last executing test programs:

1.843620872s ago: executing program 2 (id=1718):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38)
close(0x4)

1.842174205s ago: executing program 2 (id=1720):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000740)={{0x3, @null}, [@default, @netrom, @bcast, @remote, @netrom, @remote, @netrom, @netrom]}, &(0x7f00000005c0)=0xfffffffffffffe86, 0x800)
recvfrom$netrom(r0, &(0x7f0000000300)=""/67, 0x43, 0x20, &(0x7f0000000380)={{0x3, @bcast, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000003580)={0x2, 0x2, @dev}, 0x10)
close(0xffffffffffffffff)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x1d, 0x2, 0x6)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x7fffffff, 0x8000000000000, 0x0, 0x0, 0x1000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x800, 0x7fffffffffffffff, 0x0, 0x1}, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000100)=0x9, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRESOCT=r4, @ANYBLOB="040000000000000008003f006563060008001b", @ANYRES32=r4, @ANYRES8], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4)
bind$llc(r5, &(0x7f0000000400)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="68e3ff1f00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800e00010069703665727370616e000000340002801400050000000000000000000000000000000001040012000800140083be000005001700010000000500160002000000"], 0x68}}, 0x0)
unshare(0x6a040000)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r2, 0x58, &(0x7f0000000540)}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

921.212692ms ago: executing program 2 (id=1735):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000200)=ANY=[], 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000000)={{r3}, 0x2a, 0x80000007ff, 0x2})
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000600)={<r5=>0x0, @in6={{0xa, 0x4e21, 0x8, @empty, 0x6}}, 0x0, 0xf, 0x10000, 0x1, 0x80, 0x0, 0x9}, &(0x7f0000000340)=0x9c)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000380)=@assoc_value={r5, 0x42c43d28}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x58}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x9}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdcf}, 0x70)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e21, @private=0xa010100}}, 0x7f, 0xfffe, 0x8000, 0xfd5b, 0x26, 0x7, 0x4}, &(0x7f00000002c0)=0x9c)
ioctl$SIOCX25CALLACCPTAPPRV(r3, 0x89e8)
sendto$inet6(r2, &(0x7f0000000140)="8269", 0x2, 0x0, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="6e617400800000000000000000000000000000000000000000000000000000000b000000456f7e22063e67110dd2bd"], &(0x7f0000000180)=0x2f)
write$tun(r6, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[], 0xfe33)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r8, &(0x7f0000000300)={0x1f, @none}, 0xa)
r9 = socket$kcm(0xa, 0x2, 0x11)
sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0x2}, 0x80, 0x0}, 0x0)
listen(r7, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500003424002500000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8cc2000090780060fe06f989381ffe06e2d4c3d9"], 0x0)

844.754436ms ago: executing program 2 (id=1737):
r0 = socket(0x11, 0x800000003, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65ef], [0x0, 0x4]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000000))

724.500643ms ago: executing program 2 (id=1739):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040090}, 0x80) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r3, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'macvlan0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) (async)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x8}, 0x18)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000380)=r4, 0x4) (async)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x1bc, r5, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x19}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4c09a414}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_MEDIA={0x104, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf3c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdef4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8ac4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
r6 = accept(r0, 0x0, &(0x7f0000000680))
r7 = socket$packet(0x11, 0x3, 0x300) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000700), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000740)=<r10=>0x0)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r8, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r9, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_FIRMWARE_NAME={0xd, 0x14, 'macvlan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x54) (async)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000840), &(0x7f0000000880)=0x14) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000900)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x84, r3, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "866740033d80a024d8aee87cc7"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "82378edbf94df18b060b323f8b"}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x2) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10) (async)
recvmsg$unix(r6, &(0x7f0000000d80)={&(0x7f0000000a80)=@abs, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000b00)=""/221, 0xdd}, {&(0x7f0000000c00)=""/67, 0x43}], 0x2, &(0x7f0000000cc0)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [<r13=>0xffffffffffffffff, 0xffffffffffffffff, <r14=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x12002)
r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e00), r14) (async)
getsockopt$PNPIPE_IFINDEX(r13, 0x113, 0x2, &(0x7f0000000e40)=<r16=>0x0, &(0x7f0000000e80)=0x4)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r12, &(0x7f0000001040)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001000)={&(0x7f0000000ec0)={0x138, r15, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x138}}, 0x41) (async)
recvmsg$unix(r14, &(0x7f0000001880)={&(0x7f0000001080), 0x6e, &(0x7f0000001740)=[{&(0x7f0000001100)=""/68, 0x44}, {&(0x7f0000001180)=""/25, 0x19}, {&(0x7f00000011c0)=""/136, 0x88}, {&(0x7f0000001280)=""/224, 0xe0}, {&(0x7f0000001380)=""/191, 0xbf}, {&(0x7f0000001440)=""/110, 0x6e}, {&(0x7f00000014c0)=""/13, 0xd}, {&(0x7f0000001500)=""/98, 0x62}, {&(0x7f0000001580)=""/184, 0xb8}, {&(0x7f0000001640)=""/212, 0xd4}], 0xa, &(0x7f0000001800)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r17=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}, 0x0) (async)
setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f00000018c0)={@remote, r2}, 0x14)
sendmsg$inet(r13, &(0x7f0000002b80)={&(0x7f0000001900)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000002ac0)=[{&(0x7f0000001940)="e2a2ee72172345c2b8c1f89ea954080f28e0b45e91f9a9b98715b24c3f", 0x1d}, {&(0x7f0000001980)="3805421113c49a36ac084689a5af751f98dbcb990cafc01b1aaa743dfae363f391d1b0b699ef401ed891364ce0eb", 0x2e}, {&(0x7f00000019c0)="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", 0x1000}, {&(0x7f00000029c0)="baf7e18dc3fcde79f20a79d2dd4b319a8e8879070dd019654b716eb74f295b9d4360b4ec906199ac7e58f57a3aa057cea858952cdae8bc0ec73faa790c978e1cfda2eb37ff702f168c7d1118a2767083f6c1cdd3da1c6ebd7a0044ffdabb0a25cea7eea4cb27a19c8d406642b882725465fe56008f8187d7b71aa14d17c7c06daf2421d95ce728a0ee5627425cc98d33e5792ab7bfe2ab365a732040d9ff0f38717c722be5036fdb9375801c089a98d3f4a022090d8e2ec2ee742290a9935a6ccba1c0852033bab96e7f1ba67768c32f439103", 0xd3}], 0x4, &(0x7f0000002b00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x60}, 0x24008000) (async)
r18 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r19 = syz_genetlink_get_family_id$batadv(&(0x7f0000002c00), r17)
sendmsg$BATADV_CMD_GET_GATEWAYS(r18, &(0x7f0000002d00)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c40)={0x54, r19, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf8000000}]}, 0x54}, 0x1, 0x0, 0x0, 0x44011}, 0x40)

635.556805ms ago: executing program 2 (id=1740):
r0 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r1=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x1ce, &(0x7f0000000640)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000021001983a00fe8000000000000000000000000000bbff02000000000000000000000000000104009078000000006009000000001100fe8000000000000000000000000000aa000000000000000000000000000000000000000000000000002a0000000000000f25c9bd942c73856184f927b7e4e553c7f46b4f930d2f1c30ca13154ac498c3eaf13ab58393d7c204000000060076a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e7605020000008c65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b01442020450ea635940f9fcc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e000e8b168e4b48529453d91cea424030070800"/462], 0x0)
unshare(0x20000400)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a060000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x1, 0x1, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
accept(r2, 0x0, &(0x7f0000000200))
connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)

381.514921ms ago: executing program 1 (id=1744):
r0 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r0, 0x89ee, &(0x7f0000000300))
unshare(0x6020400)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0)
ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r1, 0x89f5, &(0x7f0000000000))
r2 = socket$kcm(0x2d, 0x2, 0x0)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x20}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40041)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff0002000000000000000000000600000004010000"], 0xfc}}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @mcast2, 0x5}, 0x1c)
r8 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r8, &(0x7f0000000d00)=[{{&(0x7f0000000c80)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000c00)='e', 0x1}], 0x1}}], 0x1, 0x4000)
shutdown(r8, 0x1)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x7}, 0x8)
getsockopt$sock_buf(r7, 0x1, 0x19, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r4, r3, 0x26}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r10, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40)

381.219078ms ago: executing program 1 (id=1745):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="0400b4c7", 0x4)
syz_emit_ethernet(0x22, &(0x7f00000002c0)={@broadcast, @random="f5ab325f8d63", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x38, 0x14, 0x65, 0x0, 0xef, 0x2b, 0x0, @loopback, @loopback}}}}}, 0x0)

325.218339ms ago: executing program 0 (id=1746):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv6_newnexthop={0x30, 0x68, 0x309, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NHA_FDB={0x4}, @NHA_ENCAP={0x14, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0x2}}}}]}, 0x30}}, 0x0) (async, rerun: 32)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000140)=0x68) (async, rerun: 32)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x30}}, 0x4)

324.477373ms ago: executing program 1 (id=1747):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r1=>0x0})
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$FIBMAP(r2, 0x1, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local, 0x2}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r6=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
getsockopt$bt_hci(r5, 0x0, 0x2, &(0x7f00000001c0), &(0x7f0000001240))
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'sit0\x00', <r9=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r9})
r10 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r11 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x80, 0x8, 0x5, 0x400, {{0x5, 0x4, 0x0, 0x2b, 0x14, 0x66, 0x0, 0xfc, 0x2f, 0x0, @loopback, @multicast1}}}})
r12 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r7, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0xa0, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @mcast2, @dev={0xfe, 0x80, '\x00', 0x12}, [@hopopts={0x4fb560df2bad385d, 0x2, '\x00', [@generic={0x7, 0xf, "55b5d747d5ce5853e308cdbcf10ddd"}]}, @dstopts={0x16, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0xffffffff}, @enc_lim, @jumbo={0xc2, 0x4, 0xfd4}, @calipso={0x7, 0x10, {0x4, 0x2, 0x4, 0x6c8, [0x0]}}, @jumbo={0xc2, 0x4, 0xcd60}]}], "d53354e0f167b1d8f8ed2a0790c6f7186919d562ebcbf5ab"}}}}}}, 0xd6)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x40)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r6, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027000000000008000100150008000500"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r1, 0x2, {0x0, 0x0, 0x4}, 0xfd}, 0x18)
sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0xfffffffffffffffe, {0x0, 0x1}}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x850}, 0xee)
socket$nl_netfilter(0x10, 0x3, 0xc)

323.947105ms ago: executing program 0 (id=1748):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYBLOB="d8000000000203000000000000000000020000053c0002802c00018014000300fc00000000000000000000000000000114000400000000000000000000000000000000010c00028005000100210000000400038004000180"], 0xd8}}, 0x0) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0xfffffff9, 0x3}})
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000005400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb0, r1, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x1e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0c4ab96ea54241fe317c5d6fd9"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f466cca41da53a195e4f905b0a"}]]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x24048000) (async)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) (async)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=@flushpolicy={0x38, 0x12, 0x105, 0x0, 0x0, "", [@address_filter={0x28, 0x1a, {@in=@private=0xa010102, @in=@private=0xa010100, 0xa, 0x6, 0x9}}]}, 0x38}}, 0x20040810) (async)
socket(0x1, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x28, r1, 0x5, 0x2, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0x77}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x28}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000180)={0x2d6}, 0x10)
r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)
r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_ifreq(r12, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})
write(r10, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x24) (async)
setsockopt$PNPIPE_ENCAP(r10, 0x113, 0x1, &(0x7f0000000240), 0x4) (async)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r13, 0x9c3fa077fa966179, 0x70bd29, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054)

235.634563ms ago: executing program 0 (id=1749):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r1=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', <r2=>r1, 0x29, 0x6, 0x9, 0x6, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x700, 0x700, 0x6, 0x9}})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x2, 0x2020}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0xc0}, @IFLA_HSR_PROTOCOL={0x5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}]}, 0x58}}, 0x0)

234.633651ms ago: executing program 0 (id=1750):
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000440)=@req3={0x4, 0x4, 0x10007, 0x6, 0x408, 0xf, 0xfffffffa}, 0x1c)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00))
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x100, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = accept4(r1, 0x0, 0x0, 0x800)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
close(r3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000009000000040000000100000000000000", @ANYRES32, @ANYBLOB="0a02000000000000001600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000002000000040000000b00"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001e001000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000004000", 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCADDRT(r5, 0x890b, &(0x7f0000000080)={@null, 0x101, 'veth0_macvtap\x00'})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0)
pipe(&(0x7f0000000080))
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'bond0\x00'}}, 0x1e)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0x2c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48014}, 0x20040060)
ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000040)=0x2)
ioctl$PPPIOCBRIDGECHAN(r6, 0x40047435, &(0x7f0000000200)=0x1)
sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

122.951323ms ago: executing program 1 (id=1751):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x1}, @private=0xa010100, 0x4, 0x6}}) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtaction={0x4c, 0x30, 0x1, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x2000c010) (async)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

120.208055ms ago: executing program 1 (id=1752):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e65766530"], 0x110}}, 0x0)

86.177146ms ago: executing program 0 (id=1753):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000080)=0xfff, 0x4)
ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x0, 0x3, [@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}]})
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}], 0x1, 0x48800)

4.740437ms ago: executing program 1 (id=1754):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000800)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000b00)={0x1f0, 0x4, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_HOOK={0x40, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'pimreg0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bridge\x00'}]}, @NFTA_CHAIN_HOOK={0x74, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'macsec0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x365b71b9}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x280da0b6}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6_vti0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3523ff1f}]}, @NFTA_CHAIN_USERDATA={0x8e, 0xc, "fec9f05fecda8c9a1ad08e9b0a4e35fd80129e8fae6c3bec153609f541c37a37bdad7048b8f5e1d2dfb1bdd96bd164fd5aa3a0a39975eaae4029d1769b4ee9bb09e682d3acfc750fc7db55aa565e5129d33c681ab6210dcf89d8767e916ac82858cc2ef5e9be5d79dce6e31a410862747b1934adcca12a3b52bdcaa400ba4184d32adb2adff702aa1e36"}, @NFTA_CHAIN_HOOK={0x48, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'tunl0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x16139f6d}, @NFTA_HOOK_DEV={0x14, 0x3, 'caif0\x00'}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x147e009d}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x17ea7809}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2fbec3ae}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x40}, 0x2)
r2 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/time_for_children\x00')
recvfrom$inet(r4, &(0x7f0000000400)=""/144, 0x90, 0x10040, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000680)={0x0, 0x0, 0x3, 0x0, '\x00', [{0xfffffffd, 0x80000001, 0x776, 0xe181, 0x0, 0x7112}, {0x94, 0xe, 0xffffffffffff55ef, 0x8, 0x2, 0x6}], ['\x00', '\x00', '\x00']})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b40)=ANY=[], 0x5c}}, 0x40)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8], 0x3c}}, 0x800)

0s ago: executing program 0 (id=1755):
r0 = socket(0x2, 0x2, 0x0)
unshare(0x22020600)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x4000000)
close(0x3)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
close(r2)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f00000000c0)={0x3, 'veth0_to_batadv\x00', {0x3}, 0x200})
r5 = socket(0x2, 0x80805, 0x0)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000000040)={&(0x7f0000000080)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x80)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r7 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f0000000000), 0x4)
ioctl$sock_proto_private(r7, 0x89e0, &(0x7f0000001080))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000040))
r8 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r8, &(0x7f0000000040)='FROZEN\x00', 0x7)
unshare(0x20000)
setsockopt$packet_int(r0, 0x107, 0x11, 0x0, 0x0)
mkdirat$cgroup(r3, 0x0, 0x1ff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c00e6d72a3bd9cd955b1600000c0000000700000004000000000000840100"], 0x0, 0x2b}, 0xfffffffffffffcfc)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000280)={r0, r0, 0x3, 0xd2, &(0x7f0000000180)="af280071e402ffb29499da2d4e96f4bf5b2defb76e641a23fb6a5386abf1c23436971c70dc4e37e228475cd3f047e2186dafcc36e7188b3e308028ff41c6b340ee791dc3ccbb0076049b95262955b5e8898b94dd2d0b37e6d2973ad21f774e642083ee0c5964a438422c54aa9977e253c55e5161a0e5fbb7775e448715dbc4c0c8a37747435a622da53e48f79d514e6d5807be078e92e63521ca8e33adae1ba406d216344e6374b3b4ab4bbc9711278cc17cef2dd00cc1b9535ea44129f78b1a4bf7a2a7f98088086455daba7b6dbc760477", 0xbe, 0x6, 0xf, 0x4, 0x2, 0x2, 0x0, 'syz0\x00'})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', <r9=>0x0, 0x2f, 0x5, 0x8, 0x6, 0x30, @empty, @mcast2, 0x40, 0x8000, 0x5, 0xff7}})
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000340)={@mcast2, r9}, 0x14)

kernel console output (not intermixed with test programs):

