.1.2256': attribute type 6 has an invalid length.
[  201.149032][T14111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2263'.
[  201.260160][T14120] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2266'.
[  201.317979][T14121] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2266'.
[  201.335445][T14121] lo speed is unknown, defaulting to 1000
[  201.597111][T14124] netlink: 'syz.1.2267': attribute type 1 has an invalid length.
[  201.610246][T14124] bond13: entered promiscuous mode
[  201.613559][T14124] 8021q: adding VLAN 0 to HW filter on device bond13
[  201.694255][T14133] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  201.698235][T14132] IPVS: stopping backup sync thread 14133 ...
[  201.752746][T14139] netlink: 'syz.1.2271': attribute type 1 has an invalid length.
[  201.774687][T14135] netlink: 'syz.2.2270': attribute type 8 has an invalid length.
[  201.840154][T14148] lo speed is unknown, defaulting to 1000
[  201.911058][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  201.962683][T14162] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2276'.
[  201.967149][T14162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2276'.
[  202.152829][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2279'.
[  202.189597][T14177] tipc: Resetting bearer <eth:syzkaller0>
[  202.200679][T14177] syzkaller0: left promiscuous mode
[  202.204234][T14177] syzkaller0: left allmulticast mode
[  202.247751][T14177] bond13: left promiscuous mode
[  202.277699][T14177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2279'.
[  202.277703][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  202.300577][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  202.312416][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  202.322491][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  202.348747][T14203] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2286'.
[  202.504969][T14213] lo speed is unknown, defaulting to 1000
[  202.775826][T14221] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  202.779693][T14223] syzkaller0: entered promiscuous mode
[  202.784846][T14223] syzkaller0: entered allmulticast mode
[  202.807796][T14218] tipc: Resetting bearer <eth:syzkaller0>
[  202.824701][T14217] tipc: Resetting bearer <eth:syzkaller0>
[  202.834245][T14217] tipc: Disabling bearer <eth:syzkaller0>
[  202.896429][T14231] IPVS: stopping backup sync thread 14232 ...
[  203.349855][T14258] veth0_to_bond: left allmulticast mode
[  203.352595][T14258] veth9: left promiscuous mode
[  203.859257][T14266] nbd: nbd0 already in use
[  203.867310][T14266] block nbd0: NBD_DISCONNECT
[  203.869578][T14266] block nbd0: Send disconnect failed -22
[  203.881312][T14266] block nbd0: shutting down sockets
[  204.172671][T14284] lo speed is unknown, defaulting to 1000
[  204.466472][T14311] lo speed is unknown, defaulting to 1000
[  204.525170][T14322] lo speed is unknown, defaulting to 1000
[  204.557457][T14311] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  204.563686][T14311] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  204.647360][T14329] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  204.650223][T14328] IPVS: stopping backup sync thread 14329 ...
[  204.809357][T14335] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  204.815917][T14335] syzkaller0: entered promiscuous mode
[  204.818541][T14335] syzkaller0: entered allmulticast mode
[  205.226754][T14382] lo speed is unknown, defaulting to 1000
[  205.269161][T14385] vti1: entered promiscuous mode
[  205.276160][ T5859] Bluetooth: hci2: link tx timeout
[  205.278972][ T5859] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  205.283517][ T5856] Bluetooth: hci2: link tx timeout
[  205.285472][ T5856] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  205.379663][T14392] IPv6: sit2: Disabled Multicast RS
[  205.389101][T14392] sit2: entered allmulticast mode
[  205.449410][T14399] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  205.459616][T14399] syzkaller0: entered promiscuous mode
[  205.461869][T14399] syzkaller0: entered allmulticast mode
[  205.484606][T14399] tipc: Resetting bearer <eth:syzkaller0>
[  205.489694][T14398] tipc: Resetting bearer <eth:syzkaller0>
[  205.501459][T14398] tipc: Disabling bearer <eth:syzkaller0>
[  205.720271][T14413] __nla_validate_parse: 13 callbacks suppressed
[  205.720280][T14413] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2347'.
[  205.727329][T14414] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2347'.
[  205.815193][T14425] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2349'.
[  205.818284][T14425] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  205.821992][T14425] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  205.875581][T14427] bond20: entered promiscuous mode
[  205.877891][T14430] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2351'.
[  205.935341][T14435] !: renamed from dummy0
[  206.113996][T14445] lo speed is unknown, defaulting to 1000
[  206.396549][T14466] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2357'.
[  206.413512][T14469] netlink: 'syz.2.2359': attribute type 1 has an invalid length.
[  206.503291][T14475] syzkaller1: entered promiscuous mode
[  206.508333][T14475] syzkaller1: entered allmulticast mode
[  206.545727][T14477] lo speed is unknown, defaulting to 1000
[  206.657628][T14485] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2363'.
[  206.671030][T14488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2364'.
[  206.680518][T14487] lo speed is unknown, defaulting to 1000
[  206.838179][T14494] lo speed is unknown, defaulting to 1000
[  207.351553][ T5856] Bluetooth: hci2: command 0x0401 tx timeout
[  207.538712][T14517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2373'.
[  207.540102][T14508] lo speed is unknown, defaulting to 1000
[  207.643991][T14523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2374'.
[  207.698850][T14530] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2376'.
[  208.213117][T14571] smc: net device bond0 erased user defined pnetid SYZ2
[  208.254453][T14574] lo speed is unknown, defaulting to 1000
[  208.589201][T14586] netlink: 'syz.2.2388': attribute type 6 has an invalid length.
[  208.636795][T14588] netlink: 'syz.1.2392': attribute type 1 has an invalid length.
[  208.655797][T14588] 8021q: adding VLAN 0 to HW filter on device bond15
[  208.671939][T14588] xfrm2: entered promiscuous mode
[  208.673843][T14588] xfrm2: entered allmulticast mode
[  208.717862][T14601] netlink: 'syz.0.2393': attribute type 6 has an invalid length.
[  208.733801][T14590] bond15: (slave gretap3): making interface the new active one
[  208.737080][T14590] bond15: (slave gretap3): Enslaving as an active interface with an up link
[  208.743749][T14601] netlink: 'syz.0.2393': attribute type 12 has an invalid length.
[  209.368885][T14759] xfrm0: entered promiscuous mode
[  209.378249][T14759] xfrm0: entered allmulticast mode
[  209.659326][T14838] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  209.665929][T14838] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  209.751591][T14857] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  209.758108][T14854] IPVS: stopping backup sync thread 14857 ...
[  209.844464][T14864] syzkaller1: entered promiscuous mode
[  209.846379][T14864] syzkaller1: entered allmulticast mode
[  209.849698][T14865] netlink: 'syz.2.2409': attribute type 10 has an invalid length.
[  209.927268][T14865] veth0_vlan: left promiscuous mode
[  209.930985][T14865] veth0_vlan: entered promiscuous mode
[  209.945016][T14865] team0: Device veth0_vlan failed to register rx_handler
[  210.000256][T14867] lo speed is unknown, defaulting to 1000
[  210.308621][T14884] lo speed is unknown, defaulting to 1000
[  210.918597][T14936] lo speed is unknown, defaulting to 1000
[  211.096822][T14947] __nla_validate_parse: 17 callbacks suppressed
[  211.096839][T14947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2426'.
[  211.304182][T14954] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  211.308362][T14953] IPVS: stopping backup sync thread 14954 ...
[  211.343277][T14953] netlink: 'syz.0.2427': attribute type 1 has an invalid length.
[  211.346041][T14953] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.2427'.
[  211.392940][T14957] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  211.399451][T14956] IPVS: stopping backup sync thread 14957 ...
[  211.497633][T14962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2430'.
[  211.528493][T14966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2431'.
[  211.529161][T14965] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2432'.
[  211.537063][T14965] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  211.539932][T14965] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  211.582377][T14965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2432'.
[  211.607282][T14977] sctp: [Deprecated]: syz.0.2435 (pid 14977) Use of int in maxseg socket option.
[  211.607282][T14977] Use struct sctp_assoc_value instead
[  211.692741][T14988] tipc: Enabling of bearer <ib:caif0> rejected, failed to enable media
[  211.696319][T14988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2439'.
[  211.729404][T14988] bond16: entered promiscuous mode
[  211.731807][T14988] 8021q: adding VLAN 0 to HW filter on device bond16
[  211.753352][T14990] syz.1.2439 (14990) used obsolete PPPIOCDETACH ioctl
[  211.754667][T14991] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[  211.886018][T15007] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2444'.
[  211.890636][T15007] netlink: 'syz.0.2444': attribute type 4 has an invalid length.
[  211.895024][T15003] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2443'.
[  211.931767][T15015] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2446'.
[  212.046523][T15032] vlan2: entered allmulticast mode
[  212.048888][T15032] bond21: entered allmulticast mode
[  212.076572][T15033] lo speed is unknown, defaulting to 1000
[  212.107089][T15044] macvtap2: entered promiscuous mode
[  212.109004][T15044] erspan0: entered promiscuous mode
[  212.121449][T15044] macvtap2: entered allmulticast mode
[  212.123340][T15044] erspan0: entered allmulticast mode
[  212.144357][T15044] erspan0: left allmulticast mode
[  212.146166][T15044] erspan0: left promiscuous mode
[  212.150155][T15047] sit0: entered promiscuous mode
[  212.154301][T15047] netlink: 'syz.0.2456': attribute type 1 has an invalid length.
