last executing test programs:

1.131999077s ago: executing program 1 (id=3546):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0)
ioctl$PTP_CLOCK_GETCAPS(r1, 0x40043d14, &(0x7f0000000100))

1.062461927s ago: executing program 0 (id=3547):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000018c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="7d1068a421f05f384340d34be65ac0bbe7", 0x11)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10)
pselect6(0x40, &(0x7f0000000240)={0x40, 0x2, 0x6, 0x0, 0x23e, 0xff, 0x1, 0xffffffff80000000}, &(0x7f0000000300)={0x9, 0x3ff, 0x2, 0x3, 0xa3d, 0x5, 0x61a3, 0x8}, &(0x7f0000000340)={0x5, 0xffffffffffffffff, 0x40, 0x7, 0x6, 0xffffffffffff3850, 0x7fffffffffffffff, 0x7fffffffffffffff}, &(0x7f0000000ec0), &(0x7f0000000f40)={&(0x7f0000000f00)={[0x7ff]}, 0x8})

1.061627219s ago: executing program 1 (id=3548):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000005c0), 0x22080, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
read$alg(r1, &(0x7f0000000200)=""/96, 0x60)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write(r3, &(0x7f0000000700)="f574c3", 0x3)
splice(r3, &(0x7f0000000040), r2, 0x0, 0x6, 0x0)
ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000002740)={0x13})

1.061036419s ago: executing program 0 (id=3549):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0xa0, 0x5, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_HOOK={0x8c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'lo\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvlan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_vlan\x00'}]}]}, @NFT_MSG_DELSET={0x19c, 0xb, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_DESC={0x114, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_CONCAT={0x100, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2fc}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe59}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd9}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_SET_USERDATA={0x67, 0xd, 0x1, 0x0, "a552f309cc09e90ea74abe24766ff69b1afcb702a896a71be3331323dbd9c225fd61921acfea280441182d819ed9c871d24f1598589d145f06018e7c6a7d8f7d1aeb87c7d7681a337ea07c07ecda116c01533a15914adba9f5697bcd8e3da74c1b9e06"}]}], {0x14}}, 0x2c4}}, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x20104, 0x4, 0x1, 0x1}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r6, &(0x7f0000000040), 0x0}, 0x20)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000240)=ANY=[], 0xa)
ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x9)
tee(r2, r5, 0x8, 0xa)
splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0)
getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)

1.001045187s ago: executing program 1 (id=3550):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r1, 0x400454ce, 0xa)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240011030000000000000000010000000400"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r3, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000540)=""/4090, 0xffa}], 0x1}, 0xacd2}], 0x1, 0x10000, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'team0\x00', &(0x7f0000000300)=@ethtool_link_settings={0x4c, 0x0, 0xd6, 0xfb, 0x9, 0x7, 0x4, 0x8, 0x2, 0x3, [0x53e4, 0x8, 0xb, 0x1, 0x100, 0xfffffff8, 0xc, 0xa]}})
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0xe7})
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0)
ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000140)={'\x00', 0xfffffffe})

892.467674ms ago: executing program 1 (id=3551):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xffffff34, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b0400000000000000000200000034000480300001802b0001007461726765740000200002800a000100415544495400000005000300ef00000008000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x88}}, 0x0)

751.611368ms ago: executing program 1 (id=3555):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0)
ioctl$PTP_CLOCK_GETCAPS(r1, 0x40043d14, &(0x7f0000000100))

751.17151ms ago: executing program 1 (id=3556):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x2204}, {r0, 0x4408}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x50}, {0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x8004}, {r0, 0x4008}, {0xffffffffffffffff, 0x7ad4400ff763c544}], 0x9, &(0x7f0000000080)={0x77359400}, &(0x7f0000000240)={[0x5]}, 0x8)
r1 = socket$inet6(0xa, 0x3, 0x3a)
recvfrom$inet6(r1, 0x0, 0x0, 0x10020, 0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f0000000000)={0xa, 0x0, 0x2, @mcast2, 0x9}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e75", 0x5}], 0x1}}], 0x1, 0x40000000)
socket(0x8, 0x80000, 0x7)

527.292858ms ago: executing program 2 (id=3562):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x2, 0xfff1}, {0xfff1, 0xffff}, {0x6}}, [@TCA_RATE={0x6, 0x5, {0xf7, 0x9}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffffffdf}]}, 0x34}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xf0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)

431.846976ms ago: executing program 2 (id=3563):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0)
ioctl$PTP_CLOCK_GETCAPS(r0, 0x40043d14, &(0x7f0000000100))

431.280565ms ago: executing program 2 (id=3564):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000380)=@ethtool_gfeatures})

362.44449ms ago: executing program 2 (id=3565):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x80)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000002}, 0x800)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x1000}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0001000020696c250000000c002020207b1af8ff00", @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001a1401"], 0x20}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GCALLUSERDATA(r3, 0x89e4, &(0x7f0000000340)={0xa, "0b7bc4a66be01d5825dd3b428bdaf81b09d62f889492181e47d7269646925cdb075dd45359e35a9cbd51fce8bb183d7cf7eea59ad53af07495c7b68171c9c2d5a808db86ee05de1e2acc2e97e3f0b757ed60b955a13f2f689a21f1005f7b79ecae3ccc86fc68c316fec463eea99e929738164909273844b8b2f483812b953a3f"})
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb)
bind$ax25(r6, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]})
setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000))
recvmmsg(r6, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000bc0), 0x0, &(0x7f0000000480)=""/190, 0xbe}}], 0x1, 0x12143, &(0x7f0000000180)={0x0, 0x989680})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r8 = socket(0x2a, 0x2, 0x0)
sendto$isdn(r8, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x22, 0xff, 0x4, 0xd, 0x81}, 0x6)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14e2c71c7c160aa50000001000010000000000000000000000000a60000000060a0b0400000000000000000200000034000480300001800b0001007461726765740000200002800a000100415544495407000005000300ef00000024000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000800000000000a"], 0x88}}, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)

360.996219ms ago: executing program 2 (id=3566):
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)

292.11982ms ago: executing program 2 (id=3567):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="5c00000014006b03000000d86e6c1d000a117ea6e070d6060000000000004e23250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f62a64c9f4d49346d88037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40010042)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x12, 0x4, 0x40000, 0x4, {0x0, 0x0, 0x4a00, 0x0, 0x4, 0x20210}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x454a9}]}, 0x28}}, 0xc0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000200)='bridge0\x00')
getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c74657219a83fd2000000000000000000000000000000000000000000003000000062b2d836b14ee58c914910b5efa5a1b109adc964d102587ece4db3bf20ae174f09222f978b50dc8f93c921ea1ee971cc"], &(0x7f0000000080)=0x54)
r3 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10)
setsockopt$inet_tcp_int(r3, 0x6, 0x8, &(0x7f0000000400)=0xa7, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xd, &(0x7f0000000480)=@raw=[@alu={0x7, 0x0, 0x7, 0x7, 0x1, 0xffffffffffffffe0}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe66}, @tail_call, @alu={0x7, 0x1, 0x3, 0xb, 0xa, 0x10, 0xfffffffffffffffc}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xc}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9}], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
r4 = socket$kcm(0x29, 0x0, 0x0)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f00000003c0)={r5})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x26, 0xd, 0x6, 0x401, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x20040010)
r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000280)={r8, r8, 0x1, 0x0, 0x0, 0x48, 0x1, 0x7, 0x5505, 0x8, 0x1, 0x0, 'syz0\x00'})
r9 = socket$packet(0x11, 0x2, 0x300)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f00000000c0)={'team0\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newneigh={0x24, 0x1c, 0x1, 0x70bd2d, 0x25dfdbfc, {0x2, 0x0, 0x0, r11, 0x1, 0x88, 0x2}, [@NDA_VNI={0x8, 0x7, 0xd}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000884}, 0x8000)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r12)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r13, 0x701}, 0x14}}, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(r7, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})

142.118398ms ago: executing program 0 (id=3568):
ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000000)={'veth0_to_team\x00', {0x2, 0x0, @empty}}) (async)
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', <r2=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gre0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x19c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x180, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x9, 0xfc, 0x8, 0x5}, {0x2, 0x0, 0x2, 0xffffffa1}, {0x3, 0x6, 0x5, 0x9}, {0x1, 0x7, 0x2, 0x7fff}, {0xff, 0x6e, 0x80, 0xfffffffb}, {0x0, 0x58, 0x7}, {0xfffe, 0x4f, 0x4}, {0x7, 0x0, 0x9, 0xfffff800}, {0x22d3, 0xb, 0xd1, 0x6}, {0x6, 0x3, 0x0, 0x1}]}}}]}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x8800}, 0x20008005)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000044}, 0x800) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), r1) (async)
r4 = socket$kcm(0x29, 0x2, 0x0) (async)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r5, &(0x7f0000000500)={0x1, @read_clock_offset={{0x41f, 0x2}, {0xc8}}}, 0x6) (async)
setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000540)="a7a491eae6b435bf2ec2e38fd5bb7752c047103236b0a05ff4b8cf839056355c5f0e603a669844b985413b868f1c6823fd3d936bfbd665b3fb3339b634c91b1035b90f", 0x43)
syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r1) (async)
ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000600))
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000640)={0x1f, @any, 0x10}, 0xa) (async)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r1) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x164, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x4}]}, 0x164}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}}, 0x0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x6c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDR6={0x14, 0xb, @loopback}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_MS_ADDR6={0x14, 0xc, @private2}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_VERSION={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000851}, 0x0)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x1f, &(0x7f0000000b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x7, 0xc, 0x1, 0x8, 0x6}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c80)='GPL\x00', 0x8, 0xf3, &(0x7f0000000cc0)=""/243, 0x0, 0x20, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000e00)={0x5, 0xe, 0x10000, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000e40)=[0x1, 0x1, 0x1], 0x0, 0x10, 0x65}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000f40)={r0, r8})
ioctl$sock_bt_hci(r5, 0x400448c9, &(0x7f0000000f80)="1f10b2a16e34bd5edc0627c795a6bf525b374d71c9ab097721519b2ffd2705e8eb5cae12c264457dd929c51fbcce956c8a8fb5a0258f1d74abb686a81f69a23c5d5befd4e268141c6558bd616d0e6c91fd9701e95bc708279cdfe5d78a72d8b03e1eb662c1a81aafeba0eab8c220166dbde079595e7f94571acb638ea4a4c999e7cb12d6e5fe47ea03035aeefd9adff919ac55b0e7071edf04052010a9d1bde127cb7788832f2fa1b438fa70f480a955387fed831c04d0cb2a9f5afa6a861cedfab078b0893ec18604747d05826bc9")
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r9, 0x800448f0, &(0x7f0000001080)={0xffffffffffffffff, 0x200, "d967fa", 0x52, 0x8})
pipe(&(0x7f00000010c0)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
write$rfkill(r10, &(0x7f0000001100)={0x5}, 0x8) (async)
setsockopt$inet_tcp_buf(r11, 0x6, 0xe, &(0x7f0000001140)="6d3f5bd2fbf22c8b135b2d27021b759d202ba3903a4c40690283836c51ea8a072fee120714474b911ac135c3ae97a364f25158d884da61", 0x37) (async)
bind$inet6(r11, &(0x7f0000001180)={0xa, 0x4e21, 0x7fff, @mcast1, 0xaf4c}, 0x1c)