4.897756][ T6289] Use struct sctp_assoc_value instead
[   94.987569][ T6293] syzkaller0: entered promiscuous mode
[   94.993633][ T6293] syzkaller0: entered allmulticast mode
[   95.013319][ T6293] netlink: 'syz.2.87': attribute type 3 has an invalid length.
[   95.162233][   T24] IPVS: starting estimator thread 0...
[   95.164160][ T6309] lo speed is unknown, defaulting to 1000
[   95.263165][ T6313] IPVS: using max 41 ests per chain, 98400 per kthread
[   95.530078][ T6332] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   95.765598][ T6345] netlink: 'syz.1.99': attribute type 12 has an invalid length.
[   96.599907][ T6375] IPv6: sit1: Disabled Multicast RS
[   97.148995][   T24] IPVS: starting estimator thread 0...
[   97.252096][ T6403] __nla_validate_parse: 24 callbacks suppressed
[   97.252125][ T6403] netlink: 277 bytes leftover after parsing attributes in process `syz.0.117'.
[   97.260637][ T6404] IPVS: using max 61 ests per chain, 146400 per kthread
[   97.495384][ T6416] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[   97.505839][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'.
[   97.582718][ T6426] netlink: 20 bytes leftover after parsing attributes in process `syz.1.121'.
[   97.586699][ T6426] netlink: 'syz.1.121': attribute type 4 has an invalid length.
[   97.672926][ T6429] nbd: couldn't find device at index 536870912
[   97.771554][ T6432] netlink: 17 bytes leftover after parsing attributes in process `syz.1.123'.
[   97.885539][ T6441] netlink: 596 bytes leftover after parsing attributes in process `syz.1.125'.
[   98.145087][ T6455] openvswitch: netlink: Message has 4 unknown bytes.
[   98.147464][ T6455] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.214382][ T6462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.133'.
[   98.263065][ T6468] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[   98.267133][ T6468] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[   98.284597][ T6469] netlink: 36 bytes leftover after parsing attributes in process `syz.2.135'.
[   98.287943][ T6469] netlink: 16 bytes leftover after parsing attributes in process `syz.2.135'.
[   98.291738][ T6469] netlink: 36 bytes leftover after parsing attributes in process `syz.2.135'.
[   98.294900][ T6469] netlink: 36 bytes leftover after parsing attributes in process `syz.2.135'.
[   98.364762][ T6472] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.409205][ T6479] netlink: 'syz.0.131': attribute type 10 has an invalid length.
[   98.430278][ T6479] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   98.913133][ T6496] batadv1: entered promiscuous mode
[   98.915141][ T6496] batadv1: entered allmulticast mode
[   99.158598][ T6507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.163804][ T6508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.254523][ T6521] netlink: 'syz.0.153': attribute type 1 has an invalid length.
[   99.474736][ T6542] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[   99.498802][ T6543] bond0 (unregistering): (slave wlan1): Releasing backup interface
[   99.508947][ T6543] bond0 (unregistering): Released all slaves
[   99.682179][ T6551] erspan0: entered promiscuous mode
[   99.991549][ T6566] openvswitch: netlink: Flow key attr not present in new flow.
[  100.019861][ T6571] Bluetooth: MGMT ver 1.23
[  100.488701][ T6589] Illegal XDP return value 4294967274 on prog  (id 47) dev N/A, expect packet loss!
[  100.635581][ T6594] netlink: 'syz.1.173': attribute type 10 has an invalid length.
[  100.694218][ T6601] pim6reg: entered allmulticast mode
[  100.697805][ T6601] pim6reg: left allmulticast mode
[  100.842872][ T6607] netlink: 'syz.1.175': attribute type 10 has an invalid length.
[  100.860626][ T6607] team0: Port device dummy0 added
[  100.863609][ T6607] netlink: 'syz.1.175': attribute type 10 has an invalid length.
[  100.884693][ T6607] team0: Port device dummy0 removed
[  100.900007][ T6607] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  101.077335][ T6612] netlink: 'syz.0.177': attribute type 2 has an invalid length.
[  101.397304][ T6619] lo speed is unknown, defaulting to 1000
[  101.695661][ T6625] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[  101.740663][ T6623] pim6reg1: entered promiscuous mode
[  101.748497][ T6623] pim6reg1: entered allmulticast mode
[  101.824552][ T6632] netdevsim netdevsim1 : renamed from netdevsim0
[  101.843287][ T6633] tap0: tun_chr_ioctl cmd 1074025680
[  101.845706][ T6632] tap0: tun_chr_ioctl cmd 1074025680
[  101.853034][ T6632] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.857075][ T6632] mac80211_hwsim hwsim4 D: renamed from syzkaller0
[  101.881174][ T6632] tipc: Disabling bearer <eth:syzkaller0>
[  102.256243][ T6657] netlink: 'syz.1.190': attribute type 1 has an invalid length.
[  102.273643][ T6657] netlink: 'syz.1.190': attribute type 1 has an invalid length.
[  102.282938][ T6659] netlink: 'syz.1.190': attribute type 1 has an invalid length.
[  102.292340][ T6659] netlink: 'syz.1.190': attribute type 1 has an invalid length.
[  102.751585][ T6671] lo speed is unknown, defaulting to 1000
[  102.878128][ T6676] __nla_validate_parse: 22 callbacks suppressed
[  102.878152][ T6676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.197'.
[  102.910067][ T6676] netlink: 16 bytes leftover after parsing attributes in process `syz.1.197'.
[  103.055326][ T6688] lo speed is unknown, defaulting to 1000
[  103.142873][ T6690] ieee802154 phy0 wpan0: encryption failed: -22
[  103.193966][ T6698] lo speed is unknown, defaulting to 1000
[  103.310877][ T6705] @: renamed from veth0_vlan (while UP)
[  103.381006][ T6712] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.384693][ T6712] syzkaller0: entered promiscuous mode
[  103.387037][ T6712] syzkaller0: entered allmulticast mode
[  103.595808][ T6712] tipc: Resetting bearer <eth:syzkaller0>
[  103.610751][ T6712] tipc: Disabling bearer <eth:syzkaller0>
[  104.280624][ T6741] tipc: Started in network mode
[  104.282280][ T6741] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711
[  104.285113][ T6741] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  104.295795][ T6747] validate_nla: 2 callbacks suppressed
[  104.295822][ T6747] netlink: 'syz.1.215': attribute type 12 has an invalid length.
[  104.457342][ T6760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.217'.
[  104.698110][ T6786] netlink: 76 bytes leftover after parsing attributes in process `syz.0.223'.
[  104.708708][ T6780] netlink: 164 bytes leftover after parsing attributes in process `syz.0.223'.
[  104.814044][ T6795] netlink: 92 bytes leftover after parsing attributes in process `syz.1.227'.
[  104.816864][ T6796] netlink: 92 bytes leftover after parsing attributes in process `syz.1.227'.
[  104.852744][ T6800] bridge0: port 1(netdevsim2) entered blocking state
[  104.856194][ T6800] bridge0: port 1(netdevsim2) entered disabled state
[  104.863576][ T6800] netdevsim netdevsim0 netdevsim2: entered allmulticast mode
[  104.871164][ T6800] netdevsim netdevsim0 netdevsim2: entered promiscuous mode
[  104.878632][ T6800] bridge0: port 1(netdevsim2) entered blocking state
[  104.880989][ T6800] bridge0: port 1(netdevsim2) entered forwarding state
[  104.955116][ T6807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.231'.
[  105.190010][ T6822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'.
[  105.272099][ T6822] netdevsim netdevsim0 netdevsim2: left allmulticast mode
[  105.277996][ T6822] netdevsim netdevsim0 netdevsim2: left promiscuous mode
[  105.388604][ T6822] bridge0: port 1(netdevsim2) entered disabled state
[  105.891680][ T6835] vti0: entered promiscuous mode
[  105.893518][ T6835] vti0: entered allmulticast mode
[  106.086418][ T6848] lo speed is unknown, defaulting to 1000
[  106.097109][ T6850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.114943][ T6853] lo speed is unknown, defaulting to 1000
[  106.116073][ T6849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.125088][ T6854] ieee802154 phy0 wpan0: encryption failed: -22
[  106.270617][ T6859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.242'.
[  106.298823][ T6859] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  106.301908][ T6859] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  106.393990][ T6861] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  106.696894][ T6867] netlink: 'syz.2.245': attribute type 39 has an invalid length.
[  106.780577][ T6882] netlink: 'syz.1.249': attribute type 1 has an invalid length.
[  106.869666][   T54] Bluetooth: hci2: command tx timeout
[  106.896206][ T6890] blkio.reset_stats is deprecated
[  107.638615][ T6951] 8021q: VLANs not supported on ipvlan1
[  107.927304][ T6969] __nla_validate_parse: 12 callbacks suppressed
[  107.927325][ T6969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.272'.
[  107.935180][ T6965] netlink: 28 bytes leftover after parsing attributes in process `syz.1.271'.
[  107.936590][ T6969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.272'.
[  108.018540][ T6975] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.024068][ T6975] syzkaller0: entered promiscuous mode
[  108.026350][ T6975] syzkaller0: entered allmulticast mode
[  108.043359][ T6975] tipc: Resetting bearer <eth:syzkaller0>
[  108.052255][ T6974] tipc: Resetting bearer <eth:syzkaller0>
[  108.066775][ T6974] tipc: Disabling bearer <eth:syzkaller0>
[  108.115394][ T6977] lo speed is unknown, defaulting to 1000
[  108.146701][ T6980] netlink: 248 bytes leftover after parsing attributes in process `syz.0.276'.
[  108.207241][ T6981] lo speed is unknown, defaulting to 1000
[  108.410380][ T6998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.279'.
[  108.712162][ T7024] netlink: 36 bytes leftover after parsing attributes in process `syz.2.283'.
[  108.753632][ T7024] netlink: 36 bytes leftover after parsing attributes in process `syz.2.283'.
[  108.941082][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.286'.
[  108.960632][ T7041] netlink: 28 bytes leftover after parsing attributes in process `syz.2.287'.
[  108.961623][ T7037] hsr_slave_0: left promiscuous mode
[  108.972516][ T7037] hsr_slave_1: left promiscuous mode
[  109.348191][ T7068] netlink: 16 bytes leftover after parsing attributes in process `syz.1.293'.
[  109.377457][ T7070] 8021q: adding VLAN 0 to HW filter on device bond1
[  109.387824][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.400002][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.409543][ T7070] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  109.416475][ T7070] bond1: (slave macvlan2): Enslaving as a backup interface with a down link
[  109.447163][ T7070] bond1: (slave macvlan2): Releasing backup interface
[  109.457139][ T7070] netlink: 'syz.2.292': attribute type 1 has an invalid length.
[  109.460582][  T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  109.540477][  T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  109.640187][ T7084] lo speed is unknown, defaulting to 1000
[  109.768192][ T7101] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  109.773717][ T7101] macsec1: entered promiscuous mode
[  109.775912][ T7101] macsec1: entered allmulticast mode
[  109.778086][ T7101] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  109.855117][ T7105] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  109.872733][ T7099] netlink: 'syz.0.300': attribute type 5 has an invalid length.
[  110.000605][ T7107] syzkaller0: entered promiscuous mode
[  110.002901][ T7107] syzkaller0: entered allmulticast mode
[  111.380085][ T7131] nbd0: detected capacity change from 0 to 127
[  111.386455][ T7136] netlink: 'syz.2.312': attribute type 1 has an invalid length.
[  111.388587][ T6737] block nbd0: Send control failed (result -32)
[  111.389921][   T56] block nbd0: Receive control failed (result -32)
[  111.396432][ T6737] block nbd0: Request send failed, requeueing
[  111.402019][   T25] block nbd0: Dead connection, failed to find a fallback
[  111.404477][   T25] block nbd0: shutting down sockets
[  111.406308][   T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  111.409801][   T25] Buffer I/O error on dev nbd0, logical block 0, async page read
[  111.419695][ T6737] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  111.423633][ T6737] Buffer I/O error on dev nbd0, logical block 1, async page read
[  111.458842][ T6737] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  111.465002][ T6737] Buffer I/O error on dev nbd0, logical block 2, async page read
[  111.468540][ T6737] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  111.481950][ T6737] Buffer I/O error on dev nbd0, logical block 3, async page read
[  111.491468][ T6737] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  111.494464][ T6737] Buffer I/O error on dev nbd0, logical block 0, async page read
[  111.497140][ T6737] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  111.500043][ T6737] Buffer I/O error on dev nbd0, logical block 1, async page read
[  111.502647][ T6737] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  111.505590][ T6737] Buffer I/O error on dev nbd0, logical block 2, async page read
[  111.508277][ T6737] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  111.512765][ T6737] Buffer I/O error on dev nbd0, logical block 3, async page read
[  111.516236][ T6737] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  111.520258][ T6737] Buffer I/O error on dev nbd0, logical block 0, async page read
[  111.523712][ T6737] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  111.537758][ T6737] Buffer I/O error on dev nbd0, logical block 1, async page read
[  111.546422][ T6737] ldm_validate_partition_table(): Disk read failed.
[  111.551134][ T6737] Dev nbd0: unable to read RDB block 0
[  111.556006][ T6737]  nbd0: unable to read partition table
[  111.565773][ T6737] ldm_validate_partition_table(): Disk read failed.
[  111.571631][ T6737] Dev nbd0: unable to read RDB block 0
[  111.580902][ T6737]  nbd0: unable to read partition table
[  111.611231][ T7152] syzkaller1: entered promiscuous mode
[  111.613468][ T7152] syzkaller1: entered allmulticast mode
[  111.730593][ T7162] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  111.972867][ T7186] netlink: 'syz.0.325': attribute type 3 has an invalid length.
[  111.983519][ T7186] lo: entered allmulticast mode
[  112.053086][ T7192] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  112.283051][ T7192] vti0: left promiscuous mode
[  112.284621][ T7192] vti0: left allmulticast mode
[  112.296766][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.301198][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.304835][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.328791][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.333099][ T7185] lo: left allmulticast mode
[  112.391325][ T7197] gretap0: entered promiscuous mode
[  112.394888][ T7197] gretap0: left promiscuous mode
[  112.431563][ T7200] syzkaller0: entered promiscuous mode
[  112.433813][ T7200] syzkaller0: entered allmulticast mode
[  112.561297][ T7212] netlink: 'syz.0.333': attribute type 4 has an invalid length.
[  112.565366][ T7212] netlink: 'syz.0.333': attribute type 4 has an invalid length.
[  112.794862][ T7239] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  112.798266][ T7239] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[  112.806480][ T7239] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  112.810789][ T7239] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[  113.113898][ T7261] lo: entered allmulticast mode
[  113.131646][ T7261] dvmrp8: entered allmulticast mode
[  113.140491][ T7251] lo: left allmulticast mode
[  113.144000][ T7251] dvmrp8: left allmulticast mode
[  113.254431][ T7264] __nla_validate_parse: 16 callbacks suppressed
[  113.254444][ T7264] netlink: 284 bytes leftover after parsing attributes in process `syz.0.347'.
[  113.260307][ T7265] netlink: 284 bytes leftover after parsing attributes in process `syz.0.347'.
[  113.405258][ T7275] netlink: 248 bytes leftover after parsing attributes in process `syz.0.350'.
[  113.458816][ T7276] lo speed is unknown, defaulting to 1000
[  113.477519][ T7279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.351'.
[  113.488909][ T7279] netlink: 'syz.2.351': attribute type 4 has an invalid length.
[  113.593915][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'.
[  113.669988][ T7291] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  113.687009][ T7292] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  114.039403][ T7312] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  114.121187][ T7323] macsec2: entered promiscuous mode
[  114.124286][ T7323] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  114.130562][ T7323] macsec2: entered allmulticast mode
[  114.134721][ T7323] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[  114.152750][ T7327] sctp: [Deprecated]: syz.1.363 (pid 7327) Use of int in maxseg socket option.
[  114.152750][ T7327] Use struct sctp_assoc_value instead
[  114.155565][ T7323] macsec3: entered promiscuous mode
[  114.162006][ T7323] macsec3: entered allmulticast mode
[  114.247395][ T7337] netlink: 'syz.1.364': attribute type 10 has an invalid length.
[  114.252081][ T7337] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  114.405753][ T7344] lo speed is unknown, defaulting to 1000
[  114.513356][ T7354] pim6reg1: entered promiscuous mode
[  114.515290][ T7354] pim6reg1: entered allmulticast mode
[  114.549391][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  114.638316][ T7354] netlink: 32 bytes leftover after parsing attributes in process `syz.2.371'.
[  114.744688][ T7354] 8021q: adding VLAN 0 to HW filter on device bond3
[  114.754287][ T7354] team0: Port device bond3 added
[  114.894708][ T7366] netlink: 'syz.2.373': attribute type 4 has an invalid length.
[  114.938201][ T7369] netlink: 56 bytes leftover after parsing attributes in process `syz.2.375'.
[  114.955930][ T7372] netlink: 20 bytes leftover after parsing attributes in process `syz.0.376'.
[  114.981685][ T7372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.376'.
[  115.001736][ T7376] netlink: 'syz.2.377': attribute type 1 has an invalid length.
[  115.122363][ T7385] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.379'.
[  115.295534][ T7406] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.300383][ T7406] syzkaller0: entered promiscuous mode