[  212.221937][T15053] netlink: 'syz.0.2459': attribute type 9 has an invalid length.
[  212.274442][T15054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  212.522896][T15070] sit0: left promiscuous mode
[  212.821872][T15074] bond1: option mode: unable to set because the bond device has slaves
[  212.833156][T15074] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  212.837562][T15074] bond1: (slave macvlan4): Enslaving as an active interface with an up link
[  212.880755][T15078] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  212.885873][T15076] IPVS: stopping backup sync thread 15078 ...
[  212.905619][T15082] netlink: 'syz.2.2467': attribute type 1 has an invalid length.
[  212.926287][T15082] bond26: entered promiscuous mode
[  212.928170][T15082] 8021q: adding VLAN 0 to HW filter on device bond26
[  212.938230][T15085] nbd: must specify a device to reconfigure
[  212.950608][T15082] 8021q: adding VLAN 0 to HW filter on device bond27
[  212.954030][T15082] bond26: (slave bond27): making interface the new active one
[  212.957013][T15082] bond27: entered promiscuous mode
[  212.959750][T15082] bond26: (slave bond27): Enslaving as an active interface with an up link
[  213.151671][T15101] lo speed is unknown, defaulting to 1000
[  213.156834][T15100] lo speed is unknown, defaulting to 1000
[  213.368228][T15107] ipvlan4: entered promiscuous mode
[  213.380581][T15111] netlink: 'syz.0.2475': attribute type 10 has an invalid length.
[  213.384162][T15111] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  213.476609][T15124] IPVS: stopping master sync thread 10904 ...
[  213.568001][T15135] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  213.571114][T15134] IPVS: stopping backup sync thread 15135 ...
[  213.622525][T15138] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  213.625488][T15138] syzkaller0: entered promiscuous mode
[  213.627988][T15138] syzkaller0: entered allmulticast mode
[  213.643614][T15138] tipc: Resetting bearer <eth:syzkaller0>
[  213.646869][T15137] tipc: Resetting bearer <eth:syzkaller0>
[  213.655730][T15137] tipc: Disabling bearer <eth:syzkaller0>
[  213.820838][T15143] lo speed is unknown, defaulting to 1000
[  213.858395][T15143] netlink: 'syz.2.2487': attribute type 4 has an invalid length.
[  213.938467][T15144] netlink: 'syz.2.2487': attribute type 4 has an invalid length.
[  214.401824][T15150] team0: Refused to change device type
[  214.571294][T15154] tap0: tun_chr_ioctl cmd 1074025676
[  214.576561][T15154] tap0: owner set to 0
[  214.578334][T15154] tap0: tun_chr_ioctl cmd 1342215170
[  214.787359][T15173] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  214.839758][T15173] openvswitch: netlink: Missing key (keys=40, expected=80)
[  214.966542][T15186] netlink: 'syz.0.2500': attribute type 10 has an invalid length.
[  215.014721][T15203] !: entered promiscuous mode
[  215.022218][T15203] bridge2: port 1(macvlan2) entered blocking state
[  215.025445][T15203] bridge2: port 1(macvlan2) entered disabled state
[  215.027670][T15203] macvlan2: entered allmulticast mode
[  215.029433][T15203] !: entered allmulticast mode
[  215.035657][T15203] macvlan2: entered promiscuous mode
[  215.038629][T15203] bridge2: mtu less than device minimum
[  215.529184][T15240] lo speed is unknown, defaulting to 1000
[  215.857029][T15265] netlink: 'syz.2.2522': attribute type 1 has an invalid length.
[  215.999510][T15268] lo speed is unknown, defaulting to 1000
[  216.204782][T15274] __nla_validate_parse: 22 callbacks suppressed
[  216.204792][T15274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2525'.
[  216.210036][T15274] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2525'.
[  216.370848][T15290] IPVS: stopping backup sync thread 15291 ...
[  216.373652][T15291] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  216.384305][T15290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2530'.
[  216.389755][T15289] Can't find ip_set type ash:}p,port,ip
[  216.456631][T15293] netlink: 'syz.0.2529': attribute type 4 has an invalid length.
[  216.463585][T15300] openvswitch: netlink: Flow actions attr not present in new flow.
[  216.527680][T15311] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  216.566902][T15316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2536'.
[  216.577463][T15310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2532'.
[  216.967928][T15342] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  216.971276][T15342] IPv6: NLM_F_CREATE should be set when creating new route
[  216.974363][T15342] IPv6: NLM_F_CREATE should be set when creating new route
[  216.984406][T15351] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  216.987770][T15342] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  216.991002][T15351] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  217.100610][T15362] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  217.185803][T15366] 8021q: adding VLAN 0 to HW filter on device bond17
[  217.404598][T15383] syzkaller1: entered promiscuous mode
[  217.406618][T15383] syzkaller1: entered allmulticast mode
[  217.429798][T15385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2557'.
[  217.436658][T15385] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2557'.
[  217.439669][T15385] validate_nla: 4 callbacks suppressed
[  217.439680][T15385] netlink: 'syz.1.2557': attribute type 7 has an invalid length.
[  217.445041][T15385] netlink: 'syz.1.2557': attribute type 8 has an invalid length.
[  217.447734][T15385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2557'.
[  217.501826][T15389] netlink: 'syz.0.2558': attribute type 4 has an invalid length.
[  217.582389][T15394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2560'.
[  217.644551][T15404] lo speed is unknown, defaulting to 1000
[  217.655122][T15406] macsec3: entered promiscuous mode
[  217.656972][T15406] macsec0: entered promiscuous mode
[  217.658813][T15406] macsec3: entered allmulticast mode
[  217.661106][T15406] macsec0: entered allmulticast mode
[  217.706165][T15409] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2565'.
[  217.855099][T15424] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 3, id = 0
[  217.859746][T15423] IPVS: stopping backup sync thread 15424 ...
[  218.698977][T15475] syzkaller0: entered promiscuous mode
[  218.701183][T15475] syzkaller0: entered allmulticast mode
[  218.704400][T15474] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  218.731380][T15478] tipc: Resetting bearer <eth:syzkaller0>
[  218.748316][T15478] tipc: Disabling bearer <eth:syzkaller0>
[  218.809775][T15487] netlink: 'syz.1.2586': attribute type 1 has an invalid length.
[  218.828136][T15489] netlink: 'syz.0.2587': attribute type 2 has an invalid length.
[  218.944634][T15503] lo speed is unknown, defaulting to 1000
[  219.053605][T15510] netlink: 'syz.2.2593': attribute type 1 has an invalid length.
[  219.065029][T15508] syzkaller0: entered promiscuous mode
[  219.067257][T15508] syzkaller0: entered allmulticast mode
[  219.073445][T15508] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  219.117868][T15507] tipc: Resetting bearer <eth:syzkaller0>
[  220.087874][T15507] tipc: Disabling bearer <eth:syzkaller0>
[  220.151134][ T5856] Bluetooth: hci2: command 0x0401 tx timeout
[  220.158951][T15527] netlink: 'syz.0.2597': attribute type 1 has an invalid length.
[  220.206968][T15527] 8021q: adding VLAN 0 to HW filter on device bond22
[  220.270551][T15527] veth13: entered promiscuous mode
[  220.276514][T15527] bond22: (slave veth13): Enslaving as an active interface with an up link
[  220.340818][T15547] netlink: 'syz.0.2604': attribute type 1 has an invalid length.
[  220.373208][T15547] 8021q: adding VLAN 0 to HW filter on device bond23
[  220.373971][T15553] netlink: 'syz.1.2606': attribute type 1 has an invalid length.
[  220.393277][T15553] 8021q: adding VLAN 0 to HW filter on device bond18
[  220.402753][T15547] veth15: entered promiscuous mode
[  220.407016][T15547] bond23: (slave veth15): Enslaving as an active interface with an up link
[  220.424274][T15554] 8021q: adding VLAN 0 to HW filter on device bond18
[  220.427319][T15554] bond18: (slave vxcan1): The slave device specified does not support setting the MAC address
[  220.431633][T15554] bond18: (slave vxcan1): Error -95 calling set_mac_address
[  220.444575][T15553] bond18: (slave vxcan1): The slave device specified does not support setting the MAC address
[  220.448361][T15553] bond18: (slave vxcan1): Error -95 calling set_mac_address
[  220.483501][T15557] netlink: 'syz.2.2607': attribute type 13 has an invalid length.
[  220.573847][T15571] IPVS: stopping backup sync thread 15311 ...
[  220.585508][T15569] : renamed from vlan0
[  220.650685][T15584] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[  220.659779][T15584] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  220.666179][T15585] hsr_slave_0: left promiscuous mode
[  220.771648][T15591] lo speed is unknown, defaulting to 1000
[  220.896284][T15600] lo speed is unknown, defaulting to 1000
[  220.976816][T15604] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  221.053760][T15604] 8021q: adding VLAN 0 to HW filter on device bond24
[  221.096473][T15616] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  221.100788][T15615] IPVS: stopping backup sync thread 15616 ...
