last executing test programs:

2.70201552s ago: executing program 0 (id=3466):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e00000004000000040000000200020000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000082447ed5b8725890035bcd3b391656d7a797b1ca14d53afc0763e3c0afecdfd2ffe308c2512df4e0c855b7c9354846a2d7fcc6d7d34f8767ed24c19e0b55e887e0df5fba38feda9b2120d682c78b4f4c7616e00917f748aa57e6a41dd4790290f57f735ad928c374480b40900d607e7ecb97c316943e853883432a8be1b70216b5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_smc(0x2b, 0x1, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000b5f000/0x1000)=nil, 0x1000, 0x300000f, 0x13, r0, 0xbd02c000)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r1, 0x0)
getsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000180), &(0x7f0000000280)=0x4)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000300)={0x1f, 0x4}, 0x6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r8, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0)

1.822099087s ago: executing program 0 (id=3473):
getsockname$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7fff, @mcast2}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x23234babade4c974, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x8}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)
r3 = accept4$inet6(r0, 0x0, &(0x7f0000000340), 0x80800)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000380)=0x4, 0x4)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f00000003c0), 0x4)
r6 = socket$inet(0x2, 0xa, 0x3ff)
connect$pppl2tp(r3, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e23, @loopback}, 0x0, 0x0, 0x1, 0x3}}, 0x2e)
syz_80211_inject_frame(&(0x7f0000000440)=@device_b, &(0x7f0000000480)=@ctrl_frame=@rts={{}, {0x5}, @broadcast, @broadcast}, 0x10)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f00000004c0)=0xfffffffb, 0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x150, 0x1403, 0x100, 0x70bd2d, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv_slave_1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x150}, 0x1, 0x0, 0x0, 0x20008004}, 0x20040011)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000740)="0af7a80c8328887972f2d39431bf1c8154af08a9fea2ca67a89d04fb3d10bf39aa150239e24d32609e925bb30f12e902cf58d31bb82195ee9fcf43bfbf492ff69e7638f5c143287b3b833b3ddd08f97f5d5922e6a0cb5b00c606601f386759f9b1bf556f34ee630c8645c00b011ad4e38d3ce797621c39188e4fc01d55", 0x7d)
getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f00000007c0), &(0x7f0000000800)=0x4)
getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@private1}}, &(0x7f0000000940)=0xe8)
setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000980)={{{@in=@empty, @in=@remote, 0x4e24, 0x0, 0x4e20, 0xe8a1, 0xa, 0x0, 0x20, 0x0, 0x0, r8}, {0x5, 0x4, 0x4, 0xc, 0x1, 0xa34, 0x4, 0x7}, {0x92e, 0xf, 0x4, 0x7f}, 0x8001, 0x6e6bbf, 0x0, 0x0, 0x2, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0x3c}, 0xa, @in=@private=0xa010102, 0x3500, 0x3, 0x2, 0x5, 0x80000001, 0xe, 0x80000001}}, 0xe8)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x35}, @void, @val={0xc, 0x99, {0x8d3, 0x6}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24002088}, 0x22000000)
r9 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000b80)={{0x3, @bcast}, [@bcast, @rose, @bcast, @default, @remote, @bcast, @bcast, @default]}, &(0x7f0000000c00)=0x48, 0x0)
connect$netrom(r9, &(0x7f0000000c40)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4)

1.231962229s ago: executing program 1 (id=3482):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e008d2af6ffffff000000000a000300", @ANYRES32=0x0, @ANYBLOB="0000d7"], 0x24}}, 0x4044)
r1 = socket(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x0, 0x7ff, 0x1})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000240)=@ccm_128={{0x303}, "44be51ced4880d9c", "ee0fa6bb69c140552d1598fdaa6c329a", "bb9f5bd1", "6b2db25d2d1b977d"}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x15, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000fc0000ff00cf3845d5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090200000300ffe5000d0000000000b702000000000000739af0ff00000000c509040004000000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f0ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmmsg$unix(r1, &(0x7f0000001a40)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000680)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000f80)=ANY=[], 0x28, 0x4}}], 0x2, 0x0)

1.230726838s ago: executing program 0 (id=3483):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x18)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYRES8=<r8=>r6], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r8, @ANYRESOCT=r2], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
preadv(r10, &(0x7f0000000100), 0xa, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f00000003c0)={0x3fd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014})
r11 = socket$netlink(0x10, 0x3, 0x6)
writev(r11, 0x0, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b708000000000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a8014000700200100000000000000000000000000001400350077673100"/56], 0x50}}, 0x0)
socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000940)=@ethtool_rxfh={0x46, 0x1, 0x400, 0x3, 0x10, "1864e1", 0x5, [0x400, 0x6, 0xe]}})
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000000000000017c00000400fc800c00018042857e73b3b382a808000280040019"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r14 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)

1.141575254s ago: executing program 1 (id=3484):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='5\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r1}]}, 0x24}}, 0x0)
recvmmsg(r1, &(0x7f0000001bc0)=[{{&(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000300)=""/49, 0x31}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/13, 0xd}, {&(0x7f0000000500)=""/121, 0x79}, {&(0x7f00000016c0)=""/122, 0x7a}, {&(0x7f0000001740)=""/213, 0xd5}], 0x6, &(0x7f00000018c0)=""/150, 0x96}, 0x9}, {{&(0x7f0000001980)=@isdn, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001a00)=""/136, 0x88}], 0x1, &(0x7f0000001b00)=""/150, 0x96}, 0x8}], 0x2, 0x40000000, &(0x7f0000001c40)={0x77359400})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x2, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x3f, 0x0, 0x3, 0x3}, 0x10)
bind$tipc(r4, 0x0, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)={0x10c, 0x39, 0x800, 0x29a, 0x25dfdbff, {0x20}, [@typed={0x14, 0x104, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic, @generic="fa0b63e6b8c956be9cacf2cabb058394f981cf1330b08a0eb3e8c6388e61cc977f59085e8183ae8279f148ae5f4eab5de586c647b5b95e13db3f6c07749dc77cbac702052ce4239029e28fb7a4a11d1d9e4d8d4f8d03dd997a596b5bd3e8eb0327cec3dddbbfb9e19056c179fe00c36bc3683e1a7f4ebcb5014f2f495328f712879781e2c911bb8b5b15572d8de0f54b75d19193c23f751c623e91b907f76c2cea8e1bcf697be3842a338f1d34804273a795d64eb67aa47a44f8820252fad344bf02ef744b3bce6a66bcadca759781baaca4a87cabef69ebef12e3034bc77c56eac2"]}, 0x10c}}, 0x240040d6)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OP={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0)

1.073669368s ago: executing program 1 (id=3485):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="208506004400", @ANYRES32, @ANYBLOB="08001c00", @ANYRES32, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4040)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="240000002e0001002aab70000000000008000000"], 0x24}], 0x1, 0x0, 0x0, 0x10}, 0x810)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0xa000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x3}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0xfff}]}}}]}, 0x4c}}, 0x4)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) (async)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) (async)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x25, 0x0, 0x0, 0x0, 0x1}, @initr0, @exit, @alu={0x7, 0x0, 0xa, 0x3}]}, &(0x7f0000000300)='syzkaller\x00'}, 0x94)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) (async)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000100)=0x82) (async)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000100)=0x82)
close(r7)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', <r8=>0x0})
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r8}, 0x90)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, 0x4100}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r9}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}]}, 0x34}}, 0x4008000)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="09052cbd7000fbdbdf250300000003000000000000000a000000e0b829330b0f458c63bc5fca4a013f104cec37b5fa42c361a6a1587db19aff1e89d67463c8eff962992819f9120aecebcacd6d7e8714a5a391a6"], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x40080d0)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000180)=@raw=[@ldst={0x1, 0x2, 0x0, 0x1, 0xb, 0xfffffffffffffff4, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0x32, 0x1, 0x8, 0x6, 0xa35}], &(0x7f00000001c0)='syzkaller\x00', 0xa3e, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x9}, 0x94)
r13 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440), 0x2, 0x0)
ppoll(&(0x7f0000000480)=[{r0, 0x4c0}, {r10, 0x8229}, {r12, 0x200}, {r13, 0x9785}], 0x4, &(0x7f00000004c0)={0x0, 0x989680}, &(0x7f0000000500)={[0x7fffffff]}, 0x8)

897.773914ms ago: executing program 1 (id=3488):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100)={<r3=>0x0, 0xa}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e23, 0x3, @private2, 0x6}}, 0x8, 0x7}, &(0x7f0000000180)=0x90)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000001700)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x64, 0x0, 0xb, 0x2f, 0x0, @private=0xa0100fe, @broadcast, {[@timestamp_prespec={0x44, 0x4, 0x51}]}}, "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"}}, 0xfce)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0x14, &(0x7f0000000000), 0x4)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r7=>0x0)
sendmsg$kcm(r5, &(0x7f0000001780)={&(0x7f00000003c0)=@nfc_llcp={0x27, r7, 0x1, 0x7, 0x2, 0x7, "55d828798ac0c58a2a3ce9f2fbaece23d6e092ba705156a3dce561ebd2a0beaf7bf60e5b6720f458c0a2f74bd8a6de835cf7e856f69af096d192dd9e8a4119", 0xc}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x1}], 0x1}, 0x20040800)
sendto$inet6(r4, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x20000, @local, 0x13}, 0x1c)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000300)=@int=0x800, 0x4)

897.265956ms ago: executing program 2 (id=3489):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x5c, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003408000006000000040000000000000e0400000000000000000000000000000d000000000000000a03000000000000005f00000000000000000000b8371b39cf94075d606e56c02b12a931d564dbca1ed2cd6b13e521d666376841acbada7d5af3674362da60e3bf4a33457220a58d61b0753bc1f34b38e4ef"], 0x0, 0x52}, 0x28)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060086dd000008000280"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
sendmsg$nl_generic(r10, 0x0, 0xc010)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={0x1, &(0x7f0000000100)="075d9f371a96fa4f291230141d77336a99e35622c4ed9e369428ccc531757157", &(0x7f0000000140)}, 0x20)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x10, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40010)
r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf25040100800c000300000000000000000014"], 0x114}], 0x1}, 0x80)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0xb4013, 0xffffffffffffffff, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004091)
sendmsg$NFT_BATCH(r13, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYRESOCT=r8, @ANYRES8, @ANYRES16=r6, @ANYRES64=0x0, @ANYRESOCT], 0xa8}}, 0x24000840)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)

813.525987ms ago: executing program 2 (id=3490):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(streebog512-generic)\x00'}, 0x58)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
socket$packet(0x11, 0x2, 0x300)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x28, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x4, 0x800}, @nested={0x10, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @generic="a1fcd70d"]}]}, 0x28}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022})
r8 = socket(0x10, 0x3, 0x0)
r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xb5}}}, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe, 0x0, 0x2}, 0x10)
write(r8, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500080002000000", 0x24)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="440000001000033f985fea000000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200000000001c0012800b0001006d616373656300000c00028005000d000100000008000500", @ANYRES32=r2, @ANYBLOB], 0x44}}, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)

664.011484ms ago: executing program 2 (id=3491):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0xff28)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0xffffffff}, 0x10)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x7800, 0x7, 0x7, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x3, 0x0, 0x0, @loopback, @multicast1}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x0, 0x0, 0xff, 0x0, 0x0, @broadcast, @broadcast}}}})
sendmmsg$inet(r1, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00'})
bind$can_raw(r2, &(0x7f0000000200), 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="65b81fec2f97e99da16db25047d6b4dc42bf2ec818aa898c5069d941410c2d2afe45faa6fcb1c96f4efe528683484944228ac131e5f110fb3516", 0x3a}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f0000000280)="1cc95cc4f2fe92b26561450fa8661a1cca85", 0x12}], 0x3, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x0, 0x2, 0xffffff00}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10000}}], 0x60}}, {{&(0x7f0000000380)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000480)="1e538da85a3be0ddc4862074c65efc69ac9797bbb90bd2e94a13a8a1e74a0dcb81e29a93092ee15ae4e3f3af4efe7eb4efe3b636cfc3dd67ee2377a3255d4de1cce5edd54c79e6ef01ef1211caeb02bb5fda98bc85c9473735f65d5664daf68ef35f1faedb10ae715ee455b6353514a65904dfd6237561957e6e3fd4f5fe6478acfd6435a1b93974a6c54684229e5eab693c848c", 0x94}, {&(0x7f0000001900)="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", 0x1000}, {&(0x7f00000003c0)="c2030c7d82bb7706018329da0e24", 0xe}], 0x3, &(0x7f00000015c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xc7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x48}}], 0x2, 0x4044000)
epoll_create1(0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000fbcf45392688f1d900000000000c000000"], 0x14}}, 0x0)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x17, 0x4408c856)
epoll_create1(0x0)

453.894041ms ago: executing program 2 (id=3492):
socket(0x40000000015, 0x5, 0x0) (async)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2) (async)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10)
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900", 0x17}], 0x1)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0)

284.027112ms ago: executing program 0 (id=3493):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r6 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$key(0xf, 0x3, 0x2)
socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000032303037db0cb2685e5b0000000000000000000000000000000000000200b48bdfc6b6bf3900002580145d868c6487f796a133f9aff138ca", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r9, &(0x7f00000001c0)="571d", &(0x7f0000000280)=""/49}, 0x20)
socket$kcm(0x10, 0x0, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1c, 0xc, &(0x7f0000000780)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x8, @any, 0x4, 0x1}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000280)={r8, r8, 0x1, 0x1, &(0x7f00000000c0)='\x00', 0x9, 0x1, 0x16bf, 0x5505, 0xc3b8, 0x1, 0x0, 'syz0\x00'})

283.659793ms ago: executing program 1 (id=3494):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000010000000f000000080034000400000008000300", @ANYRES32=r4, @ANYBLOB="0500330011"], 0x2c}}, 0x80)
bind$rose(r1, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0xa, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40)
close(r0)

282.679518ms ago: executing program 2 (id=3495):
r0 = socket$inet(0x10, 0x3, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r5) (async)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0xffe6, 0xb}, {0xc, 0x1}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x140480a4}, 0x4008000) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r9=>0x0}) (async)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}]}]}}]}, 0x9c}}, 0x0)

201.483298ms ago: executing program 1 (id=3496):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9403000010000104f04e93294c00000000001700", @ANYRES32=0x0, @ANYBLOB="00000000000000001400350076657468305f6d61637674617000000005001100050000000a0002"], 0x394}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)={0x1c, r2, 0xf03, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}}, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
write(r3, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400030080000300", 0x33a)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x6}, 0xaf)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280), 0x8}, 0x20)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001700)={'ip6tnl0\x00'})
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x205, 0x0, 0x2}, 0x10)
sendto$inet6(r8, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x9, 0x12, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000ff7f000000000000fbff000085100000f9ffffff9876040008000000851000000100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000000085000000860000008520000001000000851000000100000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000e77b328d9ca9766f8a0400000034330000850000008600000070560c00100001e1ffff94000000000012"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0xd4, &(0x7f0000000640)=""/212, 0x41100, 0x20, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x10, 0xffff, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000380)=[0x1, 0x1, 0x1, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x3, 0x3, 0xf, 0x1}, {0x0, 0x1, 0x8, 0x9}], 0x10, 0x7}, 0x94)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r12)
sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f0000000740)={@in6={{0xa, 0x4e22, 0x9, @empty, 0x6}}, 0x0, 0x0, 0x2a, 0x0, "955b94b19a44f02aa23c6a4a3c6ec11144bdee5d5ac0d8cb63051a062ed1c96567b1db8c7c21607784474bf11312bf3fcd5722a45429b214a097963a1a5644d190193a1ceb23ed9bb6d25ad252bd381d"}, 0xd8)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0)
sendto$inet6(r10, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000004c0)=r9, 0x4)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x3c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0xfffffffffffffe22, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)