[  115.303157][ T7406] syzkaller0: entered allmulticast mode
[  115.332187][ T7406] tipc: Resetting bearer <eth:syzkaller0>
[  115.337113][ T7403] tipc: Resetting bearer <eth:syzkaller0>
[  115.355419][ T7403] tipc: Disabling bearer <eth:syzkaller0>
[  115.606725][ T7424] lo speed is unknown, defaulting to 1000
[  115.658640][ T7424] netlink: 'syz.0.390': attribute type 13 has an invalid length.
[  115.885130][ T7433] netlink: 'syz.0.393': attribute type 3 has an invalid length.
[  115.887974][ T7433] netlink: 'syz.0.393': attribute type 3 has an invalid length.
[  115.945031][ T7437] lo speed is unknown, defaulting to 1000
[  115.983250][ T7438] netlink: 'syz.0.394': attribute type 4 has an invalid length.
[  115.986586][ T7439] netlink: 'syz.0.394': attribute type 4 has an invalid length.
[  116.232712][ T7448] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.237529][ T7448] syzkaller0: entered promiscuous mode
[  116.241222][ T7448] syzkaller0: entered allmulticast mode
[  116.252164][ T7448] tipc: Resetting bearer <eth:syzkaller0>
[  116.256755][ T7447] tipc: Resetting bearer <eth:syzkaller0>
[  116.267947][ T7447] tipc: Disabling bearer <eth:syzkaller0>
[  116.273903][ T7453] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.277537][ T7453] syzkaller0: entered promiscuous mode
[  116.281046][ T7453] syzkaller0: entered allmulticast mode
[  116.292573][ T7453] tipc: Resetting bearer <eth:syzkaller0>
[  116.297861][ T7453] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  116.316158][ T7455] tipc: Resetting bearer <eth:syzkaller0>
[  116.343570][ T7455] tipc: Disabling bearer <eth:syzkaller0>
[  116.381866][ T7463] syzkaller0: entered promiscuous mode
[  116.384229][ T7463] syzkaller0: entered allmulticast mode
[  116.477863][ T7472] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  116.627157][ T7483] ip6tnl2: entered allmulticast mode
[  116.692354][ T7500] lo speed is unknown, defaulting to 1000
[  116.745066][ T7503] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20004
[  116.750794][ T7503] ieee802154 phy0 wpan0: encryption failed: -22
[  116.976410][ T7532] ieee802154 phy0 wpan0: encryption failed: -90
[  117.033556][ T7534] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  117.143961][ T7540] syzkaller1: entered promiscuous mode
[  117.153008][ T7540] syzkaller1: entered allmulticast mode
[  117.683166][ T7569] netlink: 'syz.0.430': attribute type 4 has an invalid length.
[  117.720840][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  117.799865][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  117.826423][ T7567] syzkaller0: entered promiscuous mode
[  117.831204][ T7567] syzkaller0: entered allmulticast mode
[  117.984424][ T7585] sctp: [Deprecated]: syz.2.434 (pid 7585) Use of int in max_burst socket option deprecated.
[  117.984424][ T7585] Use struct sctp_assoc_value instead
[  118.148277][ T7602] netlink: 'syz.0.439': attribute type 11 has an invalid length.
[  118.212364][ T7606] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  118.215338][ T7606] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  118.410912][ T7623] __nla_validate_parse: 5 callbacks suppressed
[  118.410926][ T7623] netlink: 32 bytes leftover after parsing attributes in process `syz.0.444'.
[  119.259779][ T7636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.449'.
[  119.678383][ T7656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.455'.
[  119.682318][ T7656] netlink: 16 bytes leftover after parsing attributes in process `syz.1.455'.
[  119.754594][ T7659] sctp: [Deprecated]: syz.1.455 (pid 7659) Use of int in maxseg socket option.
[  119.754594][ T7659] Use struct sctp_assoc_value instead
[  119.761526][ T7659] netlink: 'syz.1.455': attribute type 32 has an invalid length.
[  120.309883][ T5236] Bluetooth: hci2: command 0x0405 tx timeout
[  120.572306][ T7682] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  120.605476][ T7685] lo: entered allmulticast mode
[  120.612586][ T7684] dvmrp8: entered allmulticast mode
[  120.615149][ T7684] lo: left allmulticast mode
[  120.617712][ T7684] dvmrp8: left allmulticast mode
[  120.766885][ T7692] pim6reg1: entered promiscuous mode
[  120.768655][ T7692] pim6reg1: entered allmulticast mode
[  120.825222][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.466'.
[  120.828768][ T7697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.466'.
[  120.832468][ T7697] validate_nla: 1 callbacks suppressed
[  120.832482][ T7697] netlink: 'syz.1.466': attribute type 13 has an invalid length.
[  120.944232][ T7701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.468'.
[  120.947389][ T7701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.468'.
[  120.950525][ T7701] netlink: 'syz.2.468': attribute type 7 has an invalid length.
[  121.160168][ T7710] bridge1: the hash_elasticity option has been deprecated and is always 16
[  121.184723][ T7710] team0: Port device bond3 removed
[  121.203221][ T7710] netlink: 116 bytes leftover after parsing attributes in process `syz.2.471'.
[  121.209896][   T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  121.254308][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.472'.
[  121.294440][ T7714] batadv_slave_0: entered promiscuous mode
[  121.305961][ T7714] bond0: entered promiscuous mode
[  121.308334][ T7714] bond0: left promiscuous mode
[  121.502443][ T7731] Bluetooth: MGMT ver 1.23
[  121.633416][ T7736] lo speed is unknown, defaulting to 1000
[  121.699354][   T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  121.744482][ T7742] lo speed is unknown, defaulting to 1000
[  122.106657][ T7765] : entered promiscuous mode
[  122.311043][ T7774] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  122.691011][ T7794] netlink: 'syz.0.493': attribute type 2 has an invalid length.
[  122.779701][ T7800] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  122.866681][ T7802] netlink: 'syz.0.495': attribute type 1 has an invalid length.
[  122.900863][ T7802] netlink: 'syz.0.495': attribute type 2 has an invalid length.
[  122.906207][ T7802] netlink: 'syz.0.495': attribute type 1 has an invalid length.
[  123.362641][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.365220][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.375713][ T7806] lo speed is unknown, defaulting to 1000
[  123.409688][ T7795] delete_channel: no stack
[  123.418800][   T47] IPVS: starting estimator thread 0...
[  123.436781][ T7806] ieee802154 phy0 wpan0: encryption failed: -22
[  123.509705][ T7809] IPVS: using max 64 ests per chain, 153600 per kthread
[  123.585487][ T7825] !: renamed from dummy0 (while UP)
[  123.593617][ T7827] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  123.712227][ T5877] IPVS: stop unused estimator thread 0...
[  123.785413][ T7842] lo speed is unknown, defaulting to 1000
[  123.863070][ T7852] __nla_validate_parse: 6 callbacks suppressed
[  123.863083][ T7852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.505'.
[  124.091641][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.510'.
[  124.419187][ T7899] lo speed is unknown, defaulting to 1000
[  124.685731][ T7932] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  125.175068][ T7952] netlink: 100 bytes leftover after parsing attributes in process `syz.1.517'.
[  125.253894][ T7954] lo: entered allmulticast mode
[  125.255639][ T7954] lo: left allmulticast mode
[  125.449248][ T7967] netlink: 248 bytes leftover after parsing attributes in process `syz.1.521'.
[  125.597756][ T7973] lo speed is unknown, defaulting to 1000
[  125.848983][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.527'.
[  125.922373][ T7997] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  126.044707][ T8012] af_packet: tpacket_rcv: packet too big, clamped from 3698 to 4294967272. macoff=96
[  126.203942][ T8024] gretap1: entered allmulticast mode
[  126.417397][ T8040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'.
[  126.485043][ T8041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.534'.
[  126.720468][ T8057] netlink: 'syz.2.538': attribute type 13 has an invalid length.
[  126.722968][ T8057] netlink: 'syz.2.538': attribute type 17 has an invalid length.
[  126.807375][ T8057] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  126.834648][ T8052] xfrm0: entered promiscuous mode
[  126.836445][ T8052] xfrm0: entered allmulticast mode
[  126.875343][ T8059] syzkaller1: entered allmulticast mode
[  126.917651][ T8052] lo speed is unknown, defaulting to 1000
[  126.955901][ T8057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.028695][ T8052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.051650][ T8069] netlink: 'syz.0.540': attribute type 12 has an invalid length.
[  127.597229][ T8073] netlink: 20 bytes leftover after parsing attributes in process `syz.1.541'.
[  127.604655][ T8073] netlink: 32 bytes leftover after parsing attributes in process `syz.1.541'.
[  127.702224][ T8075] lo speed is unknown, defaulting to 1000
[  127.764852][ T8077] openvswitch: netlink: Key 25 has unexpected len 2 expected 16
[  127.968381][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.546'.
[  127.983711][ T8093] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  128.188527][ T8102] batman_adv: batadv0: Adding interface: dummy0
[  128.191911][ T8102] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.206164][ T8102] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  128.394659][ T8124] openvswitch: netlink: Duplicate or invalid key (type 0).
[  128.397732][ T8124] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.837908][ T8135] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7)
[  129.281728][ T8144] IPVS: Error connecting to the multicast addr
[  129.450410][   T55] block nbd1: Receive control failed (result -32)
[  129.567307][ T8159] __nla_validate_parse: 1 callbacks suppressed
[  129.567319][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'.
[  129.579507][ T8159] macsec0: entered allmulticast mode
[  129.581705][ T8159] veth1_macvtap: entered allmulticast mode
[  129.644726][ T8166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.565'.
[  129.707297][ T8169] netlink: 28 bytes leftover after parsing attributes in process `syz.1.566'.
[  129.724616][ T8169] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.566'.
[  129.733702][ T8169] netlink: zone id is out of range
[  129.735853][ T8169] netlink: zone id is out of range
[  129.737926][ T8169] netlink: zone id is out of range
[  129.749450][ T8169] netlink: zone id is out of range
[  129.751339][ T8169] netlink: zone id is out of range
[  129.753074][ T8169] netlink: zone id is out of range
[  129.909249][ T8177] netlink: 'syz.1.566': attribute type 4 has an invalid length.
[  130.758167][ T8187] netlink: 'syz.0.570': attribute type 1 has an invalid length.
[  130.763438][ T8187] netlink: 'syz.0.570': attribute type 1 has an invalid length.
[  130.799259][ T8185] 8021q: adding VLAN 0 to HW filter on device bond4
[  130.802289][ T8185] bond0: (slave bond4): Enslaving as an active interface with an up link
[  130.829810][ T8190] 8021q: adding VLAN 0 to HW filter on device bond0
[  130.836009][ T8190] bond0: (slave rose0): Enslaving as an active interface with an up link
[  130.840183][ T8185] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  130.844638][ T8190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.569'.
[  130.881191][ T8187] netlink: 'syz.0.570': attribute type 1 has an invalid length.
[  130.915335][ T8187] 8021q: adding VLAN 0 to HW filter on device bond0
[  130.944513][ T8187] vlan0: entered allmulticast mode
[  130.946617][ T8187] veth1: entered allmulticast mode
[  130.954710][ T8187] bond0: (slave vlan0): Opening slave failed
[  131.083529][ T8209] netlink: 'syz.0.574': attribute type 1 has an invalid length.
[  131.235751][ T8211] veth1_macvtap: left allmulticast mode
[  131.270731][ T8211] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  131.274243][ T8212] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  131.276397][ T8209] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  131.281295][ T5870] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.293367][ T5870] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.300050][ T5870] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.326059][ T5870] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.357530][ T8228] netlink: 'syz.0.575': attribute type 4 has an invalid length.
[  131.429157][ T8234] netlink: 'syz.2.577': attribute type 1 has an invalid length.
[  131.486260][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.579'.
[  131.564330][ T8248] sctp: [Deprecated]: syz.0.582 (pid 8248) Use of int in max_burst socket option deprecated.
[  131.564330][ T8248] Use struct sctp_assoc_value instead
[  131.583480][ T8248] netlink: 156 bytes leftover after parsing attributes in process `syz.0.582'.
[  131.778963][ T8262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.586'.
[  131.794415][ T8262] veth2: entered allmulticast mode
[  131.915303][ T8264] validate_nla: 2 callbacks suppressed
[  131.915323][ T8264] netlink: 'syz.0.587': attribute type 2 has an invalid length.
[  131.962592][ T8268] batadv_slave_0: entered promiscuous mode
[  131.968602][ T8268] trusted_key: syz.0.588 sent an empty control message without MSG_MORE.
[  132.333314][ T8280] netlink: 844 bytes leftover after parsing attributes in process `syz.0.591'.
[  132.345629][ T8280] netlink: 46 bytes leftover after parsing attributes in process `syz.0.591'.
[  132.483279][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.488464][ T8294] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  132.496448][ T8294] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  132.533061][ T8300] netlink: 'syz.2.598': attribute type 1 has an invalid length.
[  132.555241][ T8300] 8021q: adding VLAN 0 to HW filter on device bond4
[  132.574857][ T8300] bond4: (slave geneve3): making interface the new active one
[  132.582189][ T8300] bond4: (slave geneve3): Enslaving as an active interface with an up link
[  132.588419][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.601266][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  132.609605][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.613162][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.741408][ T8317] netlink: 'syz.0.602': attribute type 12 has an invalid length.
[  132.930217][ T8328] netlink: 'syz.2.604': attribute type 1 has an invalid length.
[  132.950760][ T8328] 8021q: adding VLAN 0 to HW filter on device bond5
[  132.993930][ T8328] bond5: (slave gretap2): making interface the new active one
[  132.997624][ T8328] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  133.010163][ T8328] syz.2.604 (8328) used greatest stack depth: 19944 bytes left
[  133.383550][ T8347] net_ratelimit: 47 callbacks suppressed
[  133.383572][ T8347] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  133.474097][ T8353] vlan0: entered promiscuous mode
[  133.476189][ T8353] macvtap0: entered promiscuous mode
[  133.731666][ T8372] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.871276][ T8386] netlink: 'syz.1.623': attribute type 10 has an invalid length.
[  134.045170][ T8397] : entered promiscuous mode
[  134.323750][ T8431] pim6reg1: entered promiscuous mode
[  134.325612][ T8431] pim6reg1: entered allmulticast mode
[  134.484733][ T8437] 8021q: adding VLAN 0 to HW filter on device bond1
[  134.488532][ T8437] team0: Port device bond1 added
[  134.784571][ T8450] __nla_validate_parse: 16 callbacks suppressed
[  134.784589][ T8450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.640'.
[  134.850720][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.640'.
[  135.012189][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.641'.
[  135.015125][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.641'.
[  135.083434][ T8453] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  135.141134][ T8454] netlink: 68 bytes leftover after parsing attributes in process `syz.2.641'.
[  135.144888][ T8454] netlink: 20 bytes leftover after parsing attributes in process `syz.2.641'.
[  135.148864][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.641'.
[  135.323513][ T8463] lo: entered allmulticast mode
[  135.369643][ T8463] netlink: 80 bytes leftover after parsing attributes in process `syz.1.643'.
[  135.374389][ T8462] lo: left allmulticast mode
[  135.442835][ T8472] netlink: 'syz.1.645': attribute type 3 has an invalid length.
[  135.597973][ T8476] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  135.674569][ T8486] veth0_to_team: left allmulticast mode
[  135.685308][ T8486] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  135.688311][ T8486] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[  135.860986][ T8504] netlink: 'syz.0.652': attribute type 4 has an invalid length.
[  135.864189][ T8504] netlink: 'syz.0.652': attribute type 4 has an invalid length.
[  135.928159][ T8514] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  135.936516][ T8514] batman_adv: batadv0: Removing interface: dummy0
[  135.953920][ T8514] team0: Port device bond1 removed
[  135.961075][ T8514] netlink: 'syz.0.655': attribute type 10 has an invalid length.
[  135.963513][ T8514] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  136.007654][ T8523] batadv1: entered promiscuous mode
[  136.123108][ T8537] netlink: 'syz.0.663': attribute type 10 has an invalid length.
[  136.197125][ T8543] ieee802154 phy0 wpan0: encryption failed: -22
[  136.430278][ T8564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.666'.
[  136.626171][ T8577] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  136.657252][ T8581] netlink: 256 bytes leftover after parsing attributes in process `syz.0.673'.
[  136.689512][   T33] audit: type=1800 audit(1756905000.468:2): pid=8584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.674" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1148 res=0 errno=0
[  136.821435][ T8593] pim6reg: entered allmulticast mode
[  136.839432][ T8593] pim6reg: left allmulticast mode
[  136.995863][ T8606] validate_nla: 3 callbacks suppressed
[  136.995881][ T8606] netlink: 'syz.0.679': attribute type 1 has an invalid length.
[  137.058913][ T8606] veth3: entered promiscuous mode
[  137.064053][ T8606] bond2: (slave veth3): Enslaving as a backup interface with a down link