[  221.364854][T15647] ip6gre1: entered allmulticast mode
[  221.370853][T15649] syz.2.2632: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  221.379736][T15649] CPU: 1 UID: 0 PID: 15649 Comm: syz.2.2632 Not tainted syzkaller #0 PREEMPT(full) 
[  221.379748][T15649] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  221.379753][T15649] Call Trace:
[  221.379756][T15649]  <TASK>
[  221.379759][T15649]  dump_stack_lvl+0x189/0x250
[  221.379773][T15649]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  221.379785][T15649]  ? __pfx_dump_stack_lvl+0x10/0x10
[  221.379793][T15649]  ? __pfx__printk+0x10/0x10
[  221.379804][T15649]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  221.379813][T15649]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  221.379824][T15649]  warn_alloc+0x214/0x310
[  221.379838][T15649]  ? __pfx_warn_alloc+0x10/0x10
[  221.379853][T15649]  ? __get_vm_area_node+0x28f/0x300
[  221.379864][T15649]  ? xskq_create+0xbf/0x170
[  221.379872][T15649]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  221.379895][T15649]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  221.379906][T15649]  ? xskq_create+0x56/0x170
[  221.379914][T15649]  ? __kasan_kmalloc+0x93/0xb0
[  221.379925][T15649]  vmalloc_user_noprof+0xad/0xf0
[  221.379936][T15649]  ? xskq_create+0xbf/0x170
[  221.379943][T15649]  xskq_create+0xbf/0x170
[  221.379951][T15649]  xsk_init_queue+0xb0/0x110
[  221.379959][T15649]  xsk_setsockopt+0x57b/0x8d0
[  221.379971][T15649]  ? __pfx_xsk_setsockopt+0x10/0x10
[  221.379982][T15649]  ? __pfx_aa_sk_perm+0x10/0x10
[  221.379994][T15649]  ? __fget_files+0x2a/0x420
[  221.380000][T15649]  ? aa_sock_opt_perm+0xff/0x1b0
[  221.380009][T15649]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  221.380017][T15649]  ? __pfx_xsk_setsockopt+0x10/0x10
[  221.380028][T15649]  do_sock_setsockopt+0x17c/0x1b0
[  221.380040][T15649]  __x64_sys_setsockopt+0x13f/0x1b0
[  221.380051][T15649]  do_syscall_64+0xfa/0x3b0
[  221.380085][T15649]  ? lockdep_hardirqs_on+0x9c/0x150
[  221.380093][T15649]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.380105][T15649]  ? exc_page_fault+0x9f/0xf0
[  221.380113][T15649]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.380120][T15649] RIP: 0033:0x7f3284b8eba9
[  221.380127][T15649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  221.380134][T15649] RSP: 002b:00007f3285ad7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  221.380142][T15649] RAX: ffffffffffffffda RBX: 00007f3284dd5fa0 RCX: 00007f3284b8eba9
[  221.380147][T15649] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003
[  221.380151][T15649] RBP: 00007f3284c11e19 R08: 0000000000000004 R09: 0000000000000000
[  221.380156][T15649] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  221.380160][T15649] R13: 00007f3284dd6038 R14: 00007f3284dd5fa0 R15: 00007fff9dc950b8
[  221.380172][T15649]  </TASK>
[  221.380288][T15649] Mem-Info:
[  221.480591][T15649] active_anon:8623 inactive_anon:0 isolated_anon:0
[  221.480591][T15649]  active_file:1504 inactive_file:38307 isolated_file:0
[  221.480591][T15649]  unevictable:1768 dirty:103 writeback:0
[  221.480591][T15649]  slab_reclaimable:10979 slab_unreclaimable:123166
[  221.480591][T15649]  mapped:21440 shmem:5297 pagetables:1118
[  221.480591][T15649]  sec_pagetables:0 bounce:0
[  221.480591][T15649]  kernel_misc_reclaimable:0
[  221.480591][T15649]  free:222078 free_pcp:18039 free_cma:0
[  221.495521][T15649] Node 0 active_anon:22232kB inactive_anon:0kB active_file:2928kB inactive_file:134320kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46948kB dirty:280kB writeback:0kB shmem:13568kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6852kB pagetables:2472kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  221.505858][T15649] Node 1 active_anon:12260kB inactive_anon:0kB active_file:3088kB inactive_file:18908kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38812kB dirty:132kB writeback:0kB shmem:7620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8724kB pagetables:2068kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  221.516787][T15649] Node 0 DMA free:7168kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  221.526834][T15649] lowmem_reserve[]: 0 811 811 811 811
[  221.528781][T15649] Node 0 DMA32 free:133124kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22436kB inactive_anon:0kB active_file:2928kB inactive_file:134320kB unevictable:3536kB writepending:280kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:37208kB local_pcp:20572kB free_cma:0kB
[  221.539611][T15649] lowmem_reserve[]: 0 0 0 0 0
[  221.541506][T15649] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  221.551247][T15649] lowmem_reserve[]: 0 0 854 854 854
[  221.552937][T15649] Node 1 Normal free:289404kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12260kB inactive_anon:0kB active_file:3088kB inactive_file:18908kB unevictable:3536kB writepending:132kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:35188kB local_pcp:16976kB free_cma:0kB
[  221.562944][T15649] lowmem_reserve[]: 0 0 0 0 0
[  221.564547][T15649] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 1*4096kB (M) = 7168kB
[  221.568865][T15649] Node 0 DMA32: 458*4kB (UM) 694*8kB (UME) 134*16kB (UE) 348*32kB (UME) 165*64kB (UME) 58*128kB (U) 27*256kB (UM) 19*512kB (UM) 10*1024kB (UM) 5*2048kB (UM) 14*4096kB (UM) = 133112kB
[  221.584152][T15659] __nla_validate_parse: 18 callbacks suppressed
[  221.584164][T15659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2634'.
[  221.591121][T15649] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  221.596349][T15649] Node 1 Normal: 319*4kB (M) 1280*8kB (UME) 868*16kB (UME) 75*32kB (ME) 206*64kB (UME) 61*128kB (UME) 26*256kB (UM) 21*512kB (UME) 18*1024kB (UM) 16*2048kB (UME) 42*4096kB (UM) = 289436kB
[  221.613942][T15649] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  221.621125][T15649] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  221.624240][T15649] 43150 total pagecache pages
[  221.626061][T15649] 0 pages in swap cache
[  221.649635][T15649] Free swap  = 124996kB
[  221.652890][T15649] Total swap = 124996kB
[  221.658712][T15649] 786301 pages RAM
[  221.660053][T15649] 0 pages HighMem/MovableOnly
[  221.669837][T15649] 241346 pages reserved
[  221.672395][T15649] 0 pages cma reserved
[  221.752726][T15666] syzkaller0: entered promiscuous mode
[  221.755390][T15666] syzkaller0: entered allmulticast mode
[  222.775475][T15689] IPVS: set_ctl: invalid protocol: 47 172.20.20.43:20002
[  222.785090][T15686] lo speed is unknown, defaulting to 1000
[  223.069411][T15706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2646'.
[  223.101487][T15715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2645'.
[  223.127236][T15706] lo speed is unknown, defaulting to 1000
[  223.466633][T15741] validate_nla: 3 callbacks suppressed
[  223.466647][T15741] netlink: 'syz.1.2646': attribute type 6 has an invalid length.
[  223.472656][T15747] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2655'.
[  223.476549][T15747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2655'.
[  223.479847][T15747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2655'.
[  223.544017][T15749] netlink: 'syz.2.2656': attribute type 10 has an invalid length.
[  223.548216][T15749] team0: Cannot enslave team device to itself
[  223.770778][T15761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2659'.
[  223.996552][T15766] netlink: 'syz.1.2661': attribute type 13 has an invalid length.
[  224.192441][T15772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2664'.
[  224.246551][T15787] netlink: 'syz.1.2668': attribute type 5 has an invalid length.
[  224.249451][T15787] netlink: 'syz.1.2668': attribute type 5 has an invalid length.
[  224.365928][T15799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2672'.
[  224.367283][T15800] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2672'.
[  224.368826][T15799] netlink: 'syz.0.2672': attribute type 30 has an invalid length.
[  225.221278][T15826] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  225.222759][T15823] IPVS: stopping backup sync thread 15826 ...
[  225.305451][T15834] lo speed is unknown, defaulting to 1000
[  225.568023][T15851] lo speed is unknown, defaulting to 1000
[  225.734263][T15867] netlink: 'syz.2.2688': attribute type 1 has an invalid length.
[  225.752724][T15867] workqueue: Failed to create a rescuer kthread for wq "bond29": -EINTR
[  225.754396][T15870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  225.761628][T15870] syzkaller0: Caught tx_queue_len zero misconfig
[  225.868497][T15878] syzkaller1: entered promiscuous mode
[  225.870502][T15878] syzkaller1: entered allmulticast mode
[  226.055821][T15882] netlink: 'syz.2.2692': attribute type 1 has an invalid length.