92.37448ms ago: executing program 0 (id=3569):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000fdffffffffffffff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0)

91.636701ms ago: executing program 0 (id=3570):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000005c0)={0x2ec, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x2b4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xa2, 0x4, "833c9478f33325e42e96fb8632716ec0334ad9f644d8bd66ddd55027aa9a8951c2f950e2bd16829b66d8a0a5d1ba4f3f80bed48455b2c8d0d0a0d1ce728d3594c0301b20ad5b1a3974aa3e5637980f856ca9b547123cb091f7aa3d17165cee9e6f5bfd4dd6afe51f438a2518dbdb26135fc9408d5915b5da34138888298e07aec605d9daa6bbd68687f474547653cb37d79eaef3c8a53c76644fb0e6b9e1"}, @ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x24}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'tunl0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x14e, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fff}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}]}, 0x2ec}}, 0x4040004)
r2 = socket(0x40000000015, 0x5, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'gretap0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8a450200000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=r4], 0x44}}, 0x40)
accept4$ax25(r2, &(0x7f0000000040)={{0x3, @bcast}, [@null, @bcast, @remote, @remote, @rose, @remote, @default, @default]}, &(0x7f00000000c0)=0x48, 0x0)

0s ago: executing program 0 (id=3571):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, r2, 0x200, 0x470bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24044045}, 0x8000) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000045}, 0x48040) (async)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff})
tee(r4, 0xffffffffffffffff, 0x8000000000081, 0x0) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r5)
sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x44)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x7, 0x6}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8, 0x5, 0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r9)
sendmsg$DEVLINK_CMD_RATE_SET(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x44, r10, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}}, 0x0) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r11}, &(0x7f0000000840), &(0x7f0000000880)=r12}, 0x20)
shutdown(r8, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000400)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv4={0x88fb, @gre={{0x5, 0x4, 0x2, 0x1, 0x58, 0x6a, 0x100, 0x8, 0x2f, 0x0, @broadcast, @broadcast}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x1}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x6, 0x2, 0x1, 0x1, 0x6, 0x4}, 0x1, {0x12}}}, {0x8, 0x22eb, 0x4, {{0xe, 0x2, 0xf8, 0x3, 0x1, 0x2, 0x4, 0xf9}, 0x2, {0x1, 0x9, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0)
r13 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r13, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) (async)
openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000040)=@nfc, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x8001000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:1728' (ED25519) to the list of known hosts.
syzkaller login: [   58.973074][ T5833] cgroup: Unknown subsys name 'net'
[   59.097836][ T5833] cgroup: Unknown subsys name 'cpuset'
[   59.105746][ T5833] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   61.404492][ T5833] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   66.576482][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   66.589086][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   66.592525][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   66.595849][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   66.596150][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   66.600998][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   66.605132][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   66.607547][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   66.607869][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   66.613731][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   66.626564][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   66.631277][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   66.638761][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   66.645647][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   66.648739][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   67.056139][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   67.087903][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   67.158273][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   67.280837][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.284738][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.288121][ T5851] bridge_slave_0: entered allmulticast mode
[   67.292458][ T5851] bridge_slave_0: entered promiscuous mode
[   67.337657][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.340381][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.343372][ T5851] bridge_slave_1: entered allmulticast mode
[   67.346121][ T5851] bridge_slave_1: entered promiscuous mode
[   67.361535][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.365353][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.368311][ T5847] bridge_slave_0: entered allmulticast mode
[   67.372232][ T5847] bridge_slave_0: entered promiscuous mode
[   67.376496][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.378801][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.381130][ T5847] bridge_slave_1: entered allmulticast mode
[   67.385112][ T5847] bridge_slave_1: entered promiscuous mode
[   67.409245][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.475017][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.481876][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.487078][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.490232][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.493224][ T5855] bridge_slave_0: entered allmulticast mode
[   67.496531][ T5855] bridge_slave_0: entered promiscuous mode
[   67.511083][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.529733][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.532096][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.535056][ T5855] bridge_slave_1: entered allmulticast mode
[   67.538643][ T5855] bridge_slave_1: entered promiscuous mode
[   67.584096][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.590196][ T5851] team0: Port device team_slave_0 added
[   67.598099][ T5847] team0: Port device team_slave_0 added
[   67.602451][ T5851] team0: Port device team_slave_1 added
[   67.607437][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.612311][ T5847] team0: Port device team_slave_1 added
[   67.698251][ T5855] team0: Port device team_slave_0 added
[   67.702084][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.705585][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.716438][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.722421][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.725746][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.737621][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.744483][ T5855] team0: Port device team_slave_1 added
[   67.747998][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.750838][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.761802][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.767101][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.769918][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.780746][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.827399][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.830231][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.840432][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.846897][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.849294][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.859684][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.909456][ T5851] hsr_slave_0: entered promiscuous mode
[   67.913249][ T5851] hsr_slave_1: entered promiscuous mode
[   67.958340][ T5847] hsr_slave_0: entered promiscuous mode
[   67.961241][ T5847] hsr_slave_1: entered promiscuous mode
[   67.964201][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   67.966456][ T5847] Cannot create hsr debugfs directory
[   68.006228][ T5855] hsr_slave_0: entered promiscuous mode
[   68.008697][ T5855] hsr_slave_1: entered promiscuous mode
[   68.010953][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   68.013085][ T5855] Cannot create hsr debugfs directory
[   68.367176][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   68.382600][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   68.400770][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   68.418285][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   68.467861][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   68.480744][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   68.491840][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   68.519219][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   68.556214][ T5855] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   68.565634][ T5855] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   68.575154][ T5855] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   68.582271][ T5855] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   68.665147][ T5858] Bluetooth: hci0: command tx timeout
[   68.667685][ T5854] Bluetooth: hci1: command tx timeout
[   68.718409][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.730670][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.743128][ T5854] Bluetooth: hci2: command tx timeout
[   68.759813][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   68.768259][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.785876][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   68.798840][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.802179][ T4296] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.815806][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.818286][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.838534][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.841446][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.850412][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.853360][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.858372][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   68.884257][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.887287][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.899347][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.902247][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.167427][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.178655][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.226408][ T5851] veth0_vlan: entered promiscuous mode
[   69.245251][ T5851] veth1_vlan: entered promiscuous mode
[   69.255055][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.266261][ T5847] veth0_vlan: entered promiscuous mode
[   69.295282][ T5851] veth0_macvtap: entered promiscuous mode
[   69.309193][ T5847] veth1_vlan: entered promiscuous mode
[   69.319182][ T5851] veth1_macvtap: entered promiscuous mode
[   69.335841][ T5855] veth0_vlan: entered promiscuous mode
[   69.350090][ T5855] veth1_vlan: entered promiscuous mode
[   69.357692][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.368217][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.389063][ T5847] veth0_macvtap: entered promiscuous mode
[   69.400906][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.406570][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.415760][ T5847] veth1_macvtap: entered promiscuous mode
[   69.420017][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.427284][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.448592][ T5855] veth0_macvtap: entered promiscuous mode
[   69.465594][ T5855] veth1_macvtap: entered promiscuous mode