[  137.107120][ T8611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.119137][ T8613] netlink: 'syz.0.681': attribute type 4 has an invalid length.
[  137.126287][ T8611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.191483][ T8614] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  137.195500][ T8613] netlink: 'syz.0.681': attribute type 4 has an invalid length.
[  137.198656][ T8614] netlink: 'syz.0.681': attribute type 4 has an invalid length.
[  137.832947][ T8638] netlink: 'syz.2.689': attribute type 12 has an invalid length.
[  138.009456][ T8642] 0X: renamed from caif0
[  138.014541][ T8642] 0X: entered allmulticast mode
[  138.016968][ T8642] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  138.522079][ T7925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.526004][ T7925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.737943][ T8676] syzkaller1: entered promiscuous mode
[  138.745277][ T8676] syzkaller1: entered allmulticast mode
[  139.335947][ T8705] netlink: 'syz.2.702': attribute type 12 has an invalid length.
[  139.553143][ T8721] lo speed is unknown, defaulting to 1000
[  139.555702][ T8721] lo speed is unknown, defaulting to 1000
[  139.558029][ T8721] lo speed is unknown, defaulting to 1000
[  139.569941][ T8721] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  139.589460][ T8721] lo speed is unknown, defaulting to 1000
[  139.592648][ T8721] lo speed is unknown, defaulting to 1000
[  139.595371][ T8721] lo speed is unknown, defaulting to 1000
[  140.013562][ T8752] __nla_validate_parse: 4 callbacks suppressed
[  140.013573][ T8752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.711'.
[  140.143206][ T8761] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  140.147956][ T8762] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  140.253695][ T8778] netlink: 152 bytes leftover after parsing attributes in process `syz.1.719'.
[  140.261967][ T8778] netlink: 24 bytes leftover after parsing attributes in process `syz.1.719'.
[  140.433513][ T8794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.723'.
[  140.728146][ T8807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.727'.
[  140.828663][ T8811] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  140.844413][ T8811] netlink: 48 bytes leftover after parsing attributes in process `syz.1.729'.
[  140.850665][ T8811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.729'.
[  141.105003][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.731'.
[  141.156113][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.731'.
[  141.160354][ T8815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.731'.
[  141.163509][ T8815] netlink: 'syz.1.731': attribute type 11 has an invalid length.
[  141.328966][ T8830] netlink: 'syz.2.734': attribute type 42 has an invalid length.
[  141.701572][ T8845] netlink: 'syz.1.738': attribute type 1 has an invalid length.
[  141.974965][ T8853] lo speed is unknown, defaulting to 1000
[  142.246722][ T8860] netlink: 'syz.2.740': attribute type 1 has an invalid length.
[  142.288614][ T8862] netlink: 'syz.2.741': attribute type 4 has an invalid length.
[  142.441606][ T8877] lo speed is unknown, defaulting to 1000
[  142.481740][ T8878] lo speed is unknown, defaulting to 1000
[  142.546337][ T8884] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  142.573367][ T8884] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  142.620337][ T8884] syzkaller0: entered promiscuous mode
[  142.622250][ T8884] syzkaller0: entered allmulticast mode
[  142.624639][ T8884] tipc: Resetting bearer <eth:syzkaller0>
[  142.827578][ T8899] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  142.846147][ T8899] tipc: Resetting bearer <eth:syzkaller0>
[  142.852940][ T8899] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  142.894154][ T8882] tipc: Resetting bearer <eth:syzkaller0>
[  143.590583][  T795] tipc: Node number set to 4278255617
[  143.821521][ T6075] tipc: Node number set to 2581082101
[  144.056224][ T8882] tipc: Disabling bearer <eth:syzkaller0>
[  144.070069][ T8903] tipc: Disabling bearer <eth:syzkaller0>
[  144.376424][ T8943] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.383171][ T8943] openvswitch: netlink: Message has 4 unknown bytes.
[  144.522198][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.525484][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.585171][ T8944] tipc: Disabling bearer <eth:syzkaller0>
[  144.642831][ T8973] lo speed is unknown, defaulting to 1000
[  144.645268][ T8973] lo speed is unknown, defaulting to 1000
[  144.648918][ T8973] lo speed is unknown, defaulting to 1000
[  144.650578][ T8975] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  144.657712][ T8973] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  144.700433][ T8973] lo speed is unknown, defaulting to 1000
[  144.703237][ T8973] lo speed is unknown, defaulting to 1000
[  144.714158][ T8973] lo speed is unknown, defaulting to 1000
[  144.846286][ T8986] block nbd2: not configured, cannot reconfigure
[  144.935187][ T8991] sctp: [Deprecated]: syz.2.773 (pid 8991) Use of int in max_burst socket option deprecated.
[  144.935187][ T8991] Use struct sctp_assoc_value instead
[  145.038941][ T8997] @: renamed from veth0_vlan
[  145.050401][ T8994] __nla_validate_parse: 7 callbacks suppressed
[  145.050414][ T8994] netlink: 24 bytes leftover after parsing attributes in process `syz.1.774'.
[  145.069331][ T8994] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.428052][ T9032] lo speed is unknown, defaulting to 1000
[  145.460339][ T9036] netlink: 16 bytes leftover after parsing attributes in process `syz.2.781'.
[  145.470381][ T9032] lo speed is unknown, defaulting to 1000
[  145.756002][ T9042] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  145.771129][ T9042] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  145.893774][ T9042] syzkaller0: entered promiscuous mode
[  145.896826][ T9042] syzkaller0: entered allmulticast mode
[  145.925573][ T9047] netlink: 32 bytes leftover after parsing attributes in process `syz.0.783'.
[  146.047583][ T9047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.783'.
[  146.107660][ T9058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.783'.
[  147.289622][ T9069] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.299571][ T9069] netlink: 'syz.0.785': attribute type 1 has an invalid length.
[  147.304062][ T9069] netlink: 224 bytes leftover after parsing attributes in process `syz.0.785'.
[  147.494131][ T9084] netlink: 596 bytes leftover after parsing attributes in process `syz.0.788'.
[  147.564492][ T9091] netlink: 152 bytes leftover after parsing attributes in process `syz.1.787'.
[  147.646533][ T9095] netlink: 'syz.0.789': attribute type 1 has an invalid length.
[  147.649999][ T9096] netlink: 'syz.0.789': attribute type 1 has an invalid length.
[  147.851477][ T9111] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  147.855519][ T9111] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  148.446996][ T9138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.792'.
[  148.451006][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.792'.
[  148.713139][ T9161] netlink: 'syz.2.798': attribute type 1 has an invalid length.
[  148.775130][ T9161] 8021q: adding VLAN 0 to HW filter on device bond8
[  148.781626][ T9161] bond7: (slave bond8): making interface the new active one
[  148.785543][ T9161] bond7: (slave bond8): Enslaving as an active interface with an up link
[  148.891039][ T9183] 8021q: adding VLAN 0 to HW filter on device bond7
[  149.045499][ T9185] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  149.268872][ T9205] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.273317][ T9205] syzkaller0: entered promiscuous mode
[  149.275320][ T9205] syzkaller0: entered allmulticast mode
[  149.443514][ T9210] tipc: Resetting bearer <eth:syzkaller0>
[  149.458495][ T9210] tipc: Disabling bearer <eth:syzkaller0>
[  150.119908][ T9264] __nla_validate_parse: 7 callbacks suppressed
[  150.119923][ T9264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.818'.
[  150.243757][ T9279] !: renamed from dummy0
[  150.252752][ T9279] IPVS: lc: FWM 3 0x00000003 - no destination available
[  150.349910][ T9288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.826'.
[  150.394113][ T9289] netlink: 76 bytes leftover after parsing attributes in process `syz.2.826'.
[  151.169729][ T9305] netlink: 'syz.1.831': attribute type 6 has an invalid length.
[  151.185896][ T9305] netlink: 'syz.1.831': attribute type 12 has an invalid length.
[  151.189378][ T9305] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.831'.
[  151.303882][ T9307] lo speed is unknown, defaulting to 1000
[  151.307709][ T9307] lo speed is unknown, defaulting to 1000
[  151.336478][ T9312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.833'.
[  151.514103][ T9330] netlink: 80 bytes leftover after parsing attributes in process `syz.1.837'.
[  151.559715][ T9325] 8021q: adding VLAN 0 to HW filter on device bond9
[  151.592046][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  151.712033][ T9349] netlink: 32 bytes leftover after parsing attributes in process `syz.1.840'.
[  151.771944][ T9356] netlink: 48 bytes leftover after parsing attributes in process `syz.1.843'.
[  151.898070][ T9369] mac80211_hwsim hwsim6 ;: renamed from wlan0
[  151.902407][ T9369] nbd: must specify a device to reconfigure
[  151.978231][ T9380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.845'.
[  151.984158][ T9380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.845'.
[  152.111232][ T9388] bond0: (slave 0!): Releasing backup interface
[  152.118495][ T9388] bond0: (slave wlan1): Releasing backup interface
[  152.124856][ T9388] bond0: (slave wlan1): the permanent HWaddr of slave - 08:02:11:00:00:01 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  152.141918][ T9388] bond0: (slave bond4): Releasing backup interface
[  152.418475][ T9420] bond4: (slave geneve3): Releasing active interface
[  152.433125][ T9420] bond5: (slave gretap2): Releasing active interface
[  152.442405][ T9420] bond7: (slave bond8): Releasing backup interface
[  152.464584][ T9260] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.478503][ T9260] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.483947][ T9260] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.486807][ T9260] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.278486][ T9470] netlink: 'syz.2.869': attribute type 10 has an invalid length.
[  153.278486][ T9469] netlink: 'syz.2.869': attribute type 10 has an invalid length.
[  153.292438][ T9469] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  153.303071][ T9469] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  153.519622][ T9481] netlink: 'syz.1.870': attribute type 12 has an invalid length.
[  153.814001][ T9505] netlink: 'syz.2.877': attribute type 7 has an invalid length.
[  153.817970][ T9505] netlink: 'syz.2.877': attribute type 8 has an invalid length.
[  154.454985][ T9527] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  154.465899][ T9527] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  154.470173][ T9527] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  154.636599][ T9533] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.706293][ T9536] netlink: 'syz.2.886': attribute type 4 has an invalid length.
[  155.304641][ T9546] __nla_validate_parse: 15 callbacks suppressed
[  155.304654][ T9546] netlink: 84 bytes leftover after parsing attributes in process `syz.1.889'.
[  155.339130][ T9548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.890'.
[  155.497626][ T9556] netlink: 52 bytes leftover after parsing attributes in process `syz.1.892'.
[  155.511125][ T9556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.892'.
[  155.665308][ T9563] netlink: 'syz.0.893': attribute type 1 has an invalid length.
[  155.704068][ T9563] netlink: 28 bytes leftover after parsing attributes in process `syz.0.893'.
[  155.711358][ T9565] bond0: (slave netdevsim0): Releasing backup interface
[  155.730744][ T9565] team0: Mode changed to "loadbalance"
[  155.863468][ T9577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.897'.
[  155.891062][ T9581] netlink: 36524 bytes leftover after parsing attributes in process `syz.0.898'.
[  156.066927][ T9594] netlink: 24 bytes leftover after parsing attributes in process `syz.0.901'.
[  156.076366][ T9594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.901'.
[  156.309585][ T9606] netlink: 'syz.0.905': attribute type 1 has an invalid length.
[  156.312605][ T9606] netlink: 172 bytes leftover after parsing attributes in process `syz.0.905'.
[  156.532674][ T9619] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.537082][ T9619] syzkaller0: entered promiscuous mode
[  156.542134][ T9619] syzkaller0: entered allmulticast mode
[  156.563179][ T9619] tipc: Resetting bearer <eth:syzkaller0>
[  156.590566][ T9618] tipc: Resetting bearer <eth:syzkaller0>
[  156.601772][ T9618] tipc: Disabling bearer <eth:syzkaller0>
[  156.712255][ T9626] netlink: 'syz.1.912': attribute type 1 has an invalid length.
[  156.749859][ T9626] 8021q: adding VLAN 0 to HW filter on device bond6
[  156.767836][ T9626] bond6: (slave geneve2): making interface the new active one
[  156.772763][ T9626] bond6: (slave geneve2): Enslaving as an active interface with an up link
[  156.776262][ T9260] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.780543][ T9260] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.785364][ T9260] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.787916][ T9260] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.915119][ T9637] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  156.918653][ T9637] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  157.094437][ T9642] vlan2: entered promiscuous mode
[  157.096792][ T9642] bond0: entered promiscuous mode
[  157.123828][ T9643] vlan2: entered promiscuous mode
[  157.390503][ T9654] 8021q: VLANs not supported on ipvlan1
[  157.391671][ T9655] netlink: 'syz.1.920': attribute type 1 has an invalid length.
[  157.405892][ T9654] macsec4: entered promiscuous mode
[  157.407697][ T9654] macsec4: entered allmulticast mode
[  157.872035][ T9692] lo speed is unknown, defaulting to 1000
[  157.875790][ T9692] lo speed is unknown, defaulting to 1000
[  160.135959][ T9732] netlink: 'syz.2.941': attribute type 4 has an invalid length.
[  160.338502][ T9758] __nla_validate_parse: 14 callbacks suppressed
[  160.338522][ T9758] netlink: 36 bytes leftover after parsing attributes in process `syz.0.947'.
[  160.407681][ T9760] netlink: 300 bytes leftover after parsing attributes in process `syz.2.948'.
[  160.427286][ T9760] lo: entered allmulticast mode
[  160.427484][ T9762] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.436136][ T9762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.949'.
[  160.436171][ T9763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.949'.
[  160.651896][ T9759] lo: left allmulticast mode
[  160.688857][ T9773] netlink: 28 bytes leftover after parsing attributes in process `syz.2.952'.
[  160.773643][ T9776] mac80211_hwsim hwsim24 wlan0: entered allmulticast mode
[  160.917442][ T9786] netlink: 36 bytes leftover after parsing attributes in process `syz.2.955'.
[  160.929683][   T54] Bluetooth: hci2: link tx timeout
[  160.932279][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  161.043779][ T9794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  161.076374][ T9796] syzkaller1: entered promiscuous mode
[  161.078755][ T9796] syzkaller1: entered allmulticast mode
[  161.514845][ T9803] veth5: entered promiscuous mode
[  161.673432][ T9812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.963'.
[  161.686702][ T9812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.963'.
[  161.877579][ T9828] netlink: 'syz.0.969': attribute type 4 has an invalid length.
[  161.896690][ T9829] sctp: [Deprecated]: syz.1.967 (pid 9829) Use of int in max_burst socket option.
[  161.896690][ T9829] Use struct sctp_assoc_value instead
[  162.043692][ T9838] netlink: 'syz.1.971': attribute type 10 has an invalid length.
[  162.055775][ T9838] !: entered promiscuous mode
[  162.058416][ T9838] bond0: (slave 0!): Enslaving as an active interface with an up link
[  162.216812][ T9846] tipc: Enabling of bearer <et:g> rejected, media not registered
[  162.256024][ T9848] netlink: 'syz.1.974': attribute type 1 has an invalid length.
[  162.260012][ T9848] netlink: 224 bytes leftover after parsing attributes in process `syz.1.974'.
[  162.263836][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.974'.
[  162.397530][ T9855] lo speed is unknown, defaulting to 1000
[  162.407046][ T9856] batadv_slave_0: left promiscuous mode
[  162.413740][ T9856] macsec2: left promiscuous mode
[  162.415687][ T9856] macsec2: left allmulticast mode
[  162.423691][ T9856] mac80211_hwsim hwsim3 wlan0: left allmulticast mode
[  162.426744][ T9856] macsec3: left promiscuous mode
[  162.429001][ T9856] macsec3: left allmulticast mode
[  162.444732][ T9856] veth3: left promiscuous mode
[  162.447807][ T9856] macsec4: left promiscuous mode
[  162.449605][ T9856] macsec4: left allmulticast mode
[  162.451374][ T9855] lo speed is unknown, defaulting to 1000
[  162.950767][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  164.085680][ T9905] nbd: nbd1 already in use
[  164.260837][ T9917] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  164.459921][ T9927] bond0: (slave 0!): Releasing backup interface
[  164.464936][ T9927] !: left promiscuous mode
[  164.479960][ T9927] bond6: (slave geneve2): Releasing active interface
[  164.498258][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.509195][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.513089][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.517070][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.680566][ T9940] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.684052][ T9940] syzkaller0: entered promiscuous mode
[  164.685738][ T9940] syzkaller0: entered allmulticast mode
[  164.706904][ T9940] tipc: Resetting bearer <eth:syzkaller0>
[  164.714254][ T9938] tipc: Resetting bearer <eth:syzkaller0>
[  164.726957][ T9938] tipc: Disabling bearer <eth:syzkaller0>