[  226.055821][T15883] netlink: 'syz.2.2692': attribute type 1 has an invalid length.
[  226.075992][T15883] 8021q: adding VLAN 0 to HW filter on device bond29
[  226.088696][T15882] vlan2: entered allmulticast mode
[  226.093506][T15882] veth1: entered allmulticast mode
[  226.095860][T15882] bond29: (slave vlan2): Opening slave failed
[  226.197914][T15889] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  226.446264][T15917] IPVS: sync thread started: state = BACKUP, mcast_ifn = ipvlan0, syncid = 4, id = 0
[  226.473977][T15924] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  226.474179][T15922] IPVS: stopping backup sync thread 15924 ...
[  226.573421][T15933] veth1: Caught tx_queue_len zero misconfig
[  226.652748][T15945] __nla_validate_parse: 12 callbacks suppressed
[  226.652758][T15945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2709'.
[  226.667551][T15945] geneve6: left promiscuous mode
[  226.669524][T15945] geneve6: left allmulticast mode
[  226.678698][T15945] bond15: left promiscuous mode
[  226.680487][T15945] bond15: left allmulticast mode
[  226.688713][T15945] bond17: left promiscuous mode
[  226.693260][T15945] bond18: left promiscuous mode
[  226.698625][T15945] bond20: left promiscuous mode
[  226.703996][T15945] !: left promiscuous mode
[  226.707031][T15945] macsec0: left allmulticast mode
[  226.709172][T15945] macsec0: left promiscuous mode
[  226.711440][T15945] macsec3: left promiscuous mode
[  226.713456][T15945] macsec3: left allmulticast mode
[  226.721780][T15945] veth13: left promiscuous mode
[  226.729732][T15945] veth15: left promiscuous mode
[  226.736096][T15945] ip6gre1: left allmulticast mode
[  226.740538][ T5865] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  226.744139][ T5865] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[  226.748015][ T5865] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  226.751106][ T5865] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[  226.753924][ T5865] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  226.756675][ T5865] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20004 - 0
[  226.759762][ T5865] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  226.764399][ T5865] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20004 - 0
[  226.770827][T15945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2709'.
[  226.959480][T15969] syzkaller0: entered promiscuous mode
[  226.962563][T15969] syzkaller0: entered allmulticast mode
[  227.100548][T15971] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2717'.
[  227.103893][T15971] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2717'.
[  227.112957][T15971] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  227.117499][T15971] gretap2: entered promiscuous mode
[  227.119830][T15971] gretap2: entered allmulticast mode
[  227.610031][T15991] netlink: 'syz.2.2723': attribute type 1 has an invalid length.
[  227.652707][T15989] tipc: New replicast peer: 255.255.255.255
[  227.656130][T15989] tipc: Enabled bearer <udp:syz2>, priority 10
[  227.683095][T15994] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2724'.
[  227.888098][T16012] ip6gretap5: default qdisc (pfifo_fast) fail, fallback to noqueue
[  227.904129][T16011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2728'.
[  227.907932][T16011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2728'.
[  227.993879][T16021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2732'.
[  227.997709][T16021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2732'.
[  228.007855][T16021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2732'.
[  228.022135][T16024] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  228.106926][T16029] vxcan1: entered allmulticast mode
[  228.117487][T16028] vxcan5: entered allmulticast mode
[  228.284839][T16055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  228.365049][T16061] vlan0: entered allmulticast mode
[  228.367021][T16061] veth1: entered allmulticast mode
[  228.404920][T16064] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  228.414112][T16064] IPVS: stopping backup sync thread 15917 ...
[  228.458214][T16067] bond0: (slave rose0): Error: Device can not be enslaved while up
[  228.507920][T16070] netlink: 'syz.1.2745': attribute type 1 has an invalid length.
[  228.530091][T16070] bond19: (slave vxcan1): The slave device specified does not support setting the MAC address
[  228.536883][T16070] bond19: (slave vxcan1): Error -95 calling set_mac_address
[  228.554948][T16071] bond19: (slave vxcan1): The slave device specified does not support setting the MAC address
[  228.559720][T16071] bond19: (slave vxcan1): Error -95 calling set_mac_address
[  228.682595][T16079] lo speed is unknown, defaulting to 1000
[  229.123348][T16089] lo speed is unknown, defaulting to 1000
[  229.185469][T16094] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  229.190129][T16093] IPVS: stopping backup sync thread 16094 ...
[  229.256020][T16099] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  229.260711][T16097] IPVS: stopping backup sync thread 16099 ...
[  229.442888][T16110] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  229.563986][T16129] netlink: 'syz.1.2761': attribute type 1 has an invalid length.
[  229.592589][T16133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  229.625745][T16128] 8021q: adding VLAN 0 to HW filter on device bond20
[  229.628835][T16137] 8021q: adding VLAN 0 to HW filter on device bond7
[  229.637979][T16137] bond13: (slave veth9): Releasing active interface
[  229.653202][T16137] bond14: (slave geneve5): Releasing active interface
[  229.666815][T16137] macvlan2: left allmulticast mode
[  229.675798][T16137] macvlan2: left promiscuous mode
[  229.683024][T16137] bridge2: port 1(macvlan2) entered disabled state
[  229.688594][T16137] bond22: (slave veth13): Releasing backup interface
[  229.699313][T16137] bond23: (slave veth15): Releasing backup interface
[  229.754122][T16150] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  229.819083][T16160] lo: Caught tx_queue_len zero misconfig
[  229.832902][T16158] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  229.838351][T16158] syzkaller0: entered promiscuous mode
[  229.844899][T16158] syzkaller0: entered allmulticast mode
[  229.884218][T16158] tipc: Resetting bearer <eth:syzkaller0>
[  229.888947][T16157] tipc: Resetting bearer <eth:syzkaller0>
[  229.899945][T16157] tipc: Disabling bearer <eth:syzkaller0>
[  230.171756][T16189] lo speed is unknown, defaulting to 1000
[  230.223655][T16191] lo speed is unknown, defaulting to 1000
[  230.256550][T16195] netlink: 'syz.0.2779': attribute type 4 has an invalid length.
[  230.274124][T16195] netlink: 'syz.0.2779': attribute type 4 has an invalid length.
[  230.390355][T16201] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  230.399466][T16199] IPVS: stopping backup sync thread 16201 ...
[  230.503223][T16204] IPVS: stopping backup sync thread 16205 ...
[  230.504356][T16205] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  230.658265][T16208] veth0: entered promiscuous mode
[  230.678806][T16208] veth0 (unregistering): left promiscuous mode
[  231.159653][T16260] netlink: 'syz.0.2792': attribute type 5 has an invalid length.
[  231.696882][T16263] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  231.700615][T16262] IPVS: stopping backup sync thread 16263 ...
[  231.786337][T16267] lo speed is unknown, defaulting to 1000
[  231.820804][T16267] __nla_validate_parse: 25 callbacks suppressed
[  231.820819][T16267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2795'.
[  231.826608][T16267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2795'.
[  231.836389][T16267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2795'.
[  231.839513][T16267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2795'.
[  231.867010][T16272] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  231.867674][T16271] IPVS: stopping backup sync thread 16272 ...
[  231.878123][T16271] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2796'.
[  231.938834][T16276] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2797'.
[  232.003168][T16282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2798'.
[  232.008295][T16282] xfrm0: left promiscuous mode
[  232.010016][T16282] xfrm0: left allmulticast mode
[  232.015857][T16282] vti1: left promiscuous mode
[  232.024499][T16282] sit2: left allmulticast mode
[  232.026671][T16282] macvtap2: left promiscuous mode
[  232.028435][T16282] macvtap2: left allmulticast mode
[  232.030594][T16282] bond26: left promiscuous mode
[  232.034295][T16282] bond27: left promiscuous mode
[  232.052333][T16288] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2801'.
[  232.052434][T16282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2798'.
[  232.113884][T16290] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2802'.
[  232.228452][T16315] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  232.253047][T16319] IPVS: stopping backup sync thread 16315 ...
[  232.419771][T16342] lo speed is unknown, defaulting to 1000
[  232.759615][T16349] bond30: entered promiscuous mode
[  232.762697][T16349] 8021q: adding VLAN 0 to HW filter on device bond30
[  232.833386][T16349] bond30 (unregistering): Released all slaves
[  233.046247][T16368] IPVS: stopping backup sync thread 16369 ...
[  233.048433][T16369] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  233.137506][T16383] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  233.157356][T16380] lo speed is unknown, defaulting to 1000
[  233.323139][T16388] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  233.667148][T16412] lo speed is unknown, defaulting to 1000
[  233.999163][T16426] netlink: 'syz.2.2833': attribute type 6 has an invalid length.
[  234.165296][T16434] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  234.169673][T16432] IPVS: stopping backup sync thread 16434 ...
[  234.288662][T16439] netlink: 'syz.0.2840': attribute type 1 has an invalid length.
[  234.304631][T16439] 8021q: adding VLAN 0 to HW filter on device bond25
[  234.314039][T16439] ipvlan3: entered allmulticast mode
[  234.316084][T16439] bond25: entered allmulticast mode
[  234.363622][T16439] bond25: (slave gretap3): making interface the new active one
[  234.366511][T16439] gretap3: entered allmulticast mode
[  234.368811][T16439] bond25: (slave gretap3): Enslaving as an active interface with an up link
[  235.659800][T16469] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  235.755346][T16490] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  235.759643][T16489] IPVS: stopping backup sync thread 16490 ...