[   69.469656][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.481182][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.496549][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.514715][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.520351][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.525238][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.528972][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.557668][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.589743][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.594984][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.598320][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.601769][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.611523][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.622446][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.682834][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.685522][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.728466][ T4140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.731603][ T4140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.772229][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.779819][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.784199][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.828224][ T4140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.836092][ T4140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.857430][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.859966][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.384549][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.388879][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.477216][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.485820][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.670386][ T5717] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.676195][ T5717] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.681929][ T5717] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.685838][ T5717] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.744954][ T5854] Bluetooth: hci1: command tx timeout
[   70.747238][ T5854] Bluetooth: hci0: command tx timeout
[   70.813736][ T5858] Bluetooth: hci2: command tx timeout
[   71.298181][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.301074][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.765681][ T5998] netlink: 52 bytes leftover after parsing attributes in process `syz.2.30'.
[   71.778721][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30'.
[   72.825318][ T5854] Bluetooth: hci1: command tx timeout
[   72.827080][ T5858] Bluetooth: hci0: command tx timeout
[   72.895764][ T5858] Bluetooth: hci2: command tx timeout
[   72.906936][ T6018] tipc: Started in network mode
[   72.908688][ T6018] tipc: Node identity d295a98ca66a, cluster identity 4711
[   72.911390][ T6018] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.948449][ T6018] syzkaller0: entered promiscuous mode
[   72.950375][ T6018] syzkaller0: entered allmulticast mode
[   72.953097][ T6018] tipc: Resetting bearer <eth:syzkaller0>
[   72.962295][ T6017] tipc: Resetting bearer <eth:syzkaller0>
[   73.955878][ T5314] tipc: Node number set to 1962912140
[   74.149257][ T6017] tipc: Disabling bearer <eth:syzkaller0>
[   74.312085][ T6044] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.736026][ T6081] netlink: 24 bytes leftover after parsing attributes in process `syz.1.66'.
[   74.894293][ T5854] Bluetooth: hci1: command tx timeout
[   74.897504][ T5858] Bluetooth: hci0: command tx timeout
[   74.957853][ T6103] team0: Device ipip0 is of different type
[   74.984174][ T5858] Bluetooth: hci2: command tx timeout
[   75.018129][ T6107] Zero length message leads to an empty skb
[   75.207500][ T6120] syz.2.80 uses obsolete (PF_INET,SOCK_PACKET)
[   75.705560][ T6149] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.801215][ T6263] netlink: 64 bytes leftover after parsing attributes in process `syz.2.140'.
[   77.806342][ T6263] block nbd0: not configured, cannot reconfigure
[   78.170735][ T6290] ip6gretap1: entered promiscuous mode
[   78.363753][ T6301] netlink: 20 bytes leftover after parsing attributes in process `syz.1.156'.
[   78.379454][ T6303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.157'.
[   78.386444][ T6303] netlink: 'syz.0.157': attribute type 2 has an invalid length.
[   78.390319][ T6303] netlink: 'syz.0.157': attribute type 1 has an invalid length.
[   78.403714][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.157'.
[   78.577386][ T6313] netlink: 40 bytes leftover after parsing attributes in process `syz.2.162'.
[   78.900957][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'.
[   78.906969][ T6339] netlink: 7 bytes leftover after parsing attributes in process `syz.1.172'.
[   79.873302][ T6372] netlink: 84 bytes leftover after parsing attributes in process `syz.2.187'.
[   80.280330][ T6406] netlink: 36 bytes leftover after parsing attributes in process `syz.2.202'.
[   80.288256][ T6406] netlink: 36 bytes leftover after parsing attributes in process `syz.2.202'.
[   80.328066][ T6406] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.331130][ T6406] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.520716][ T6412] batadv1: entered promiscuous mode
[   80.525823][ T6412] batadv1: entered allmulticast mode
[   81.134170][ T6453] netlink: 'syz.2.226': attribute type 1 has an invalid length.
[   81.339367][    C0] Illegal XDP return value 16128 on prog  (id 49) dev lo, expect packet loss!
[   81.366270][ T6470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   81.692323][ T6474] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[   81.729301][ T6476] batadv_slave_1: entered promiscuous mode
[   81.733845][ T6475] batadv_slave_1: left promiscuous mode
[   82.040867][ T6490] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[   82.295741][ T6511] netlink: 'syz.2.253': attribute type 8 has an invalid length.
[   83.688196][ T6561] __nla_validate_parse: 28 callbacks suppressed
[   83.688208][ T6561] netlink: 120 bytes leftover after parsing attributes in process `syz.2.277'.
[   83.745984][ T6563] bridge1: entered promiscuous mode
[   83.747626][ T6563] bridge1: entered allmulticast mode
[   83.861688][ T6576] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   84.429539][ T6623] veth0_to_bridge: entered promiscuous mode
[   84.436401][ T6622] veth0_to_bridge: left promiscuous mode
[   85.286409][ T6660] block nbd0: server does not support multiple connections per device.
[   85.294305][ T6660] block nbd0: shutting down sockets
[   85.297989][ T6664] netlink: 'syz.1.318': attribute type 1 has an invalid length.
[   86.653852][   T24] cfg80211: failed to load regulatory.db
[   86.855964][ T6757] netlink: 48 bytes leftover after parsing attributes in process `syz.0.357'.
[   87.540719][ T6789] netlink: 36 bytes leftover after parsing attributes in process `syz.2.371'.
[   87.776153][ T6807] netlink: 56 bytes leftover after parsing attributes in process `syz.1.380'.
[   87.781387][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'.
[   87.853690][ T6814] netlink: 'syz.1.384': attribute type 49 has an invalid length.
[   87.858604][ T6814] netlink: 'syz.1.384': attribute type 49 has an invalid length.
[   87.940311][ T6820] netlink: 'syz.1.385': attribute type 5 has an invalid length.
[   88.046873][   T33] audit: type=1804 audit(1758814465.554:2): pid=6832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.391" name="/newroot/150/cgroup.controllers" dev="tmpfs" ino=773 res=1 errno=0
[   88.080016][   T33] audit: type=1800 audit(1758814465.564:3): pid=6832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.391" name="cgroup.controllers" dev="tmpfs" ino=773 res=0 errno=0
[   88.107109][ T6836] netlink: 'syz.0.392': attribute type 4 has an invalid length.
[   88.509580][ T6866] batman_adv: batadv0: Adding interface: dummy0
[   88.512384][ T6866] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.540337][ T6866] batman_adv: batadv0: Interface activated: dummy0
[   89.076719][ T6902] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.079248][ T6902] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.082711][ T6902] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.085351][ T6902] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.090885][ T6902] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   89.621074][ T6922] IPv6: Can't replace route, no match found
[   89.662228][ T6924] tipc: Started in network mode
[   89.664209][ T6924] tipc: Node identity 925a47c393dd, cluster identity 4711
[   89.666660][ T6924] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.671315][ T6924] syzkaller0: entered promiscuous mode
[   89.674968][ T6924] syzkaller0: entered allmulticast mode
[   89.681670][ T6924] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   90.178716][ T6926] tipc: Resetting bearer <eth:syzkaller0>
[   90.365812][ T6923] tipc: Resetting bearer <eth:syzkaller0>
[   90.414252][ T6923] tipc: Disabling bearer <eth:syzkaller0>
[   91.023780][ T6962] netlink: 32 bytes leftover after parsing attributes in process `syz.1.450'.
[   92.735690][ T7046] warning: `syz.0.485' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   93.349366][ T5899] IPVS: starting estimator thread 0...
[   93.434372][ T7094] IPVS: using max 58 ests per chain, 139200 per kthread
[   93.770964][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.514'.
[   94.868978][ T7159] netlink: 5636 bytes leftover after parsing attributes in process `syz.2.534'.
[   95.430839][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.546'.
[   95.474386][ T7186] syz.2.547 (7186) used obsolete PPPIOCDETACH ioctl
[   95.508283][ T7188] netlink: 88 bytes leftover after parsing attributes in process `syz.0.548'.
[   95.870933][ T7201] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.876835][ T7201] syzkaller0: entered promiscuous mode
[   95.879072][ T7201] syzkaller0: entered allmulticast mode
[   95.908588][ T7201] tipc: Resetting bearer <eth:syzkaller0>
[   95.914958][ T7200] tipc: Resetting bearer <eth:syzkaller0>
[   95.934851][ T7200] tipc: Disabling bearer <eth:syzkaller0>
[   96.042061][ T7210] veth0: entered promiscuous mode
[   96.052277][ T7209] veth0: left promiscuous mode
[   96.172341][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.563'.
[   96.755309][ T7264] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[   96.765352][ T7264] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   97.168704][ T7296] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   97.759686][ T7348] netlink: 28 bytes leftover after parsing attributes in process `syz.1.622'.
[   97.859207][ T7356] netlink: 'syz.1.626': attribute type 12 has an invalid length.
[   98.055567][ T7367] netlink: 36 bytes leftover after parsing attributes in process `syz.1.628'.
[   98.058960][ T7367] netlink: 16 bytes leftover after parsing attributes in process `syz.1.628'.
[   98.064514][ T7367] netlink: 36 bytes leftover after parsing attributes in process `syz.1.628'.
[   98.068152][ T7367] netlink: 36 bytes leftover after parsing attributes in process `syz.1.628'.
[   98.128389][ T7366] geneve2: entered promiscuous mode
[   98.496665][ T7393] netlink: 'syz.0.642': attribute type 1 has an invalid length.
[   98.526435][ T7393] bond1: (slave gretap1): making interface the new active one
[   98.530464][ T7393] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   98.541348][ T7393] bond1: (slave gretap2): Enslaving as an active interface with an up link
[   98.558129][ T7393] syz.0.642 (7393) used greatest stack depth: 19912 bytes left
[   98.593628][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'.
[   98.950401][ T7426] netlink: 132 bytes leftover after parsing attributes in process `syz.1.658'.
[   99.069799][ T7440] netlink: 20 bytes leftover after parsing attributes in process `syz.2.663'.
[   99.150578][ T7429] netlink: 56 bytes leftover after parsing attributes in process `syz.0.660'.
[  100.051355][ T7469] netlink: 'syz.2.675': attribute type 12 has an invalid length.
[  100.420492][ T7488] syzkaller1: entered promiscuous mode
[  100.422839][ T7488] syzkaller1: entered allmulticast mode
[  102.216277][ T7526] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.220335][ T7526] syzkaller0: entered promiscuous mode
[  102.222211][ T7526] syzkaller0: entered allmulticast mode
[  102.229558][ T7526] tipc: Resetting bearer <eth:syzkaller0>
[  102.235968][ T7525] tipc: Resetting bearer <eth:syzkaller0>
[  102.246580][ T7525] tipc: Disabling bearer <eth:syzkaller0>
[  102.403079][ T7540] syzkaller0: entered promiscuous mode
[  102.405349][ T7540] syzkaller0: entered allmulticast mode
[  102.411930][ T7540] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  102.764907][ T7573] netlink: 'syz.1.722': attribute type 1 has an invalid length.
[  102.798663][ T7573] bond1: (slave geneve2): making interface the new active one
[  102.803605][ T7573] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  102.808753][   T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  102.809374][ T7573] __nla_validate_parse: 5 callbacks suppressed
[  102.809385][ T7573] netlink: 28 bytes leftover after parsing attributes in process `syz.1.722'.