[  164.749241][ T9942] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  164.856939][ T9951] openvswitch: netlink: Key type 53 is out of range max 32
[  165.029461][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  166.182454][ T9957] ip6tnl2: entered allmulticast mode
[  166.184880][ T9955] netlink: 'syz.0.1006': attribute type 12 has an invalid length.
[  166.224146][ T9995] __nla_validate_parse: 11 callbacks suppressed
[  166.224161][ T9995] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1008'.
[  166.251958][ T9998] netlink: 'syz.2.1009': attribute type 28 has an invalid length.
[  166.266010][ T9995] lo speed is unknown, defaulting to 1000
[  166.271867][ T9995] lo speed is unknown, defaulting to 1000
[  166.323537][T10000] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1008'.
[  166.368836][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1011'.
[  166.375921][T10005] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1012'.
[  166.423354][T10008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1014'.
[  166.566524][T10023] netlink: 'syz.2.1016': attribute type 1 has an invalid length.
[  166.632936][T10029] 0X: left allmulticast mode
[  166.636271][T10029] veth0_to_bond: left allmulticast mode
[  166.643415][T10029] batadv_slave_0: left promiscuous mode
[  166.646143][T10029] xfrm0: left promiscuous mode
[  166.648182][T10029] xfrm0: left allmulticast mode
[  166.662055][T10029] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  166.665857][T10029] macsec1: left promiscuous mode
[  166.667923][T10029] macsec1: left allmulticast mode
[  166.673511][T10029] ip6tnl2: left allmulticast mode
[  166.675856][T10029] gretap1: left allmulticast mode
[  166.678870][T10031] netlink: 'syz.1.1019': attribute type 83 has an invalid length.
[  166.680411][T10029] mac80211_hwsim hwsim24 wlan0: left allmulticast mode
[  167.670544][T10036] netlink: 'syz.2.1021': attribute type 5 has an invalid length.
[  167.690712][T10036] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1021'.
[  167.733544][T10042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1023'.
[  167.737341][T10042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1023'.
[  167.753699][T10042] tc_dump_action: action bad kind
[  167.789410][T10042] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1023'.
[  167.814078][T10053] netlink: 'syz.2.1024': attribute type 8 has an invalid length.
[  167.842155][T10050] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1025'.
[  168.041500][T10068] lo: entered allmulticast mode
[  168.054631][T10068] dvmrp8: entered allmulticast mode
[  168.737893][T10084] netlink: 'syz.1.1031': attribute type 1 has an invalid length.
[  168.760049][T10084] bond8: entered promiscuous mode
[  168.761949][T10084] bond8: entered allmulticast mode
[  168.763926][T10056] lo: left allmulticast mode
[  168.765533][T10056] dvmrp8: left allmulticast mode
[  168.791891][T10084] bridge3: entered promiscuous mode
[  168.793808][T10084] bridge3: entered allmulticast mode
[  168.802208][T10084] bond8: (slave bridge3): making interface the new active one
[  168.805440][T10084] bond8: (slave bridge3): Enslaving as an active interface with an up link
[  169.051418][T10098] lo speed is unknown, defaulting to 1000
[  169.055146][T10098] lo speed is unknown, defaulting to 1000
[  169.592697][T10114] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  169.792658][T10116] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  170.102192][T10140] netlink: 'syz.2.1048': attribute type 30 has an invalid length.
[  170.119755][ T5877] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  170.123400][T10140] netlink: 'syz.2.1048': attribute type 30 has an invalid length.
[  170.126807][ T5877] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  170.143594][ T5877] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  170.147124][ T5877] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  170.251097][T10109] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  170.577865][T10157] syzkaller0: entered promiscuous mode
[  170.580266][T10157] syzkaller0: entered allmulticast mode
[  170.688388][T10161] lo speed is unknown, defaulting to 1000
[  170.692367][T10161] lo speed is unknown, defaulting to 1000
[  171.185479][T10188] bridge4: port 1(veth3) entered blocking state
[  171.188389][T10188] bridge4: port 1(veth3) entered disabled state
[  171.193259][T10188] veth3: entered allmulticast mode
[  171.197452][T10188] veth3: entered promiscuous mode
[  171.207657][T10188] bridge4: port 2(veth0_to_bond) entered blocking state
[  171.211784][T10188] bridge4: port 2(veth0_to_bond) entered disabled state
[  171.215072][T10188] veth0_to_bond: entered allmulticast mode
[  171.221001][T10188] veth0_to_bond: entered promiscuous mode
[  171.230311][T10191] __nla_validate_parse: 47 callbacks suppressed
[  171.230333][T10191] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1067'.
[  171.234435][T10188] vlan0: entered allmulticast mode
[  171.241121][T10188] veth1: entered allmulticast mode
[  171.243251][T10188] bridge4: port 3(vlan0) entered blocking state
[  171.245969][T10188] bridge4: port 3(vlan0) entered disabled state
[  171.250621][T10188] vlan0: entered promiscuous mode
[  171.252652][T10188] veth1: entered promiscuous mode
[  171.294637][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1068'.
[  171.442835][T10196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1069'.
[  171.494576][T10196] lo speed is unknown, defaulting to 1000
[  171.498403][T10196] lo speed is unknown, defaulting to 1000
[  171.841386][T10205] 8021q: adding VLAN 0 to HW filter on device bond3
[  171.862711][T10205] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  171.868645][T10205] bond3: (slave macvlan0): Enslaving as a backup interface with a down link
[  171.878581][T10205] bond2: (slave veth3): Releasing backup interface
[  171.884669][T10205] bond3: (slave macvlan0): Releasing backup interface
[  171.894596][T10205] netlink: 'syz.0.1072': attribute type 1 has an invalid length.
[  172.072245][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1074'.
[  172.082225][T10216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1074'.
[  172.085841][T10216] netlink: 'syz.1.1074': attribute type 12 has an invalid length.
[  172.093874][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1074'.
[  172.275163][T10228] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.314000][T10230] lo speed is unknown, defaulting to 1000
[  172.318061][T10230] lo speed is unknown, defaulting to 1000
[  172.900464][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1081'.
[  172.928351][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1083'.
[  172.962269][T10244] netlink: 'syz.2.1081': attribute type 12 has an invalid length.
[  173.168683][T10260] lo speed is unknown, defaulting to 1000
[  173.172956][T10260] lo speed is unknown, defaulting to 1000
[  173.265112][T10271] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1088'.
[  173.272952][T10271] netem: unknown loss type 12
[  173.275391][T10271] netem: change failed
[  173.347283][T10278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1089'.
[  173.907858][T10311] netlink: 'syz.1.1099': attribute type 1 has an invalid length.
[  173.940003][T10311] 8021q: adding VLAN 0 to HW filter on device bond9
[  173.960328][T10311] bond9: (slave ip6gretap1): making interface the new active one
[  173.964814][T10311] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link
[  173.980829][T10311] erspan0: entered allmulticast mode
[  173.992367][T10311] bond9: (slave erspan0): Enslaving as an active interface with an up link
[  174.138625][T10321] team0: entered promiscuous mode
[  174.253753][T10322] team0 (unregistering): left promiscuous mode
[  174.388579][T10327] lo speed is unknown, defaulting to 1000
[  174.391963][T10327] lo speed is unknown, defaulting to 1000
[  174.393316][T10326] lo speed is unknown, defaulting to 1000
[  174.405630][T10326] lo speed is unknown, defaulting to 1000
[  174.922367][T10347] batadv_slave_0: entered promiscuous mode
[  174.944482][T10349] netlink: 'syz.0.1107': attribute type 1 has an invalid length.
[  175.052549][T10357] netlink: 'syz.2.1110': attribute type 1 has an invalid length.
[  175.115123][T10358] bond10: (slave geneve4): making interface the new active one
[  175.120750][T10358] bond10: (slave geneve4): Enslaving as an active interface with an up link
[  175.137135][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  175.142029][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  175.150214][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  175.153784][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  176.008182][T10434] tipc: Failed to remove unknown binding: 66,1,1/0:1869643111/1869643113
[  176.012454][T10435] tipc: Failed to remove unknown binding: 66,1,1/0:1869643111/1869643113
[  176.016760][T10434] tipc: Failed to remove unknown binding: 66,1,1/0:1869643111/1869643113
[  176.024138][T10434] tipc: Failed to remove unknown binding: 66,1,1/0:1869643111/1869643113
[  176.205592][T10442] 8021q: VLANs not supported on ip_vti0
[  176.484581][   T24] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  176.491847][   T24] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  176.510485][   T24] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  176.594526][T10464] lo speed is unknown, defaulting to 1000
[  176.598432][T10464] lo speed is unknown, defaulting to 1000
[  176.740053][T10474] __nla_validate_parse: 8 callbacks suppressed
[  176.740070][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1133'.
[  176.902846][T10480] netlink: 'syz.0.1134': attribute type 10 has an invalid length.
[  176.904065][T10486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1136'.
[  176.929612][T10480] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  176.935274][T10480] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  177.265306][T10510] netlink: 'syz.1.1141': attribute type 1 has an invalid length.
[  177.268075][T10510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1141'.
[  177.323510][T10512] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1144'.
[  177.373326][T10516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1145'.
[  177.376927][T10516] netlink: 'syz.2.1145': attribute type 2 has an invalid length.
[  177.381743][T10516] netlink: 'syz.2.1145': attribute type 1 has an invalid length.
[  177.384763][T10516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1145'.
[  177.464256][T10525] lo speed is unknown, defaulting to 1000
[  177.468208][T10525] lo speed is unknown, defaulting to 1000
[  177.725009][T10541] netlink: 'syz.0.1150': attribute type 5 has an invalid length.
[  177.943251][T10552] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1153'.
[  177.957284][T10552] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1153'.
[  177.971724][T10552] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1153'.
[  177.975868][T10552] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1153'.
[  178.106791][T10563] IPVS: set_ctl: invalid protocol: 50 172.20.20.11:21
[  178.394969][T10580] IPVS: set_ctl: invalid protocol: 29281 114.101.97.100:8240
[  178.407863][T10580] IPVS: set_ctl: invalid protocol: 29801 48.48.48.48:12336
[  178.426186][T10580] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  178.678851][T10599] syzkaller1: entered promiscuous mode
[  178.683957][T10599] syzkaller1: entered allmulticast mode
[  179.493110][T10613] bridge_slave_0: default FDB implementation only supports local addresses
[  179.707534][T10621] lo speed is unknown, defaulting to 1000
[  179.713119][T10621] lo speed is unknown, defaulting to 1000
[  179.735337][T10628] netlink: 'syz.2.1176': attribute type 1 has an invalid length.
[  179.781307][T10628] bond11: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  179.835684][ T5877] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  179.836442][T10628] 8021q: adding VLAN 0 to HW filter on device bond11
[  179.927770][T10628] veth5: entered promiscuous mode
[  179.933242][T10628] bond11: (slave veth5): Enslaving as a backup interface with a down link
[  179.951453][ T9260] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  180.035078][T10635] veth0_to_bond: left allmulticast mode
[  180.037361][T10635] veth0_to_bond: left promiscuous mode
[  180.039921][T10635] bridge4: port 2(veth0_to_bond) entered disabled state
[  180.046038][T10635] veth3: left allmulticast mode
[  180.048078][T10635] veth3: left promiscuous mode
[  180.052209][T10635] bridge4: port 1(veth3) entered disabled state
[  180.057292][T10635] vlan0: left promiscuous mode
[  180.059455][T10635] veth1: left promiscuous mode
[  180.061839][T10635] bridge4: port 3(vlan0) entered disabled state
[  180.068984][T10635] bond10: (slave geneve4): Releasing active interface
[  180.082112][T10635] bond11: (slave ip6gretap1): Removing an active aggregator
[  180.092993][T10635] bond11: (slave ip6gretap1): Releasing backup interface
[  180.103753][T10635] bond11: (slave ip6gretap1): the permanent HWaddr of slave - 42:76:ea:87:c0:1a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  180.120452][T10635] bond11: (slave veth5): Releasing backup interface
[  180.132697][T10639] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.139422][T10637] syzkaller0: entered promiscuous mode
[  180.141632][T10637] syzkaller0: entered allmulticast mode
[  180.146080][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  180.150035][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  180.193635][T10637] tipc: Resetting bearer <eth:syzkaller0>
[  180.198736][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  180.204833][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  180.243588][T10639] tipc: Resetting bearer <eth:syzkaller0>
[  180.258537][T10639] tipc: Disabling bearer <eth:syzkaller0>
[  180.265534][T10646] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.274201][T10646] syzkaller0: entered promiscuous mode
[  180.276191][T10646] syzkaller0: entered allmulticast mode
[  180.543642][T10665] netlink: 'syz.0.1185': attribute type 13 has an invalid length.
[  180.546922][T10665] netlink: 'syz.0.1185': attribute type 17 has an invalid length.
[  180.574444][T10665] erspan0: left promiscuous mode
[  180.611779][T10665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  180.630430][ T5236] Bluetooth: hci1: command 0x0406 tx timeout
[  180.724227][T10671] netlink: 'syz.1.1187': attribute type 10 has an invalid length.
[  180.732216][T10671] 8021q: adding VLAN 0 to HW filter on device team0
[  180.736154][T10671] team0: entered promiscuous mode
[  180.738721][T10671] bond0: (slave team0): Enslaving as an active interface with an up link
[  180.887882][T10675] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  181.042033][T10646] tipc: Resetting bearer <eth:syzkaller0>
[  181.071396][T10646] tipc: Disabling bearer <eth:syzkaller0>
[  181.077381][T10694] netlink: 'syz.1.1196': attribute type 1 has an invalid length.
[  181.223748][T10706] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  181.325254][T10706] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  181.340433][T10714] pimreg: entered allmulticast mode
[  181.346527][T10714] pimreg: left allmulticast mode
[  181.385767][T10706] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  181.448475][T10714] bond10: entered promiscuous mode
[  181.457386][T10714] bond10: entered allmulticast mode
[  181.460367][T10714] 8021q: adding VLAN 0 to HW filter on device bond10
[  181.502396][T10706] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  181.593916][ T9260] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  181.626833][ T5853] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  181.684371][ T9260] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  181.687259][ T9260] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  181.842522][T10739] __nla_validate_parse: 19 callbacks suppressed
[  181.842541][T10739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1207'.
[  181.893296][T10741] 8021q: adding VLAN 0 to HW filter on device bond5
[  181.932533][T10741] bond5: (slave veth7): Enslaving as an active interface with a down link
[  182.037300][T10753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1210'.
[  182.045259][T10757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1210'.
[  182.073290][T10756] lo speed is unknown, defaulting to 1000
[  182.076775][T10756] lo speed is unknown, defaulting to 1000
[  182.588456][T10805] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.597252][T10805] syzkaller0: entered promiscuous mode
[  182.604030][T10805] syzkaller0: entered allmulticast mode
[  182.621737][T10805] tipc: Resetting bearer <eth:syzkaller0>
[  182.632405][T10805] tipc: Resetting bearer <eth:syzkaller0>
[  182.643932][T10805] tipc: Disabling bearer <eth:syzkaller0>
[  182.666719][T10814] validate_nla: 3 callbacks suppressed
[  182.666733][T10814] netlink: 'syz.1.1224': attribute type 4 has an invalid length.
[  182.674495][T10814] netlink: 'syz.1.1224': attribute type 1 has an invalid length.
[  182.712233][T10814] bond11 (unregistering): Released all slaves
[  183.554969][T10873] lo speed is unknown, defaulting to 1000
[  183.558394][T10873] lo speed is unknown, defaulting to 1000
[  183.598422][T10873] netlink: 'syz.0.1237': attribute type 1 has an invalid length.
[  183.624549][T10884] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1240'.
[  183.805792][T10893] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  183.854961][T10903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1245'.
[  183.889289][T10904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1244'.
[  184.065152][T10916] netlink: 'syz.2.1248': attribute type 1 has an invalid length.
[  184.090958][T10916] bond12: (slave gretap4): making interface the new active one
[  184.094374][T10916] bond12: (slave gretap4): Enslaving as an active interface with an up link
[  184.136243][T10922] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1249'.
[  184.178486][T10924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1250'.
[  184.408289][T10936] lo speed is unknown, defaulting to 1000
[  184.412462][T10936] lo speed is unknown, defaulting to 1000
[  184.540959][T10942] netlink: 'syz.2.1254': attribute type 1 has an invalid length.