[  236.333108][T16533] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  236.333155][T16532] IPVS: stopping backup sync thread 16533 ...
[  236.728352][T16563] bridge0: entered allmulticast mode
[  236.854531][T16570] netlink: 'syz.0.2876': attribute type 1 has an invalid length.
[  237.164090][T16576] __nla_validate_parse: 26 callbacks suppressed
[  237.164101][T16576] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2878'.
[  237.290171][T16582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2880'.
[  237.402490][T16584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2881'.
[  237.612847][T16592] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  237.617781][T16591] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  237.648429][T16598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2885'.
[  237.702111][T16601] dvmrp8: entered allmulticast mode
[  237.706554][T16600] dvmrp8: left allmulticast mode
[  237.923617][T16631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2896'.
[  237.936239][T16632] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2893'.
[  237.975902][T16635] netlink: 'syz.1.2897': attribute type 2 has an invalid length.
[  238.198210][T16644] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  238.240045][T16644] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  238.561962][T16660] nbd: socks must be embedded in a SOCK_ITEM attr
[  238.565086][T16660] block nbd0: shutting down sockets
[  238.693604][T16664] netlink: 'syz.0.2905': attribute type 1 has an invalid length.
[  238.927549][T16684] netlink: 'syz.1.2910': attribute type 21 has an invalid length.
[  238.930078][T16684] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2910'.
[  238.933691][T16684] netlink: 'syz.1.2910': attribute type 5 has an invalid length.
[  238.936691][T16684] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2910'.
[  239.103501][T16698] syzkaller0: entered promiscuous mode
[  239.105747][T16698] syzkaller0: entered allmulticast mode
[  239.252840][T16704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2915'.
[  239.401763][T16706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2915'.
[  240.149514][T16704] tipc: Resetting bearer <eth:syzkaller0>
[  240.151854][T16704] syzkaller0: left promiscuous mode
[  240.153564][T16704] syzkaller0: left allmulticast mode
[  240.161616][T16704] xfrm2: left promiscuous mode
[  240.163194][T16704] xfrm2: left allmulticast mode
[  240.170715][T16704] bond16: left promiscuous mode
[  240.177202][T16704] ipvlan4: left promiscuous mode
[  240.184096][T16704] vlan0: left allmulticast mode
[  240.187404][T16704] veth1: left allmulticast mode
[  240.195255][T16704] bridge0: left allmulticast mode
[  240.380111][T16722] lo speed is unknown, defaulting to 1000
[  240.460064][T16729] bond30: entered promiscuous mode
[  240.463954][T16729] 8021q: adding VLAN 0 to HW filter on device bond30
[  240.752562][T16750] IPVS: set_ctl: invalid protocol: 36 0.0.0.0:0
[  240.779202][T16753] netlink: 'syz.2.2930': attribute type 13 has an invalid length.
[  241.051499][T16772] bridge10: entered allmulticast mode
[  241.248348][T16776] vxcan0: Master is either lo or non-ether device
[  241.297974][T16780] dvmrp0: entered allmulticast mode
[  241.642760][T16812] netlink: 'syz.0.2946': attribute type 1 has an invalid length.
[  241.670875][T16813] veth1: entered promiscuous mode
[  241.715239][T16814] bond25: (slave gretap3): Releasing active interface
[  241.717522][T16814] gretap3: left allmulticast mode
[  241.728017][T16820] bond0: Device is already in use.
[  241.820434][T16835] IPVS: Unknown mcast interface: veth1_to_bridge
[  241.845915][T16838] netlink: 'syz.1.2954': attribute type 1 has an invalid length.
[  241.920865][T16844] lo speed is unknown, defaulting to 1000
[  242.439617][T16876] __nla_validate_parse: 5 callbacks suppressed
[  242.439627][T16876] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2965'.
[  242.484916][T16876] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2965'.
[  242.538685][T16885] IPVS: Unknown mcast interface: veth1_to_bridge
[  242.559178][T16887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2967'.
[  242.700045][T16894] lo speed is unknown, defaulting to 1000
[  242.969614][T16903] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2970'.
[  243.005083][T16905] ip6tnl0: Caught tx_queue_len zero misconfig
[  243.021704][T16905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2971'.
[  243.079402][T16909] pim6reg: entered allmulticast mode
[  243.087403][T16909] pim6reg: left allmulticast mode
[  243.172816][T16917] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  243.172828][T16912] IPVS: stopping backup sync thread 16917 ...
[  243.526572][T16929] syzkaller0: entered promiscuous mode
[  243.528552][T16929] syzkaller0: entered allmulticast mode
[  244.097007][T16933] bridge8: entered allmulticast mode
[  244.183626][T16938] netlink: 'syz.2.2979': attribute type 1 has an invalid length.
[  244.216281][T16945] netlink: 'syz.0.2981': attribute type 4 has an invalid length.
[  244.320860][T16959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2984'.
[  244.468206][T16974] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2989'.
[  244.503565][T16975] lo speed is unknown, defaulting to 1000
[  244.555137][T16988] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2994'.
[  244.559967][T16988] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2994'.
[  244.609723][T16990] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2995'.
[  244.640644][T16990] netlink: 'syz.1.2995': attribute type 3 has an invalid length.
[  244.797298][T17005] netlink: 'syz.2.3001': attribute type 27 has an invalid length.
[  244.816073][T17005] bond30: left promiscuous mode
[  244.818807][T17005] bridge10: left allmulticast mode
[  244.876239][T17011] netlink: 'syz.2.3003': attribute type 5 has an invalid length.
[  244.885260][T17011] netlink: 'syz.2.3003': attribute type 10 has an invalid length.
[  244.901046][T17012] netlink: 'syz.2.3003': attribute type 10 has an invalid length.
[  245.018632][T17020] !: entered promiscuous mode
[  245.024571][T17020] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  245.083524][T17029] IPVS: stopping backup sync thread 17030 ...
[  245.083678][T17030] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  245.233532][T17042] lo speed is unknown, defaulting to 1000
[  245.299454][T17044] bond0: entered allmulticast mode
[  245.386696][T17060] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  245.428576][T17068] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  245.829694][T17106] IPVS: Unknown mcast interface: veth1_to_bridge
[  245.914652][T17115] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  245.915186][T17114] IPVS: Unknown mcast interface: veth1_to_bridge
[  246.050560][T17126] IPVS: Unknown mcast interface: veth1_to_bridge
[  246.299862][   T33] audit: type=1800 audit(1758472643.528:3): pid=17140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3035" name="memory.events" dev="tmpfs" ino=4776 res=0 errno=0
[  246.591516][T17164] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  246.591598][T17162] IPVS: stopping backup sync thread 17164 ...
[  246.653647][T17168] validate_nla: 4 callbacks suppressed
[  246.653660][T17168] netlink: 'syz.1.3043': attribute type 1 has an invalid length.
[  246.663135][T17168] 8021q: adding VLAN 0 to HW filter on device bond0
[  246.675755][T17168] veth13: entered promiscuous mode
[  246.713378][T17170] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  246.717467][T17170] syzkaller0: entered promiscuous mode
[  246.719750][T17170] syzkaller0: entered allmulticast mode
[  246.988238][T17195] workqueue: Failed to create a rescuer kthread for wq "bond31": -EINTR
[  246.988924][T17196] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  247.147673][T17219] IPVS: stopping backup sync thread 17115 ...
[  247.205950][T17220] lo speed is unknown, defaulting to 1000
[  247.276962][T17236] netlink: 'syz.1.3062': attribute type 2 has an invalid length.
[  247.288663][T17236] : entered promiscuous mode
[  247.564459][T17233] netlink: 'syz.0.3057': attribute type 6 has an invalid length.
[  247.656811][T17262] __nla_validate_parse: 21 callbacks suppressed
[  247.656926][T17262] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3070'.
[  247.869107][T17289] lo speed is unknown, defaulting to 1000
[  248.326761][T17307] lo speed is unknown, defaulting to 1000
[  248.419733][T17303] delete_channel: no stack
[  248.691395][T17327] netlink: 'syz.0.3085': attribute type 13 has an invalid length.
[  248.693961][T17327] netlink: 'syz.0.3085': attribute type 17 has an invalid length.
[  248.703088][T17327] gretap0: refused to change device tx_queue_len
[  248.705509][T17327] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  248.745563][T17327] netlink: 'syz.0.3085': attribute type 2 has an invalid length.
[  248.748246][T17327] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3085'.
[  248.791848][T17333] ip6gre1: entered allmulticast mode
[  248.815283][T17337] IPVS: Unknown mcast interface: veth1_to_bridge
[  248.845386][T17339] netlink: 964 bytes leftover after parsing attributes in process `syz.0.3089'.
[  248.855164][T17339] tap0: tun_chr_ioctl cmd 1074025677
[  248.856986][T17339] tap0: linktype set to 270
[  248.859507][T17339] netlink: 964 bytes leftover after parsing attributes in process `syz.0.3089'.