111.725455ms ago: executing program 0 (id=3497):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) (async, rerun: 32)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000140)=r0, 0x4) (rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000005c80)=[{{&(0x7f0000000400)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x100}], 0x2, 0x2, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYRES64=r3], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20)
sendmmsg$inet6(r2, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480)}}], 0x400, 0x10) (async)
r5 = socket(0x10, 0x3, 0x0) (async, rerun: 64)
r6 = socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 64)
r7 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) (async, rerun: 32)
r8 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32)
sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0)
sendmsg$sock(r7, 0x0, 0x48040) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async, rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async)
sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan1\x00', <r9=>0x0})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002180)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x800, @private0, 0x7f15}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000002900000037000000ff0000000000000024000000000000002900000032000000fe80000000000000000000000000003b", @ANYRES32=r9, @ANYRES32], 0x40}}], 0x1, 0x4008090) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000020000100feff0300ffdbdf250a004000060000030000000014000200fc02"], 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x20008050)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000010003904000000010000000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"/68], 0x5c}}, 0x0)
r10 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0)
write$cgroup_int(r10, &(0x7f0000000100)=0x3, 0x12)

505.844µs ago: executing program 2 (id=3498):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001500), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001580)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10000)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
r7 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000080000000950000000000000018180000", @ANYRES32, @ANYBLOB="00000000000000000000000010ffffff00b15b84000000000000001812f70df20f84a8", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x29, &(0x7f00000000c0)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xa, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x3, 0x1, 0x6, 0x3}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff}, 0x9f)
sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
bind$tipc(r7, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e20, @local}}, 0x0, 0x0, 0x10, 0x0, "b20fc19dcea1a2f64cd3368960179b0a3811acf296c264b1b3fb980632bb28e0fd5bdc0e3d3c15e77d4993e70a79f1256777954e7ec11252c1f5824eccf4ee5fd8450c8ad9ce5dc6f62732c5b8b06018"}, 0xd8)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={<r8=>r0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x33, 0x1, 0x70bd2a, 0x25dbdbfe, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4000000)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400000000ffffffff00000000", @ANYRES32=r11, @ANYBLOB="0b12050200000000240012800b00010069703667726500001400028008000100", @ANYRES32=r11, @ANYBLOB="0800050003"], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, r4, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '&{+:j'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, ']!'}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, ':^,'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0x94}, 0x10)
sendmsg$AUDIT_USER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x10, 0x3ed, 0x4, 0x70bd26, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x20040080}, 0x0)

0s ago: executing program 0 (id=3499):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="380200001600010127bd7000fedbdf250a010100000000000000000000000000fc0100000000000000000000000000014e2480014e244de20a0080802c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x238}, 0x1, 0x0, 0x0, 0xc000}, 0x0)

kernel console output (not intermixed with test programs):