[  102.819401][ T5717] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  102.824730][ T5717] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  102.825735][ T7578] netlink: 52 bytes leftover after parsing attributes in process `syz.2.723'.
[  102.834017][ T7573] 8021q: adding VLAN 0 to HW filter on device bond1
[  102.838780][ T5717] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  102.882467][ T7573] syz.1.722 (7573) used greatest stack depth: 19096 bytes left
[  103.232036][ T7592] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  103.245011][ T7592] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  103.359086][ T7624] sock: sock_timestamping_bind_phc: sock not bind to device
[  104.087238][ T7691] netlink: 136 bytes leftover after parsing attributes in process `syz.1.760'.
[  105.031463][ T7763] netlink: 'syz.2.769': attribute type 1 has an invalid length.
[  105.087313][ T7769] netlink: 24 bytes leftover after parsing attributes in process `syz.1.771'.
[  105.090672][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.772'.
[  106.159778][ T7816] netlink: 40 bytes leftover after parsing attributes in process `syz.0.792'.
[  106.335642][ T7827] ieee802154 phy0 wpan0: encryption failed: -22
[  106.525788][ T7846] veth0: entered promiscuous mode
[  106.528171][ T7845] veth0: left promiscuous mode
[  106.721868][ T7868] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  106.757433][ T7872] netlink: 'syz.2.816': attribute type 1 has an invalid length.
[  106.760257][ T7872] netlink: 224 bytes leftover after parsing attributes in process `syz.2.816'.
[  107.043913][ T7903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.830'.
[  107.205895][ T7913] netlink: 'syz.2.834': attribute type 10 has an invalid length.
[  107.217722][ T7913] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  107.275241][ T7918] netlink: 'syz.2.836': attribute type 1 has an invalid length.
[  107.278601][ T7918] netlink: 168 bytes leftover after parsing attributes in process `syz.2.836'.
[  108.223689][ T7963] nbd: must specify a size in bytes for the device
[  108.375746][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.856'.
[  108.389106][ T7967] IPVS: Error joining to the multicast group
[  108.818579][ T8001] netlink: 'syz.1.872': attribute type 1 has an invalid length.
[  108.825748][ T8001] netlink: 'syz.1.872': attribute type 2 has an invalid length.
[  108.863216][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  108.867673][ T8005] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  108.895786][ T8010] netlink: 28 bytes leftover after parsing attributes in process `syz.1.876'.
[  108.898634][ T8010] netlink: 7 bytes leftover after parsing attributes in process `syz.1.876'.
[  109.199265][ T8030] team0: Device ipip0 is of different type
[  109.241076][ T8033] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  109.248931][ T8036] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.255572][ T8036] syzkaller0: entered promiscuous mode
[  109.257569][ T8036] syzkaller0: entered allmulticast mode
[  109.266513][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  109.288104][ T8030] tipc: Resetting bearer <eth:syzkaller0>
[  109.292472][ T8029] tipc: Resetting bearer <eth:syzkaller0>
[  109.301231][ T8029] tipc: Disabling bearer <eth:syzkaller0>
[  110.099803][ T8106] netlink: 'syz.1.916': attribute type 23 has an invalid length.
[  110.184674][  T792] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  110.901887][ T8118] netlink: 32 bytes leftover after parsing attributes in process `syz.0.921'.
[  111.306475][ T8150] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  111.311302][ T8150] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  111.328439][ T8152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.938'.
[  111.601720][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.944'.
[  111.639616][ T8167] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.645288][ T8167] syzkaller0: entered promiscuous mode
[  111.647086][ T8167] syzkaller0: entered allmulticast mode
[  111.671606][ T8167] tipc: Resetting bearer <eth:syzkaller0>
[  111.678814][ T8166] tipc: Resetting bearer <eth:syzkaller0>
[  111.696387][ T8166] tipc: Disabling bearer <eth:syzkaller0>
[  112.323876][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'.
[  113.164670][ T8248] vlan0: entered promiscuous mode
[  113.529019][ T8271] vlan3: entered allmulticast mode
[  113.615766][ T8275] netlink: 'syz.1.995': attribute type 66 has an invalid length.
[  113.761289][ T8286] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1000'.
[  114.007838][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1006'.
[  114.578822][ T8331] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available
[  114.613160][ T8334] netlink: 'syz.1.1023': attribute type 25 has an invalid length.
[  115.523010][ T8377] netlink: 'syz.2.1044': attribute type 23 has an invalid length.
[  115.591635][ T8385] netlink: 'syz.1.1049': attribute type 1 has an invalid length.
[  115.594484][ T8385] netlink: 'syz.1.1049': attribute type 1 has an invalid length.
[  115.715347][ T8400] netlink: 'syz.2.1054': attribute type 16 has an invalid length.
[  115.717964][ T8400] netlink: 'syz.2.1054': attribute type 17 has an invalid length.
[  115.832208][ T8409] IPv6: NLM_F_REPLACE set, but no existing node found!
[  115.840833][ T8400] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.844013][ T8400] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.872129][ T8400] batman_adv: batadv0: Interface deactivated: dummy0
[  115.977652][ T8400] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.109624][ T8405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1054'.
[  116.116267][ T8410] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.120675][ T8411] syzkaller0: entered promiscuous mode
[  116.123509][ T8411] syzkaller0: entered allmulticast mode
[  116.124123][ T8420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1058'.
[  116.126627][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.128414][ T8420] netlink: 620 bytes leftover after parsing attributes in process `syz.0.1058'.
[  116.131350][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.131377][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.131393][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.149196][ T8404] tipc: Resetting bearer <eth:syzkaller0>
[  116.153920][ T8403] tipc: Resetting bearer <eth:syzkaller0>
[  116.160954][ T8420] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1058'.
[  116.166863][ T8403] tipc: Disabling bearer <eth:syzkaller0>
[  116.585663][ T8453] netlink: 'syz.0.1071': attribute type 1 has an invalid length.
[  116.592705][ T8453] netlink: 'syz.0.1071': attribute type 1 has an invalid length.
[  116.797572][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1080'.
[  116.921413][ T8479] tipc: Cannot configure node identity twice
[  117.041891][ T8490] syzkaller1: entered promiscuous mode
[  117.044224][ T8490] syzkaller1: entered allmulticast mode
[  117.077375][ T8494] netlink: 'syz.2.1091': attribute type 1 has an invalid length.
[  117.080350][ T8494] netlink: 'syz.2.1091': attribute type 2 has an invalid length.
[  117.157524][ T8502] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  117.322809][ T8518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1102'.
[  117.326627][ T8518] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1102'.
[  117.391868][ T8526] netlink: 'syz.1.1105': attribute type 1 has an invalid length.
[  117.424674][ T8526] 8021q: adding VLAN 0 to HW filter on device bond2
[  117.429732][ T8532] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.1107'.
[  117.441824][ T8526] 8021q: adding VLAN 0 to HW filter on device batadv1
[  117.451783][ T8526] bond2: (slave batadv1): making interface the new active one
[  117.458705][ T8526] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  117.681678][ T8550] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.684799][ T8550] syzkaller0: entered promiscuous mode
[  117.686669][ T8550] syzkaller0: entered allmulticast mode
[  117.705658][ T8550] tipc: Resetting bearer <eth:syzkaller0>
[  117.709316][ T8548] tipc: Resetting bearer <eth:syzkaller0>
[  117.723527][ T8548] tipc: Disabling bearer <eth:syzkaller0>
[  118.108821][ T8566] ksmbd: Unknown IPC event: 3, ignore.
[  118.800179][ T8610] ip6gre1: entered promiscuous mode
[  119.342568][ T8633] __nla_validate_parse: 1 callbacks suppressed
[  119.353258][ T8633] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1151'.
[  119.488568][ T8645] lo speed is unknown, defaulting to 1000
[  119.491242][ T8645] lo speed is unknown, defaulting to 1000
[  119.496691][ T8645] lo speed is unknown, defaulting to 1000
[  119.505408][ T8645] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  119.512518][ T8645] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  119.541585][ T8645] lo speed is unknown, defaulting to 1000
[  119.558264][ T8645] lo speed is unknown, defaulting to 1000
[  119.561962][ T8645] lo speed is unknown, defaulting to 1000
[  120.153436][ T8711] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  120.255511][ T8718] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1186'.
[  120.307827][ T8723] trusted_key: syz.2.1188 sent an empty control message without MSG_MORE.
[  120.734309][ T8760] !: renamed from dummy0
[  120.753938][ T8761] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1207'.
[  120.840245][ T8763] syzkaller0: entered promiscuous mode
[  120.842187][ T8763] syzkaller0: entered allmulticast mode
[  120.846121][ T8763] validate_nla: 1 callbacks suppressed
[  120.846147][ T8763] netlink: 'syz.0.1208': attribute type 13 has an invalid length.
[  121.110182][ T8774] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1212'.
[  121.141732][ T8776] pimreg: entered allmulticast mode
[  121.147586][ T8776] pimreg: left allmulticast mode
[  121.298106][ T8761] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available
[  121.323125][ T8785] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1217'.
[  121.326793][ T8785] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  121.329608][ T8785] IPv6: NLM_F_CREATE should be set when creating new route
[  121.332507][ T8785] IPv6: NLM_F_CREATE should be set when creating new route
[  121.900313][ T8827] lo speed is unknown, defaulting to 1000
[  121.936073][ T8831] Bluetooth: MGMT ver 1.23
[  122.011829][ T8837] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1240'.
[  122.340446][ T8853] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1247'.
[  122.586949][ T8880] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1260'.
[  122.635185][ T8884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1262'.
[  122.638156][ T8884] netlink: 5252 bytes leftover after parsing attributes in process `syz.1.1262'.
[  122.930836][ T8906] C: renamed from team_slave_0 (while UP)
[  122.946824][ T8906] netlink: 'syz.1.1273': attribute type 2 has an invalid length.
[  122.950453][ T8906] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  123.121984][ T8917] lo speed is unknown, defaulting to 1000
[  123.497626][ T8938] netlink: 'syz.2.1282': attribute type 10 has an invalid length.
[  123.504149][ T8938] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  123.596969][ T8944] lo speed is unknown, defaulting to 1000
[  123.674143][ T8953] netlink: 'syz.1.1289': attribute type 1 has an invalid length.
[  123.705814][ T8955] netlink: 'syz.1.1290': attribute type 4 has an invalid length.
[  123.715044][ T8955] netlink: 'syz.1.1290': attribute type 4 has an invalid length.
[  123.956195][ T8966] netlink: 'syz.0.1295': attribute type 21 has an invalid length.
[  125.029448][ T9014] __nla_validate_parse: 10 callbacks suppressed
[  125.029461][ T9014] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1317'.
[  125.181371][ T9034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1324'.
[  125.187973][ T9034] bridge_slave_1: left allmulticast mode
[  125.189900][ T9034] bridge_slave_1: left promiscuous mode
[  125.192053][ T9034] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.199131][ T9034] bridge_slave_0: left allmulticast mode
[  125.201455][ T9034] bridge_slave_0: left promiscuous mode
[  125.203793][ T9034] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.757661][ T9061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1337'.
[  125.857248][ T9061] macvtap0: entered promiscuous mode
[  125.859639][ T9061] team0: entered promiscuous mode
[  125.861587][ T9061] team_slave_0: entered promiscuous mode
[  125.868042][ T9061] team_slave_1: entered promiscuous mode