[  249.027357][T17369] RDS: rds_bind could not find a transport for fe80::2a, load rds_tcp or rds_rdma?
[  249.061841][T17372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3097'.
[  249.157428][T17390] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3102'.
[  249.179404][T17392] lo speed is unknown, defaulting to 1000
[  249.236027][T17401] lo speed is unknown, defaulting to 1000
[  249.305875][T17392] netlink: 'syz.0.3103': attribute type 16 has an invalid length.
[  249.309110][T17392] netlink: 'syz.0.3103': attribute type 17 has an invalid length.
[  249.557416][T17423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3111'.
[  249.564394][T17423] !: left promiscuous mode
[  249.589789][T17423] ip6gre1: left allmulticast mode
[  250.008954][T17427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3112'.
[  250.275918][T17439] netlink: 'syz.0.3114': attribute type 8 has an invalid length.
[  250.287178][T17440] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  250.292253][T17438] IPVS: stopping backup sync thread 17440 ...
[  250.348945][T17446] tipc: MTU too low for tipc bearer
[  250.396979][T17454] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3120'.
[  250.453812][T17461] IPVS: Unknown mcast interface: veth1_to_bridge
[  250.462994][T17461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3123'.
[  250.527688][T17468] netlink: 'syz.1.3125': attribute type 1 has an invalid length.
[  250.596682][T17487] bond22: (slave bridge10): making interface the new active one
[  250.604543][T17487] bond22: (slave bridge10): Enslaving as an active interface with an up link
[  250.665625][T17471] lo speed is unknown, defaulting to 1000
[  250.670399][T17470] lo speed is unknown, defaulting to 1000
[  251.064582][T17521] lo speed is unknown, defaulting to 1000
[  251.156738][T17518] lo speed is unknown, defaulting to 1000
[  251.264448][T17538] IPVS: Unknown mcast interface: veth1_to_bridge
[  251.303638][T17540] lo speed is unknown, defaulting to 1000
[  251.440875][T17550] lo speed is unknown, defaulting to 1000
[  252.014533][T17611] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  252.016173][T17609] IPVS: stopping backup sync thread 17611 ...
[  252.067002][T17618] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  252.071356][T17617] IPVS: stopping backup sync thread 17618 ...
[  252.165254][T17628] openvswitch: netlink: Message has 8 unknown bytes.
[  252.313053][T17630] ieee802154 phy0 wpan0: encryption failed: -22
[  252.364253][T17647] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  252.368406][T17645] IPVS: stopping backup sync thread 17647 ...
[  252.374904][T17645] validate_nla: 3 callbacks suppressed
[  252.374914][T17645] netlink: 'syz.2.3173': attribute type 66 has an invalid length.
[  252.673599][T17669] 8021q: adding VLAN 0 to HW filter on device bond31
[  252.676290][T17669] bridge0: port 1(bond31) entered blocking state
[  252.682429][T17669] bridge0: port 1(bond31) entered disabled state
[  252.684647][T17669] bond31: entered allmulticast mode
[  252.687791][T17669] bond31: entered promiscuous mode
[  252.959470][T17723] bond0: (slave 0!): Releasing backup interface
[  252.963859][T17723] bond5: (slave geneve4): Releasing active interface
[  252.967494][T17723] bond1: (slave ip6gretap4): Releasing backup interface
[  252.971226][T17723] bond1: (slave ip6gretap4): the permanent HWaddr of slave - 06:b2:c8:8e:88:43 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  252.978377][T17723] bond15: (slave gretap3): Releasing active interface
[  252.983872][T17723] bond1: (slave macvlan4): Releasing backup interface
[  252.989070][T17723] bond22: (slave bridge10): Releasing active interface
[  253.034982][T17723] syzkaller0: left promiscuous mode
[  253.036796][T17723] syzkaller0: left allmulticast mode
[  253.298957][T17745] __nla_validate_parse: 10 callbacks suppressed
[  253.298968][T17745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3199'.
[  253.306727][T17745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3199'.
[  253.355166][T17747] pim6reg1: entered allmulticast mode
[  253.420317][T17753] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  253.427411][T17753] syzkaller0: entered promiscuous mode
[  253.430085][T17753] syzkaller0: entered allmulticast mode
[  253.457855][T17755] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3203'.
[  253.540836][T17766] syzkaller1: entered promiscuous mode
[  253.544188][T17766] syzkaller1: entered allmulticast mode
[  253.549266][T17767] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  253.552963][T17766] IPVS: stopping backup sync thread 17767 ...
[  253.785766][T17778] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  253.865156][T17789] netlink: 'syz.0.3211': attribute type 1 has an invalid length.
[  253.868564][T17789] netlink: 'syz.0.3211': attribute type 10 has an invalid length.
[  253.913927][T17797] netlink: 'syz.2.3214': attribute type 1 has an invalid length.
[  254.090817][T17816] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3220'.
[  254.094329][T17816] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3220'.
[  254.094499][T17817] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  254.129825][T17820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3221'.
[  254.157480][T17823] pimreg: tun_chr_ioctl cmd 35111
[  254.259712][T17827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3223'.
[  254.325006][T17833] netlink: 'syz.0.3224': attribute type 1 has an invalid length.
[  254.361586][T17833] 8021q: adding VLAN 0 to HW filter on device bond27
[  254.366323][T17833] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  254.366427][T17836] IPVS: stopping backup sync thread 17778 ...
[  254.384973][T17833] veth1: entered promiscuous mode
[  254.389541][T17833] bond27: (slave veth1): Enslaving as an active interface with a down link
[  254.544546][T17843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3226'.
[  254.603612][T17842] netlink: 'syz.0.3228': attribute type 13 has an invalid length.
[  254.699046][T17851] macsec3: entered promiscuous mode
[  254.701188][T17851] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  254.703773][T17851] macsec3: entered allmulticast mode
[  254.705689][T17851] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  254.734155][T17855] netlink: 'syz.1.3232': attribute type 4 has an invalid length.
[  254.740529][T17857] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3231'.
[  254.794890][T17861] syzkaller1: entered promiscuous mode
[  254.797286][T17861] syzkaller1: entered allmulticast mode
[  254.828344][T17867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3236'.
[  255.147744][T17879] lo speed is unknown, defaulting to 1000
[  255.246667][T17890] IPVS: stopping backup sync thread 17892 ...
[  255.250229][T17892] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  255.316101][T17896] macsec4: entered promiscuous mode
[  255.322516][T17896] !: entered promiscuous mode
[  255.326131][T17896] macsec4: entered allmulticast mode
[  255.327979][T17896] !: entered allmulticast mode
[  255.410093][T17899] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  255.429576][T17899] macsec5: entered promiscuous mode
[  255.441911][T17899] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  255.444987][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.454112][T17899] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  255.783756][T17914] lo speed is unknown, defaulting to 1000
[  255.813446][T17919] netlink: 'syz.2.3247': attribute type 4 has an invalid length.
[  255.863069][T17919] netlink: 'syz.2.3247': attribute type 4 has an invalid length.
[  255.977366][T17928] netlink: 'syz.0.3250': attribute type 6 has an invalid length.
[  256.096185][T17940] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.161466][T17936] lo speed is unknown, defaulting to 1000
[  256.358438][T17958] lo speed is unknown, defaulting to 1000
[  256.548820][T17966] lo speed is unknown, defaulting to 1000
[  256.993232][T17987] IPVS: stopping backup sync thread 17988 ...
[  257.261431][T18002] lo speed is unknown, defaulting to 1000
[  257.374373][T18014] veth17: entered promiscuous mode
[  257.465693][T18023] lo speed is unknown, defaulting to 1000
[  257.587923][T18031] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  257.592622][T18029] IPVS: stopping backup sync thread 18031 ...
[  257.757591][T18043] validate_nla: 2 callbacks suppressed
[  257.757607][T18043] netlink: 'syz.2.3283': attribute type 1 has an invalid length.
[  257.784485][T18043] 8021q: adding VLAN 0 to HW filter on device bond32
[  257.823187][T18043] bond32: (slave gretap3): making interface the new active one
[  257.826409][T18043] bond32: (slave gretap3): Enslaving as an active interface with an up link
[  258.131457][T18055] nbd: nbd1 already in use
[  258.174919][T18055] netlink: 'syz.1.3287': attribute type 23 has an invalid length.
[  258.499623][T18073] netlink: 'syz.0.3292': attribute type 9 has an invalid length.
[  258.578154][T18083] __nla_validate_parse: 16 callbacks suppressed
[  258.578168][T18083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3295'.
[  258.589400][T18083] netlink: 'syz.1.3295': attribute type 1 has an invalid length.
[  258.594581][T18083] tls_set_device_offload_rx: netdev not found
[  258.626667][T18087] lo speed is unknown, defaulting to 1000
[  258.668717][T18090] lo speed is unknown, defaulting to 1000
[  259.008049][T18112] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  259.520710][T18123] lo speed is unknown, defaulting to 1000
[  259.648388][T18126] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3308'.
[  259.929722][T18137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3311'.
[  260.010221][T18143] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3311'.