n_chr_ioctl cmd 1074025673
[  204.852733][T12264] tap0: tun_chr_ioctl cmd 1074025673
[  204.857430][T12264] tap0: tun_chr_ioctl cmd 1074025673
[  204.862353][T12264] tap0: tun_chr_ioctl cmd 1074025673
[  204.864156][T12264] tap0: tun_chr_ioctl cmd 1074025673
[  204.867543][T12264] tap0: tun_chr_ioctl cmd 1074025673
[  204.869336][T12264] tap0: tun_chr_ioctl cmd 1074025673
[  204.871391][T12264] tap0: tun_chr_ioctl cmd 1074025673
[  204.877778][T12264] tap0: tun_chr_ioctl cmd 1074025673
[  204.881020][T12264] tap0: tun_chr_ioctl cmd 1074025673
[  204.883885][T12264] tap0: tun_chr_ioctl cmd 1074025673
[  204.885616][T12264] tap0: tun_chr_ioctl cmd 1074025673
[  204.885643][T12273] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  204.887520][T12264] tap0: tun_chr_ioctl cmd 1074025673
[  204.887564][T12264] tap0: tun_chr_ioctl cmd 1074025673
[  204.896484][T12264] tap0: tun_chr_ioctl cmd 1074025673
[  204.899095][T12273] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.927421][T12264] tap0: tun_chr_ioctl cmd 1074025673
[  204.929344][T12264] tap0: tun_chr_ioctl cmd 1074025673
[  204.931194][T12264] tap0: tun_chr_ioctl cmd 1074025673
[  204.935532][T12264] tap0: tun_chr_ioctl cmd 1074025673
[  204.938795][T12264] tap0: tun_chr_ioctl cmd 1074025673
[  204.940835][T12264] tap0: tun_chr_ioctl cmd 1074025673
[  204.943089][T12264] tap0: tun_chr_ioctl cmd 1074025673
[  204.944854][T12264] tap0: tun_chr_ioctl cmd 1074025673
[  204.946589][T12264] tap0: tun_chr_ioctl cmd 1074025673
[  204.948333][T12264] tap0: tun_chr_ioctl cmd 1074025673
[  204.951569][T12264] tap0: tun_chr_ioctl cmd 1074025673
[  204.962583][T12264] tap0: tun_chr_ioctl cmd 1074025673
[  204.967633][T12264] tap0: tun_chr_ioctl cmd 1074025673
[  204.969566][T12264] tap0: tun_chr_ioctl cmd 1074025673
[  205.005056][T12264] tap0: tun_chr_ioctl cmd 1074025673
[  205.006977][T12264] tap0: tun_chr_ioctl cmd 1074025673
[  205.008949][T12264] tap0: tun_chr_ioctl cmd 1074025673
[  205.025688][T12264] tap0: tun_chr_ioctl cmd 1074025673
[  205.027691][T12264] tap0: tun_chr_ioctl cmd 1074025673
[  205.215498][T12289] netlink: 'syz.1.1852': attribute type 10 has an invalid length.
[  205.233308][T12289] team0: Port device dummy0 added
[  205.236797][T12289] netlink: 'syz.1.1852': attribute type 10 has an invalid length.
[  205.262947][T12289] team0: Port device dummy0 removed
[  205.268828][T12289] dummy0: entered promiscuous mode
[  205.273653][T12289] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  205.820530][T12321] netlink: 'syz.0.1864': attribute type 20 has an invalid length.
[  205.880381][T12322] __nla_validate_parse: 20 callbacks suppressed
[  205.880397][T12322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1864'.
[  206.042709][T12327] lo speed is unknown, defaulting to 1000
[  206.880332][T12350] netlink: 'syz.2.1867': attribute type 1 has an invalid length.
[  206.883627][T12350] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1867'.
[  206.925366][T12354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1870'.
[  208.052302][T12382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1878'.
[  208.176054][T12389] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  208.179024][T12389] syzkaller0: entered promiscuous mode
[  208.180997][T12389] syzkaller0: entered allmulticast mode
[  208.205385][T12389] tipc: Resetting bearer <eth:syzkaller0>
[  208.210148][T12388] tipc: Resetting bearer <eth:syzkaller0>
[  208.224294][T12388] tipc: Disabling bearer <eth:syzkaller0>
[  208.352239][T12393] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  208.397647][T12393] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  208.459100][T12393] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  208.501107][T12393] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  208.517292][T12401] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1884'.
[  208.534994][T12401] bond0: (slave dummy0): Releasing backup interface
[  208.539872][T12401] dummy0: left promiscuous mode
[  208.548528][T12401] batman_adv: batadv0: Adding interface: dummy0
[  208.551187][T12401] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.561581][T12401] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  208.588896][T12401] batman_adv: batadv0: Adding interface: ip6gretap2
[  208.592628][T12401] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.603793][T12401] batman_adv: batadv0: Interface activated: ip6gretap2
[  208.631548][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  208.647314][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  208.660323][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  208.680606][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  208.696495][T12405] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.946252][T12426] rdma_rxe: rxe_newlink: failed to add veth0_vlan
[  209.138954][T12429] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1891'.
[  209.467386][T12440] macsec1: entered promiscuous mode
[  209.469349][T12440] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode
[  209.473786][T12440] macsec1: entered allmulticast mode
[  209.475612][T12440] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode
[  209.486958][T12440] macsec2: entered promiscuous mode
[  209.488784][T12440] macsec2: entered allmulticast mode
[  209.495292][T12440] validate_nla: 2 callbacks suppressed
[  209.495307][T12440] netlink: 'syz.1.1893': attribute type 101 has an invalid length.
[  209.499913][T12440] netlink: 'syz.1.1893': attribute type 7 has an invalid length.
[  209.887149][T12470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1897'.
[  210.046326][T12475] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1899'.
[  210.753939][   T57] block nbd2: Receive control failed (result -32)
[  210.984442][T12508] netlink: 'syz.2.1906': attribute type 1 has an invalid length.
[  210.987440][T12508] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1906'.
[  210.997387][T12508] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1906'.
[  211.233805][T12518] netlink: 'syz.2.1909': attribute type 1 has an invalid length.
[  211.260291][T12518] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1909'.
[  211.267482][T12518] 8021q: adding VLAN 0 to HW filter on device bond14
[  211.314317][T12521] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  211.318315][T12522] syzkaller0: entered promiscuous mode
[  211.321448][T12522] syzkaller0: entered allmulticast mode
[  211.331715][T12521] netlink: 'syz.2.1910': attribute type 5 has an invalid length.
[  211.400229][T12525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1912'.
[  211.504456][T12533] lo speed is unknown, defaulting to 1000
[  211.595508][T12536] pim6reg99999999: entered allmulticast mode
[  211.786750][T12551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1918'.
[  211.823577][T12558] sctp: [Deprecated]: syz.0.1917 (pid 12558) Use of int in maxseg socket option.
[  211.823577][T12558] Use struct sctp_assoc_value instead
[  211.932663][T12559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1916'.
[  212.081652][T12559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1916'.
[  212.176821][T12586] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  212.261638][T12591] netlink: 'syz.1.1925': attribute type 142 has an invalid length.
[  212.272158][T12591] netlink: 'syz.1.1925': attribute type 16 has an invalid length.
[  212.275240][T12591] netlink: 'syz.1.1925': attribute type 17 has an invalid length.
[  212.316996][T12591] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  212.325148][T12591] mac80211_hwsim hwsim23 wlan0: left allmulticast mode
[  212.327773][T12591] mac80211_hwsim hwsim23 wlan0: left promiscuous mode
[  212.333249][   T24] lo speed is unknown, defaulting to 1000
[  212.333510][T12592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1925'.
[  212.335795][   T24] syz1: Port: 1 Link DOWN
[  212.362681][T12591] lo speed is unknown, defaulting to 1000
[  212.517784][T12598] netlink: 'syz.1.1927': attribute type 1 has an invalid length.
[  212.551819][T12598] 8021q: adding VLAN 0 to HW filter on device bond11
[  212.575815][T12598] 8021q: adding VLAN 0 to HW filter on device bond11
[  212.578970][T12598] bond11: (slave vcan0): The slave device specified does not support setting the MAC address
[  212.585162][T12598] bond11: (slave vcan0): Error -95 calling set_mac_address
[  212.731133][T12604] lo speed is unknown, defaulting to 1000
[  212.773949][T12607] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  212.808147][T12612] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  212.850426][T12610] syzkaller0: entered promiscuous mode
[  212.855699][T12610] syzkaller0: entered allmulticast mode
[  212.914340][T12612] tipc: Resetting bearer <eth:syzkaller0>
[  212.927876][T12612] tipc: Disabling bearer <eth:syzkaller0>
[  213.080841][T12627] ipvlan2: entered promiscuous mode
[  213.087178][T12627] bridge0: port 1(ipvlan2) entered blocking state
[  213.090741][T12627] bridge0: port 1(ipvlan2) entered disabled state
[  213.094365][T12627] ipvlan2: entered allmulticast mode
[  213.096718][T12627] erspan0: entered allmulticast mode
[  213.100275][T12627] ipvlan2: left allmulticast mode
[  213.104656][T12627] erspan0: left allmulticast mode
[  213.127200][T12628] netlink: 'syz.0.1935': attribute type 3 has an invalid length.
[  213.226127][T12632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1937'.
[  213.232323][T12633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1937'.
[  213.661278][T12663] team0: Mode changed to "broadcast"
[  213.666394][T12664] team0: Unable to change to the same mode the team is in
[  213.671016][T12663] tipc: Enabled bearer <eth:team0>, priority 0
[  213.674071][T12664] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  213.755769][T12674] bridge10: entered allmulticast mode
[  214.013812][T12683] 8021q: adding VLAN 0 to HW filter on device bond15
[  214.083335][T12688] gretap0: mtu less than device minimum
[  214.315423][T11846] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  214.628851][T12721] validate_nla: 1 callbacks suppressed
[  214.628868][T12721] netlink: 'syz.2.1961': attribute type 2 has an invalid length.
[  214.642123][T12721] k*]: entered promiscuous mode
[  214.717570][T12734] netlink: 'syz.1.1964': attribute type 2 has an invalid length.
[  214.720469][T12734] netlink: 'syz.1.1964': attribute type 1 has an invalid length.
[  214.724045][T12734] netlink: 'syz.1.1964': attribute type 1 has an invalid length.
[  214.781741][T12739] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  214.855115][T12747] macsec3: entered promiscuous mode
[  214.857462][T12747] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode
[  214.859906][T12747] macsec3: entered allmulticast mode
[  214.862902][T12747] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode
[  214.875389][T12747] macsec4: entered promiscuous mode
[  214.877551][T12747] macsec4: entered allmulticast mode
[  215.121760][T12763] netlink: 'syz.0.1971': attribute type 21 has an invalid length.
[  215.467177][ T5880] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9
[  216.379077][T12801] __nla_validate_parse: 18 callbacks suppressed
[  216.379097][T12801] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1981'.
[  216.436423][T12801] lo speed is unknown, defaulting to 1000
[  216.655689][T12815] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1984'.
[  216.767186][T12826] netlink: 'syz.0.1987': attribute type 2 has an invalid length.
[  216.848727][T12832] lo speed is unknown, defaulting to 1000
[  216.975000][T12838] _Z`Ԁ@S!: entered promiscuous mode
[  217.411256][T12838] infiniband syz2: set down
[  217.413119][T12838] infiniband syz2: added bond_slave_0
[  217.436031][T12838] RDS/IB: syz2: added
[  217.437543][T12838] smc: adding ib device syz2 with port count 1
[  217.440242][T12838] smc:    ib device syz2 port 1 has pnetid 
[  217.757566][T12883] netlink: 'syz.2.2000': attribute type 4 has an invalid length.
[  217.760842][T12883] netlink: 'syz.2.2000': attribute type 4 has an invalid length.
[  217.964915][T12890] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2002'.
[  217.970235][T12890] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2002'.
[  218.024401][T12893] netlink: 'syz.2.2004': attribute type 1 has an invalid length.
[  218.276455][T12906] bridge14: entered promiscuous mode
[  218.341043][T12909] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  218.530171][T12920] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2011'.
[  218.592246][T12922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2012'.
[  218.596593][T12922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2012'.
[  218.671375][T12929] netlink: 'syz.1.2014': attribute type 10 has an invalid length.
[  218.781028][T12939] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2016'.
[  218.809747][T12942] vti0: entered promiscuous mode
[  218.814194][T12939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2016'.
[  218.906646][T12953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2019'.
[  219.242576][T12978] : entered promiscuous mode
[  220.007639][T13001] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  220.238452][T13015] validate_nla: 1 callbacks suppressed
[  220.238470][T13015] netlink: 'syz.0.2034': attribute type 6 has an invalid length.
[  220.442797][T13030] netlink: 'syz.0.2036': attribute type 6 has an invalid length.
[  220.623285][T13037] syzkaller1: entered promiscuous mode
[  220.625621][T13037] syzkaller1: entered allmulticast mode
[  220.779620][T13050] netlink: 'syz.2.2040': attribute type 1 has an invalid length.
[  220.783156][T13050] netlink: 'syz.2.2040': attribute type 2 has an invalid length.
[  220.786451][T13050] netlink: 'syz.2.2040': attribute type 1 has an invalid length.
[  220.797431][T13052] netlink: 'syz.0.2041': attribute type 1 has an invalid length.
[  220.945611][T13059] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.997828][T13063] 8021q: VLANs not supported on syzkaller1
[  221.000921][T13063] syzkaller1: entered promiscuous mode
[  221.009894][T13063] syzkaller1: entered allmulticast mode
[  221.405712][T13092] __nla_validate_parse: 8 callbacks suppressed
[  221.405758][T13092] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2052'.
[  221.412525][T13092] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2052'.
[  221.520980][T13098] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  221.567669][T13098] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2054'.
[  221.736075][T13113] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  221.751660][T13114] netlink: 'syz.2.2059': attribute type 1 has an invalid length.
[  221.788223][T13113] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  221.837027][T13113] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  221.867957][T13120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2060'.
[  221.888777][T13113] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  221.966845][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  221.980716][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  221.998864][ T5711] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  222.011174][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  222.017167][T13123] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2061'.
[  222.058362][T13126] netlink: 192392 bytes leftover after parsing attributes in process `syz.1.2062'.
[  222.440357][T13153] openvswitch: netlink: IPv4 tun info is not correct
[  222.716641][T13173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2074'.
[  222.761343][T13175] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2076'.
[  222.780443][T13177] lo speed is unknown, defaulting to 1000
[  222.869781][T13182] netlink: 'syz.0.2078': attribute type 1 has an invalid length.
[  222.956168][T13186] bond12: (slave gretap3): making interface the new active one
[  222.959990][T13186] bond12: (slave gretap3): Enslaving as an active interface with an up link
[  222.981286][T13182] vlan7: entered allmulticast mode
[  222.998705][T13182] bond12: entered allmulticast mode
[  223.001213][T13182] gretap3: entered allmulticast mode
[  223.008292][T13182] bond12: (slave vlan7): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  223.272972][T13204] netlink: 'syz.0.2085': attribute type 2 has an invalid length.
[  223.775843][T13219] openvswitch: netlink: IP tunnel TTL not specified.
[  223.840784][T13235] netlink: 'syz.0.2093': attribute type 3 has an invalid length.
[  223.874564][T13235] lo speed is unknown, defaulting to 1000
[  224.035980][T13250] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2093'.
[  224.040112][T13251] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2096'.
[  224.438551][T13265] syzkaller0: entered promiscuous mode
[  224.440906][T13265] syzkaller0: entered allmulticast mode
[  224.445754][T13264] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  224.460517][T13264] tipc: Resetting bearer <eth:syzkaller0>
[  225.949755][T13264] tipc: Disabling bearer <eth:syzkaller0>
[  226.025999][T13279] lo speed is unknown, defaulting to 1000
[  226.139709][T13290] validate_nla: 1 callbacks suppressed
[  226.139727][T13290] netlink: 'syz.1.2105': attribute type 13 has an invalid length.
[  226.148796][T13290] netlink: 'syz.1.2105': attribute type 17 has an invalid length.
[  226.205988][T13290] 8021q: adding VLAN 0 to HW filter on device bond0
[  226.209056][T13290] 8021q: adding VLAN 0 to HW filter on device team0
[  226.222796][T13290] tipc: Resetting bearer <eth:team0>
[  226.225832][T13290] tipc: Resetting bearer <eth:team0>
[  226.229010][T13290] batman_adv: batadv0: Interface activated: dummy0
[  226.231720][T13290] batadv0: mtu less than device minimum
[  226.238180][T13290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  226.242983][T13290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  226.248246][T13290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  226.253623][T13290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  226.258797][T13290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  226.264697][T13290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  226.269985][T13290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  226.275774][T13290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  226.281246][T13290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  226.312913][ T5887] lo speed is unknown, defaulting to 1000
[  226.316818][ T5887] syz1: Port: 1 Link ACTIVE
[  226.421541][T13291] lo speed is unknown, defaulting to 1000
[  226.512855][T13299] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  226.742187][T13299] __nla_validate_parse: 2 callbacks suppressed
[  226.742205][T13299] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2109'.
[  226.883382][T13308] netlink: 'syz.2.2111': attribute type 21 has an invalid length.
[  226.885901][T13308] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2111'.
[  226.921522][T13308] netlink: 'syz.2.2111': attribute type 4 has an invalid length.
[  226.925509][T13308] netlink: 'syz.2.2111': attribute type 5 has an invalid length.
[  226.928680][T13308] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2111'.
[  226.952790][T13308] netlink: 'syz.2.2111': attribute type 2 has an invalid length.
[  227.104933][T13315] netlink: 'syz.0.2113': attribute type 1 has an invalid length.
[  227.321541][T13320] tipc: Resetting bearer <eth:syzkaller0>
[  227.374364][T11846] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 19999 - 0
[  227.384909][T11846] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 19999 - 0
[  227.387647][T11846] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 19999 - 0
[  227.390385][T11846] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 19999 - 0
[  227.518645][T13334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2119'.
[  227.593444][T13332] tipc: Resetting bearer <eth:team0>
[  227.596616][T13332] batman_adv: batadv0: Interface deactivated: dummy0
[  227.600084][T13332] bridge_slave_0: left allmulticast mode
[  227.602943][T13332] macsec1: left promiscuous mode
[  227.604555][T13332] macsec1: left allmulticast mode
[  227.606608][T13332] macsec2: left promiscuous mode
[  227.608544][T13332] macsec2: left allmulticast mode
[  227.612785][T13332] macsec3: left promiscuous mode
[  227.615500][T13332] macsec3: left allmulticast mode
[  227.618956][T13332] mac80211_hwsim hwsim23 wlan0: left allmulticast mode
[  227.622341][T13332] mac80211_hwsim hwsim23 wlan0: left promiscuous mode
[  227.625657][T13332] macsec4: left promiscuous mode
[  227.627375][T13332] macsec4: left allmulticast mode
[  227.630007][ T2334] lo speed is unknown, defaulting to 1000
[  227.631828][ T2334] syz1: Port: 1 Link DOWN
[  227.637685][T13332] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2118'.
[  227.640791][T13332] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2118'.
[  227.645309][T13332] dvmrp0: left allmulticast mode
[  227.673784][T13340] netlink: 'syz.0.2121': attribute type 1 has an invalid length.
[  227.857155][T13350] unsupported nla_type 52263
[  227.919732][T13354] netlink: 'syz.0.2124': attribute type 22 has an invalid length.
[  227.924020][T13354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2124'.
[  227.927716][T13354] netlink: 'syz.0.2124': attribute type 22 has an invalid length.
[  227.930684][T13354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2124'.