[  125.872086][ T9061] macvtap0: entered allmulticast mode
[  125.876972][ T9061] team0: entered allmulticast mode
[  125.880828][ T9061] team_slave_0: entered allmulticast mode
[  125.889182][ T9061] team_slave_1: entered allmulticast mode
[  125.897135][ T9061] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  126.095944][ T9070] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1341'.
[  126.241258][ T9073] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1342'.
[  126.381320][ T9081] netlink: 'syz.2.1347': attribute type 2 has an invalid length.
[  126.516346][ T9096] ieee802154 phy0 wpan0: encryption failed: -90
[  127.137380][ T9144] ip6tnl0: Caught tx_queue_len zero misconfig
[  127.626174][ T9180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1371'.
[  127.982013][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1380'.
[  129.757566][ T9234] netlink: 'syz.1.1394': attribute type 10 has an invalid length.
[  129.776691][ T9234] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  129.799006][ T9234] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  129.920857][ T9242] wg1: Caught tx_queue_len zero misconfig
[  130.177292][ T9253] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1402'.
[  130.305492][ T9258] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1404'.
[  130.314572][  T792] IPVS: starting estimator thread 0...
[  130.403042][ T9259] IPVS: using max 62 ests per chain, 148800 per kthread
[  130.459789][ T9273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1411'.
[  130.530475][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1414'.
[  132.065644][ T9356] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1444'.
[  132.069243][ T9356] netlink: 'syz.2.1444': attribute type 4 has an invalid length.
[  132.736804][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  132.739378][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  133.511960][ T9462] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1494'.
[  133.515757][ T9462] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1494'.
[  133.674769][ T9474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1501'.
[  133.719113][ T9474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1501'.
[  133.721016][ T5717] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  133.728638][ T5717] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  133.734908][ T5717] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  133.738334][ T5717] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  135.097623][ T9533] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.101032][ T9533] syzkaller0: entered promiscuous mode
[  135.109636][ T9533] syzkaller0: entered allmulticast mode
[  135.153848][ T9533] tipc: Resetting bearer <eth:syzkaller0>
[  135.160850][ T9532] tipc: Resetting bearer <eth:syzkaller0>
[  135.199191][ T9532] tipc: Disabling bearer <eth:syzkaller0>
[  135.665153][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1537'.
[  135.902511][ T9583] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1547'.
[  135.928966][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1549'.
[  135.935351][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1549'.
[  135.941662][ T9585] netlink: 'syz.0.1549': attribute type 18 has an invalid length.
[  136.157256][ T9606] netlink: 'syz.1.1554': attribute type 16 has an invalid length.
[  136.160933][ T9606] netlink: 'syz.1.1554': attribute type 17 has an invalid length.
[  136.197433][ T9606] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  136.495200][ T9626] : renamed from bond_slave_0
[  136.603466][ T9631] Bluetooth: MGMT ver 1.23
[  136.767577][ T9637] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1571'.
[  137.102814][ T9658] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1581'.
[  137.324637][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.327540][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.410337][ T9700] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1599'.
[  138.819346][ T9717] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1605'.
[  139.647264][ T9745] sctp: [Deprecated]: syz.1.1619 (pid 9745) Use of int in max_burst socket option.
[  139.647264][ T9745] Use struct sctp_assoc_value instead
[  139.685205][ T9749] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1621'.
[  139.690242][ T9749] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1621'.
[  140.233519][ T9774] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.239493][ T9774] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) !
[  140.259512][ T9774] tipc: Resetting bearer <eth:syzkaller0>
[  140.482447][ T9795] netlink: 'syz.0.1640': attribute type 10 has an invalid length.
[  140.488862][ T9795] team0: Port device bridge0 added
[  140.605836][ T9799] netlink: 'syz.0.1642': attribute type 5 has an invalid length.
[  140.608959][ T9799] netlink: 'syz.0.1642': attribute type 2 has an invalid length.
[  140.612068][ T9799] netlink: 'syz.0.1642': attribute type 1 has an invalid length.
[  140.718342][ T9768] tipc: Disabling bearer <eth:syzkaller0>
[  140.825148][ T9808] team0: Port device bridge0 removed
[  140.827221][ T9808] bridge_slave_0: left promiscuous mode
[  140.829130][ T9808] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.834999][ T9808] bridge_slave_1: left allmulticast mode
[  140.837168][ T9808] bridge_slave_1: left promiscuous mode
[  140.839327][ T9808] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.846498][ T9808] bond0: (slave 30): Releasing backup interface
[  140.850470][ T9808] bond0: (slave bond_slave_1): Releasing backup interface
[  140.856782][ T9808] team0: Port device team_slave_0 removed
[  140.860338][ T9808] team0: Port device team_slave_1 removed
[  140.863952][ T9808] batman_adv: batadv0: Removing interface: batadv_slave_0
[  140.867569][ T9808] batman_adv: batadv0: Removing interface: batadv_slave_1
[  140.872000][ T9808] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  140.952387][ T9813] netlink: 'syz.1.1647': attribute type 4 has an invalid length.
[  140.956229][ T9815] netlink: 'syz.0.1649': attribute type 9 has an invalid length.
[  140.959917][ T9815] netlink: 'syz.0.1649': attribute type 7 has an invalid length.
[  140.965066][ T9815] netlink: 'syz.0.1649': attribute type 8 has an invalid length.
[  140.967142][ T9813] netlink: 'syz.1.1647': attribute type 4 has an invalid length.
[  141.140810][ T9817] __nla_validate_parse: 2 callbacks suppressed
[  141.140829][ T9817] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1650'.
[  141.454167][ T9834] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.457796][ T9834] syzkaller0: entered promiscuous mode
[  141.459532][ T9834] syzkaller0: entered allmulticast mode
[  141.499594][ T9834] tipc: Resetting bearer <eth:syzkaller0>
[  141.508822][ T9833] tipc: Resetting bearer <eth:syzkaller0>
[  141.527367][ T9833] tipc: Disabling bearer <eth:syzkaller0>
[  141.898566][ T9844] bridge_slave_0: left allmulticast mode
[  141.901428][ T9844] bridge_slave_0: left promiscuous mode
[  141.906410][ T9844] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.920177][ T9844] bridge_slave_1: left allmulticast mode
[  141.924718][ T9844] bridge_slave_1: left promiscuous mode
[  141.927233][ T9844] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.942102][ T9844] bond0: (slave bond_slave_0): Releasing backup interface
[  141.958536][ T9844] bond0: (slave bond_slave_1): Releasing backup interface
[  141.977218][ T9844] team0: Port device C removed
[  141.987054][ T9844] team0: Port device team_slave_1 removed
[  141.990509][ T9844] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.996341][ T9844] batman_adv: batadv0: Removing interface: batadv_slave_0
[  142.001227][ T9844] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  142.006853][ T9844] batman_adv: batadv0: Removing interface: batadv_slave_1
[  142.011910][ T9844] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  142.021449][ T9845] team0: Mode changed to "activebackup"
[  142.082474][ T9847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1664'.
[  142.159996][ T9851] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1666'.
[  142.165305][ T9851] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1666'.
[  142.586041][ T9871] netlink: 'syz.1.1676': attribute type 1 has an invalid length.
[  143.286574][ T9927] syzkaller1: entered promiscuous mode
[  143.288853][ T9927] syzkaller1: entered allmulticast mode
[  143.296162][ T9930] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1705'.
[  143.775201][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1721'.
[  143.778791][ T9967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1721'.
[  143.796771][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1721'.
[  143.800913][ T9967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1721'.
[  143.803199][ T9964] lo speed is unknown, defaulting to 1000
[  145.530864][T10041] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  145.559832][T10041] validate_nla: 1 callbacks suppressed
[  145.559856][T10041] netlink: 'syz.1.1740': attribute type 10 has an invalid length.
[  145.566650][T10041] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  145.574962][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1740'.
[  145.590945][T10041] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  145.604903][T10041] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  146.913027][T10094] __nla_validate_parse: 1 callbacks suppressed
[  146.913042][T10094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1761'.
[  147.138264][T10115] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1771'.
[  147.340669][T10126] netlink: 'syz.1.1775': attribute type 15 has an invalid length.
[  147.958924][T10153] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1788'.
[  147.962481][T10153] netlink: 'syz.2.1788': attribute type 3 has an invalid length.
[  148.111342][T10163] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1793'.
[  148.128784][T10165] netlink: 'syz.1.1794': attribute type 1 has an invalid length.
[  148.434422][T10193] netlink: 664 bytes leftover after parsing attributes in process `syz.0.1807'.
[  148.438116][T10193] netlink: 664 bytes leftover after parsing attributes in process `syz.0.1807'.
[  148.809716][T10215] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  148.886913][T10219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  149.058443][T10227] netlink: 'syz.0.1824': attribute type 1 has an invalid length.
[  149.061530][T10227] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1824'.
[  149.065900][T10227] netlink: 'syz.0.1824': attribute type 1 has an invalid length.
[  149.069068][T10227] netlink: 'syz.0.1824': attribute type 2 has an invalid length.
[  149.612503][T10250] lo speed is unknown, defaulting to 1000
[  150.167526][T10297] netlink: 'syz.1.1858': attribute type 1 has an invalid length.
[  150.289909][T10308] batadv_slave_1: entered promiscuous mode
[  150.305145][T10307] batadv_slave_1: left promiscuous mode
[  150.361420][T10316] netlink: 'syz.2.1868': attribute type 1 has an invalid length.
[  150.368293][T10316] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1868'.
[  150.371803][T10316] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1868'.
[  150.460006][T10326] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1872'.
[  150.794357][T10348] netlink: 'syz.1.1882': attribute type 2 has an invalid length.
[  150.809545][T10348] : entered promiscuous mode
[  150.989962][T10356] netlink: 'syz.1.1886': attribute type 1 has an invalid length.
[  151.018533][T10356] 8021q: adding VLAN 0 to HW filter on device bond3
[  151.041165][T10356] bond3: (slave gretap1): making interface the new active one
[  151.045518][T10356] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  151.586781][    C0] vcan0: j1939_tp_rxtimer: 0xffff88801eab0400: rx timeout, send abort
[  151.625746][T10393] wg1 speed is unknown, defaulting to 1000
[  151.628134][T10393] wg1 speed is unknown, defaulting to 1000
[  151.631041][T10393] wg1 speed is unknown, defaulting to 1000
[  151.648167][T10393] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  151.668737][T10393] wg1 speed is unknown, defaulting to 1000
[  151.675046][T10393] wg1 speed is unknown, defaulting to 1000
[  151.679941][T10393] wg1 speed is unknown, defaulting to 1000
[  151.806504][T10397] lo speed is unknown, defaulting to 1000
[  151.810405][T10397] wg1 speed is unknown, defaulting to 1000
[  152.091350][    C0] vcan0: j1939_tp_rxtimer: 0xffff88801eab0400: abort rx timeout. Force session deactivation
[  152.340745][T10410] __nla_validate_parse: 3 callbacks suppressed