[  260.076258][T18154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3315'.
[  260.095172][T18154] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3315'.
[  260.156658][T18162] nbd: illegal input index -1
[  260.209533][T18163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3315'.
[  260.224337][T18165] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3316'.
[  260.260587][T18165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3316'.
[  260.296073][T18173] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3320'.
[  260.437791][T18181] lo speed is unknown, defaulting to 1000
[  260.532086][T18193] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  260.624564][T18198] IPVS: stopping backup sync thread 18201 ...
[  260.628258][T18201] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  260.868997][T18218] syzkaller0: entered promiscuous mode
[  260.876753][T18218] syzkaller0: entered allmulticast mode
[  261.598182][T18247] vlan0: entered promiscuous mode
[  261.600625][T18247] macvtap0: entered promiscuous mode
[  261.618973][T18249] netlink: 'syz.1.3339': attribute type 5 has an invalid length.
[  261.687348][T18253] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  261.694381][T18253] syzkaller0: entered promiscuous mode
[  261.696711][T18253] syzkaller0: entered allmulticast mode
[  261.737635][T18253] tipc: Resetting bearer <eth:syzkaller0>
[  261.755975][T18253] tipc: Resetting bearer <eth:syzkaller0>
[  261.770572][T18253] tipc: Disabling bearer <eth:syzkaller0>
[  262.033737][T18283] ieee802154 phy0 wpan0: encryption failed: -22
[  262.128775][T18295] bond27: (slave veth1): Releasing active interface
[  262.158097][T18295] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  262.158745][T18297] netlink: 'syz.2.3353': attribute type 1 has an invalid length.
[  262.161661][T18295] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  262.180199][T18297] 8021q: adding VLAN 0 to HW filter on device bond33
[  262.193328][T18297] bond33: (slave ip6gretap2): making interface the new active one
[  262.197129][T18297] bond33: (slave ip6gretap2): Enslaving as an active interface with an up link
[  262.209675][T18297] veth15: entered promiscuous mode
[  262.214550][T18297] bond33: (slave veth15): Enslaving as an active interface with a down link
[  262.218418][T18297] erspan0: entered allmulticast mode
[  262.340301][T18305] lo speed is unknown, defaulting to 1000
[  262.638558][T18309] netlink: 'syz.2.3356': attribute type 6 has an invalid length.
Connection to localhost closed by remote host.
[  264.961184][ T5856] Bluetooth: hci2: command 0x0401 tx timeout
[  264.981274][T12202] ==================================================================
[  264.984583][T12202] BUG: KASAN: slab-use-after-free in __mutex_lock+0x801/0x1350
[  264.987695][T12202] Read of size 8 at addr ffff88810a9200a0 by task khidpd_16bf5505/12202
[  264.991930][T12202] 
[  264.992986][T12202] CPU: 1 UID: 0 PID: 12202 Comm: khidpd_16bf5505 Not tainted syzkaller #0 PREEMPT(full) 
[  264.993003][T12202] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  264.993011][T12202] Call Trace:
[  264.993017][T12202]  <TASK>
[  264.993024][T12202]  dump_stack_lvl+0x189/0x250
[  264.993040][T12202]  ? __kasan_check_byte+0x12/0x40
[  264.993056][T12202]  ? __pfx_dump_stack_lvl+0x10/0x10
[  264.993071][T12202]  ? lock_release+0x4b/0x3e0
[  264.993089][T12202]  ? __virt_addr_valid+0x4a5/0x5c0
[  264.993103][T12202]  print_report+0xca/0x240
[  264.993114][T12202]  ? __mutex_lock+0x801/0x1350
[  264.993126][T12202]  kasan_report+0x118/0x150
[  264.993141][T12202]  ? __mutex_lock+0x801/0x1350
[  264.993156][T12202]  __mutex_lock+0x801/0x1350
[  264.993170][T12202]  ? __mutex_lock+0x5bb/0x1350
[  264.993184][T12202]  ? l2cap_unregister_user+0x6a/0x1b0
[  264.993204][T12202]  ? __pfx___mutex_lock+0x10/0x10
[  264.993217][T12202]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  264.993241][T12202]  l2cap_unregister_user+0x6a/0x1b0
[  264.993260][T12202]  hidp_session_thread+0x3c9/0x410
[  264.993279][T12202]  ? __pfx_hidp_session_thread+0x10/0x10
[  264.993295][T12202]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  264.993312][T12202]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  264.993331][T12202]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  264.993348][T12202]  ? __kthread_parkme+0x7b/0x200
[  264.993362][T12202]  ? __kthread_parkme+0x1a1/0x200
[  264.993376][T12202]  kthread+0x711/0x8a0
[  264.993392][T12202]  ? __pfx_hidp_session_thread+0x10/0x10
[  264.993409][T12202]  ? __pfx_kthread+0x10/0x10
[  264.993423][T12202]  ? _raw_spin_unlock_irq+0x23/0x50
[  264.993441][T12202]  ? lockdep_hardirqs_on+0x9c/0x150
[  264.993453][T12202]  ? __pfx_kthread+0x10/0x10
[  264.993467][T12202]  ret_from_fork+0x439/0x7d0
[  264.993481][T12202]  ? __pfx_ret_from_fork+0x10/0x10
[  264.993495][T12202]  ? __switch_to_asm+0x39/0x70
[  264.993510][T12202]  ? __switch_to_asm+0x33/0x70
[  264.993524][T12202]  ? __pfx_kthread+0x10/0x10
[  264.993539][T12202]  ret_from_fork_asm+0x1a/0x30
[  264.993560][T12202]  </TASK>
[  264.993565][T12202] 
[  265.077411][T12202] Allocated by task 5857:
[  265.079278][T12202]  kasan_save_track+0x3e/0x80
[  265.081299][T12202]  __kasan_kmalloc+0x93/0xb0
[  265.083209][T12202]  __kmalloc_noprof+0x27a/0x4f0
[  265.085267][T12202]  hci_alloc_dev_priv+0x28/0x2060
[  265.087344][T12202]  vhci_create_device+0x120/0x650
[  265.089084][T12202]  vhci_write+0x3ce/0x4a0
[  265.090514][T12202]  vfs_write+0x5c9/0xb30
[  265.091969][T12202]  ksys_write+0x145/0x250
[  265.093458][T12202]  do_syscall_64+0xfa/0x3b0
[  265.095348][T12202]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.097781][T12202] 
[  265.098838][T12202] Freed by task 5857:
[  265.100538][T12202]  kasan_save_track+0x3e/0x80
[  265.102540][T12202]  kasan_save_free_info+0x46/0x50
[  265.104640][T12202]  __kasan_slab_free+0x5b/0x80
[  265.106646][T12202]  kfree+0x18e/0x440
[  265.108319][T12202]  bt_host_release+0x82/0x90
[  265.110282][T12202]  device_release+0x9c/0x1c0
[  265.112234][T12202]  kobject_put+0x22b/0x480
[  265.114133][T12202]  vhci_release+0x15a/0x1a0
[  265.116078][T12202]  __fput+0x44c/0xa70
[  265.117750][T12202]  task_work_run+0x1d4/0x260
[  265.119743][T12202]  do_exit+0x6b5/0x2300
[  265.121541][T12202]  do_group_exit+0x21c/0x2d0
[  265.123516][T12202]  __x64_sys_exit_group+0x3f/0x40
[  265.125644][T12202]  x64_sys_call+0x21f7/0x2200
[  265.127668][T12202]  do_syscall_64+0xfa/0x3b0
[  265.129552][T12202]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.132078][T12202] 
[  265.133070][T12202] Last potentially related work creation:
[  265.135330][T12202]  kasan_save_stack+0x3e/0x60
[  265.137325][T12202]  kasan_record_aux_stack+0xbd/0xd0
[  265.139556][T12202]  insert_work+0x3d/0x330
[  265.141450][T12202]  __queue_work+0xcd2/0xfb0
[  265.143347][T12202]  call_timer_fn+0x17e/0x5f0
[  265.145260][T12202]  __run_timer_base+0x646/0x860
[  265.147343][T12202]  run_timer_softirq+0xb7/0x180
[  265.149419][T12202]  handle_softirqs+0x286/0x870
[  265.151449][T12202]  __irq_exit_rcu+0xca/0x1f0
[  265.153379][T12202]  irq_exit_rcu+0x9/0x30
[  265.155134][T12202]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  265.157485][T12202]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  265.159987][T12202] 
[  265.161024][T12202] Second to last potentially related work creation:
[  265.163755][T12202]  kasan_save_stack+0x3e/0x60
[  265.165710][T12202]  kasan_record_aux_stack+0xbd/0xd0
[  265.167932][T12202]  insert_work+0x3d/0x330
[  265.169763][T12202]  __queue_work+0xcd2/0xfb0
[  265.171670][T12202]  queue_work_on+0x181/0x270
[  265.173552][T12202]  __hci_cmd_sync_sk+0x4d4/0xbc0
[  265.175644][T12202]  hci_acl_create_conn_sync+0x529/0x790
[  265.177544][T12202]  hci_cmd_sync_work+0x213/0x3a0
[  265.179268][T12202]  process_scheduled_works+0xae1/0x17b0
[  265.181568][T12202]  worker_thread+0x8a0/0xda0
[  265.183567][T12202]  kthread+0x711/0x8a0
[  265.185325][T12202]  ret_from_fork+0x439/0x7d0
[  265.187313][T12202]  ret_from_fork_asm+0x1a/0x30
[  265.189330][T12202] 