[  184.546353][T10942] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1254'.
[  184.551038][T10941] netlink: 'syz.0.1255': attribute type 3 has an invalid length.
[  184.556803][T10941] netlink: 11382 bytes leftover after parsing attributes in process `syz.0.1255'.
[  185.185031][T10988] netlink: 'syz.0.1268': attribute type 1 has an invalid length.
[  185.222130][T10988] 8021q: adding VLAN 0 to HW filter on device bond6
[  185.233215][T10988] vlan0: entered promiscuous mode
[  185.235119][T10988] bond6: entered promiscuous mode
[  185.237306][T10988] vlan0: entered allmulticast mode
[  185.241944][T10988] bond6: entered allmulticast mode
[  185.326627][T10988] bond6: (slave gretap1): making interface the new active one
[  185.333207][T10988] gretap1: entered promiscuous mode
[  185.335711][T10988] gretap1: entered allmulticast mode
[  185.351122][T10988] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  185.361855][T10988] syz.0.1268 (10988) used greatest stack depth: 18384 bytes left
[  185.506709][T11002] syz.2.1273 uses old SIOCAX25GETINFO
[  185.534636][T11007] netlink: 'syz.0.1274': attribute type 6 has an invalid length.
[  185.548504][T11007] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  185.874225][T11016] lo speed is unknown, defaulting to 1000
[  185.921412][T11016] lo speed is unknown, defaulting to 1000
[  186.253566][T11031] netlink: 'syz.2.1278': attribute type 10 has an invalid length.
[  186.279448][T11031] bond0: (slave wlan1): refused to change device type
[  186.957324][T11063] netlink: 'syz.2.1286': attribute type 10 has an invalid length.
[  186.977062][T11063] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  186.987252][T11063] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  187.008250][T11063] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  187.134524][T11073] __nla_validate_parse: 9 callbacks suppressed
[  187.134537][T11073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1289'.
[  187.173166][T11075] syzkaller1: entered promiscuous mode
[  187.175197][T11075] syzkaller1: entered allmulticast mode
[  187.303440][T11088] lo speed is unknown, defaulting to 1000
[  187.307070][T11088] lo speed is unknown, defaulting to 1000
[  187.418828][T11096] netlink: 'syz.0.1294': attribute type 11 has an invalid length.
[  187.450960][T11096] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1294'.
[  187.463338][T11096] bond0: entered promiscuous mode
[  187.466377][T11096] bond0: left promiscuous mode
[  187.621889][T11103] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1296'.
[  187.765631][T11108] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1297'.
[  187.836578][T11112] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1299'.
[  187.894909][T11119] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1301'.
[  187.983077][T11123] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1302'.
[  188.046629][T11125] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  188.093839][T11127] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1304'.
[  188.355542][T11139] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  188.721051][T11154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1311'.
[  188.783225][T11159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1312'.
[  188.922506][T11170] vlan2: entered allmulticast mode
[  188.924790][T11170] bridge_slave_0: entered allmulticast mode
[  188.958445][T11171] !: entered promiscuous mode
[  188.963384][T11171] !: left promiscuous mode
[  189.585121][T11223] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  189.588461][T11222] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  189.592476][T11223] syzkaller0: entered promiscuous mode
[  189.594725][T11223] syzkaller0: entered allmulticast mode
[  189.621448][T11223] tipc: Resetting bearer <eth:syzkaller0>
[  189.627911][T11221] tipc: Resetting bearer <eth:syzkaller0>
[  189.650909][T11221] tipc: Disabling bearer <eth:syzkaller0>
[  189.786275][T11241] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  189.792978][T11241] syzkaller0: entered promiscuous mode
[  189.795106][T11241] syzkaller0: entered allmulticast mode
[  189.806769][T11241] tipc: Resetting bearer <eth:syzkaller0>
[  189.834194][T11241] tipc: Resetting bearer <eth:syzkaller0>
[  189.851852][T11241] tipc: Disabling bearer <eth:syzkaller0>
[  192.045448][T11267] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  192.264515][T11290] validate_nla: 1 callbacks suppressed
[  192.264533][T11290] netlink: 'syz.1.1347': attribute type 29 has an invalid length.
[  192.468026][T11302] syzkaller0: entered promiscuous mode
[  192.470502][T11302] syzkaller0: entered allmulticast mode
[  193.047985][T11328] __nla_validate_parse: 10 callbacks suppressed
[  193.048002][T11328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1355'.
[  194.410825][T11348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1362'.
[  194.414537][T11348] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1362'.
[  194.417898][T11348] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1362'.
[  194.423711][T11348] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1362'.
[  195.366799][T11361] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1364'.
[  195.375642][T11361] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1364'.
[  195.487990][T11372] lo speed is unknown, defaulting to 1000
[  195.492556][T11372] lo speed is unknown, defaulting to 1000
[  195.559546][T11377] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1366'.
[  195.601160][T11377] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1366'.
[  195.611112][T11374] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1366'.
[  195.618664][T11379] netlink: 'syz.1.1367': attribute type 1 has an invalid length.
[  195.794028][T11382] pimreg: entered allmulticast mode
[  195.797631][T11382] pimreg: left allmulticast mode
[  195.888002][T11382] bond7: entered promiscuous mode
[  195.891218][T11382] bond7: entered allmulticast mode
[  195.893686][T11382] 8021q: adding VLAN 0 to HW filter on device bond7
[  196.367551][T11397] netlink: 'syz.1.1371': attribute type 4 has an invalid length.
[  196.415044][T11399] vlan2: entered promiscuous mode
[  196.417383][T11399] bond0: entered promiscuous mode
[  196.420358][T11399] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  197.197005][T11382] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  197.259557][T11403] netlink: 'syz.0.1373': attribute type 1 has an invalid length.
[  197.307612][T11403] bond8: entered promiscuous mode
[  197.313292][T11403] 8021q: adding VLAN 0 to HW filter on device bond8
[  197.624388][T11432] lo speed is unknown, defaulting to 1000
[  197.630498][T11432] lo speed is unknown, defaulting to 1000
[  197.909427][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  198.106903][T11455] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  198.194365][T11461] __nla_validate_parse: 20 callbacks suppressed
[  198.194382][T11461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1387'.
[  198.230505][T11466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1389'.
[  198.234138][T11466] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1389'.
[  198.237634][T11466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1389'.
[  198.243107][T11466] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1389'.
[  198.247484][T11466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1389'.
[  198.346520][T11473] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1390'.
[  198.355964][T11473] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1390'.
[  198.362970][T11474] netlink: 34 bytes leftover after parsing attributes in process `syz.1.1390'.
[  198.596113][T11492] 8021q: VLANs not supported on xfrm0
[  198.661901][T11496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1394'.
[  199.033965][T11510] lo speed is unknown, defaulting to 1000
[  199.037990][T11510] lo speed is unknown, defaulting to 1000
[  199.374152][T11525] pim6reg1: entered promiscuous mode
[  199.376393][T11525] pim6reg1: entered allmulticast mode
[  199.400972][T11529] xt_limit: Overflow, try lower: 604147548/4200216962
[  199.478962][T11535] netlink: 'syz.1.1404': attribute type 7 has an invalid length.
[  199.482320][T11535] netlink: 'syz.1.1404': attribute type 8 has an invalid length.
[  199.621130][T11545] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  199.624441][T11545] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  199.885570][T11568] netlink: 'syz.1.1414': attribute type 2 has an invalid length.
[  199.889440][T11568] netlink: 'syz.1.1414': attribute type 2 has an invalid length.
[  200.168731][T11588] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  200.177341][T11588] syzkaller0: entered promiscuous mode
[  200.180816][T11588] syzkaller0: entered allmulticast mode
[  200.256707][T11599] tipc: Resetting bearer <eth:syzkaller0>
[  200.271529][T11601] netlink: 'syz.0.1423': attribute type 30 has an invalid length.
[  200.274783][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  200.278229][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  200.285742][T11601] netlink: 'syz.0.1423': attribute type 30 has an invalid length.
[  200.291929][T11586] tipc: Resetting bearer <eth:syzkaller0>
[  200.324363][T11586] tipc: Disabling bearer <eth:syzkaller0>
[  200.345308][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  200.348874][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  200.355766][T11601] netlink: 'syz.0.1423': attribute type 30 has an invalid length.
[  200.359679][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  200.363405][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  200.367888][T11601] netlink: 'syz.0.1423': attribute type 30 has an invalid length.
[  200.376750][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  200.380529][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  200.384153][T11601] netlink: 'syz.0.1423': attribute type 30 has an invalid length.
[  200.388573][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  200.399439][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  200.406859][T11601] netlink: 'syz.0.1423': attribute type 30 has an invalid length.
[  200.414865][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  200.423628][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  200.428571][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  200.438284][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  200.444380][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  200.448349][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  200.457636][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  200.463431][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  200.467936][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  200.476231][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  200.481760][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  200.485175][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  200.495106][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  200.498752][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  200.504406][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  200.508046][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  200.515712][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  200.519529][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  200.524075][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  200.527747][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  200.537455][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  200.541575][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  200.545913][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  200.552976][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  200.558495][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  200.563407][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  200.567357][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  200.574165][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  200.578816][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  200.583335][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  200.587858][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  200.592040][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  200.595843][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  200.598833][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  200.613147][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  200.616768][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  200.622816][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  200.625963][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  200.640148][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  200.643059][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  200.646877][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  200.659203][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  200.664518][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  200.669694][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  200.674669][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  200.677833][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  200.682829][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  200.686620][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  200.700199][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  200.705576][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  200.712938][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  200.716355][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  200.720876][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  200.724116][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  200.727774][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  200.732196][T11601] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  200.857272][T11637] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  200.865508][T11637] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  200.869587][T11636] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  200.873288][T11636] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  201.089370][T11658] batman_adv: batadv0: Adding interface: ip6gretap1
[  201.091890][T11658] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[  201.102650][T11658] batman_adv: batadv0: Interface activated: ip6gretap1
[  201.697852][T11693] 8021q: adding VLAN 0 to HW filter on device bond14
[  201.703234][T11693] bond13: (slave bond14): making interface the new active one
[  201.706848][T11693] bond13: (slave bond14): Enslaving as an active interface with an up link
[  202.361421][T11720] pim6reg: entered allmulticast mode
[  202.379496][T11720] pim6reg: left allmulticast mode
[  202.534908][T11723] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  202.543219][T11723] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  203.377364][T11750] lo speed is unknown, defaulting to 1000
[  203.381928][T11750] lo speed is unknown, defaulting to 1000
[  203.388900][T11754] __nla_validate_parse: 63 callbacks suppressed
[  203.388917][T11754] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1464'.
[  203.397544][T11755] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1462'.
[  203.457134][T11754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1464'.
[  203.534563][T11762] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1465'.
[  203.546694][T11763] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1465'.
[  203.563616][T11764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1466'.
[  203.704929][T11769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1467'.
[  203.707583][T11770] lo speed is unknown, defaulting to 1000
[  203.708540][T11769] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1467'.
[  203.713155][T11770] lo speed is unknown, defaulting to 1000
[  203.994451][T11784] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  203.997673][T11784] syzkaller0: entered promiscuous mode
[  204.000763][T11784] syzkaller0: entered allmulticast mode
[  204.020529][T11784] tipc: Resetting bearer <eth:syzkaller0>
[  204.024225][T11783] tipc: Resetting bearer <eth:syzkaller0>
[  204.040447][T11783] tipc: Disabling bearer <eth:syzkaller0>
[  204.302758][T11793] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1476'.
[  204.312225][T11795] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1477'.
[  204.325813][T11795] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  204.330063][T11795] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  204.656125][T11807] bond5: (slave veth7): Releasing active interface
[  204.663767][T11807] bond6: (slave gretap1): Releasing active interface
[  204.666388][T11807] gretap1: left promiscuous mode
[  204.668484][T11807] gretap1: left allmulticast mode
[  204.676589][T11807] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  204.679949][T11807] batman_adv: batadv0: Removing interface: ip6gretap1
[  204.816540][T11810] validate_nla: 37 callbacks suppressed
[  204.816560][T11810] netlink: 'syz.2.1482': attribute type 1 has an invalid length.
[  204.822998][T11810] netlink: 'syz.2.1482': attribute type 2 has an invalid length.
[  206.682077][T11825] netlink: 'syz.1.1486': attribute type 5 has an invalid length.
[  206.706948][T11822] lo speed is unknown, defaulting to 1000
[  206.710074][T11822] lo speed is unknown, defaulting to 1000
[  207.708867][T11867] IPVS: set_ctl: invalid protocol: 33 172.30.0.3:20001
[  208.072013][T11874] bond3: option mode: unable to set because the bond device is up
[  208.093804][T11874] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  208.098031][T11874] bond3: (slave macvlan0): Enslaving as a backup interface with a down link
[  208.121858][T11874] bond3: (slave macvlan0): Releasing backup interface
[  208.355014][T11888] chnl_net:caif_netlink_parms(): no params data found
[  208.655231][T11905] __nla_validate_parse: 11 callbacks suppressed
[  208.655244][T11905] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1504'.
[  208.687162][T11905] team0: mtu less than device minimum
[  208.703234][T11905] batman_adv: batadv0: Adding interface: ip6gretap2
[  208.706811][T11905] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem.
[  208.718136][T11905] batman_adv: batadv0: Interface activated: ip6gretap2