[  152.340762][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1907'.
[  152.349862][T10410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1907'.
[  152.354464][T10410] netlink: 'syz.0.1907': attribute type 1 has an invalid length.
[  152.357648][T10410] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1907'.
[  152.375863][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  152.380252][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  152.388331][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  152.393240][T10410] nbd: socks must be embedded in a SOCK_ITEM attr
[  152.393380][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  152.400045][T10410] block nbd0: shutting down sockets
[  152.682036][T10437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1919'.
[  152.891543][T10457] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1929'.
[  152.898703][T10457] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1929'.
[  152.948208][T10462] rdma_rxe: rxe_newlink: failed to add veth1_to_hsr
[  153.100041][T10462] sctp: [Deprecated]: syz.0.1932 (pid 10462) Use of struct sctp_assoc_value in delayed_ack socket option.
[  153.100041][T10462] Use struct sctp_sack_info instead
[  154.131972][T10498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1945'.
[  154.277574][T10508] netlink: 'syz.0.1949': attribute type 1 has an invalid length.
[  154.309428][T10508] bond2: (slave bridge5): making interface the new active one
[  154.313421][T10508] bond2: (slave bridge5): Enslaving as an active interface with an up link
[  154.589520][T10527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1958'.
[  154.624163][T10527] 8021q: adding VLAN 0 to HW filter on device bond1
[  154.634247][T10527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1958'.
[  154.647648][T10527] macsec0: entered promiscuous mode
[  154.649419][T10527] bond1: entered promiscuous mode
[  154.651323][T10527] macsec0: entered allmulticast mode
[  154.662813][T10527] bond1: entered allmulticast mode
[  154.677043][T10527] bond1: left allmulticast mode
[  154.678719][T10527] bond1: left promiscuous mode
[  154.873734][T10546] tipc: Started in network mode
[  154.875463][T10546] tipc: Node identity 080211000001, cluster identity 4711
[  154.878187][T10546] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.882184][T10546] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  154.888049][T10546] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  154.895463][T10546] tipc: Resetting bearer <eth:syzkaller0>
[  154.933719][T10546] tipc: Resetting bearer <eth:syzkaller0>
[  155.445844][T10588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1986'.
[  155.943078][  T792] tipc: Node number set to 134418688
[  156.226210][T10637] tipc: Resetting bearer <eth:syzkaller0>
[  156.229263][T10639] tipc: Invalid UDP bearer configuration
[  156.229295][T10639] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  157.021615][T10716] lo speed is unknown, defaulting to 1000
[  157.027271][T10716] wg1 speed is unknown, defaulting to 1000
[  157.189905][T10733] netlink: 'syz.2.2049': attribute type 13 has an invalid length.
[  157.199855][T10733] netlink: 'syz.2.2049': attribute type 11 has an invalid length.
[  157.407923][T10753] __nla_validate_parse: 10 callbacks suppressed
[  157.407934][T10753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2056'.
[  157.573153][T10763] netem: incorrect gi model size
[  158.668298][T10802] bond0: option packets_per_slave: invalid value (16779898)
[  158.670742][T10802] bond0: option packets_per_slave: allowed values 0 - 65535
[  159.579070][T10882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2107'.
[  159.583542][T10882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2107'.
[  159.593666][T10882] netlink: 'syz.0.2107': attribute type 14 has an invalid length.
[  159.867262][T10899] tipc: Enabled bearer <eth:gre0>, priority 10
[  160.050816][T10915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2123'.
[  160.290856][T10934] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  160.444224][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.446879][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.638049][T10954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2139'.
[  160.673247][T10956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2140'.
[  160.716738][T10960] lo speed is unknown, defaulting to 1000
[  161.227273][T11009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2166'.
[  161.247182][T11011] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2167'.
[  161.609051][T11045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2184'.
[  161.780888][T11064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2193'.
[  161.888967][T11071] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  161.895442][T11071] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  161.941948][T11074] bond2: (slave bridge0): Enslaving as an active interface with an up link
[  162.597094][T11134] __nla_validate_parse: 3 callbacks suppressed
[  162.597109][T11134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2222'.
[  162.692125][   T33] audit: type=1800 audit(1758814540.204:4): pid=11140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2225" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=3619 res=0 errno=0
[  162.710042][   T33] audit: type=1804 audit(1758814540.204:5): pid=11140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2225" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=3619 res=1 errno=0
[  162.743957][T11144] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  163.121175][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  163.124695][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  163.135501][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  163.138617][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  163.406173][T11187] netlink: 'syz.2.2247': attribute type 1 has an invalid length.
[  163.454756][T11193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2250'.
[  163.564958][T11204] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2254'.
[  163.568256][T11204] lo: Caught tx_queue_len zero misconfig
[  163.570365][T11204] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2254'.
[  164.042090][T11233] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.047481][T11233] syzkaller0: entered promiscuous mode
[  164.049243][T11233] syzkaller0: entered allmulticast mode
[  164.067862][T11233] tipc: Resetting bearer <eth:syzkaller0>
[  164.072833][T11232] tipc: Resetting bearer <eth:syzkaller0>
[  164.084784][T11232] tipc: Disabling bearer <eth:syzkaller0>
[  164.543540][T11242] netlink: 'syz.2.2270': attribute type 2 has an invalid length.
[  164.633736][T11248] netlink: 'syz.1.2273': attribute type 1 has an invalid length.
[  164.636885][T11248] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2273'.
[  164.641473][T11248] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  165.145025][T11279] lo speed is unknown, defaulting to 1000
[  165.150379][T11279] wg1 speed is unknown, defaulting to 1000
[  165.510223][T11305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  165.570619][T11311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2303'.
[  165.607891][T11313] : entered promiscuous mode
[  165.708707][T11323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2309'.
[  165.767766][T11325] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2310'.
[  165.825129][T11336] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2314'.
[  165.832452][T11336] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2314'.
[  166.304138][T11385] lo speed is unknown, defaulting to 1000
[  166.315596][T11383] lo speed is unknown, defaulting to 1000
[  166.316240][T11385] wg1 speed is unknown, defaulting to 1000
[  166.351429][T11383] wg1 speed is unknown, defaulting to 1000
[  166.761838][T11404] lo speed is unknown, defaulting to 1000
[  166.774625][T11404] wg1 speed is unknown, defaulting to 1000
[  167.376731][T11421] Bluetooth: MGMT ver 1.23
[  168.109157][T11445] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2358'.
[  168.112550][T11445] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2358'.
[  168.355204][T11457] 8021q: VLANs not supported on lo
[  168.494193][T11469] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2370'.
[  168.695178][T11481] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2376'.
[  169.539192][T11496] netlink: 'syz.2.2382': attribute type 1 has an invalid length.
[  169.586244][T11496] bond3: entered promiscuous mode
[  169.588698][T11496] 8021q: adding VLAN 0 to HW filter on device bond3
[  169.614210][ T5858] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  169.616498][ T5854] Bluetooth: hci2: command 0x0401 tx timeout
[  169.625457][T11501] bond3: (slave bridge2): making interface the new active one
[  169.627931][T11501] bridge2: entered promiscuous mode
[  169.630758][T11501] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  169.718910][T11513] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  169.760374][T11519] dvmrp11: entered allmulticast mode
[  169.820847][T11523] netlink: 'syz.2.2395': attribute type 10 has an invalid length.
[  169.844373][T11523] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  169.847140][T11523] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  169.863109][T11523] team0: Port device netdevsim0 added
[  170.041907][T11545] lo speed is unknown, defaulting to 1000
[  170.054662][T11545] wg1 speed is unknown, defaulting to 1000
[  170.084273][T11547] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2407'.
[  170.388533][T11566] netlink: 'syz.1.2415': attribute type 2 has an invalid length.
[  170.736045][ T4296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.738908][ T4296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.762241][T11585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2423'.
[  170.768435][T11585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2423'.
[  170.939159][T11593] syzkaller1: entered promiscuous mode
[  170.947386][T11593] syzkaller1: entered allmulticast mode
[  171.273649][T11609] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2435'.
[  171.541216][T11630] sctp: [Deprecated]: syz.1.2445 (pid 11630) Use of int in maxseg socket option.
[  171.541216][T11630] Use struct sctp_assoc_value instead
[  172.403318][T11673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2463'.
[  172.431746][T11673] bridge5: port 1(veth5) entered blocking state
[  172.439757][T11673] bridge5: port 1(veth5) entered disabled state
[  172.442458][T11673] veth5: entered allmulticast mode
[  172.447575][T11673] veth5: entered promiscuous mode
[  172.462932][T11673] bridge5: port 2(veth0_to_bond) entered blocking state
[  172.465218][T11673] bridge5: port 2(veth0_to_bond) entered disabled state
[  172.467461][T11673] veth0_to_bond: entered allmulticast mode
[  172.470843][T11673] veth0_to_bond: entered promiscuous mode
[  172.548797][T11679] lo speed is unknown, defaulting to 1000
[  172.554904][T11679] wg1 speed is unknown, defaulting to 1000
[  172.609885][T11691] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2471'.
[  173.071445][ T5858] Bluetooth: hci0: command tx timeout
[  173.262425][T11738] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2491'.
[  173.548382][T11755] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2494'.
[  173.778702][T11761] !: renamed from dummy0
[  174.190479][   T10] IPVS: starting estimator thread 0...
[  174.274295][T11779] IPVS: using max 43 ests per chain, 103200 per kthread
[  174.945736][T11778] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  175.089871][T11825] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2516'.
[  175.209329][T11841] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2521'.
[  175.220135][T11841] unsupported nlmsg_type 40
[  175.351040][T11852] netlink: 'syz.0.2527': attribute type 21 has an invalid length.
[  175.732266][T11880] tipc: Resetting bearer <eth:syzkaller0>
[  176.253199][ T5858] Bluetooth: hci0: command 0x0c1a tx timeout
[  176.506474][T11921] veth0: entered promiscuous mode
[  176.509772][T11921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2554'.
[  176.534124][T11924] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2555'.
[  176.537326][T11924] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2555'.
[  176.560091][T11921] veth0 (unregistering): left promiscuous mode
[  176.723703][T11939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2562'.
[  176.821959][T11945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2565'.