[  227.997258][T13360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2127'.
[  228.041574][T13364] netlink: 'syz.0.2128': attribute type 11 has an invalid length.
[  228.049466][T13364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2128'.
[  231.292292][ T5916] net_ratelimit: 53 callbacks suppressed
[  231.292312][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  231.402146][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  231.512275][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  231.622499][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  231.732144][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  231.842193][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  231.952300][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  232.062140][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  232.172316][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  232.282167][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  236.382417][ T5916] net_ratelimit: 36 callbacks suppressed
[  236.382443][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  236.492251][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  236.602065][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  236.712624][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  236.822078][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  236.932348][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  237.042206][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  237.162747][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  237.282105][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  237.392339][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  241.412469][ T5916] net_ratelimit: 35 callbacks suppressed
[  241.412493][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  241.522282][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  241.642837][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  241.752632][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  241.862164][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  241.972315][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  242.092442][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  242.202171][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  242.312696][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  242.422214][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  246.482336][ T5916] net_ratelimit: 35 callbacks suppressed
[  246.482394][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  246.592200][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  246.702802][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  246.812176][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  246.932181][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  247.052161][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  247.172500][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  247.282408][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  247.392226][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  247.502412][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  251.512362][ T5880] net_ratelimit: 35 callbacks suppressed
[  251.512377][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  251.622186][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  251.732790][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  251.842491][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  251.962473][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  252.072173][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  252.182247][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  252.292413][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  252.402201][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  252.512413][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  256.542230][ T5880] net_ratelimit: 35 callbacks suppressed
[  256.542250][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  256.652234][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  256.762233][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  256.872171][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  256.992195][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  257.112259][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  257.232211][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  257.342189][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  257.452263][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  257.562242][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  257.572341][ T6215] IPVS: ip_vs_send_async error -101
[  261.582362][ T5916] net_ratelimit: 35 callbacks suppressed
[  261.582380][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  261.702198][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  261.812277][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  261.922222][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  262.032566][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  262.152386][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  262.262055][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  262.372530][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  262.492310][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  262.602550][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  264.980267][T13382] __nla_validate_parse: 3 callbacks suppressed
[  264.980288][T13382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2133'.
[  265.017229][T13388] lo speed is unknown, defaulting to 1000
[  265.073653][T13396] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2136'.
[  265.076672][T13396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2136'.
[  265.079569][T13396] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2136'.
[  265.092362][T13396] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2136'.
[  265.096510][T13393] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2136'.
[  265.100443][T13393] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2136'.
[  265.106866][T13393] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2136'.
[  265.109737][T13393] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2136'.
[  266.075008][T13421] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2145'.
[  266.131596][T13425] netlink: 'syz.1.2146': attribute type 1 has an invalid length.
[  266.379663][T13437] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  266.672070][ T5880] net_ratelimit: 35 callbacks suppressed
[  266.672087][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  266.782263][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  266.892507][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  267.002095][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  267.112248][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  267.165354][T13450] nft_compat: unsupported protocol 5
[  267.167627][T13450] netlink: 'syz.1.2152': attribute type 7 has an invalid length.
[  267.170393][T13450] netlink: 'syz.1.2152': attribute type 8 has an invalid length.
[  267.272369][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  267.382978][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  267.492577][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  267.549589][T13476] netlink: 'syz.1.2157': attribute type 13 has an invalid length.
[  267.553269][T13476] netlink: 'syz.1.2157': attribute type 17 has an invalid length.
[  267.581429][T13476] 8021q: adding VLAN 0 to HW filter on device bond0
[  267.587624][T13476] 8021q: adding VLAN 0 to HW filter on device team0
[  267.590215][T13476] tipc: Resetting bearer <eth:team0>
[  267.592670][T13476] tipc: Resetting bearer <eth:team0>
[  267.595009][T13476] batman_adv: batadv0: Interface activated: dummy0
[  267.597236][T13476] batadv0: mtu less than device minimum
[  267.599883][T13476] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  267.627354][ T5913] lo speed is unknown, defaulting to 1000
[  267.629700][ T5913] syz1: Port: 1 Link ACTIVE
[  267.631697][T13479] netlink: 'syz.2.2158': attribute type 28 has an invalid length.
[  267.693526][T13474] lo speed is unknown, defaulting to 1000
[  269.564403][T13540] netlink: 'syz.1.2176': attribute type 1 has an invalid length.
[  269.564436][T13539] netlink: 'syz.1.2176': attribute type 1 has an invalid length.
[  269.580428][T13540] bond12: entered promiscuous mode
[  269.584330][T13540] bond12: entered allmulticast mode
[  269.629454][T13539] veth1_to_bond: entered allmulticast mode
[  269.675919][T13540] veth1_to_bond (unregistering): left allmulticast mode
[  269.692867][T13539] bridge5: entered promiscuous mode
[  269.695056][T13539] bridge5: entered allmulticast mode
[  269.699408][T13539] bond12: (slave bridge5): making interface the new active one
[  269.704030][T13539] bond12: (slave bridge5): Enslaving as an active interface with an up link
[  269.712869][T13544] bridge6: entered promiscuous mode
[  269.714764][T13544] bridge6: entered allmulticast mode
[  269.719087][T13544] bond12: (slave bridge6): Enslaving as a backup interface with an up link
[  270.229612][T13573] __nla_validate_parse: 15 callbacks suppressed
[  270.229627][T13573] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2182'.
[  270.564605][T13584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2186'.
[  270.569041][T13584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2186'.
[  270.831374][T13588] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2188'.
[  270.861558][T13589] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2188'.
[  271.078338][T13596] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  271.104683][T13595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2190'.
[  271.158111][T13595] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  271.264919][T13605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2193'.
[  271.374791][T13614] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2196'.
[  271.441140][T13619] netlink: 'syz.0.2197': attribute type 1 has an invalid length.
[  271.479646][T13623] netlink: 'syz.1.2198': attribute type 2 has an invalid length.
[  271.482758][T13623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2198'.
[  271.483429][T13625] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2199'.
[  271.527616][T13628] veth1: entered promiscuous mode
[  271.772083][T11846] net_ratelimit: 56 callbacks suppressed
[  271.772097][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  271.858851][T13656] netlink: 'syz.2.2205': attribute type 1 has an invalid length.
[  271.875932][T13656] IPVS: length: 131 != 8
[  271.885544][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  272.003154][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  272.113912][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  272.147579][T13678] nft_compat: unsupported protocol 5
[  272.222047][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  272.243351][T13686] netlink: 'syz.2.2209': attribute type 6 has an invalid length.
[  272.332311][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  272.442623][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  272.644351][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  272.752733][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  272.872442][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  272.909049][T13754] netlink: 'syz.1.2219': attribute type 3 has an invalid length.
[  272.912533][T13754] netlink: 'syz.1.2219': attribute type 1 has an invalid length.
[  273.140914][T13775] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  273.147231][T13776] syzkaller0: entered promiscuous mode
[  273.149782][T13776] syzkaller0: entered allmulticast mode
[  273.177548][T13776] tipc: Resetting bearer <eth:syzkaller0>
[  273.198400][T13776] tipc: Disabling bearer <eth:syzkaller0>
[  273.247612][T13784] geneve2: entered promiscuous mode
[  273.250456][T13784] geneve2: entered allmulticast mode
[  273.257791][T11846] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  273.264376][T11846] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  273.267660][T11846] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  273.270725][T11846] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  273.287032][T13784] delete_channel: no stack
[  273.289043][T13784] delete_channel: no stack
[  273.379718][T13797] netlink: 'syz.0.2232': attribute type 1 has an invalid length.
[  273.461106][T13800] sctp: [Deprecated]: syz.1.2233 (pid 13800) Use of int in max_burst socket option.
[  273.461106][T13800] Use struct sctp_assoc_value instead
[  273.467366][T13799] sctp: [Deprecated]: syz.1.2233 (pid 13799) Use of int in max_burst socket option.
[  273.467366][T13799] Use struct sctp_assoc_value instead
[  273.785707][T13826] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  273.795314][T13826] syzkaller0: entered promiscuous mode
[  273.797712][T13826] syzkaller0: entered allmulticast mode
[  273.830685][T13826] tipc: Resetting bearer <eth:syzkaller0>
[  273.859476][T13826] tipc: Disabling bearer <eth:syzkaller0>
[  273.964976][T13841] pimreg3: entered allmulticast mode
[  274.315871][T13861] veth0_to_bond: entered allmulticast mode
[  274.519496][T13877] tc_dump_action: action bad kind
[  274.542686][T13880] pim6reg1: entered promiscuous mode
[  274.544638][T13880] pim6reg1: entered allmulticast mode
[  274.623578][T13883] tipc: Enabled bearer <eth:gre0>, priority 10
[  274.628356][T13888] mac80211_hwsim hwsim31 wlan1: entered allmulticast mode
[  274.646643][T13888] netlink: 'syz.1.2257': attribute type 10 has an invalid length.
[  274.653013][T13888] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  274.657067][T13888] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  274.694144][T13886] 8021q: adding VLAN 0 to HW filter on device bond14
[  274.697902][T13886] bond14: entered promiscuous mode
[  274.700376][T13886] team0: Port device bond14 added
[  274.864293][T13896] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  274.867767][T13896] syzkaller0: entered promiscuous mode
[  274.870183][T13896] syzkaller0: entered allmulticast mode
[  274.909318][T13896] tipc: Resetting bearer <eth:syzkaller0>
[  274.928585][T13896] tipc: Disabling bearer <eth:syzkaller0>
[  275.499579][T13912] netlink: 'syz.2.2264': attribute type 12 has an invalid length.
[  275.571284][T13917] netlink: 'syz.1.2267': attribute type 10 has an invalid length.
[  275.601148][T13920] __nla_validate_parse: 24 callbacks suppressed
[  275.601160][T13920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2268'.
[  275.635440][T13922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2269'.
[  275.996296][T13951] vlan7: entered allmulticast mode
[  275.998468][T13951] bond15: entered allmulticast mode
[  276.191829][T13966] dvmrp8: entered allmulticast mode
[  276.195992][T13970] mac80211_hwsim hwsim31 wlan1: left allmulticast mode
[  276.199864][T13965] dvmrp8: left allmulticast mode
[  276.316993][T13972] mac80211_hwsim hwsim31 wlan1: entered allmulticast mode
[  276.364004][T13974] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2282'.
[  276.456678][T13976] validate_nla: 5 callbacks suppressed
[  276.456693][T13976] netlink: 'syz.0.2283': attribute type 1 has an invalid length.
[  276.516442][T13976] 8021q: adding VLAN 0 to HW filter on device bond17
[  276.738159][T13993] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2286'.
[  276.883721][ T5880] net_ratelimit: 33 callbacks suppressed
[  276.883745][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  276.910640][T13996] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2287'.
[  276.993564][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  277.065367][T14008] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2289'.
[  277.102636][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  277.138117][T14018] netlink: zone id is out of range
[  277.140387][T14018] netlink: zone id is out of range
[  277.144591][T14018] netlink: zone id is out of range
[  277.146678][T14018] netlink: zone id is out of range
[  277.148687][T14018] netlink: zone id is out of range
[  277.150713][T14018] netlink: zone id is out of range
[  277.159367][T14018] netlink: zone id is out of range
[  277.223516][T14030] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  277.283653][T14035] sch_tbf: peakrate 9 is lower than or equals to rate 13430801546125309090 !
[  277.290576][T14030] tipc: Resetting bearer <eth:syzkaller0>
[  277.299873][T14027] tipc: Disabling bearer <eth:syzkaller0>
[  277.375004][T14040] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2296'.
[  277.520078][T14052] tap0: tun_chr_ioctl cmd 1074025680
[  277.527297][T14052] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  277.579379][T14059] pim6reg1: entered promiscuous mode
[  277.581177][T14059] pim6reg1: entered allmulticast mode
[  277.640906][T14063] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2301'.
[  277.647961][T14063] syzkaller0: left promiscuous mode
[  277.649872][T14063] syzkaller0: left allmulticast mode
[  277.686706][T14059] 8021q: adding VLAN 0 to HW filter on device bond17
[  277.690962][T14059] team0: Port device bond17 added
[  277.760547][T14080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2307'.
[  278.036006][T14106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2313'.
[  278.091504][T14108] netlink: 'syz.0.2314': attribute type 1 has an invalid length.
[  278.095334][T14108] netlink: 'syz.0.2314': attribute type 1 has an invalid length.
[  278.632218][T14121] bridge: RTM_NEWNEIGH with invalid ether address
[  278.757436][T14124] netlink: 'syz.0.2316': attribute type 12 has an invalid length.
[  279.286744][T14161] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  279.331534][T14154] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  279.342429][T14153] tipc: Disabling bearer <eth:syzkaller0>
[  279.531063][T14180] netlink: 'syz.0.2336': attribute type 1 has an invalid length.
[  279.566858][T14180] 8021q: adding VLAN 0 to HW filter on device bond18
[  279.608646][T14186] lo: entered allmulticast mode
[  279.611135][T14185] lo: left allmulticast mode
[  279.927710][T14220] netlink: 'syz.0.2346': attribute type 2 has an invalid length.
[  279.983947][T14225] veth0_to_bridge: entered promiscuous mode
[  279.986065][T14225] veth0_to_bridge: left promiscuous mode
[  280.146868][T14246] netlink: 'syz.1.2354': attribute type 30 has an invalid length.
[  280.150393][T14246] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  280.155076][T14246] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  280.188115][T14245] netlink: 'syz.0.2348': attribute type 12 has an invalid length.
[  280.834789][T14271] bridge16: the hash_elasticity option has been deprecated and is always 16
[  280.837520][T14271] bridge16: entered allmulticast mode
[  281.017424][T14277] __nla_validate_parse: 17 callbacks suppressed
[  281.017438][T14277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2361'.
[  281.055226][T14278] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2360'.
[  281.058814][T14278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2360'.
[  281.267206][T14281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2362'.
[  281.311569][T14284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2363'.
[  281.325051][T14284] geneve4: entered promiscuous mode
[  281.327355][T14284] geneve4: entered allmulticast mode
[  281.332194][ T5711] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  281.338897][ T5711] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  281.345459][T14288] sctp: [Deprecated]: syz.1.2364 (pid 14288) Use of struct sctp_assoc_value in delayed_ack socket option.
[  281.345459][T14288] Use struct sctp_sack_info instead
[  281.351821][ T5711] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  281.355318][ T5711] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  281.403474][T14290] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2365'.
[  281.426766][T14292] netlink: 'syz.1.2366': attribute type 2 has an invalid length.
[  281.711280][T14297] netlink: 'syz.1.2366': attribute type 142 has an invalid length.
[  281.982394][ T5916] net_ratelimit: 66 callbacks suppressed
[  281.982420][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  282.041481][T14306] netlink: 'syz.2.2370': attribute type 1 has an invalid length.
[  282.068156][T14306] 8021q: adding VLAN 0 to HW filter on device bond18
[  282.103821][T14306] bond18: (slave veth21): Enslaving as an active interface with a down link
[  282.112553][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  282.131192][T14306] 8021q: adding VLAN 0 to HW filter on device batadv1
[  282.134522][T14306] bond18: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  282.235175][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  282.265665][T14309] lo speed is unknown, defaulting to 1000
[  282.342591][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  282.441341][T14310] netlink: 'syz.2.2371': attribute type 1 has an invalid length.
[  282.449332][T14316] Unsupported ieee802154 address type: 0
[  282.453745][T14310] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2371'.
[  282.463138][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  282.478510][T14317] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  282.501402][T14317] netlink: 'syz.1.2373': attribute type 1 has an invalid length.