[  208.965621][T11872] syz.1.1497: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  208.975639][T11872] CPU: 1 UID: 0 PID: 11872 Comm: syz.1.1497 Not tainted syzkaller #0 PREEMPT(full) 
[  208.975653][T11872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  208.975659][T11872] Call Trace:
[  208.975703][T11872]  <TASK>
[  208.975708][T11872]  dump_stack_lvl+0x189/0x250
[  208.975725][T11872]  ? __pfx_dump_stack_lvl+0x10/0x10
[  208.975735][T11872]  ? __pfx__printk+0x10/0x10
[  208.975746][T11872]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  208.975756][T11872]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  208.975766][T11872]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  208.975776][T11872]  warn_alloc+0x214/0x310
[  208.975792][T11872]  ? __pfx_warn_alloc+0x10/0x10
[  208.975808][T11872]  ? __get_vm_area_node+0x28f/0x300
[  208.975819][T11872]  ? hash_ip4_resize+0x1e0/0x1990
[  208.975829][T11872]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  208.975854][T11872]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  208.975868][T11872]  ? rcu_is_watching+0x15/0xb0
[  208.975877][T11872]  ? hash_ip4_resize+0x1e0/0x1990
[  208.975884][T11872]  ? hash_ip4_resize+0x1e0/0x1990
[  208.975890][T11872]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  208.975903][T11872]  ? hash_ip4_resize+0x1e0/0x1990
[  208.975913][T11872]  hash_ip4_resize+0x1e0/0x1990
[  208.975922][T11872]  ? hash_ip4_uadt+0x6cb/0x850
[  208.975931][T11872]  ? __pfx_hash_ip4_add+0x10/0x10
[  208.975938][T11872]  ? __pfx_hash_ip4_uadt+0x10/0x10
[  208.975945][T11872]  ? __local_bh_enable_ip+0x12d/0x1c0
[  208.975962][T11872]  call_ad+0x44e/0xb00
[  208.975977][T11872]  ? __pfx_call_ad+0x10/0x10
[  208.975994][T11872]  ? __nla_parse+0x40/0x60
[  208.976008][T11872]  ip_set_ad+0x791/0x930
[  208.976023][T11872]  ? __pfx_ip_set_ad+0x10/0x10
[  208.976051][T11872]  nfnetlink_rcv_msg+0xb4d/0x1130
[  208.976062][T11872]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  208.976082][T11872]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  208.976106][T11872]  ? __lock_acquire+0xab9/0xd20
[  208.976125][T11872]  netlink_rcv_skb+0x208/0x470
[  208.976139][T11872]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  208.976150][T11872]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  208.976167][T11872]  ? bpf_lsm_capable+0x9/0x20
[  208.976178][T11872]  ? security_capable+0x7e/0x2e0
[  208.976194][T11872]  nfnetlink_rcv+0x26a/0x2520
[  208.976204][T11872]  ? is_bpf_text_address+0x26/0x2b0
[  208.976218][T11872]  ? kernel_text_address+0xa5/0xe0
[  208.976230][T11872]  ? __kernel_text_address+0xd/0x40
[  208.976240][T11872]  ? unwind_get_return_address+0x4d/0x90
[  208.976250][T11872]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  208.976260][T11872]  ? arch_stack_walk+0xfc/0x150
[  208.976276][T11872]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  208.976287][T11872]  ? stack_depot_save_flags+0x40/0x860
[  208.976300][T11872]  ? __lock_acquire+0xab9/0xd20
[  208.976323][T11872]  ? __lock_acquire+0xab9/0xd20
[  208.976339][T11872]  ? netlink_deliver_tap+0x2e/0x1b0
[  208.976354][T11872]  ? netlink_deliver_tap+0x2e/0x1b0
[  208.976369][T11872]  netlink_unicast+0x82f/0x9e0
[  208.976384][T11872]  ? __pfx_netlink_unicast+0x10/0x10
[  208.976396][T11872]  ? netlink_sendmsg+0x642/0xb30
[  208.976407][T11872]  ? skb_put+0x11b/0x210
[  208.976416][T11872]  netlink_sendmsg+0x805/0xb30
[  208.976432][T11872]  ? __pfx_netlink_sendmsg+0x10/0x10
[  208.976448][T11872]  ? aa_sock_msg_perm+0xf1/0x1d0
[  208.976461][T11872]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  208.976473][T11872]  ? __pfx_netlink_sendmsg+0x10/0x10
[  208.976491][T11872]  __sock_sendmsg+0x21c/0x270
[  208.976505][T11872]  ____sys_sendmsg+0x505/0x830
[  208.976517][T11872]  ? __pfx_____sys_sendmsg+0x10/0x10
[  208.976529][T11872]  ? import_iovec+0x74/0xa0
[  208.976541][T11872]  ___sys_sendmsg+0x21f/0x2a0
[  208.976550][T11872]  ? __pfx____sys_sendmsg+0x10/0x10
[  208.976590][T11872]  ? __fget_files+0x2a/0x420
[  208.976604][T11872]  ? __fget_files+0x3a0/0x420
[  208.976621][T11872]  __x64_sys_sendmsg+0x19b/0x260
[  208.976631][T11872]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  208.976644][T11872]  ? rcu_is_watching+0x15/0xb0
[  208.976661][T11872]  ? do_syscall_64+0xbe/0x3b0
[  208.976711][T11872]  do_syscall_64+0xfa/0x3b0
[  208.976723][T11872]  ? lockdep_hardirqs_on+0x9c/0x150
[  208.976739][T11872]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.976747][T11872]  ? exc_page_fault+0x9f/0xf0
[  208.976759][T11872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.976767][T11872] RIP: 0033:0x7f54b678ebe9
[  208.976781][T11872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  208.976793][T11872] RSP: 002b:00007f54b75fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  208.976809][T11872] RAX: ffffffffffffffda RBX: 00007f54b69c6090 RCX: 00007f54b678ebe9
[  208.976819][T11872] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000008
[  208.976828][T11872] RBP: 00007f54b6811e19 R08: 0000000000000000 R09: 0000000000000000
[  208.976837][T11872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  208.976844][T11872] R13: 00007f54b69c6128 R14: 00007f54b69c6090 R15: 00007ffe37e3a8a8
[  208.976857][T11872]  </TASK>
[  208.976863][T11872] Mem-Info:
[  208.999722][T11915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1507'.
[  209.007571][T11872] active_anon:5539 inactive_anon:0 isolated_anon:0
[  209.007571][T11872]  active_file:1354 inactive_file:38280 isolated_file:0
[  209.007571][T11872]  unevictable:1768 dirty:31 writeback:0
[  209.007571][T11872]  slab_reclaimable:11084 slab_unreclaimable:76689
[  209.007571][T11872]  mapped:21258 shmem:2505 pagetables:1067
[  209.007571][T11872]  sec_pagetables:0 bounce:0
[  209.007571][T11872]  kernel_misc_reclaimable:0
[  209.007571][T11872]  free:262999 free_pcp:20149 free_cma:0
[  209.103325][T11931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1510'.
[  209.106886][T11872] Node 0 active_anon:14068kB inactive_anon:0kB active_file:4560kB inactive_file:29536kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44388kB dirty:108kB writeback:0kB shmem:5136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6396kB pagetables:2520kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  209.187530][T11872] Node 1 active_anon:8156kB inactive_anon:0kB active_file:856kB inactive_file:123584kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40644kB dirty:16kB writeback:0kB shmem:4884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7848kB pagetables:1884kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  209.198564][T11872] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  209.209529][T11872] lowmem_reserve[]: 0 811 811 811 811
[  209.211391][T11872] Node 0 DMA32 free:339580kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14068kB inactive_anon:0kB active_file:4560kB inactive_file:29536kB unevictable:3536kB writepending:108kB present:1556484kB managed:830928kB mlocked:0kB bounce:0kB free_pcp:37800kB local_pcp:17868kB free_cma:0kB
[  209.222619][T11872] lowmem_reserve[]: 0 0 0 0 0
[  209.224260][T11872] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  209.234300][T11872] lowmem_reserve[]: 0 0 854 854 854
[  209.234551][T11933] netlink: 452 bytes leftover after parsing attributes in process `syz.2.1510'.
[  209.236121][T11872] Node 1 Normal free:237768kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8088kB inactive_anon:0kB active_file:856kB inactive_file:123584kB unevictable:3536kB writepending:16kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:42652kB local_pcp:22952kB free_cma:0kB
[  209.256875][T11872] lowmem_reserve[]: 0 0 0 0 0
[  209.258738][T11872] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  209.263493][T11872] Node 0 DMA32: 731*4kB (UME) 426*8kB (UME) 336*16kB (UM) 178*32kB (UME) 76*64kB (UME) 181*128kB (UME) 94*256kB (UME) 41*512kB (UM) 27*1024kB (UME) 14*2048kB (UM) 47*4096kB (UM) = 339324kB
[  209.282112][T11872] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  209.288533][T11872] Node 1 Normal: 213*4kB (UME) 319*8kB (UME) 563*16kB (UME) 644*32kB (UME) 242*64kB (UME) 71*128kB (UME) 28*256kB (UME) 12*512kB (UM) 11*1024kB (UME) 4*2048kB (UM) 36*4096kB (UM) = 237820kB
[  209.297716][T11872] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  209.301892][T11872] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  209.305469][T11872] 42139 total pagecache pages
[  209.307329][T11872] 0 pages in swap cache
[  209.312196][T11872] Free swap  = 124996kB
[  209.313934][T11872] Total swap = 124996kB
[  209.315611][T11872] 786301 pages RAM
[  209.317137][T11872] 0 pages HighMem/MovableOnly
[  209.321369][T11872] 241337 pages reserved
[  209.323260][T11872] 0 pages cma reserved
[  209.421707][T11946] netlink: 'syz.2.1514': attribute type 12 has an invalid length.
[  209.451208][T11950] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1516'.
[  209.542885][T11958] 8021q: adding VLAN 0 to HW filter on device bond11
[  209.625448][T11958] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  209.634530][T11958] bond11: (slave macvlan2): Enslaving as a backup interface with an up link
[  209.648324][T11958] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1518'.
[  209.652703][ T9260] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  209.660699][T11960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1517'.
[  209.791537][ T5853] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  210.342346][ T9260] bond11: (slave macvlan2): link status up again after 0 ms
[  210.345629][ T9260] bond11: (slave macvlan2): failed to get link speed/duplex
[  210.446829][T11974] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1522'.
[  210.467245][T11974] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1522'.
[  210.474015][ T5853] bond11: (slave macvlan2): failed to get link speed/duplex
[  210.580050][ T5853] bond11: (slave macvlan2): failed to get link speed/duplex
[  210.584452][T11987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1525'.
[  210.618091][T11987] netlink: 'syz.0.1525': attribute type 1 has an invalid length.
[  210.662123][T11993] netlink: 'syz.1.1526': attribute type 13 has an invalid length.
[  210.665269][T11993] netlink: 'syz.1.1526': attribute type 17 has an invalid length.
[  210.815776][T11993] erspan0: left allmulticast mode
[  210.877194][T11993] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.987368][T11993] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  210.992984][    T9] lo speed is unknown, defaulting to 1000
[  210.996783][    T9] syz2: Port: 1 Link ACTIVE
[  210.999681][ T5870] bond11: (slave macvlan2): failed to get link speed/duplex
[  211.130573][   T12] bond11: (slave macvlan2): failed to get link speed/duplex
[  211.209833][T12019] hsr_slave_0 (unregistering): left promiscuous mode
[  211.482103][T12042] lo speed is unknown, defaulting to 1000
[  211.485270][T12042] lo speed is unknown, defaulting to 1000
[  211.526719][T12044] netlink: 'syz.1.1537': attribute type 4 has an invalid length.
[  211.676645][T12054] netlink: 'syz.0.1540': attribute type 8 has an invalid length.
[  211.819563][T12062] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  211.830674][ T5870] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  211.834052][ T5870] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  211.841300][ T5870] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  211.858494][ T5870] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  212.209246][T12098] netlink: 'syz.0.1551': attribute type 10 has an invalid length.
[  212.214220][T12098] netlink: 'syz.0.1551': attribute type 10 has an invalid length.
[  212.218318][T12098] batadv0: entered promiscuous mode
[  212.224221][T12098] batadv0: entered allmulticast mode
[  213.554301][T12192] netlink: 'syz.0.1578': attribute type 10 has an invalid length.
[  213.570014][T12194] netlink: 'syz.1.1579': attribute type 1 has an invalid length.
[  213.664946][T12205] bridge0: entered promiscuous mode
[  213.667023][T12205] vlan2: entered promiscuous mode
[  213.760109][ T5877] net_ratelimit: 25 callbacks suppressed
[  213.760127][ T5877] bond11: (slave macvlan2): failed to get link speed/duplex
[  213.857868][T12219] syzkaller0: entered promiscuous mode
[  213.863133][T12219] syzkaller0: entered allmulticast mode
[  213.870061][T12219] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  213.875106][T12219] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  213.893487][T12221] netlink: 'syz.1.1589': attribute type 9 has an invalid length.
[  213.893487][T12219] tipc: Resetting bearer <eth:syzkaller0>
[  213.901545][T12218] tipc: Resetting bearer <eth:syzkaller0>
[  213.921028][T12218] tipc: Disabling bearer <eth:syzkaller0>
[  213.939290][ T5877] bond11: (slave macvlan2): failed to get link speed/duplex
[  213.955632][T12223] __nla_validate_parse: 14 callbacks suppressed
[  213.955651][T12223] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1590'.
[  213.981980][T12223] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1590'.
[  214.036795][T12225] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1591'.
[  214.040533][T12225] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  214.063098][T12226] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  214.072488][ T5853] bond11: (slave macvlan2): failed to get link speed/duplex
[  214.190534][ T5853] bond11: (slave macvlan2): failed to get link speed/duplex
[  214.252624][T12234] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1593'.
[  214.258673][T12234] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[  214.265123][T10418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.268383][T10418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.299947][ T9260] bond11: (slave macvlan2): failed to get link speed/duplex
[  214.364782][T12243] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  214.421922][T12243] bond9: entered promiscuous mode
[  214.427393][T12243] bond9: entered allmulticast mode
[  214.434092][T12243] 8021q: adding VLAN 0 to HW filter on device bond9
[  214.449338][ T5877] bond11: (slave macvlan2): failed to get link speed/duplex
[  214.561397][ T5877] bond11: (slave macvlan2): failed to get link speed/duplex
[  214.611990][T12255] lo speed is unknown, defaulting to 1000
[  214.622740][T12252] lo speed is unknown, defaulting to 1000
[  214.626410][T12252] lo speed is unknown, defaulting to 1000
[  214.631260][T12255] lo speed is unknown, defaulting to 1000
[  214.870515][ T9260] bond11: (slave macvlan2): failed to get link speed/duplex
[  214.993919][T12272] bond0: (slave wlan1): Releasing backup interface
[  214.998042][T12272] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  215.017255][T12272] bond12: (slave gretap4): Releasing active interface
[  215.017872][T12274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1607'.
[  215.028875][T12272] bond13: (slave bond14): Releasing backup interface
[  215.033221][T12272] batman_adv: batadv0: Removing interface: ip6gretap2
[  215.044915][T12274] geneve3: entered promiscuous mode
[  215.047305][T12274] geneve3: entered allmulticast mode
[  215.053296][ T5853] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  215.062881][ T9260] bond11: (slave macvlan2): failed to get link speed/duplex
[  215.067743][ T5853] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  215.072936][ T5853] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  215.076204][ T5853] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  215.087666][T12272] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  215.092415][T12272] bond0: (slave wlan1): refused to change device type
[  215.102893][T12272] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  215.107391][T12272] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  215.593506][T12296] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1613'.
[  215.603351][T12296] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1613'.
[  215.607270][T12296] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1613'.
[  215.614627][T12296] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1613'.
[  215.618456][T12296] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1613'.
[  215.854329][T12305] validate_nla: 3 callbacks suppressed
[  215.854341][T12305] netlink: 'syz.2.1615': attribute type 29 has an invalid length.
[  215.873432][T12305] pimreg: tun_chr_ioctl cmd 1074025677
[  215.875810][T12305] pimreg: linktype set to 780
[  215.878088][T12305] pimreg: tun_chr_ioctl cmd 35111
[  215.882925][T12305] netlink: 'syz.2.1615': attribute type 29 has an invalid length.
[  215.885717][T12305] netlink: 'syz.2.1615': attribute type 29 has an invalid length.
[  215.888522][T12305] netlink: 'syz.2.1615': attribute type 29 has an invalid length.
[  215.891723][T12305] netlink: 'syz.2.1615': attribute type 29 has an invalid length.
[  215.896298][T12305] netlink: 'syz.2.1615': attribute type 29 has an invalid length.
[  215.904158][T12305] netlink: 'syz.2.1615': attribute type 29 has an invalid length.
[  215.906862][T12305] netlink: 'syz.2.1615': attribute type 29 has an invalid length.
[  215.919654][T12305] netlink: 'syz.2.1615': attribute type 29 has an invalid length.
[  215.923389][T12305] netlink: 'syz.2.1615': attribute type 29 has an invalid length.
[  216.188713][T12327] sctp: [Deprecated]: syz.1.1622 (pid 12327) Use of int in maxseg socket option.
[  216.188713][T12327] Use struct sctp_assoc_value instead
[  216.578785][ T5870] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.582268][ T5870] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.585172][ T5870] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.588319][ T5870] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.732665][T12374] tc_dump_action: action bad kind
[  216.777121][T12374] syzkaller0: entered promiscuous mode
[  216.780953][T12374] syzkaller0: entered allmulticast mode
[  216.911953][  T794] lo speed is unknown, defaulting to 1000
[  216.914323][  T794] syz2: Port: 1 Link DOWN
[  216.963971][T12386] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1803188595)
[  216.968979][T12386] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  218.051768][   T33] audit: type=1804 audit(1756905081.838:3): pid=12421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1648" name="/newroot/571/cgroup.controllers" dev="tmpfs" ino=2936 res=1 errno=0