[  265.190356][T12202] The buggy address belongs to the object at ffff88810a920000
[  265.190356][T12202]  which belongs to the cache kmalloc-8k of size 8192
[  265.195995][T12202] The buggy address is located 160 bytes inside of
[  265.195995][T12202]  freed 8192-byte region [ffff88810a920000, ffff88810a922000)
[  265.201522][T12202] 
[  265.202559][T12202] The buggy address belongs to the physical page:
[  265.205182][T12202] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10a920
[  265.208752][T12202] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  265.212303][T12202] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  265.215522][T12202] page_type: f5(slab)
[  265.217229][T12202] raw: 057ff00000000040 ffff88801a442280 ffffea00044a8600 dead000000000002
[  265.220835][T12202] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  265.224379][T12202] head: 057ff00000000040 ffff88801a442280 ffffea00044a8600 dead000000000002
[  265.227937][T12202] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  265.231552][T12202] head: 057ff00000000003 ffffea00042a4801 00000000ffffffff 00000000ffffffff
[  265.235195][T12202] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  265.238794][T12202] page dumped because: kasan: bad access detected
[  265.241022][T12202] page_owner tracks the page as allocated
[  265.242950][T12202] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5598, tgid 5598 (dhcpcd-run-hook), ts 31463763258, free_ts 31436290575
[  265.250981][T12202]  post_alloc_hook+0x240/0x2a0
[  265.252616][T12202]  get_page_from_freelist+0x21e4/0x22c0
[  265.254647][T12202]  __alloc_frozen_pages_noprof+0x181/0x370
[  265.257090][T12202]  alloc_pages_mpol+0x232/0x4a0
[  265.259124][T12202]  allocate_slab+0x8a/0x370
[  265.261018][T12202]  ___slab_alloc+0xbeb/0x1420
[  265.263022][T12202]  __kmalloc_cache_noprof+0x296/0x3d0
[  265.265307][T12202]  tomoyo_init_log+0x111f/0x1f70
[  265.267442][T12202]  tomoyo_supervisor+0x340/0x1480
[  265.269602][T12202]  tomoyo_env_perm+0x149/0x1e0
[  265.271613][T12202]  tomoyo_find_next_domain+0x15cf/0x1aa0
[  265.274021][T12202]  tomoyo_bprm_check_security+0x11c/0x180
[  265.276346][T12202]  security_bprm_check+0x89/0x270
[  265.278423][T12202]  bprm_execve+0x8ee/0x1450
[  265.280338][T12202]  do_execveat_common+0x510/0x6a0
[  265.282450][T12202]  __x64_sys_execve+0x94/0xb0
[  265.284419][T12202] page last free pid 5597 tgid 5597 stack trace:
[  265.287095][T12202]  __free_frozen_pages+0xbc4/0xd30
[  265.289320][T12202]  __put_partials+0x156/0x1a0
[  265.291343][T12202]  put_cpu_partial+0x17c/0x250
[  265.293397][T12202]  __slab_free+0x2d5/0x3c0
[  265.295298][T12202]  qlist_free_all+0x97/0x140
[  265.297266][T12202]  kasan_quarantine_reduce+0x148/0x160
[  265.299521][T12202]  __kasan_slab_alloc+0x22/0x80
[  265.301545][T12202]  __kmalloc_cache_noprof+0x1be/0x3d0
[  265.303824][T12202]  tomoyo_init_log+0x183/0x1f70
[  265.305829][T12202]  tomoyo_supervisor+0x340/0x1480
[  265.307967][T12202]  tomoyo_path_permission+0x25a/0x380
[  265.310219][T12202]  tomoyo_path_perm+0x392/0x4b0
[  265.312305][T12202]  security_inode_getattr+0x12f/0x330
[  265.314603][T12202]  vfs_fstatat+0xb1/0x170
[  265.316442][T12202]  __x64_sys_newfstatat+0x116/0x190
[  265.318646][T12202]  do_syscall_64+0xfa/0x3b0
[  265.320588][T12202] 
[  265.321402][T12202] Memory state around the buggy address:
[  265.323328][T12202]  ffff88810a91ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  265.326533][T12202]  ffff88810a920000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  265.329563][T12202] >ffff88810a920080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  265.332352][T12202]                                ^
[  265.334149][T12202]  ffff88810a920100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  265.337240][T12202]  ffff88810a920180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  265.340186][T12202] ==================================================================
[  265.344103][T12202] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  265.347019][T12202] CPU: 1 UID: 0 PID: 12202 Comm: khidpd_16bf5505 Not tainted syzkaller #0 PREEMPT(full) 
[  265.350879][T12202] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  265.354869][T12202] Call Trace:
[  265.356223][T12202]  <TASK>
[  265.357405][T12202]  dump_stack_lvl+0x99/0x250
[  265.359258][T12202]  ? __asan_memcpy+0x40/0x70
[  265.361093][T12202]  ? __pfx_dump_stack_lvl+0x10/0x10
[  265.363161][T12202]  ? __pfx__printk+0x10/0x10
[  265.365057][T12202]  vpanic+0x281/0x750
[  265.366638][T12202]  ? __pfx_vpanic+0x10/0x10
[  265.368462][T12202]  ? irqentry_exit+0x74/0x90
[  265.370302][T12202]  panic+0xb9/0xc0
[  265.371806][T12202]  ? __pfx_panic+0x10/0x10
[  265.373632][T12202]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  265.376008][T12202]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  265.378332][T12202]  ? __mutex_lock+0x801/0x1350
[  265.380252][T12202]  check_panic_on_warn+0x89/0xb0
[  265.382215][T12202]  ? __mutex_lock+0x801/0x1350
[  265.384124][T12202]  end_report+0x78/0x160
[  265.385811][T12202]  kasan_report+0x129/0x150
[  265.387616][T12202]  ? __mutex_lock+0x801/0x1350
[  265.389506][T12202]  __mutex_lock+0x801/0x1350
[  265.391352][T12202]  ? __mutex_lock+0x5bb/0x1350
[  265.393237][T12202]  ? l2cap_unregister_user+0x6a/0x1b0
[  265.395246][T12202]  ? __pfx___mutex_lock+0x10/0x10
[  265.397232][T12202]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  265.399556][T12202]  l2cap_unregister_user+0x6a/0x1b0
[  265.401632][T12202]  hidp_session_thread+0x3c9/0x410
[  265.403660][T12202]  ? __pfx_hidp_session_thread+0x10/0x10
[  265.405893][T12202]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  265.408252][T12202]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  265.410736][T12202]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  265.413123][T12202]  ? __kthread_parkme+0x7b/0x200
[  265.415143][T12202]  ? __kthread_parkme+0x1a1/0x200
[  265.417204][T12202]  kthread+0x711/0x8a0
[  265.418776][T12202]  ? __pfx_hidp_session_thread+0x10/0x10
[  265.420942][T12202]  ? __pfx_kthread+0x10/0x10
[  265.422720][T12202]  ? _raw_spin_unlock_irq+0x23/0x50
[  265.424802][T12202]  ? lockdep_hardirqs_on+0x9c/0x150
[  265.426880][T12202]  ? __pfx_kthread+0x10/0x10
[  265.428681][T12202]  ret_from_fork+0x439/0x7d0
[  265.430466][T12202]  ? __pfx_ret_from_fork+0x10/0x10
[  265.432491][T12202]  ? __switch_to_asm+0x39/0x70
[  265.434515][T12202]  ? __switch_to_asm+0x33/0x70
[  265.436503][T12202]  ? __pfx_kthread+0x10/0x10
[  265.438439][T12202]  ret_from_fork_asm+0x1a/0x30
[  265.440472][T12202]  </TASK>
[  265.442491][T12202] Kernel Offset: disabled
[  265.444347][T12202] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:37:42  Registers:
info registers vcpu 0

CPU#0
RAX=73bf9eeb52292a00 RBX=ffffffff819693f8 RCX=73bf9eeb52292a00 RDX=0000000000000001
RSI=ffffffff8d9b9d49 RDI=ffffffff8be33c00 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa3a630 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a33f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000004d7030 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000ffff00 0000000000000000 XMM01=ffffffffff000033 746e6576652f7475
XMM02=00000000000000ff 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000ff000000 0000000000000000 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000070 RBX=0000000000000070 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002dcf370
R8 =ffff888020648237 R9 =1ffff110040c9046 R10=dffffc0000000000 R11=ffffffff854f91c0
R12=dffffc0000000000 R13=ffffffff99b0090c R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f923c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000004db030 CR3=0000000029836000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 0000000000000000 XMM01=6f6c2f7261762f00 6469756e69676f6c
XMM02=0000ffffffffff00 0000000000000000 XMM03=0000000000000000 000000000000002f
XMM04=74772f676f6c2f72 61762f00706d7475 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0020202000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