[  282.508071][T14317] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2373'.
[  282.582533][ T5711] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  282.675027][T14320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2374'.
[  282.736754][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  282.740334][T14320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2374'.
[  282.816078][T14336] netlink: 'syz.1.2379': attribute type 1 has an invalid length.
[  282.842174][   T13] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  282.992509][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  283.413382][T14382] veth1: left allmulticast mode
[  283.418320][T14382] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  283.425631][T14382] tipc: Resetting bearer <eth:syzkaller0>
[  283.429542][T14382] geneve5: left promiscuous mode
[  283.431355][T14382] geneve5: left allmulticast mode
[  283.434048][T14382] bridge10: left allmulticast mode
[  283.436176][T14382] vti0: left promiscuous mode
[  283.477591][T14386] netlink: 'syz.2.2392': attribute type 1 has an invalid length.
[  283.495607][T14386] 8021q: adding VLAN 0 to HW filter on device bond19
[  283.565531][T14386] veth23: entered promiscuous mode
[  283.571078][T14386] bond19: (slave veth23): Enslaving as an active interface with a down link
[  283.577247][T14386] erspan0: entered allmulticast mode
[  283.757153][T14403] netlink: 'syz.0.2395': attribute type 15 has an invalid length.
[  283.761389][T14403] netlink: 'syz.0.2395': attribute type 15 has an invalid length.
[  283.826415][T14402] netlink: 'syz.2.2396': attribute type 4 has an invalid length.
[  284.727511][T14476] macsec0: entered promiscuous mode
[  284.729748][T14476] macsec0: entered allmulticast mode
[  284.734012][T14476] veth1_macvtap: entered allmulticast mode
[  284.736676][T14476] macsec0: left promiscuous mode
[  284.738946][T14476] macsec0: left allmulticast mode
[  284.741121][T14476] veth1_macvtap: left allmulticast mode
[  284.754111][T14476] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  284.756964][T14476] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  284.888520][T14488] xt_limit: Overflow, try lower: 604147548/4200216962
[  286.327440][T14513] vxcan0: entered promiscuous mode
[  286.440963][T14518] __nla_validate_parse: 14 callbacks suppressed
[  286.440976][T14518] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2428'.
[  286.450010][T14516] lo speed is unknown, defaulting to 1000
[  286.488785][T14521] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  286.611125][T14534] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2432'.
[  286.618225][T14534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2432'.
[  286.643512][T14534] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2432'.
[  286.833515][T14549] macsec5: entered promiscuous mode
[  286.835391][T14549] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode
[  286.838141][T14549] macsec5: entered allmulticast mode
[  286.849491][T14552] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2438'.
[  286.856101][T14549] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode
[  286.922209][T14549] macsec6: entered promiscuous mode
[  286.924301][T14549] macsec6: entered allmulticast mode
[  286.992246][   T13] net_ratelimit: 48 callbacks suppressed
[  286.992264][   T13] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  287.041069][T14565] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  287.045143][T14565] syzkaller0: entered promiscuous mode
[  287.052138][T14565] syzkaller0: entered allmulticast mode
[  287.059723][T14567] xt_policy: too many policy elements
[  287.066879][T14567] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2442'.
[  287.084962][T14565] tipc: Resetting bearer <eth:syzkaller0>
[  287.102043][   T13] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  287.111002][T14567] lo speed is unknown, defaulting to 1000
[  287.114784][T14565] tipc: Resetting bearer <eth:syzkaller0>
[  287.158652][T14565] tipc: Disabling bearer <eth:syzkaller0>
[  287.208699][T14572] lo speed is unknown, defaulting to 1000
[  287.212019][   T13] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  287.222185][T14574] Bluetooth: MGMT ver 1.23
[  287.225590][T14574] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2444'.
[  287.342219][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  287.452283][   T13] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  287.583561][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  287.594372][T14595] syzkaller0: entered promiscuous mode
[  287.597074][T14595] syzkaller0: entered allmulticast mode
[  287.602946][T14595] netem: change failed
[  287.750157][T14600] ip6gretap3: entered promiscuous mode
[  287.773692][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  287.924249][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  288.073545][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  288.189483][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  288.269558][T14627] team0: Device gtp1 is of different type
[  288.344204][T14630] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2458'.
[  288.362344][T14630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2458'.
[  288.569865][T14665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2464'.
[  288.669832][   T33] audit: type=1800 audit(1756905956.935:4): pid=14669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2465" name="memory.events" dev="tmpfs" ino=4190 res=0 errno=0
[  288.758326][T14681] netlink: 'syz.0.2468': attribute type 1 has an invalid length.
[  288.811755][T14681] 8021q: adding VLAN 0 to HW filter on device bond19
[  289.766757][T11846] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  289.770040][T11846] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  289.773859][T11846] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  289.787319][T11846] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  290.451057][T14768] netlink: 'syz.2.2478': attribute type 1 has an invalid length.
[  291.178660][T14798] netem: change failed
[  291.968313][T14812] __nla_validate_parse: 13 callbacks suppressed
[  291.968326][T14812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2489'.
[  292.032925][   T13] net_ratelimit: 31 callbacks suppressed
[  292.032947][   T13] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  292.153717][T14822] netlink: 'syz.0.2493': attribute type 10 has an invalid length.
[  292.195750][T14820] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  292.199230][T14822] netlink: 'syz.0.2493': attribute type 10 has an invalid length.
[  292.212468][   T13] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  292.322662][   T13] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  292.353396][T14832] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2495'.
[  292.357088][T14832] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2495'.
[  292.434601][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  292.475775][T14844] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2498'.
[  292.531243][T14847] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2500'.
[  292.592768][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  292.684330][T14865] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2505'.
[  292.708892][T14871] tipc: Resetting bearer <eth:team0>
[  292.713839][T14871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2507'.
[  292.716839][T14871] tipc: Resetting bearer <eth:team0>
[  292.719208][T14871] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  292.733187][T14870] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2506'.
[  292.773534][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  292.809414][T14876] netlink: 'syz.2.2509': attribute type 2 has an invalid length.
[  292.818240][T14876] : entered promiscuous mode
[  292.830684][T14877] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2508'.
[  292.837945][T14877] : renamed from bond_slave_0
[  292.856120][T14879] team0: Device gtp1 is of different type
[  292.883977][   T13] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  292.968092][T14882] netlink: 'syz.2.2511': attribute type 15 has an invalid length.
[  292.970898][T14882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2511'.
[  293.002252][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  293.210171][T14888] netlink: 'syz.2.2512': attribute type 12 has an invalid length.
[  293.690960][T14906] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  293.747287][T14909] netlink: 'syz.0.2518': attribute type 21 has an invalid length.
[  293.855614][T14914] lo speed is unknown, defaulting to 1000
[  294.093685][T14935] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  294.097464][T14936] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  294.106798][T14935] netem: change failed
[  294.111425][T14935] netlink: 'syz.2.2525': attribute type 11 has an invalid length.
[  294.274716][T14955] netlink: 'syz.0.2531': attribute type 10 has an invalid length.
[  294.278058][T14955] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up
[  294.357347][T14958] netlink: 'syz.2.2532': attribute type 1 has an invalid length.
[  294.382974][T14958] 8021q: adding VLAN 0 to HW filter on device bond20
[  294.401617][T14958] bond20: (slave gretap3): making interface the new active one
[  294.405371][T14958] bond20: (slave gretap3): Enslaving as an active interface with an up link
[  294.721185][T14980] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  294.872532][T14983] block nbd3: shutting down sockets
[  295.449065][T15031] netlink: 'syz.0.2552': attribute type 1 has an invalid length.
[  295.452785][T15031] netlink: 'syz.0.2552': attribute type 2 has an invalid length.
[  295.559721][T15037] pim6reg1: entered promiscuous mode
[  295.562257][T15037] pim6reg1: entered allmulticast mode
[  295.626919][T15037] syzkaller0: left promiscuous mode
[  295.628668][T15037] syzkaller0: left allmulticast mode
[  295.654871][T15037] 8021q: adding VLAN 0 to HW filter on device bond21
[  295.658980][T15037] team0: Port device bond21 added
[  295.686447][T15043] lo speed is unknown, defaulting to 1000
[  295.707545][T15044] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004
[  295.726337][T15044] IPVS: set_ctl: invalid protocol: 136 172.20.20.65:28192
[  296.016042][T15054] netlink: 'syz.0.2557': attribute type 1 has an invalid length.
[  296.019130][T15054] netlink: 'syz.0.2557': attribute type 1 has an invalid length.
[  296.333768][T15067] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  296.353823][T15067] tipc: Disabling bearer <eth:syzkaller0>
[  296.487324][T15073] netlink: 'syz.0.2562': attribute type 10 has an invalid length.
[  296.503420][T15073] dummy0: entered allmulticast mode
[  297.132839][ T5711] net_ratelimit: 36 callbacks suppressed
[  297.132859][ T5711] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  297.262364][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  297.392230][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  297.453795][T15086] __nla_validate_parse: 15 callbacks suppressed
[  297.453814][T15086] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2566'.
[  297.460724][T15086] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2566'.
[  297.474140][T15086] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2566'.
[  297.479009][T15086] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2566'.
[  297.523020][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  297.594168][T15089] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3928. macoff=96
[  297.599429][T15089] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2567'.
[  297.669179][ T5711] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  297.782178][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  297.892643][ T5916] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  297.939034][T15102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2572'.
[  297.966690][T15102] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2572'.
[  297.970248][T15104] lo speed is unknown, defaulting to 1000
[  298.002335][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  298.112342][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  298.189925][T15116] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2577'.
[  298.228247][T15118] bond0: (slave rose0): Error: Device can not be enslaved while up
[  298.235828][T15118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2578'.
[  298.242131][T15114] nbd3: detected capacity change from 0 to 127
[  298.246413][   T56] block nbd3: Receive control failed (result -32)
[  298.282448][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  298.443429][T15141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2583'.
[  298.446343][T15141] netlink: 'syz.0.2583': attribute type 21 has an invalid length.
[  298.775125][T15169] netlink: 'syz.1.2591': attribute type 1 has an invalid length.
[  298.808137][T15169] 8021q: adding VLAN 0 to HW filter on device bond13
[  298.877954][T15176] pim6reg: entered allmulticast mode
[  298.883809][T15174] pim6reg: left allmulticast mode
[  298.930138][T15178] bridge0: port 1(erspan0) entered blocking state
[  298.934815][T15178] bridge0: port 1(erspan0) entered disabled state
[  298.937739][T15178] erspan0: entered allmulticast mode
[  298.941590][T15178] erspan0: entered promiscuous mode
[  299.075176][T15192] bond21: entered promiscuous mode
[  299.136776][T15199] tipc: Resetting bearer <eth:team0>
[  299.325839][T15143] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  299.335271][T15209] validate_nla: 1 callbacks suppressed
[  299.335285][T15209] netlink: 'syz.0.2603': attribute type 1 has an invalid length.
[  299.425215][T15217] netlink: 'syz.2.2604': attribute type 3 has an invalid length.
[  299.428349][T15217] netlink: 'syz.2.2604': attribute type 1 has an invalid length.
[  299.465736][T15219] tap0: tun_chr_ioctl cmd 1074025678
[  299.467971][T15219] tap0: group set to 0
[  299.609126][T15224] netlink: 'syz.2.2608': attribute type 13 has an invalid length.
[  299.614823][T15224] netlink: 'syz.2.2608': attribute type 12 has an invalid length.
[  299.759190][T15234] team0: Port device bond17 removed
[  299.763855][T15234] bond18: (slave veth21): Releasing active interface
[  299.769504][T15234] bond19: (slave veth23): Releasing active interface
[  299.777315][T15234] bond20: (slave gretap3): Releasing active interface
[  299.786325][T15234] team0: Port device bond21 removed
[  300.017948][T15252] netlink: 'syz.0.2617': attribute type 1 has an invalid length.
[  300.622365][T15271] lo speed is unknown, defaulting to 1000
[  300.765572][T15276] syzkaller0: entered promiscuous mode
[  300.767657][T15276] syzkaller0: entered allmulticast mode
[  301.031651][T15283] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  301.066919][T15283] syzkaller0: entered promiscuous mode
[  301.069145][T15283] syzkaller0: entered allmulticast mode
[  301.071746][T15283] tipc: Resetting bearer <eth:syzkaller0>
[  301.104547][T15285] tipc: Resetting bearer <eth:syzkaller0>
[  302.663525][T15285] tipc: Disabling bearer <eth:syzkaller0>
[  302.682690][   T13] net_ratelimit: 25 callbacks suppressed
[  302.682703][   T13] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  302.739676][T15306] __nla_validate_parse: 12 callbacks suppressed
[  302.739697][T15306] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2634'.
[  302.804270][   T13] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  302.922252][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  302.931089][T15326] netlink: 'syz.1.2640': attribute type 6 has an invalid length.
[  302.947543][T15336] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2642'.
[  303.015670][T15339] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2643'.
[  303.032750][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  303.143325][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  303.214100][T15355] netlink: 468 bytes leftover after parsing attributes in process `syz.2.2649'.
[  303.225602][T15355] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2649'.
[  303.229087][T15355] netlink: 'syz.2.2649': attribute type 7 has an invalid length.
[  303.232154][T15355] netlink: 'syz.2.2649': attribute type 8 has an invalid length.
[  303.235638][T15355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2649'.
[  303.273033][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  303.275696][T15360] netlink: 'syz.0.2650': attribute type 1 has an invalid length.
[  303.385201][   T13] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  303.490588][T15377] nbd: must specify a size in bytes for the device
[  303.494915][   T13] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  303.602248][T11846] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  303.712727][ T5880] bond11: (slave ip6gretap3): failed to get link speed/duplex
[  303.864559][T15398] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  303.867523][T15398] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  304.071491][T15402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2661'.
[  304.140383][T15410] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  304.148591][T15410] syzkaller0: entered promiscuous mode
[  304.151053][T15410] syzkaller0: entered allmulticast mode
[  304.179517][T15410] tipc: Resetting bearer <eth:syzkaller0>
[  304.185559][T15409] tipc: Resetting bearer <eth:syzkaller0>
[  304.201402][T15409] tipc: Disabling bearer <eth:syzkaller0>
[  304.381107][T15424] xfrm1: entered allmulticast mode
[  304.441532][T15429] ip6gre3: entered allmulticast mode
[  304.450055][T15431] validate_nla: 1 callbacks suppressed
[  304.450069][T15431] netlink: 'syz.1.2668': attribute type 1 has an invalid length.
[  304.455477][T15431] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2668'.
[  304.458634][T15431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2668'.
[  304.472511][T15431] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2668'.
[  304.566881][T15441] ip6tnl0: entered allmulticast mode
[  304.629975][T15442] ip6tnl0: left allmulticast mode
[  304.668289][T15448] bond9: (slave bridge8): Releasing active interface
[  304.671116][T15448] bond9: (slave bridge8): the permanent HWaddr of slave - f6:14:5c:a3:4a:d7 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  304.684202][T15448] bond9: (slave bridge9): Releasing active interface
[  304.696590][T15448] bond11: (slave ip6gretap3): Removing an active aggregator
[  304.706734][T15448] bond11: (slave ip6gretap3): Releasing backup interface
[  304.709525][T15448] bond11: (slave ip6gretap3): the permanent HWaddr of slave - 1a:c8:8b:ba:30:c6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  304.725775][T15448] bond11: (slave veth9): Releasing backup interface
[  304.734351][T15448] bond12: (slave gretap3): Releasing active interface
[  304.737034][T15448] gretap3: left allmulticast mode
[  304.741732][T15448] bond14: left promiscuous mode
[  304.765135][T15448] team0: Port device bond14 removed
[  304.931374][T15480] 8021q: adding VLAN 0 to HW filter on device bond4
[  304.946369][T15480] erspan0: left allmulticast mode
[  304.969628][T15480] 8021q: adding VLAN 0 to HW filter on device bond0
[  304.972392][T15476] nbd4: detected capacity change from 0 to 127
[  304.973494][T15480] 8021q: adding VLAN 0 to HW filter on device team0
[  304.993048][   T57] block nbd4: Receive control failed (result -32)
[  304.994825][T15480] netlink: 'syz.2.2681': attribute type 1 has an invalid length.
[  305.880459][T15521] netlink: 'syz.0.2695': attribute type 1 has an invalid length.
[  305.883982][T15521] workqueue: Failed to create a rescuer kthread for wq "bond23": -EINTR
[  306.009661][T15533] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  306.049876][T15536] netlink: 'syz.1.2699': attribute type 10 has an invalid length.
[  306.364102][T15563] netlink: 'syz.1.2705': attribute type 3 has an invalid length.
[  306.367348][T15564] netlink: 'syz.1.2705': attribute type 3 has an invalid length.
[  306.585436][T15576] netlink: 'syz.1.2709': attribute type 1 has an invalid length.
[  306.820250][T15586] vxcan1: entered allmulticast mode
[  306.826070][T15586] vxcan1: left allmulticast mode
[  306.909508][T15587] raw_sendmsg: syz.0.2711 forgot to set AF_INET. Fix it!
[  306.963545][T15590] netlink: 'syz.1.2713': attribute type 2 has an invalid length.
[  307.016974][T15594] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  307.240563][T15613] netlink: 'syz.0.2720': attribute type 1 has an invalid length.
[  307.283885][T15619] netlink: 'syz.1.2722': attribute type 10 has an invalid length.
[  307.295773][T15613] vlan7: entered allmulticast mode
[  307.297886][T15613] bond23: entered allmulticast mode
[  307.763925][T15648] lo: entered allmulticast mode
[  307.787787][T15649] dvmrp8: entered allmulticast mode
[  307.820389][T15650] lo: left allmulticast mode
[  307.825058][T15650] dvmrp8: left allmulticast mode
[  307.961048][T15663] __nla_validate_parse: 12 callbacks suppressed
[  307.961065][T15663] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2732'.
[  308.024821][T15667] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2733'.
[  308.036662][T15667] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2733'.
[  308.062307][T15671] : entered promiscuous mode
[  308.090847][T15673] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2736'.
[  308.139640][T15676] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2737'.