[  177.115600][T11963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2572'.
[  178.300204][T11996] lo speed is unknown, defaulting to 1000
[  178.304746][T11996] wg1 speed is unknown, defaulting to 1000
[  178.383623][T12002] block nbd0: shutting down sockets
[  178.470323][T12011] lo speed is unknown, defaulting to 1000
[  178.479365][T12011] wg1 speed is unknown, defaulting to 1000
[  178.938726][T12029] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.944766][T12031] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.948945][T12029] syzkaller0: entered promiscuous mode
[  178.951722][T12029] syzkaller0: entered allmulticast mode
[  178.964843][T12029] netlink: 'syz.0.2598': attribute type 13 has an invalid length.
[  179.030796][T12031] syzkaller0: entered promiscuous mode
[  179.033814][T12031] syzkaller0: entered allmulticast mode
[  179.037143][T12031] tipc: Resetting bearer <eth:syzkaller0>
[  179.055108][T12028] tipc: Resetting bearer <eth:syzkaller0>
[  179.068699][T12028] tipc: Disabling bearer <eth:syzkaller0>
[  179.073537][T12030] tipc: Resetting bearer <eth:syzkaller0>
[  180.775494][T12030] tipc: Disabling bearer <eth:syzkaller0>
[  182.746958][T12095] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  182.886772][T12107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2629'.
[  182.891992][T12107] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2629'.
[  182.909982][T12109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2630'.
[  182.916762][T12107] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2629'.
[  183.002218][T12115] netlink: 'syz.2.2633': attribute type 6 has an invalid length.
[  183.028773][T12115] netlink: 'syz.2.2633': attribute type 12 has an invalid length.
[  183.031979][T12115] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2633'.
[  183.321381][T12140] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  183.328216][T12140] tipc: Resetting bearer <eth:syzkaller0>
[  183.720763][T12151] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2648'.
[  184.249520][T12161] lo speed is unknown, defaulting to 1000
[  184.295342][T12161] wg1 speed is unknown, defaulting to 1000
[  184.658139][T12200] !: renamed from dummy0 (while UP)
[  184.667313][T12203] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2671'.
[  185.051415][T12231] netlink: 'syz.0.2681': attribute type 8 has an invalid length.
[  185.830257][T12261] netlink: 'syz.2.2693': attribute type 1 has an invalid length.
[  185.962225][T12270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2697'.
[  185.970219][T12270] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2697'.
[  186.138671][T12289] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  186.167324][T12291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2705'.
[  186.191270][T12291] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  186.228728][T12293] tipc: Disabling bearer <eth:syzkaller0>
[  186.323386][T12310] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  186.380792][T12315] netlink: zone id is out of range
[  186.386078][T12315] netlink: zone id is out of range
[  186.388873][T12315] netlink: zone id is out of range
[  186.391813][T12315] netlink: zone id is out of range
[  186.394719][T12315] netlink: zone id is out of range
[  186.396737][T12315] netlink: zone id is out of range
[  186.398788][T12315] netlink: zone id is out of range
[  186.400861][T12315] netlink: zone id is out of range
[  186.406331][T12315] netlink: zone id is out of range
[  186.409446][T12315] netlink: zone id is out of range
[  186.436399][T12324] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  186.711745][T12334] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  186.726045][T12338] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  186.766692][T12342] netlink: 'syz.2.2720': attribute type 10 has an invalid length.
[  186.770258][T12342] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  186.791533][T12342] bridge4: entered promiscuous mode
[  186.795982][T12342] bridge4: entered allmulticast mode
[  186.843881][T12346] netlink: 'syz.1.2721': attribute type 5 has an invalid length.
[  186.971538][T12355] x_tables: ip_tables: CT.0 target: invalid size 40 (kernel) != (user) 160
[  187.079823][T12362] x_tables: ip_tables: CHECKSUM target: only valid in mangle table, not syz0
[  187.082441][T12363] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[  187.152300][T12370] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  187.958003][T12365] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  188.037065][T12389] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  188.086042][T12390] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  188.188098][T12393] __nla_validate_parse: 39 callbacks suppressed
[  188.188121][T12393] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2737'.
[  188.195712][T12390] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  188.205531][T12393] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2737'.
[  188.256805][T12404] veth0: entered promiscuous mode
[  188.280929][T12390] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  188.317133][T12404] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  188.323756][T12403] veth0: left promiscuous mode
[  188.387919][T12390] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  188.449482][ T5717] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  188.479683][ T5717] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  188.482567][ T5717] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  188.493798][ T5878] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  188.553211][T12423] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2743'.
[  188.597487][T12423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2743'.
[  188.689693][T12432] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  188.695760][T12432] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  188.770715][T12437] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2746'.
[  188.902399][T12445] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2750'.
[  189.033687][T12462] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2754'.
[  189.092178][T12465] netlink: 14679 bytes leftover after parsing attributes in process `syz.2.2756'.
[  189.122453][T12465] netlink: 14679 bytes leftover after parsing attributes in process `syz.2.2756'.
[  189.355161][T12479] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  189.356279][T12490] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  189.384443][T12495] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2765'.
[  189.527842][T12512] netlink: 'syz.1.2769': attribute type 1 has an invalid length.
[  189.530404][T12512] netlink: 'syz.1.2769': attribute type 4 has an invalid length.
[  189.862334][T12540] lo speed is unknown, defaulting to 1000
[  189.873933][T12540] wg1 speed is unknown, defaulting to 1000
[  190.508057][T12582] lo speed is unknown, defaulting to 1000
[  190.516446][T12582] wg1 speed is unknown, defaulting to 1000
[  190.738869][T12598] tap0: tun_chr_ioctl cmd 1074025680
[  190.744061][T12598] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  190.747095][T12598] D: renamed from syzkaller0
[  190.750592][T12598] tipc: Disabling bearer <eth:syzkaller0>
[  190.754225][T12602] syz.0.2796: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  190.760634][T12602] CPU: 0 UID: 0 PID: 12602 Comm: syz.0.2796 Not tainted syzkaller #0 PREEMPT(full) 
[  190.760648][T12602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  190.760654][T12602] Call Trace:
[  190.760660][T12602]  <TASK>
[  190.760666][T12602]  dump_stack_lvl+0x189/0x250
[  190.760694][T12602]  ? __pfx_dump_stack_lvl+0x10/0x10
[  190.760704][T12602]  ? __pfx__printk+0x10/0x10
[  190.760718][T12602]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  190.760731][T12602]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  190.760741][T12602]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  190.760754][T12602]  warn_alloc+0x214/0x310
[  190.760771][T12602]  ? __pfx_warn_alloc+0x10/0x10
[  190.760788][T12602]  ? __get_vm_area_node+0x28f/0x300
[  190.760800][T12602]  ? xskq_create+0xbf/0x170
[  190.760816][T12602]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  190.760842][T12602]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  190.760864][T12602]  ? __kasan_kmalloc+0x93/0xb0
[  190.760878][T12602]  vmalloc_user_noprof+0xad/0xf0
[  190.760891][T12602]  ? xskq_create+0xbf/0x170
[  190.760900][T12602]  xskq_create+0xbf/0x170
[  190.760910][T12602]  xsk_init_queue+0xb0/0x110
[  190.760938][T12602]  xsk_setsockopt+0x57b/0x8d0
[  190.760949][T12602]  ? __pfx_xsk_setsockopt+0x10/0x10
[  190.760956][T12602]  ? __pfx_aa_sk_perm+0x10/0x10
[  190.760972][T12602]  ? __fget_files+0x2a/0x420
[  190.760980][T12602]  ? aa_sock_opt_perm+0xff/0x1b0
[  190.760990][T12602]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  190.761000][T12602]  ? __pfx_xsk_setsockopt+0x10/0x10
[  190.761008][T12602]  do_sock_setsockopt+0x17c/0x1b0
[  190.761024][T12602]  __x64_sys_setsockopt+0x13f/0x1b0
[  190.761037][T12602]  do_syscall_64+0xfa/0x3b0
[  190.761048][T12602]  ? lockdep_hardirqs_on+0x9c/0x150
[  190.761058][T12602]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.761066][T12602]  ? exc_page_fault+0x9f/0xf0
[  190.761076][T12602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.761084][T12602] RIP: 0033:0x7fa20858ec29
[  190.761093][T12602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  190.761100][T12602] RSP: 002b:00007fa2067f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  190.761109][T12602] RAX: ffffffffffffffda RBX: 00007fa2087d6180 RCX: 00007fa20858ec29
[  190.761115][T12602] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009
[  190.761120][T12602] RBP: 00007fa208611e41 R08: 0000000000000004 R09: 0000000000000000
[  190.761124][T12602] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000
[  190.761129][T12602] R13: 00007fa2087d6218 R14: 00007fa2087d6180 R15: 00007ffcf7b79838
[  190.761142][T12602]  </TASK>
[  190.761191][T12602] Mem-Info:
[  190.855785][T12602] active_anon:13516 inactive_anon:0 isolated_anon:0
[  190.855785][T12602]  active_file:1457 inactive_file:38286 isolated_file:0
[  190.855785][T12602]  unevictable:1768 dirty:228 writeback:0
[  190.855785][T12602]  slab_reclaimable:10279 slab_unreclaimable:58031
[  190.855785][T12602]  mapped:18259 shmem:2404 pagetables:977
[  190.855785][T12602]  sec_pagetables:0 bounce:0
[  190.855785][T12602]  kernel_misc_reclaimable:0
[  190.855785][T12602]  free:264420 free_pcp:21509 free_cma:0
[  190.869720][T12602] Node 0 active_anon:25500kB inactive_anon:0kB active_file:4160kB inactive_file:136312kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:25824kB dirty:564kB writeback:0kB shmem:4856kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7636kB pagetables:2196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  190.880324][T12602] Node 1 active_anon:28564kB inactive_anon:0kB active_file:1668kB inactive_file:16832kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:47212kB dirty:348kB writeback:0kB shmem:4760kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4408kB pagetables:1712kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  190.891297][T12602] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  190.900933][T12602] lowmem_reserve[]: 0 811 811 811 811
[  190.902995][T12602] Node 0 DMA32 free:197008kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25500kB inactive_anon:0kB active_file:4160kB inactive_file:136312kB unevictable:3536kB writepending:564kB present:1556484kB managed:830856kB mlocked:0kB bounce:0kB free_pcp:44804kB local_pcp:28912kB free_cma:0kB
[  190.914034][T12602] lowmem_reserve[]: 0 0 0 0 0
[  190.916065][T12602] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  190.925641][T12602] lowmem_reserve[]: 0 0 854 854 854
[  190.927414][T12602] Node 1 Normal free:386820kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28564kB inactive_anon:0kB active_file:1668kB inactive_file:16832kB unevictable:3536kB writepending:348kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:41172kB local_pcp:15824kB free_cma:0kB
[  190.939148][T12602] lowmem_reserve[]: 0 0 0 0 0
[  190.940985][T12602] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  190.945927][T12602] Node 0 DMA32: 694*4kB (UM) 383*8kB (UM) 224*16kB (UME) 346*32kB (UME) 56*64kB (UME) 51*128kB (UM) 14*256kB (UM) 6*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 38*4096kB (UM) = 197008kB
[  190.957749][T12602] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  190.963713][T12602] Node 1 Normal: 55*4kB (M) 264*8kB (UME) 250*16kB (UM) 369*32kB (UM) 290*64kB (UME) 97*128kB (UM) 51*256kB (UME) 24*512kB (UM) 11*1024kB (UME) 3*2048kB (UM) 72*4096kB (UM) = 386780kB