[  218.062924][T12424] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  218.066279][T12424] syzkaller0: entered promiscuous mode
[  218.068789][   T33] audit: type=1800 audit(1756905081.838:4): pid=12421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1648" name="cgroup.controllers" dev="tmpfs" ino=2936 res=0 errno=0
[  218.072365][T12424] syzkaller0: entered allmulticast mode
[  218.116992][T12424] tipc: Resetting bearer <eth:syzkaller0>
[  218.125603][T12423] tipc: Resetting bearer <eth:syzkaller0>
[  218.153357][T12423] tipc: Disabling bearer <eth:syzkaller0>
[  218.480647][T12449] !: entered promiscuous mode
[  218.798834][T10415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.803296][T10415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.096616][T12470] __nla_validate_parse: 87 callbacks suppressed
[  219.096635][T12470] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1664'.
[  219.099833][T12469] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1664'.
[  219.123950][T12475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1665'.
[  219.212970][T12469] lo speed is unknown, defaulting to 1000
[  219.220156][T12469] lo speed is unknown, defaulting to 1000
[  219.361027][T12484] tap0: tun_chr_ioctl cmd 1074025677
[  219.370540][T12484] tap0: linktype set to 0
[  219.733959][T10417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.737149][T10417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.804799][T12498] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1674'.
[  219.958695][T12507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1676'.
[  220.015802][T12511] batadv0: left promiscuous mode
[  220.017919][T12511] batadv0: left allmulticast mode
[  220.068116][T12513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1678'.
[  220.293704][T12529] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1681'.
[  221.193716][T12552] vti1: entered promiscuous mode
[  221.195762][T12552] vti1: entered allmulticast mode
[  221.233897][T12554] net_ratelimit: 48 callbacks suppressed
[  221.233913][T12554] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  221.288831][T12554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1690'.
[  221.302799][T12554] bridge4: entered promiscuous mode
[  221.304846][T12554] bridge4: entered allmulticast mode
[  221.774350][T12586] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1699'.
[  221.795373][T12588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1700'.
[  221.967680][T12598] validate_nla: 80 callbacks suppressed
[  221.967698][T12598] netlink: 'syz.0.1703': attribute type 1 has an invalid length.
[  222.002311][T12598] bond10: entered promiscuous mode
[  222.004470][T12598] bond10: entered allmulticast mode
[  222.014987][T12598] bridge5: entered promiscuous mode
[  222.016898][T12598] bridge5: entered allmulticast mode
[  222.024229][T12598] bond10: (slave bridge5): making interface the new active one
[  222.028114][T12598] bond10: (slave bridge5): Enslaving as an active interface with an up link
[  222.293329][T12609] netlink: 'syz.0.1706': attribute type 28 has an invalid length.
[  222.390303][T12613] netlink: 'syz.0.1708': attribute type 10 has an invalid length.
[  222.396531][T12613] batman_adv: batadv0: Adding interface: virt_wifi0
[  222.401020][T12613] batman_adv: batadv0: Interface activated: virt_wifi0
[  222.466857][T12619] lo: entered allmulticast mode
[  222.473848][T12618] lo: left allmulticast mode
[  222.515471][T12630] sctp: [Deprecated]: syz.2.1712 (pid 12630) Use of int in max_burst socket option.
[  222.515471][T12630] Use struct sctp_assoc_value instead
[  222.884246][T12660] dvmrp0: entered allmulticast mode
[  223.000855][T12661] lo speed is unknown, defaulting to 1000
[  223.005522][T12661] lo speed is unknown, defaulting to 1000
[  223.157012][T12681] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  223.167752][T12681] bond8: left promiscuous mode
[  223.173514][T12681] bridge3: left promiscuous mode
[  223.177473][T12681] bond10: left promiscuous mode
[  223.193180][T12681] vlan2: left promiscuous mode
[  223.254560][T12689] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  223.257737][T12689] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  223.510737][T12699] netlink: 'syz.0.1733': attribute type 29 has an invalid length.
[  223.514721][T12699] netlink: 'syz.0.1733': attribute type 29 has an invalid length.
[  223.606705][T12703] netlink: 'syz.0.1734': attribute type 2 has an invalid length.
[  224.223899][T12756] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  224.271664][T12753] __nla_validate_parse: 10 callbacks suppressed
[  224.271681][T12753] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1747'.
[  224.493306][T12774] netlink: 'syz.1.1754': attribute type 1 has an invalid length.
[  224.543238][T12774] 8021q: adding VLAN 0 to HW filter on device bond13
[  224.550270][T12774] bond12: (slave bond13): making interface the new active one
[  224.553790][T12774] bond12: (slave bond13): Enslaving as an active interface with an up link
[  224.561343][T12774] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1754'.
[  224.567497][T12774] 8021q: adding VLAN 0 to HW filter on device bond12
[  224.610193][T12781] netlink: 'syz.1.1756': attribute type 29 has an invalid length.
[  224.615353][T12782] netlink: 'syz.1.1756': attribute type 29 has an invalid length.
[  224.625292][T12782] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1756'.
[  224.628843][T12782] ==================================================================
[  224.632080][T12782] BUG: KASAN: use-after-free in xfrm_alloc_spi+0x570/0xf30
[  224.634986][T12782] Read of size 4 at addr ffff888111de76c4 by task syz.1.1756/12782
[  224.638991][T12782] 
[  224.640424][T12782] CPU: 1 UID: 0 PID: 12782 Comm: syz.1.1756 Not tainted syzkaller #0 PREEMPT(full) 
[  224.640443][T12782] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  224.640453][T12782] Call Trace:
[  224.640461][T12782]  <TASK>
[  224.640468][T12782]  dump_stack_lvl+0x189/0x250
[  224.640488][T12782]  ? __kasan_check_byte+0x12/0x40
[  224.640508][T12782]  ? __pfx_dump_stack_lvl+0x10/0x10
[  224.640523][T12782]  ? lock_release+0x4b/0x3e0
[  224.640545][T12782]  ? __virt_addr_valid+0x4a5/0x5c0
[  224.640562][T12782]  print_report+0xca/0x240
[  224.640575][T12782]  ? xfrm_alloc_spi+0x570/0xf30
[  224.640591][T12782]  kasan_report+0x118/0x150
[  224.640608][T12782]  ? xfrm_alloc_spi+0x570/0xf30
[  224.640624][T12782]  xfrm_alloc_spi+0x570/0xf30
[  224.640639][T12782]  ? xfrm_alloc_spi+0x2a0/0xf30
[  224.640657][T12782]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  224.640671][T12782]  ? xfrm_find_acq+0x87/0xa0
[  224.640687][T12782]  xfrm_alloc_userspi+0x70b/0xc90
[  224.640709][T12782]  ? apparmor_capable+0x137/0x1b0
[  224.640726][T12782]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  224.640742][T12782]  ? __nla_parse+0x40/0x60
[  224.640762][T12782]  xfrm_user_rcv_msg+0x7a3/0xab0
[  224.640778][T12782]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  224.640805][T12782]  ? __pfx___mutex_trylock_common+0x10/0x10
[  224.640820][T12782]  ? rcu_is_watching+0x15/0xb0
[  224.640835][T12782]  ? trace_contention_end+0x39/0x120
[  224.640848][T12782]  ? __mutex_lock+0x335/0x1350
[  224.640870][T12782]  netlink_rcv_skb+0x208/0x470
[  224.640891][T12782]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  224.640906][T12782]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  224.640928][T12782]  ? netlink_deliver_tap+0x2e/0x1b0
[  224.640946][T12782]  ? netlink_deliver_tap+0x2e/0x1b0
[  224.640964][T12782]  xfrm_netlink_rcv+0x79/0x90
[  224.640979][T12782]  netlink_unicast+0x82f/0x9e0
[  224.640999][T12782]  ? __pfx_netlink_unicast+0x10/0x10
[  224.641016][T12782]  ? netlink_sendmsg+0x642/0xb30
[  224.641033][T12782]  ? skb_put+0x11b/0x210
[  224.641053][T12782]  netlink_sendmsg+0x805/0xb30
[  224.641075][T12782]  ? __pfx_netlink_sendmsg+0x10/0x10
[  224.641094][T12782]  ? aa_sock_msg_perm+0xf1/0x1d0
[  224.641107][T12782]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  224.641121][T12782]  ? __pfx_netlink_sendmsg+0x10/0x10
[  224.641140][T12782]  __sock_sendmsg+0x21c/0x270
[  224.641158][T12782]  ____sys_sendmsg+0x505/0x830
[  224.641174][T12782]  ? __pfx_____sys_sendmsg+0x10/0x10
[  224.641191][T12782]  ? import_iovec+0x74/0xa0
[  224.641251][T12782]  ___sys_sendmsg+0x21f/0x2a0
[  224.641266][T12782]  ? __pfx____sys_sendmsg+0x10/0x10
[  224.641291][T12782]  ? __fget_files+0x2a/0x420
[  224.641308][T12782]  ? __fget_files+0x3a0/0x420
[  224.641327][T12782]  __x64_sys_sendmsg+0x19b/0x260
[  224.641341][T12782]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  224.641356][T12782]  ? rcu_is_watching+0x15/0xb0
[  224.641368][T12782]  ? do_syscall_64+0xbe/0x3b0
[  224.641381][T12782]  do_syscall_64+0xfa/0x3b0
[  224.641390][T12782]  ? lockdep_hardirqs_on+0x9c/0x150
[  224.641404][T12782]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.641416][T12782]  ? exc_page_fault+0x9f/0xf0
[  224.641431][T12782]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.641442][T12782] RIP: 0033:0x7f54b678ebe9
[  224.641454][T12782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  224.641466][T12782] RSP: 002b:00007f54b75fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  224.641480][T12782] RAX: ffffffffffffffda RBX: 00007f54b69c6090 RCX: 00007f54b678ebe9
[  224.641488][T12782] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000004
[  224.641496][T12782] RBP: 00007f54b6811e19 R08: 0000000000000000 R09: 0000000000000000
[  224.641504][T12782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  224.641511][T12782] R13: 00007f54b69c6128 R14: 00007f54b69c6090 R15: 00007ffe37e3a8a8
[  224.641525][T12782]  </TASK>
[  224.641529][T12782] 
[  224.782706][T12782] The buggy address belongs to the physical page:
[  224.785211][T12782] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x111de7
[  224.788237][T12782] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff)
[  224.790948][T12782] raw: 057ff00000000000 0000000000000000 ffffea00044779c8 0000000000000000
[  224.794371][T12782] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  224.797813][T12782] page dumped because: kasan: bad access detected
[  224.800442][T12782] page_owner tracks the page as freed
[  224.802590][T12782] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12527, tgid 12526 (syz.2.1682), ts 220286074259, free_ts 221112045817
[  224.810972][T12782]  post_alloc_hook+0x240/0x2a0
[  224.812881][T12782]  get_page_from_freelist+0x21e4/0x22c0
[  224.815083][T12782]  __alloc_frozen_pages_noprof+0x181/0x370
[  224.817417][T12782]  __alloc_pages_noprof+0xa/0x30
[  224.819396][T12782]  __page_frag_cache_refill+0x3f/0x140
[  224.821618][T12782]  __page_frag_alloc_align+0x7a/0x4c0
[  224.823706][T12782]  rxrpc_alloc_data_txbuf+0x192/0x640
[  224.825843][T12782]  rxrpc_send_data+0xf3e/0x2160
[  224.827725][T12782]  rxrpc_do_sendmsg+0x1098/0x1220
[  224.829658][T12782]  __sock_sendmsg+0x21c/0x270
[  224.831555][T12782]  ____sys_sendmsg+0x505/0x830
[  224.833522][T12782]  ___sys_sendmsg+0x21f/0x2a0
[  224.835465][T12782]  __x64_sys_sendmsg+0x19b/0x260
[  224.837496][T12782]  do_syscall_64+0xfa/0x3b0
[  224.839312][T12782]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.841694][T12782] page last free pid 12528 tgid 12528 stack trace:
[  224.844325][T12782]  __free_frozen_pages+0xbc4/0xd30
[  224.846419][T12782]  rxrpc_put_txbuf+0x15a/0x2c0
[  224.848388][T12782]  rxrpc_destroy_call+0xc1/0x420
[  224.850402][T12782]  rxrpc_io_thread+0x2f35/0x35e0
[  224.852422][T12782]  kthread+0x711/0x8a0
[  224.854089][T12782]  ret_from_fork+0x3fc/0x770
[  224.855978][T12782]  ret_from_fork_asm+0x1a/0x30
[  224.857937][T12782] 
[  224.858951][T12782] Memory state around the buggy address:
[  224.861285][T12782]  ffff888111de7580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  224.864485][T12782]  ffff888111de7600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  224.867711][T12782] >ffff888111de7680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  224.870929][T12782]                                            ^
[  224.873397][T12782]  ffff888111de7700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  224.876561][T12782]  ffff888111de7780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  224.879751][T12782] ==================================================================
[  224.883332][T12782] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  224.886236][T12782] CPU: 1 UID: 0 PID: 12782 Comm: syz.1.1756 Not tainted syzkaller #0 PREEMPT(full) 
[  224.889987][T12782] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  224.894018][T12782] Call Trace:
[  224.895427][T12782]  <TASK>
[  224.896654][T12782]  dump_stack_lvl+0x99/0x250
[  224.898565][T12782]  ? __asan_memcpy+0x40/0x70
[  224.900468][T12782]  ? __pfx_dump_stack_lvl+0x10/0x10
[  224.902590][T12782]  ? __pfx__printk+0x10/0x10
[  224.904368][T12782]  vpanic+0x281/0x750
[  224.906010][T12782]  ? __pfx_vpanic+0x10/0x10
[  224.907886][T12782]  ? irqentry_exit+0x74/0x90
[  224.909808][T12782]  panic+0xb9/0xc0
[  224.911315][T12782]  ? __pfx_panic+0x10/0x10
[  224.913101][T12782]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  224.915544][T12782]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  224.917945][T12782]  ? xfrm_alloc_spi+0x570/0xf30
[  224.919954][T12782]  check_panic_on_warn+0x89/0xb0
[  224.921987][T12782]  ? xfrm_alloc_spi+0x570/0xf30
[  224.923925][T12782]  end_report+0x78/0x160
[  224.925604][T12782]  kasan_report+0x129/0x150
[  224.927450][T12782]  ? xfrm_alloc_spi+0x570/0xf30
[  224.929424][T12782]  xfrm_alloc_spi+0x570/0xf30
[  224.931347][T12782]  ? xfrm_alloc_spi+0x2a0/0xf30
[  224.933345][T12782]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  224.935465][T12782]  ? xfrm_find_acq+0x87/0xa0
[  224.937370][T12782]  xfrm_alloc_userspi+0x70b/0xc90
[  224.939443][T12782]  ? apparmor_capable+0x137/0x1b0
[  224.941497][T12782]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  224.943705][T12782]  ? __nla_parse+0x40/0x60
[  224.945544][T12782]  xfrm_user_rcv_msg+0x7a3/0xab0
[  224.947581][T12782]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  224.949808][T12782]  ? __pfx___mutex_trylock_common+0x10/0x10
[  224.952231][T12782]  ? rcu_is_watching+0x15/0xb0
[  224.954193][T12782]  ? trace_contention_end+0x39/0x120
[  224.956384][T12782]  ? __mutex_lock+0x335/0x1350
[  224.958368][T12782]  netlink_rcv_skb+0x208/0x470
[  224.960345][T12782]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  224.962554][T12782]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  224.964747][T12782]  ? netlink_deliver_tap+0x2e/0x1b0
[  224.966893][T12782]  ? netlink_deliver_tap+0x2e/0x1b0
[  224.969020][T12782]  xfrm_netlink_rcv+0x79/0x90
[  224.970941][T12782]  netlink_unicast+0x82f/0x9e0
[  224.972914][T12782]  ? __pfx_netlink_unicast+0x10/0x10
[  224.975049][T12782]  ? netlink_sendmsg+0x642/0xb30
[  224.976684][T12782]  ? skb_put+0x11b/0x210
[  224.978362][T12782]  netlink_sendmsg+0x805/0xb30
[  224.980347][T12782]  ? __pfx_netlink_sendmsg+0x10/0x10
[  224.982503][T12782]  ? aa_sock_msg_perm+0xf1/0x1d0
[  224.984507][T12782]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  224.986570][T12782]  ? __pfx_netlink_sendmsg+0x10/0x10
[  224.988685][T12782]  __sock_sendmsg+0x21c/0x270
[  224.990635][T12782]  ____sys_sendmsg+0x505/0x830
[  224.992562][T12782]  ? __pfx_____sys_sendmsg+0x10/0x10
[  224.994706][T12782]  ? import_iovec+0x74/0xa0
[  224.996518][T12782]  ___sys_sendmsg+0x21f/0x2a0
[  224.998453][T12782]  ? __pfx____sys_sendmsg+0x10/0x10
[  225.000584][T12782]  ? __fget_files+0x2a/0x420
[  225.002493][T12782]  ? __fget_files+0x3a0/0x420
[  225.004423][T12782]  __x64_sys_sendmsg+0x19b/0x260
[  225.006457][T12782]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  225.008704][T12782]  ? rcu_is_watching+0x15/0xb0
[  225.010649][T12782]  ? do_syscall_64+0xbe/0x3b0
[  225.012566][T12782]  do_syscall_64+0xfa/0x3b0
[  225.014479][T12782]  ? lockdep_hardirqs_on+0x9c/0x150
[  225.016566][T12782]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.019080][T12782]  ? exc_page_fault+0x9f/0xf0
[  225.021030][T12782]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.023450][T12782] RIP: 0033:0x7f54b678ebe9
[  225.025299][T12782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  225.032918][T12782] RSP: 002b:00007f54b75fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  225.035532][T12782] RAX: ffffffffffffffda RBX: 00007f54b69c6090 RCX: 00007f54b678ebe9
[  225.038184][T12782] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000004
[  225.040935][T12782] RBP: 00007f54b6811e19 R08: 0000000000000000 R09: 0000000000000000
[  225.044111][T12782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  225.046829][T12782] R13: 00007f54b69c6128 R14: 00007f54b69c6090 R15: 00007ffe37e3a8a8
[  225.049524][T12782]  </TASK>
[  225.051435][T12782] Kernel Offset: disabled
[  225.053101][T12782] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:11:28  Registers:
info registers vcpu 0

CPU#0
RAX=92429513a11b3a00 RBX=ffffffff819683c8 RCX=92429513a11b3a00 RDX=0000000000000001
RSI=ffffffff8d9b7faf RDI=ffffffff8be33800 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38e30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b79c3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3c1dbb CR3=0000000032f18000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000033 RBX=0000000000000033 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000355e9f0
R8 =ffff888106d40237 R9 =1ffff11020da8046 R10=dffffc0000000000 R11=ffffffff854f38c0
R12=dffffc0000000000 R13=ffffffff99afd8c9 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f393c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f54b75fe6c0 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001000 CR3=00000000364dc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f54b6997498 00007f54b6997470 XMM03=00007f54b69974a8 00007f54b69974a0
XMM04=00007f54b74fd100 00007f54b6997460 XMM05=00007f54b6997478 00007f54b69974c0
XMM06=00007f54b69974b8 00007f54b69974b0 XMM07=00007f54b69974a8 00007f54b69974a0
XMM08=0000000000000000 00007f54b6812ee7 XMM09=0000000000000000 00007f54b6812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