[  308.146116][T15676] net_ratelimit: 12 callbacks suppressed
[  308.146127][T15676] openvswitch: netlink: EtherType 0 is less than min 600
[  308.356356][T15686] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2740'.
[  308.381239][T15686] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2740'.
[  308.415149][T15688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2741'.
[  308.519286][T15702] siw: device registration error -23
[  308.547736][T15704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2745'.
[  308.606632][T15694] tipc: Resetting bearer <eth:team0>
[  308.611569][T15694] batman_adv: batadv0: Interface deactivated: dummy0
[  308.616297][T15694] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  308.623236][  T793] lo speed is unknown, defaulting to 1000
[  308.625622][  T793] syz1: Port: 1 Link DOWN
[  308.735528][T15713] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2748'.
[  308.975072][T15733] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  308.980119][T15734] syzkaller0: entered promiscuous mode
[  308.984710][T15734] syzkaller0: entered allmulticast mode
[  309.006001][T15734] tipc: Resetting bearer <eth:syzkaller0>
[  309.026649][T15734] tipc: Disabling bearer <eth:syzkaller0>
[  309.406376][T15767] lo speed is unknown, defaulting to 1000
[  309.800544][T15780] validate_nla: 6 callbacks suppressed
[  309.800556][T15780] netlink: 'syz.1.2767': attribute type 1 has an invalid length.
[  309.896781][T15782] veth11: entered promiscuous mode
[  309.900500][T15780] erspan0: left allmulticast mode
[  309.902464][T15780] erspan0: left promiscuous mode
[  309.904440][T15780] bridge0: port 1(erspan0) entered disabled state
[  309.911798][T15780] batman_adv: batadv0: Removing interface: dummy0
[  309.917362][T15780] batman_adv: batadv0: Removing interface: ip6gretap2
[  309.921563][T15780] bond12: (slave bridge5): Releasing backup interface
[  309.924724][T15780] bond12: (slave bridge5): the permanent HWaddr of slave - 96:1a:99:a9:35:c8 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  309.931788][T15780] bond12: (slave bridge6): making interface the new active one
[  309.946094][T15780] bond12: (slave bridge6): Releasing backup interface
[  310.008911][T15784] 8021q: VLANs not supported on gre0
[  310.417580][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.420938][T15808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  310.439133][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.445626][T15808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  310.465396][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.472325][T15808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  310.480925][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.495283][T15808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  310.515575][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.519374][T15808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  310.526849][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.530801][T15808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  310.568118][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.572138][T15808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  310.578316][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.582573][T15808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  310.593504][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.601047][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.615308][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.619419][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.625813][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.630236][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.636413][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.640808][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.646618][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.653082][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.657174][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.661287][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.665937][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.669233][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.672848][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.676176][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.679975][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.684263][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.688692][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.693850][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.697966][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.702379][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.706612][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.710594][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.714949][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.718977][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.723396][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.727373][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.731413][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.736170][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.740269][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.744579][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.749289][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.782117][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.785374][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.788811][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.792039][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.797151][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.801102][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.808710][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.812209][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.816737][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.821376][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.825621][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.829014][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.832854][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.836907][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.840621][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.844251][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.848022][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.852805][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.856167][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.859442][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.863528][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.867134][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.870729][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.874996][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  310.941413][T15822] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  311.420760][T15855] veth27: entered promiscuous mode
[  311.466275][T15858] lo speed is unknown, defaulting to 1000
[  311.836319][T15864] bond7: (slave macvlan3): making interface the new active one
[  311.844624][T15864] bond7: (slave macvlan3): Enslaving as an active interface with an up link
[  311.889894][T15866] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  311.952937][T15868] team0: Refused to change device type
[  312.204261][T15883] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  312.227506][T15883] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  312.456052][T15901] lo speed is unknown, defaulting to 1000
[  313.041563][T15933] __nla_validate_parse: 15 callbacks suppressed
[  313.041584][T15933] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2808'.
[  313.179588][T15942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2812'.
[  313.186366][T15942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2812'.
[  313.199060][ T2334] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0
[  313.210196][ T2334] hid-generic 0005:16BF:5505.0003: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  313.251184][T15947] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2814'.
[  313.309241][T15951] bond4: option mode: unable to set because the bond device is up
[  313.313155][T15952] bond4: option mode: unable to set because the bond device is up
[  313.405668][ T5880] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  313.419513][T15965] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  313.824204][T15981] macsec4: entered promiscuous mode
[  313.826545][T15981] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  313.829701][T15981] macsec4: entered allmulticast mode
[  313.835620][T15981] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  313.845784][T15981] macsec5: entered promiscuous mode
[  313.847967][T15981] macsec5: entered allmulticast mode
[  314.025850][T15987] ip6tnl0: entered promiscuous mode
[  314.027730][T15987] ip6tnl0: entered allmulticast mode
[  314.029568][T15987] net_ratelimit: 57 callbacks suppressed
[  314.029581][T15987] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[  314.265377][T15999] lo speed is unknown, defaulting to 1000
[  314.416377][T15997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2827'.
[  314.427526][T15997] sctp: [Deprecated]: syz.1.2827 (pid 15997) Use of int in maxseg socket option.
[  314.427526][T15997] Use struct sctp_assoc_value instead
[  314.488333][T16005] lo speed is unknown, defaulting to 1000
[  314.634456][T16006] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2829'.
[  314.851435][T16010] bond4: option mode: unable to set because the bond device is up
[  314.854650][T16012] netlink: 'syz.2.2830': attribute type 1 has an invalid length.
[  314.926445][T16015] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  315.004676][T16015] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  315.096968][T16015] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  315.173439][T16021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2832'.
[  315.177016][T16021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2832'.
[  315.180722][T16021] netlink: 'syz.0.2832': attribute type 7 has an invalid length.
[  315.193018][T16015] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  315.307521][T11846] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  315.330905][T11846] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  315.351570][T11846] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  315.369528][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  315.400624][T16032] can: request_module (can-proto-3) failed.
[  315.462611][T16039] netlink: 'syz.1.2836': attribute type 13 has an invalid length.
[  315.470815][T16039] netlink: 'syz.1.2836': attribute type 17 has an invalid length.
[  315.508549][T16039] 8021q: adding VLAN 0 to HW filter on device bond0
[  315.515576][T16039] 8021q: adding VLAN 0 to HW filter on device team0
[  315.520588][T16039] tipc: Resetting bearer <eth:team0>
[  315.529096][T16039] tipc: Resetting bearer <eth:team0>
[  315.539198][T16039] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  315.546442][  T793] lo speed is unknown, defaulting to 1000
[  315.549717][  T793] syz1: Port: 1 Link ACTIVE
[  315.566445][T16043] lo speed is unknown, defaulting to 1000
[  315.644641][   T33] audit: type=1800 audit(1756905983.915:5): pid=16046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2838" name="memory.events" dev="tmpfs" ino=4885 res=0 errno=0
[  315.692531][T16046] lo speed is unknown, defaulting to 1000
[  315.758155][T16052] lo speed is unknown, defaulting to 1000
[  316.016125][T16056] netlink: 292 bytes leftover after parsing attributes in process `syz.2.2840'.
[  316.264287][T16066] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2842'.
[  316.749170][T16081] ip6tnl3: entered promiscuous mode
[  316.751579][T16081] ip6tnl3: entered allmulticast mode
[  316.756788][T16081] team0: Device ip6tnl3 is up. Set it down before adding it as a team port
[  316.790629][T16086] netlink: 'syz.1.2846': attribute type 25 has an invalid length.
[  316.797416][T16086] sctp: [Deprecated]: syz.1.2846 (pid 16086) Use of struct sctp_assoc_value in delayed_ack socket option.
[  316.797416][T16086] Use struct sctp_sack_info instead
[  317.790817][T16114] netlink: 'syz.1.2854': attribute type 11 has an invalid length.
[  318.069713][T16138] __nla_validate_parse: 7 callbacks suppressed
[  318.069732][T16138] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2857'.
[  318.314213][T16152] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2863'.
[  318.594771][T16164] IPVS: ip_vs_edit_dest(): server weight less than zero
[  318.696397][T16169] can: request_module (can-proto-3) failed.
[  318.700432][T16169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2868'.
[  318.709324][T16169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2868'.
[  318.787019][T16172] syzkaller0: entered promiscuous mode
[  318.789374][T16172] syzkaller0: entered allmulticast mode
[  318.797666][ T5880] syzkaller0: tun_net_xmit 70
[  318.800259][T16172] syzkaller0: tun_chr_ioctl cmd 1074025677
[  318.804446][T16172] syzkaller0: Linktype set failed because interface is up
[  318.932422][ T6215] IPVS: ip_vs_send_async error -101
[  319.023872][T16192] netlink: 'syz.1.2871': attribute type 12 has an invalid length.
[  319.258979][T16203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2875'.
[  319.726856][T16215] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  319.739966][T16215] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2879'.
[  319.817066][T16217] netlink: 'syz.2.2880': attribute type 10 has an invalid length.
[  319.819683][T16217] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2880'.
[  319.823974][T16217] dummy0: entered promiscuous mode
[  319.826106][T16217] bridge0: port 1(dummy0) entered blocking state
[  319.830549][T16217] bridge0: port 1(dummy0) entered disabled state
[  319.833244][T16217] dummy0: entered allmulticast mode
[  319.837251][T16217] dummy0: left allmulticast mode
[  319.839171][T16217] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  319.974825][T16226] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2883'.
[  319.995509][T16226] lo speed is unknown, defaulting to 1000
[  320.010789][T16229] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2884'.
[  320.191692][T16235] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  320.401605][T16255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2890'.
[  320.854291][T16274] syzkaller1: entered promiscuous mode
[  320.860220][T16274] syzkaller1: entered allmulticast mode
[  320.955064][T16278] netlink: 'syz.2.2896': attribute type 32 has an invalid length.
[  321.078768][T16283] tipc: Resetting bearer <eth:gre0>
[  321.233810][T16283] tipc: Resetting bearer <eth:syzkaller0>
[  321.268519][T11846] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  321.275580][T11846] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  321.288069][T11846] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  321.293355][T11846] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  321.301394][T16290] netlink: 'syz.0.2899': attribute type 10 has an invalid length.
[  321.656761][T16306] batadv_slave_1: entered promiscuous mode
[  321.779815][T16315] lo speed is unknown, defaulting to 1000
[  322.297128][T16303] batadv_slave_1: left promiscuous mode
[  322.359881][T16324] bridge0: failed insert local address into bridge forwarding table
[  322.523845][T16336] bond7: (slave macvlan3): Releasing active interface
[  322.541459][T16337] workqueue: Failed to create a rescuer kthread for wq "bond24": -EINTR
[  322.566040][T16336] team0: Mode changed to "broadcast"
[  322.574280][T16336] vlan0: entered promiscuous mode
[  323.514178][T16380] __nla_validate_parse: 11 callbacks suppressed
[  323.514196][T16380] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2922'.
[  323.533942][T16383] netlink: 'syz.0.2919': attribute type 10 has an invalid length.
[  323.537326][T16383] bond0: (slave wlan1): refused to change device type
[  323.619340][T16385] netlink: 'syz.2.2923': attribute type 1 has an invalid length.
[  323.645963][T16386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2923'.
[  323.669400][T16385] lo speed is unknown, defaulting to 1000
[  323.704973][   T55] Bluetooth: hci2: link tx timeout
[  323.708311][   T55] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  323.712944][   T55] Bluetooth: hci2: link tx timeout
[  323.714684][   T55] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  323.717680][T16386] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2923'.
[  323.724936][T16386] 8021q: adding VLAN 0 to HW filter on device bond24
[  323.887507][T16392] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  324.042652][T16398] lo speed is unknown, defaulting to 1000
[  324.341362][T16402] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2926'.
[  324.399502][T16405] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2928'.
[  324.460479][T16408] netlink: 'syz.2.2929': attribute type 1 has an invalid length.
[  324.474637][T16408] bond4: (slave vcan0): The slave device specified does not support setting the MAC address
[  324.482185][T16409] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  324.486603][T16408] bond4: (slave vcan0): Error -95 calling set_mac_address
[  324.502337][T16406] netlink: 'syz.0.2927': attribute type 1 has an invalid length.
[  324.526234][T16410] 8021q: adding VLAN 0 to HW filter on device bond4
[  324.605830][   T33] audit: type=1800 audit(1756905992.875:6): pid=16412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2930" name="blkio.bfq.time_recursive" dev="tmpfs" ino=5020 res=0 errno=0
[  324.705497][T16417] lo speed is unknown, defaulting to 1000
[  325.732217][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  325.961325][T16461] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2941'.
[  326.101645][T16464] lo speed is unknown, defaulting to 1000
[  326.109444][T16461] netlink: 'syz.0.2941': attribute type 12 has an invalid length.
[  326.134346][T16461] _Z`Ԁ@: entered promiscuous mode
[  326.284044][T16476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2946'.
[  326.304507][T16476] batman_adv: batadv0: Adding interface: ipvlan3
[  326.307115][T16476] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  326.317637][T16476] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active
[  326.457809][T16478] lo speed is unknown, defaulting to 1000
[  326.883961][T16494] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  326.912203][T16497] netlink: 'syz.2.2953': attribute type 1 has an invalid length.
[  326.914862][T16494] syzkaller0: entered promiscuous mode
[  326.919885][T16494] syzkaller0: entered allmulticast mode
[  326.925401][T16497] workqueue: Failed to create a rescuer kthread for wq "bond25": -EINTR
[  326.930535][T16504] xt_policy: too many policy elements
[  326.959923][T16494] tipc: Resetting bearer <eth:syzkaller0>
[  326.975997][T16492] tipc: Resetting bearer <eth:syzkaller0>
[  327.014155][T16492] tipc: Disabling bearer <eth:syzkaller0>
[  327.016843][T16507] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2955'.
[  327.266823][ T6215] IPVS: ip_vs_send_async error -101
[  363.971774][T16517] batadv_slave_0: entered promiscuous mode
[  363.986925][T16521] netlink: 'syz.0.2959': attribute type 1 has an invalid length.
[  363.990029][T16521] netlink: 'syz.0.2959': attribute type 1 has an invalid length.
[  364.111522][ T5711] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  364.345555][T16541] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2963'.
[  365.060570][T16557] xt_time: invalid argument - start or stop time greater than 23:59:59
[  365.256768][T16564] netlink: 'syz.2.2968': attribute type 4 has an invalid length.
[  365.259267][T16564] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2968'.
[  365.275465][T16564] : renamed from bond0
[  365.361306][T16575] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2969'.
[  365.439884][T16579] netlink: 'syz.0.2974': attribute type 3 has an invalid length.
[  365.444146][T16579] netlink: 'syz.0.2974': attribute type 3 has an invalid length.
[  365.530369][T16587] bond0: (slave rose0): Error: Device can not be enslaved while up
[  365.533279][T16588] bond0: (slave rose0): Error: Device can not be enslaved while up
[  365.538663][T16587] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  365.541816][T16587] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  365.625003][T16591] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2977'.
[  365.769619][T16595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2979'.
[  366.061756][T16609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2983'.
[  366.076043][T16609] dummy0: left promiscuous mode
[  366.080935][T16609] batadv_slave_0: left promiscuous mode
[  366.106326][T16609] veth23: left promiscuous mode
[  366.110063][T16609] veth27: left promiscuous mode
[  366.216010][T16615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2985'.
[  367.095935][T16628] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2988'.
[  367.189827][T16630] lo speed is unknown, defaulting to 1000
[  367.360585][ T5880] nci: nci_rx_work: unknown MT 0x1
[  367.459573][T16651] dvmrp1: tun_chr_ioctl cmd 1074025677
[  367.462436][T16651] dvmrp1: linktype set to 773
[  367.465688][T16651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2991'.
[  368.079257][T16662] ip6tnl0: left promiscuous mode
[  368.081102][T16662] ip6tnl0: left allmulticast mode
[  368.086357][T16663] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2993'.
[  368.088037][T16662] veth0_to_bond: left allmulticast mode
[  368.094669][T16662] vlan0: left promiscuous mode
[  368.101680][T16662] geneve3: left promiscuous mode
[  368.107425][T16662] geneve3: left allmulticast mode
[  368.130656][T16662] veth9: left promiscuous mode
[  368.135700][T16662] bridge14: left promiscuous mode
[  368.158423][T16662] bridge16: left allmulticast mode
[  368.165586][T16662] geneve4: left promiscuous mode
[  368.167749][T16662] geneve4: left allmulticast mode
[  368.184019][T16662] bond21: left promiscuous mode
[  368.187482][T16662] ip6gre3: left allmulticast mode
[  368.209577][T16662] macsec4: left promiscuous mode
[  368.211832][T16662] macsec4: left allmulticast mode
[  368.220399][T16662] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  368.223761][T16662] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  368.226928][T16662] macsec5: left promiscuous mode
[  368.229097][T16662] macsec5: left allmulticast mode
[  368.244806][ T5916] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  368.254704][ T5916] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  368.257531][ T5916] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  368.260346][ T5916] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  368.264421][T16666] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  368.282442][ T5916] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  368.285721][ T5916] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  368.288854][ T5916] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  368.307133][ T5916] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  368.519395][T16685] netlink: 'syz.2.2997': attribute type 8 has an invalid length.
[  368.617449][T16691] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  368.713823][T16693] lo speed is unknown, defaulting to 1000
[  368.902114][T16702] delete_channel: no stack
[  368.911555][T16702] bpq0: left promiscuous mode
[  369.052763][T16706] netlink: 'syz.0.3004': attribute type 1 has an invalid length.
[  369.106204][T16706] vlan7: entered allmulticast mode
[  369.108270][T16706] bond24: entered allmulticast mode
[  369.471816][T16719] __nla_validate_parse: 7 callbacks suppressed
[  369.471843][T16719] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3007'.
[  369.520644][T16721] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3008'.
[  369.542746][T16721] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3008'.
[  369.677285][T16731] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3012'.
[  369.697482][T16733] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3011'.
[  369.706904][T16733] openvswitch: netlink: Flow key attr not present in new flow.
[  369.729902][T16734] xt_HMARK: spi-set and port-set can't be combined
[  369.941248][T16750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3017'.
[  369.944287][T16750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3017'.
[  370.117017][T16762] lo speed is unknown, defaulting to 1000
[  370.215268][T16767] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3021'.
[  370.344210][T16769] netlink: 'syz.2.3022': attribute type 2 has an invalid length.
[  370.374114][T16769] : entered promiscuous mode
[  370.378968][T16769] netlink: 'syz.2.3022': attribute type 21 has an invalid length.
[  370.382312][T16769] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3022'.
[  370.422666][T16763] netlink: 'syz.0.3019': attribute type 2 has an invalid length.
[  370.543666][T16774] lo speed is unknown, defaulting to 1000
[  370.589737][T16777] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  370.678970][T16781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3025'.
[  371.270910][T16801] macvtap1: entered promiscuous mode
[  371.273361][T16801] mac80211_hwsim hwsim31 wlan1: entered promiscuous mode
[  371.494813][T16821] netlink: 'syz.0.3034': attribute type 2 has an invalid length.
[  371.657472][T16823] lo speed is unknown, defaulting to 1000
[  371.727449][T16832] netlink: 'syz.0.3038': attribute type 1 has an invalid length.
[  372.652031][T16850] netlink: 'syz.1.3044': attribute type 1 has an invalid length.
[  372.739375][T16850] veth13: entered promiscuous mode
[  372.908199][T16859] netlink: 'syz.0.3047': attribute type 3 has an invalid length.
[  372.917564][T16859] ip6tnl0: entered allmulticast mode
[  372.972958][T16858] ip6tnl0: left allmulticast mode
[  373.489184][T16880] tipc: Resetting bearer <eth:team0>
[  373.498287][T16880] vlan0: entered promiscuous mode
[  373.501598][T16880] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  373.857257][T16886] netlink: 'syz.1.3053': attribute type 1 has an invalid length.
[  373.863353][T16888] bond4: (slave vcan0): The slave device specified does not support setting the MAC address
[  373.867695][T16888] bond4: (slave vcan0): Error -95 calling set_mac_address
[  373.880747][T16886] netlink: 'syz.1.3053': attribute type 1 has an invalid length.
[  373.930253][T16888] bond4: (slave vcan0): The slave device specified does not support setting the MAC address
[  373.945928][T16888] bond4: (slave vcan0): Error -95 calling set_mac_address
[  374.425633][T16942] lo speed is unknown, defaulting to 1000
[  374.994139][T16957] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  375.363029][T16968] lo speed is unknown, defaulting to 1000
[  375.441568][T16969] validate_nla: 31 callbacks suppressed
[  375.441580][T16969] netlink: 'syz.2.3071': attribute type 1 has an invalid length.
[  375.446781][T16969] __nla_validate_parse: 17 callbacks suppressed
[  375.446795][T16969] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3071'.
[  375.776607][T16978] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3073'.
[  375.927982][T16982] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  376.344255][T16991] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  376.389949][T16996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3076'.
[  376.395930][T16997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3076'.
[  376.674035][T17000] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  376.677251][T17000] syzkaller0: entered promiscuous mode
[  376.679601][T17000] syzkaller0: entered allmulticast mode
[  376.706119][T17000] tipc: Resetting bearer <eth:syzkaller0>
[  376.710407][T16999] tipc: Resetting bearer <eth:syzkaller0>
[  376.724246][T16999] tipc: Disabling bearer <eth:syzkaller0>
[  376.816944][T17006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3079'.
[  376.821208][T17006] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3079'.
[  376.971263][T17015] netlink: 'syz.0.3082': attribute type 1 has an invalid length.
[  377.087328][T17022] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3084'.
[  377.099874][T17023] netlink: 'syz.0.3083': attribute type 13 has an invalid length.
[  377.138926][T17023] lo speed is unknown, defaulting to 1000
[  377.186264][T17026] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3085'.
[  377.191415][T17026] openvswitch: netlink: IPv4 tun info is not correct
[  377.239757][T17026] lo speed is unknown, defaulting to 1000
[  377.822719][T17043] lo speed is unknown, defaulting to 1000
[  377.938039][T17047] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3090'.
[  378.220848][T17065] gtp0: entered promiscuous mode
[  378.339119][T17071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3094'.
[  379.860058][T17127] netlink: 'syz.0.3107': attribute type 1 has an invalid length.
[  379.925430][T17128] lo speed is unknown, defaulting to 1000
[  380.129588][T17136] syzkaller0: entered promiscuous mode
[  380.135258][T17136] syzkaller0: entered allmulticast mode
[  380.409030][T17151] pim6reg: entered allmulticast mode
[  380.417409][T17151] pim6reg: left allmulticast mode
[  380.469686][T17157] __nla_validate_parse: 8 callbacks suppressed
[  380.469704][T17157] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3115'.
[  380.829576][T17173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3120'.
[  380.834995][T17173] openvswitch: netlink: Missing key (keys=40, expected=100)
[  380.846819][T17174] lo speed is unknown, defaulting to 1000
[  380.939254][T17178] lo speed is unknown, defaulting to 1000
[  381.332064][ T6215] IPVS: ip_vs_send_async error -101
[  381.412584][T17207] netlink: 'syz.1.3128': attribute type 1 has an invalid length.
[  381.669923][T17227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3131'.
[  381.840372][T17236] netlink: 'syz.2.3135': attribute type 3 has an invalid length.
[  381.869583][T17236] ip6_vti0: entered allmulticast mode
[  381.909440][T17236] 8021q: adding VLAN 0 to HW filter on device 
[  381.931056][T17236] 8021q: adding VLAN 0 to HW filter on device team0
[  381.954152][T17236] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  381.968128][T17234] ip6_vti0: left allmulticast mode
[  382.050641][T17244] lo speed is unknown, defaulting to 1000
[  382.275802][T17244] netlink: 'syz.2.3137': attribute type 2 has an invalid length.
[  382.284558][T17244] netlink: 'syz.2.3137': attribute type 2 has an invalid length.
[  382.288030][T17244] netlink: 'syz.2.3137': attribute type 1 has an invalid length.
[  382.291443][T17244] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3137'.
[  382.433852][T17249] netlink: 'syz.2.3138': attribute type 10 has an invalid length.
[  382.437111][T17249] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3138'.
[  382.440662][T17249] dummy0: entered promiscuous mode
[  382.444413][T17249] bridge0: port 1(dummy0) entered blocking state
[  382.447235][T17249] bridge0: port 1(dummy0) entered disabled state
[  382.449947][T17249] dummy0: entered allmulticast mode
[  382.453260][T17249] dummy0: left allmulticast mode
[  382.455151][T17249] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  382.588148][T17255] syzkaller1: entered allmulticast mode
[  382.932093][T17261] nbd5: detected capacity change from 0 to 127
[  382.940986][   T57] block nbd5: Receive control failed (result -32)
[  382.986854][T17262] delete_channel: no stack
[  383.078641][T17268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3145'.
[  383.192979][T17276] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3147'.
[  383.238026][T17278] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3148'.
[  383.242787][T17278] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3148'.
[  383.345249][T17283] netlink: 'syz.1.3150': attribute type 8 has an invalid length.
[  383.370388][T17283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3150'.
[  383.501431][T17296] netlink: 'syz.0.3152': attribute type 13 has an invalid length.
[  383.505295][T17296] netlink: 'syz.0.3152': attribute type 17 has an invalid length.
[  383.564241][T17296] 8021q: adding VLAN 0 to HW filter on device team0
[  383.568999][T17296] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  383.585330][T17297] netlink: 'syz.2.3155': attribute type 29 has an invalid length.
[  383.607021][T17304] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  383.668407][T17302] lo speed is unknown, defaulting to 1000
[  383.671294][T17310] syzkaller1: entered promiscuous mode
[  383.674953][T17310] syzkaller1: entered allmulticast mode
[  384.216247][T17339] bridge14: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  384.467167][T17363] sctp: [Deprecated]: syz.2.3173 (pid 17363) Use of int in maxseg socket option.
[  384.467167][T17363] Use struct sctp_assoc_value instead
[  384.497934][T17367] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2)
[  384.848949][T17379] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  384.853384][T17379] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  385.647056][T17411] __nla_validate_parse: 16 callbacks suppressed
[  385.647072][T17411] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3189'.
[  385.830155][T17422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3192'.
[  385.850789][T17426] ip6_vti0: entered allmulticast mode
[  385.949449][T17421] ip6_vti0: left allmulticast mode
[  386.069266][T17444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3197'.
[  386.086116][T17448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3196'.
[  386.159596][T17453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3199'.
[  386.218543][T17453] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3199'.
[  386.228036][T17458] pim6reg1: entered promiscuous mode
[  386.230478][T17458] pim6reg1: entered allmulticast mode
[  386.299834][T17460] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3200'.
[  386.354226][T17458] 8021q: adding VLAN 0 to HW filter on device bond0
[  386.360629][T17458] team0: Port device bond0 added
[  386.363950][T17463] "syz.0.3201" (17463) uses obsolete ecb(arc4) skcipher
[  386.448456][T17468] validate_nla: 7 callbacks suppressed
[  386.448473][T17468] netlink: 'syz.2.3203': attribute type 2 has an invalid length.
[  386.457085][T17468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3203'.
[  386.478987][T17474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3204'.
[  386.487507][T17474] netlink: 'syz.0.3204': attribute type 30 has an invalid length.
[  386.490854][T17474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3204'.
[  386.584200][T17478] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  386.672742][T17484] netlink: 'syz.1.3209': attribute type 9 has an invalid length.
[  386.719560][T17490] netlink: 'syz.2.3212': attribute type 1 has an invalid length.
[  386.796781][T17498] netlink: 'syz.0.3214': attribute type 7 has an invalid length.
[  386.901116][T17503] netlink: 'syz.0.3217': attribute type 1 has an invalid length.
[  386.905817][T17504] netlink: 'syz.0.3217': attribute type 1 has an invalid length.
[  386.932858][T17503] 8021q: adding VLAN 0 to HW filter on device bond25
[  387.595107][T17522] netlink: 'syz.1.3221': attribute type 3 has an invalid length.
[  389.660785][T17499] Set syz1 is full, maxelem 65536 reached
[  390.330705][T17582] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.399359][T17582] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.468927][T17587] nbd: must specify a size in bytes for the device
[  390.468977][T17582] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.471463][T17587] nbd: couldn't find device at index 0
[  390.520128][T17582] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.558325][T17591] netlink: 'syz.0.3241': attribute type 12 has an invalid length.
[  390.600292][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  390.620633][T11846] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  390.652839][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  390.657134][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  390.678564][T17593] lo speed is unknown, defaulting to 1000
[  390.692280][ T6215] IPVS: ip_vs_send_async error -101
[  390.743132][T17597] __nla_validate_parse: 15 callbacks suppressed
[  390.743157][T17597] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3243'.
[  390.954827][T17607] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3247'.
[  391.041656][T17612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3249'.
[  391.345470][T17624] netlink: 'syz.0.3251': attribute type 30 has an invalid length.
[  391.688068][T17646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3258'.
[  391.692457][T17646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3258'.
[  391.705391][T17646] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  391.719060][T17645] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3258'.
[  391.757371][T17651] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3260'.
[  391.776384][T17643] tipc: Resetting bearer <eth:syzkaller0>
[  391.796576][T17643] tipc: Disabling bearer <eth:syzkaller0>
[  391.885881][T17658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3261'.
[  391.944958][T17663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3263'.
[  391.979833][T17666] netlink: 'syz.1.3264': attribute type 4 has an invalid length.
[  391.997726][  T793] lo speed is unknown, defaulting to 1000
[  392.000105][  T793] syz1: Port: 1 Link DOWN
[  392.006245][T17666] netlink: 'syz.1.3264': attribute type 4 has an invalid length.
[  392.014995][  T793] lo speed is unknown, defaulting to 1000
[  392.017453][  T793] syz1: Port: 1 Link ACTIVE
[  392.040613][T17669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3265'.
[  392.497987][T17685] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  392.606889][T17690] netlink: 'syz.2.3272': attribute type 1 has an invalid length.
[  392.612835][T17690] netlink: 'syz.2.3272': attribute type 1 has an invalid length.
[  392.616009][T17690] netlink: 'syz.2.3272': attribute type 1 has an invalid length.
[  392.619185][T17690] netlink: 'syz.2.3272': attribute type 1 has an invalid length.
[  392.626629][T17690] netlink: 'syz.2.3272': attribute type 1 has an invalid length.
[  392.670204][T17697] syzkaller0: entered promiscuous mode
[  392.673734][T17697] syzkaller0: entered allmulticast mode
[  392.786615][T17703] netlink: 'syz.2.3275': attribute type 1 has an invalid length.
[  393.048242][T17715] netlink: 'syz.2.3279': attribute type 10 has an invalid length.
[  393.049157][T17717] tipc: Enabled bearer <eth:gre0>, priority 10
[  393.080728][T17715] 8021q: adding VLAN 0 to HW filter on device team0
[  393.099025][T17718] netlink: 'syz.2.3279': attribute type 10 has an invalid length.
[  393.190829][T17715] lo speed is unknown, defaulting to 1000
[  393.197096][T17727] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  393.232685][T17726] syzkaller0: entered promiscuous mode
[  393.244840][T17726] syzkaller0: entered allmulticast mode
[  393.290010][T17732] ip6tnl3: entered promiscuous mode
[  393.302170][T17725] tipc: Resetting bearer <eth:syzkaller0>
[  393.345032][T17725] tipc: Disabling bearer <eth:syzkaller0>
[  393.995852][T17763] erspan0: entered allmulticast mode
[  394.061617][T17769] tipc: Resetting bearer <eth:gre0>
[  394.081248][T17769] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  394.094164][T17762] erspan0: left allmulticast mode
[  394.198525][T17778] 8021q: adding VLAN 0 to HW filter on device bond26
[  394.214556][T17778] veth12: entered promiscuous mode
[  394.216883][T17778] veth12: entered allmulticast mode
[  394.583079][T17812] lo speed is unknown, defaulting to 1000
[  394.751466][T17828] Unsupported ieee802154 address type: 0
[  395.120457][T17845] batman_adv: batadv0: Removing interface: ipvlan3
[  395.240659][T17853] batman_adv: batadv0: Adding interface: ip6gretap3
[  395.243709][T17853] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  395.255551][T17853] batman_adv: batadv0: Interface activated: ip6gretap3
[  395.286131][T17847] lo speed is unknown, defaulting to 1000
[  395.317957][T17854] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  395.509646][T17863] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  395.908591][T17882] batadv_slave_1: entered promiscuous mode
[  395.927656][T17882] batadv_slave_1: left promiscuous mode
[  396.164178][T17902] __nla_validate_parse: 17 callbacks suppressed
[  396.164193][T17902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3325'.
[  396.225451][T17905] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3323'.
[  396.359822][T17912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3326'.
[  396.490562][T17919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3330'.
[  396.510166][T17919] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.3330'.
[  396.954407][T17952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3337'.
[  396.966661][T17952] xfrm2: entered promiscuous mode
[  396.968931][T17952] xfrm2: entered allmulticast mode
[  397.028818][T17956] IPVS: Scheduler module ip_vs_sip not found
[  397.060476][T17955] IPVS: Scheduler module ip_vs_sip not found
[  397.257210][T17972] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3343'.
[  397.263459][T17972] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  397.399602][T17978] validate_nla: 5 callbacks suppressed
[  397.399616][T17978] netlink: 'syz.2.3346': attribute type 2 has an invalid length.
[  397.411217][T17978] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  397.633520][T17988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3348'.
[  397.637292][T17988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3348'.
[  397.688431][T17994] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3347'.
[  398.767567][T18037] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4
[  398.771117][T18037] gretap4: entered promiscuous mode
[  398.840540][T18050] lo speed is unknown, defaulting to 1000
[  398.991730][T18064] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  399.190510][T18084] netlink: 'syz.1.3372': attribute type 1 has an invalid length.
[  399.301790][T18090] lo speed is unknown, defaulting to 1000
[  399.906527][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  400.010367][T18103] lo speed is unknown, defaulting to 1000
[  400.226114][T18139] netlink: 'syz.1.3385': attribute type 21 has an invalid length.
[  400.234507][T18139] netlink: 'syz.1.3385': attribute type 22 has an invalid length.
[  400.237835][T18139] netlink: 'syz.1.3385': attribute type 23 has an invalid length.
[  400.240988][T18139] netlink: 'syz.1.3385': attribute type 25 has an invalid length.
[  400.248165][T18140] netlink: 'syz.2.3382': attribute type 6 has an invalid length.
[  401.040083][T18164] netlink: 'syz.2.3390': attribute type 1 has an invalid length.
[  401.043971][T18164] IPVS: stopping backup sync thread 15965 ...
[  401.068377][T18166] sctp: [Deprecated]: syz.0.3391 (pid 18166) Use of int in max_burst socket option.
[  401.068377][T18166] Use struct sctp_assoc_value instead
[  401.179094][T18172] __nla_validate_parse: 17 callbacks suppressed
[  401.179110][T18172] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3394'.
[  401.186203][T18175] netlink: 'syz.0.3395': attribute type 12 has an invalid length.
[  401.188807][T18175] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3395'.
[  401.458823][T18185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3399'.
[  401.545202][T18191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3402'.
[  401.550840][ T5711] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  401.551007][T18191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3402'.
[  401.557453][ T5711] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  401.564518][ T5711] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  401.568327][ T5711] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  401.568359][T18188] netlink: 'syz.0.3400': attribute type 21 has an invalid length.
[  401.592173][T18188] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3400'.
[  401.608726][T18188] lo speed is unknown, defaulting to 1000
[  401.637210][T18193] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3403'.
[  402.546035][T18255] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3419'.
[  402.599588][T18258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3420'.
[  402.657290][T18264] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3422'.
[  402.845987][T18274] lo speed is unknown, defaulting to 1000
[  403.037377][T18291] sctp: [Deprecated]: syz.1.3430 (pid 18291) Use of int in max_burst socket option.
[  403.037377][T18291] Use struct sctp_assoc_value instead
[  403.349771][T18320] 8021q: VLANs not supported on gre0
[  403.564165][T18333] validate_nla: 4 callbacks suppressed
[  403.564181][T18333] netlink: 'syz.2.3440': attribute type 10 has an invalid length.
[  403.570948][T18333] bridge0: port 1(dummy0) entered blocking state
[  403.578959][T18333] bridge0: port 1(dummy0) entered disabled state
[  403.583879][T18333] dummy0: entered allmulticast mode
[  403.588304][T18333] dummy0: left allmulticast mode
[  403.591219][T18333] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  403.713249][T18345] ip6tnl0: entered allmulticast mode
[  403.741122][T18345] dvmrp8: entered allmulticast mode
[  403.820481][T18345] ip6tnl0: left allmulticast mode
[  403.826418][T18345] dvmrp8: left allmulticast mode
[  403.965617][T18361] lo speed is unknown, defaulting to 1000
[  404.455109][T18377] netlink: 'syz.0.3454': attribute type 10 has an invalid length.
[  404.458024][T18377] dummy0: entered promiscuous mode
[  404.460529][T18377] bridge0: port 1(dummy0) entered blocking state
[  404.464986][T18377] bridge0: port 1(dummy0) entered disabled state
[  405.459424][T18419] dummy0: left promiscuous mode
[  405.471256][T18419] tipc: Resetting bearer <eth:syzkaller0>
[  405.473899][T18419] syzkaller0: left promiscuous mode
[  405.475708][T18419] syzkaller0: left allmulticast mode
[  405.486581][T18419] team0: Port device bond0 removed
[  405.489591][T18419] batman_adv: batadv0: Interface deactivated: ip6gretap3
[  405.494262][T18419] batman_adv: batadv0: Removing interface: ip6gretap3
[  405.506686][   T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  405.509317][   T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  405.521839][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  405.525286][   T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  405.821636][T18445] nbd: must specify a size in bytes for the device
[  406.059181][T18450] sctp: [Deprecated]: syz.1.3471 (pid 18450) Use of struct sctp_assoc_value in delayed_ack socket option.
[  406.059181][T18450] Use struct sctp_sack_info instead
[  406.427663][T18455] __nla_validate_parse: 17 callbacks suppressed
[  406.427682][T18455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3472'.
[  406.439928][T18455] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3472'.
[  406.675162][T18466] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3475'.
[  406.706013][T18468] tipc: Resetting bearer <eth:team0>
[  406.711652][T18468] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  406.919005][T18472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3478'.
[  407.177189][T18500] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  407.246427][T18500] batadv_slave_0: entered promiscuous mode
[  407.251241][T18500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3485'.
[  407.407833][T18511] lo speed is unknown, defaulting to 1000
[  407.490973][T18519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3490'.
[  407.521456][T18515] macsec3: entered promiscuous mode
[  407.526295][T18515] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  407.529867][T18515] macsec3: entered allmulticast mode
[  407.534651][T18515] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  407.707269][T18527] syzkaller1: entered promiscuous mode
[  407.708959][T18527] syzkaller1: entered allmulticast mode
[  407.728615][T18511] sctp: [Deprecated]: syz.1.3488 (pid 18511) Use of int in max_burst socket option deprecated.
[  407.728615][T18511] Use struct sctp_assoc_value instead
[  408.080058][T18541] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  408.088670][T18544] netlink: 844 bytes leftover after parsing attributes in process `syz.1.3496'.
[  408.098415][T18541] syzkaller0: entered promiscuous mode
[  408.100680][T18541] syzkaller0: entered allmulticast mode
[  408.133948][T18544] netlink: 'syz.1.3496': attribute type 3 has an invalid length.
[  408.177962][T18544] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3496'.
[  408.325407][T18557] ==================================================================
[  408.328873][T18557] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0xe21/0xf30
[  408.332220][T18557] Write of size 8 at addr ffff888108f089a0 by task syz.0.3499/18557
[  408.336430][T18557] 
[  408.337892][T18557] CPU: 1 UID: 0 PID: 18557 Comm: syz.0.3499 Not tainted syzkaller #0 PREEMPT(full) 
[  408.337911][T18557] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  408.337922][T18557] Call Trace:
[  408.337929][T18557]  <TASK>
[  408.337937][T18557]  dump_stack_lvl+0x189/0x250
[  408.337961][T18557]  ? __kasan_check_byte+0x12/0x40
[  408.337985][T18557]  ? __pfx_dump_stack_lvl+0x10/0x10
[  408.338003][T18557]  ? lock_release+0x4b/0x3e0
[  408.338028][T18557]  ? __virt_addr_valid+0x4a5/0x5c0
[  408.338047][T18557]  print_report+0xca/0x240
[  408.338060][T18557]  ? xfrm_alloc_spi+0xe21/0xf30
[  408.338074][T18557]  kasan_report+0x118/0x150
[  408.338096][T18557]  ? xfrm_alloc_spi+0xe21/0xf30
[  408.338146][T18557]  xfrm_alloc_spi+0xe21/0xf30
[  408.338164][T18557]  ? xfrm_alloc_spi+0x2a0/0xf30
[  408.338185][T18557]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  408.338201][T18557]  ? xfrm_find_acq+0x87/0xa0
[  408.338226][T18557]  xfrm_alloc_userspi+0x70b/0xc90
[  408.338252][T18557]  ? apparmor_capable+0x137/0x1b0
[  408.338270][T18557]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  408.338287][T18557]  ? __nla_parse+0x40/0x60
[  408.338311][T18557]  xfrm_user_rcv_msg+0x7a3/0xab0
[  408.338330][T18557]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  408.338358][T18557]  ? __pfx___mutex_trylock_common+0x10/0x10
[  408.338375][T18557]  ? rcu_is_watching+0x15/0xb0
[  408.338388][T18557]  ? trace_contention_end+0x39/0x120
[  408.338402][T18557]  ? __mutex_lock+0x335/0x1350
[  408.338426][T18557]  netlink_rcv_skb+0x208/0x470
[  408.338448][T18557]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  408.338466][T18557]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  408.338493][T18557]  ? netlink_deliver_tap+0x2e/0x1b0
[  408.338513][T18557]  ? netlink_deliver_tap+0x2e/0x1b0
[  408.338533][T18557]  xfrm_netlink_rcv+0x79/0x90
[  408.338550][T18557]  netlink_unicast+0x82f/0x9e0
[  408.338570][T18557]  ? __pfx_netlink_unicast+0x10/0x10
[  408.338588][T18557]  ? netlink_sendmsg+0x642/0xb30
[  408.338607][T18557]  ? skb_put+0x11b/0x210
[  408.338621][T18557]  netlink_sendmsg+0x805/0xb30
[  408.338644][T18557]  ? __pfx_netlink_sendmsg+0x10/0x10
[  408.338664][T18557]  ? aa_sock_msg_perm+0xf1/0x1d0
[  408.338677][T18557]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  408.338692][T18557]  ? __pfx_netlink_sendmsg+0x10/0x10
[  408.338712][T18557]  __sock_sendmsg+0x21c/0x270
[  408.338730][T18557]  ____sys_sendmsg+0x505/0x830
[  408.338746][T18557]  ? __pfx_____sys_sendmsg+0x10/0x10
[  408.338763][T18557]  ? import_iovec+0x74/0xa0
[  408.338780][T18557]  ___sys_sendmsg+0x21f/0x2a0
[  408.338795][T18557]  ? __pfx____sys_sendmsg+0x10/0x10
[  408.338821][T18557]  ? __fget_files+0x2a/0x420
[  408.338840][T18557]  ? __fget_files+0x3a0/0x420
[  408.338863][T18557]  __x64_sys_sendmsg+0x19b/0x260
[  408.338878][T18557]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  408.338896][T18557]  ? rcu_is_watching+0x15/0xb0
[  408.338912][T18557]  ? do_syscall_64+0xbe/0x3b0
[  408.338925][T18557]  do_syscall_64+0xfa/0x3b0
[  408.338936][T18557]  ? lockdep_hardirqs_on+0x9c/0x150
[  408.338954][T18557]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.338968][T18557]  ? exc_page_fault+0x9f/0xf0
[  408.338988][T18557]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.339003][T18557] RIP: 0033:0x7fd41a38ebe9
[  408.339018][T18557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  408.339032][T18557] RSP: 002b:00007fd4185f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  408.339049][T18557] RAX: ffffffffffffffda RBX: 00007fd41a5c5fa0 RCX: 00007fd41a38ebe9
[  408.339060][T18557] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003
[  408.339070][T18557] RBP: 00007fd41a411e19 R08: 0000000000000000 R09: 0000000000000000
[  408.339080][T18557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  408.339089][T18557] R13: 00007fd41a5c6038 R14: 00007fd41a5c5fa0 R15: 00007ffe3c1f80b8
[  408.339107][T18557]  </TASK>
[  408.339146][T18557] 
[  408.377822][T18552] ip6gre1: entered allmulticast mode
[  408.379451][T18557] Allocated by task 18222:
[  408.379463][T18557]  kasan_save_track+0x3e/0x80
[  408.379488][T18557]  __kasan_kmalloc+0x93/0xb0
[  408.379506][T18557]  __kmalloc_noprof+0x27a/0x4f0
[  408.379526][T18557]  tomoyo_encode+0x28b/0x550
[  408.501650][T18557]  tomoyo_realpath_from_path+0x58d/0x5d0
[  408.503951][T18557]  tomoyo_path_perm+0x213/0x4b0
[  408.505950][T18557]  tomoyo_path_symlink+0xa3/0xe0
[  408.507973][T18557]  security_path_symlink+0x177/0x380
[  408.510134][T18557]  do_symlinkat+0x107/0x3f0
[  408.511979][T18557]  __x64_sys_symlinkat+0x95/0xb0
[  408.513968][T18557]  do_syscall_64+0xfa/0x3b0
[  408.515839][T18557]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.518229][T18557] 
[  408.519308][T18557] Freed by task 18222:
[  408.520902][T18557]  kasan_save_track+0x3e/0x80
[  408.522867][T18557]  kasan_save_free_info+0x46/0x50
[  408.524913][T18557]  __kasan_slab_free+0x5b/0x80
[  408.526860][T18557]  kfree+0x18e/0x440
[  408.528474][T18557]  tomoyo_path_perm+0x3a2/0x4b0
[  408.530452][T18557]  tomoyo_path_symlink+0xa3/0xe0
[  408.532448][T18557]  security_path_symlink+0x177/0x380
[  408.534599][T18557]  do_symlinkat+0x107/0x3f0
[  408.536471][T18557]  __x64_sys_symlinkat+0x95/0xb0
[  408.538497][T18557]  do_syscall_64+0xfa/0x3b0
[  408.540344][T18557]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.542737][T18557] 
[  408.543734][T18557] The buggy address belongs to the object at ffff888108f08980
[  408.543734][T18557]  which belongs to the cache kmalloc-64 of size 64
[  408.549334][T18557] The buggy address is located 32 bytes inside of
[  408.549334][T18557]  freed 64-byte region [ffff888108f08980, ffff888108f089c0)
[  408.554813][T18557] 
[  408.555828][T18557] The buggy address belongs to the physical page:
[  408.558451][T18557] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888108f08900 pfn:0x108f08
[  408.562683][T18557] flags: 0x57ff00000000200(workingset|node=1|zone=2|lastcpupid=0x7ff)
[  408.565914][T18557] page_type: f5(slab)
[  408.567683][T18557] raw: 057ff00000000200 ffff88801a4418c0 ffffea000412ad90 ffffea00041ab310
[  408.571146][T18557] raw: ffff888108f08900 000000000020001d 00000000f5000000 0000000000000000
[  408.574655][T18557] page dumped because: kasan: bad access detected
[  408.577296][T18557] page_owner tracks the page as allocated
[  408.579602][T18557] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 53, tgid 53 (kworker/u10:3), ts 10438543996, free_ts 10438533216
[  408.587300][T18557]  post_alloc_hook+0x240/0x2a0
[  408.589270][T18557]  get_page_from_freelist+0x21e4/0x22c0
[  408.591619][T18557]  __alloc_frozen_pages_noprof+0x181/0x370
[  408.594032][T18557]  alloc_pages_mpol+0x232/0x4a0
[  408.596170][T18557]  allocate_slab+0x8a/0x370
[  408.598052][T18557]  ___slab_alloc+0xbeb/0x1410
[  408.599960][T18557]  __kmalloc_node_noprof+0x2fd/0x4e0
[  408.601871][T18557]  __vmalloc_node_range_noprof+0x5a9/0x12f0
[  408.603640][T18557]  __vmalloc_node_noprof+0xc2/0x110
[  408.605320][T18557]  dup_task_struct+0x3e7/0x860
[  408.607006][T18557]  copy_process+0x54b/0x3c00
[  408.608692][T18557]  kernel_clone+0x21e/0x840
[  408.610135][T18557]  user_mode_thread+0xdd/0x140
[  408.611678][T18557]  call_usermodehelper_exec_work+0x5c/0x230
[  408.613667][T18557]  process_scheduled_works+0xae1/0x17b0
[  408.615876][T18557]  worker_thread+0x8a0/0xda0
[  408.617651][T18557] page last free pid 53 tgid 53 stack trace:
[  408.619538][T18557]  __free_frozen_pages+0xbc4/0xd30
[  408.621170][T18557]  kasan_populate_vmalloc+0x18a/0x1a0
[  408.622877][T18557]  alloc_vmap_area+0xd51/0x1490
[  408.624663][T18557]  __get_vm_area_node+0x1f8/0x300
[  408.626271][T18557]  __vmalloc_node_range_noprof+0x301/0x12f0
[  408.628112][T18557]  __vmalloc_node_noprof+0xc2/0x110
[  408.629755][T18557]  dup_task_struct+0x3e7/0x860
[  408.631285][T18557]  copy_process+0x54b/0x3c00
[  408.632746][T18557]  kernel_clone+0x21e/0x840
[  408.634337][T18557]  user_mode_thread+0xdd/0x140
[  408.635923][T18557]  call_usermodehelper_exec_work+0x5c/0x230
[  408.637790][T18557]  process_scheduled_works+0xae1/0x17b0
[  408.639527][T18557]  worker_thread+0x8a0/0xda0
[  408.640970][T18557]  kthread+0x711/0x8a0
[  408.642286][T18557]  ret_from_fork+0x3fc/0x770
[  408.643745][T18557]  ret_from_fork_asm+0x1a/0x30
[  408.645328][T18557] 
[  408.646083][T18557] Memory state around the buggy address:
[  408.647920][T18557]  ffff888108f08880: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  408.650518][T18557]  ffff888108f08900: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  408.653017][T18557] >ffff888108f08980: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  408.655729][T18557]                                ^
[  408.657354][T18557]  ffff888108f08a00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  408.659869][T18557]  ffff888108f08a80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[  408.662380][T18557] ==================================================================
[  408.665224][T18557] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  408.667489][T18557] CPU: 1 UID: 0 PID: 18557 Comm: syz.0.3499 Not tainted syzkaller #0 PREEMPT(full) 
[  408.670389][T18557] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  408.673543][T18557] Call Trace:
[  408.674638][T18557]  <TASK>
[  408.675545][T18557]  dump_stack_lvl+0x99/0x250
[  408.677055][T18557]  ? __asan_memcpy+0x40/0x70
[  408.678557][T18557]  ? __pfx_dump_stack_lvl+0x10/0x10
[  408.680205][T18557]  ? __pfx__printk+0x10/0x10
[  408.681701][T18557]  vpanic+0x281/0x750
[  408.682969][T18557]  ? __pfx_vpanic+0x10/0x10
[  408.684476][T18557]  ? irqentry_exit+0x74/0x90
[  408.685939][T18557]  panic+0xb9/0xc0
[  408.687142][T18557]  ? __pfx_panic+0x10/0x10
[  408.688562][T18557]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  408.690445][T18557]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  408.692329][T18557]  ? xfrm_alloc_spi+0xe21/0xf30
[  408.693971][T18557]  check_panic_on_warn+0x89/0xb0
[  408.695674][T18557]  ? xfrm_alloc_spi+0xe21/0xf30
[  408.697206][T18557]  end_report+0x78/0x160
[  408.698540][T18557]  kasan_report+0x129/0x150
[  408.699957][T18557]  ? xfrm_alloc_spi+0xe21/0xf30
[  408.701477][T18557]  xfrm_alloc_spi+0xe21/0xf30
[  408.702922][T18557]  ? xfrm_alloc_spi+0x2a0/0xf30
[  408.704431][T18557]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  408.706054][T18557]  ? xfrm_find_acq+0x87/0xa0
[  408.707521][T18557]  xfrm_alloc_userspi+0x70b/0xc90
[  408.709100][T18557]  ? apparmor_capable+0x137/0x1b0
[  408.710685][T18557]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  408.712427][T18557]  ? __nla_parse+0x40/0x60
[  408.713827][T18557]  xfrm_user_rcv_msg+0x7a3/0xab0
[  408.715411][T18557]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  408.717143][T18557]  ? __pfx___mutex_trylock_common+0x10/0x10
[  408.719023][T18557]  ? rcu_is_watching+0x15/0xb0
[  408.720551][T18557]  ? trace_contention_end+0x39/0x120
[  408.722229][T18557]  ? __mutex_lock+0x335/0x1350
[  408.723751][T18557]  netlink_rcv_skb+0x208/0x470
[  408.725320][T18557]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  408.727046][T18557]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  408.728733][T18557]  ? netlink_deliver_tap+0x2e/0x1b0
[  408.730604][T18557]  ? netlink_deliver_tap+0x2e/0x1b0
[  408.732742][T18557]  xfrm_netlink_rcv+0x79/0x90
[  408.734649][T18557]  netlink_unicast+0x82f/0x9e0
[  408.736622][T18557]  ? __pfx_netlink_unicast+0x10/0x10
[  408.738753][T18557]  ? netlink_sendmsg+0x642/0xb30
[  408.740533][T18557]  ? skb_put+0x11b/0x210
[  408.742180][T18557]  netlink_sendmsg+0x805/0xb30
[  408.744110][T18557]  ? __pfx_netlink_sendmsg+0x10/0x10
[  408.746111][T18557]  ? aa_sock_msg_perm+0xf1/0x1d0
[  408.748004][T18557]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  408.750108][T18557]  ? __pfx_netlink_sendmsg+0x10/0x10
[  408.752217][T18557]  __sock_sendmsg+0x21c/0x270
[  408.754106][T18557]  ____sys_sendmsg+0x505/0x830
[  408.756002][T18557]  ? __pfx_____sys_sendmsg+0x10/0x10
[  408.758113][T18557]  ? import_iovec+0x74/0xa0
[  408.759894][T18557]  ___sys_sendmsg+0x21f/0x2a0
[  408.761813][T18557]  ? __pfx____sys_sendmsg+0x10/0x10
[  408.763906][T18557]  ? __fget_files+0x2a/0x420
[  408.765765][T18557]  ? __fget_files+0x3a0/0x420
[  408.767667][T18557]  __x64_sys_sendmsg+0x19b/0x260
[  408.769645][T18557]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  408.771827][T18557]  ? rcu_is_watching+0x15/0xb0
[  408.773769][T18557]  ? do_syscall_64+0xbe/0x3b0
[  408.775664][T18557]  do_syscall_64+0xfa/0x3b0
[  408.777481][T18557]  ? lockdep_hardirqs_on+0x9c/0x150
[  408.779582][T18557]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.782020][T18557]  ? exc_page_fault+0x9f/0xf0
[  408.783933][T18557]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.786283][T18557] RIP: 0033:0x7fd41a38ebe9
[  408.787997][T18557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  408.795491][T18557] RSP: 002b:00007fd4185f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  408.798736][T18557] RAX: ffffffffffffffda RBX: 00007fd41a5c5fa0 RCX: 00007fd41a38ebe9
[  408.801171][T18557] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003
[  408.804159][T18557] RBP: 00007fd41a411e19 R08: 0000000000000000 R09: 0000000000000000
[  408.806452][T18557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  408.809011][T18557] R13: 00007fd41a5c6038 R14: 00007fd41a5c5fa0 R15: 00007ffe3c1f80b8
[  408.812412][T18557]  </TASK>
[  408.814283][T18557] Kernel Offset: disabled
[  408.815882][T18557] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:27:56  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffffff9034c901 RCX=fe0ea85ce0863600 RDX=ffffc900031ef801
RSI=ffffffff8be337e0 RDI=ffffffff8be337a0 RBP=dffffc0000000000 RSP=ffffc900031ef6b0
R8 =ffffc900031efd10 R9 =0000000000000000 R10=ffffc900031ef838 R11=fffff5200063df09
R12=ffffc900031efd20 R13=ffffffff8172c195 R14=ffffffff8e139ee0 R15=ffff888024945640
RIP=ffffffff819d6c29 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f3ef21a5380 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3ef2221440 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 000000000000ff00 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 000000000000ff00 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=00000000000003f9
RSI=0000000000001449 RDI=000000000000144a RBP=00000000000003f9 RSP=ffffc90002d5e9f0
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff854f38c0
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f393c RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd4185f66c0 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000580 CR3=000000012927c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fd41a597498 00007fd41a597470 XMM03=00007fd41a5974a8 00007fd41a5974a0
XMM04=00007fd41b0fd100 00007fd41a597460 XMM05=00007fd41a597478 00007fd41a5974c0
XMM06=00007fd41a5974b8 00007fd41a5974b0 XMM07=00007fd41a5974a8 00007fd41a5974a0
XMM08=0000000000000000 00007fd41a412ee7 XMM09=0000000000000000 00007fd41a412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