[  190.969848][T12602] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  190.974216][T12602] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  190.977804][T12602] 42147 total pagecache pages
[  190.979456][T12602] 0 pages in swap cache
[  190.981099][T12602] Free swap  = 124996kB
[  190.985567][T12602] Total swap = 124996kB
[  190.987229][T12602] 786301 pages RAM
[  190.988701][T12602] 0 pages HighMem/MovableOnly
[  190.990580][T12602] 241355 pages reserved
[  190.992238][T12602] 0 pages cma reserved
[  191.087069][T12605] lo speed is unknown, defaulting to 1000
[  191.092441][T12605] wg1 speed is unknown, defaulting to 1000
[  191.146947][ T5852] Bluetooth: hci1: command 0x0406 tx timeout
[  191.147000][ T5236] Bluetooth: hci0: command 0x0c1a tx timeout
[  191.251055][T12614] audit_tg_check: 73 callbacks suppressed
[  191.251076][T12614] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  191.265702][T12615] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  191.780968][T12640] sctp: [Deprecated]: syz.2.2808 (pid 12640) Use of int in max_burst socket option.
[  191.780968][T12640] Use struct sctp_assoc_value instead
[  192.046994][T12647] netlink: 'syz.2.2811': attribute type 1 has an invalid length.
[  192.127089][T12650] dvmrp8: entered allmulticast mode
[  193.425367][T12662] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  193.441084][T12664] __nla_validate_parse: 11 callbacks suppressed
[  193.441099][T12664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2816'.
[  193.448198][T12664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2816'.
[  193.451213][T12664] netlink: 'syz.2.2816': attribute type 6 has an invalid length.
[  193.456309][T12664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2816'.
[  193.459825][T12664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2816'.
[  193.469018][T12664] netlink: 'syz.2.2816': attribute type 6 has an invalid length.
[  193.476846][T12670] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2819'.
[  193.478024][T12669] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  193.579113][T12678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2824'.
[  193.597721][T12673] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  193.664870][T12691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2828'.
[  193.888356][T12714] lo: Caught tx_queue_len zero misconfig
[  193.911893][T12714] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2834'.
[  193.968871][T12720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2836'.
[  193.973981][T12720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2836'.
[  194.141090][T12737] netlink: 'syz.0.2841': attribute type 6 has an invalid length.
[  194.145382][T12737] netlink: 'syz.0.2841': attribute type 6 has an invalid length.
[  194.490818][T12764] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  194.794298][T12787] nbd: couldn't find a device at index 65546
[  194.872412][T12794] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  194.907836][T12790] lo speed is unknown, defaulting to 1000
[  194.923158][T12790] wg1 speed is unknown, defaulting to 1000
[  195.181867][T12818] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  195.376443][T12831] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  195.490570][T12837] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  195.730546][T12866] syzkaller1: entered promiscuous mode
[  195.733108][T12866] syzkaller1: entered allmulticast mode
[  196.531168][T12918] audit_tg_check: 3 callbacks suppressed
[  196.531191][T12918] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  196.666051][T12920] netlink: 'syz.0.2889': attribute type 6 has an invalid length.
[  197.289767][T12932] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  197.298797][T12934] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  197.340501][T12929] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  197.746612][T12974] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  197.799413][T12979] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  197.922177][T12995] netlink: 'syz.1.2907': attribute type 21 has an invalid length.
[  197.926450][T12992] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  197.928764][T12995] IPv6: NLM_F_CREATE should be specified when creating new route
[  197.931827][T12995] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  197.934054][T12995] IPv6: NLM_F_CREATE should be set when creating new route
[  197.936592][T12995] IPv6: NLM_F_CREATE should be set when creating new route
[  197.939076][T12995] IPv6: NLM_F_CREATE should be set when creating new route
[  198.118590][T13001] netlink: 'syz.1.2914': attribute type 9 has an invalid length.
[  198.121778][T13001] netlink: 'syz.1.2914': attribute type 7 has an invalid length.
[  198.129579][T13001] netlink: 'syz.1.2914': attribute type 8 has an invalid length.
[  198.221033][T13011] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  198.361706][T13021] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  198.467439][T13026] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  198.577463][T13032] __nla_validate_parse: 52 callbacks suppressed
[  198.577482][T13032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2926'.
[  198.911968][T13051] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2933'.
[  199.148916][T13059] netlink: 'syz.0.2937': attribute type 6 has an invalid length.
[  199.239829][T13072] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  199.244241][T13072] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2940'.
[  199.369055][T13081] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2944'.
[  199.792207][T13127] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2963'.
[  200.074111][T13156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  200.086122][T13156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  200.296652][T13168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2979'.
[  200.356930][T13176] netlink: 'syz.1.2982': attribute type 11 has an invalid length.
[  200.381210][T13172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  200.621661][T13188] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2986'.
[  200.959101][T13219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2997'.
[  200.996355][T13221] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2998'.
[  201.169101][T13231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3003'.
[  201.362918][T13264] netlink: 'syz.0.3012': attribute type 1 has an invalid length.
[  201.411225][T13271] netlink: 'syz.2.3014': attribute type 2 has an invalid length.
[  201.560854][T13281] lo speed is unknown, defaulting to 1000
[  201.567903][T13281] wg1 speed is unknown, defaulting to 1000
[  201.611719][T13285] veth0: entered promiscuous mode
[  201.671436][T13280] veth0: left promiscuous mode
[  202.787053][T13322] netlink: 'syz.2.3032': attribute type 4 has an invalid length.
[  203.640880][T13323] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  203.688065][T13332] audit_tg_check: 109 callbacks suppressed
[  203.688080][T13332] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  203.732569][T13335] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  204.087686][T13364] __nla_validate_parse: 11 callbacks suppressed
[  204.087702][T13364] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3046'.
[  204.099699][T13364] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3046'.
[  204.387424][T13380] team_slave_1: Caught tx_queue_len zero misconfig
[  204.699971][T13403] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  204.805605][T13412] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3065'.
[  204.913906][T13417] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  204.956925][T13421] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3068'.
[  204.960822][T13421] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3068'.
[  205.277340][T13446] sctp: [Deprecated]: syz.1.3079 (pid 13446) Use of int in maxseg socket option.
[  205.277340][T13446] Use struct sctp_assoc_value instead
[  205.417079][T13453] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  205.444971][T13455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3082'.
[  205.615533][T13463] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  205.767844][T13468] sctp: [Deprecated]: syz.0.3088 (pid 13468) Use of int in max_burst socket option.
[  205.767844][T13468] Use struct sctp_assoc_value instead
[  205.895452][T13470] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  205.911216][T13470] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3088'.
[  205.924071][T13472] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  206.314758][T13493] syzkaller0: entered promiscuous mode
[  206.317320][T13493] syzkaller0: entered allmulticast mode
[  206.326680][T13493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3099'.
[  206.330259][T13493] netlink: 620 bytes leftover after parsing attributes in process `syz.1.3099'.
[  206.334753][T13493] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3099'.
[  206.414823][T13497] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  206.624573][T13512] veth0: entered promiscuous mode
[  206.689018][T13512] veth0 (unregistering): left promiscuous mode
[  206.733619][T13522] netlink: 'syz.0.3109': attribute type 1 has an invalid length.
[  206.763568][T13522] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  206.928820][T13536] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  207.030455][T13549] sctp: [Deprecated]: syz.1.3118 (pid 13549) Use of struct sctp_assoc_value in delayed_ack socket option.
[  207.030455][T13549] Use struct sctp_sack_info instead
[  207.065362][T13553] batadv_slave_0: entered promiscuous mode
[  207.070556][T13552] batadv_slave_0: left promiscuous mode
[  207.490828][T13583] (unnamed net_device) (uninitialized): (slave gretap0): Device is not bonding slave
[  207.497011][T13583] (unnamed net_device) (uninitialized): option active_slave: invalid value (gretap0)
[  208.052216][T13603] bridge6: entered promiscuous mode
[  208.055317][T13603] bridge6: entered allmulticast mode
[  208.320910][T13630] tc_dump_action: action bad kind
[  208.561261][T13638] net_ratelimit: 16 callbacks suppressed
[  208.561304][T13638] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  208.718178][T13638] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  208.865260][T13659] digital: digital_start_poll: Unknown protocol
[  209.189170][T13687] (unnamed net_device) (uninitialized): (slave gretap0): Device is not bonding slave
[  209.193112][T13687] (unnamed net_device) (uninitialized): option active_slave: invalid value (gretap0)
[  209.279787][T13694] digital: digital_start_poll: Unknown protocol
[  209.375193][T13703] __nla_validate_parse: 7 callbacks suppressed
[  209.375216][T13703] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3175'.
[  209.380279][T13695] pim6reg99999999: entered allmulticast mode
[  209.391400][T13699] audit_tg_check: 10 callbacks suppressed
[  209.391418][T13699] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  209.458370][T13710] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  209.465374][T13713] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  209.601359][T13727] netem: change failed
[  209.617328][T13721] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  209.700074][T13734] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3185'.
[  209.709302][T13736] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3186'.
[  209.744725][T13737] veth0_to_bond: left allmulticast mode
[  209.746535][T13737] veth0_to_bond: left promiscuous mode
[  209.757305][T13737] bridge5: port 2(veth0_to_bond) entered disabled state
[  209.764930][T13737] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  209.804648][T13743] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  209.818654][T13745] netlink: 'syz.0.3191': attribute type 1 has an invalid length.
[  209.827786][T13745] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3191'.
[  209.831352][T13749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3190'.
[  209.835974][T13748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3190'.
[  209.836090][T13745] netlink: 'syz.0.3191': attribute type 1 has an invalid length.
[  209.883401][T13751] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  209.904800][T13760] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  210.234818][T13780] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  210.284946][T13791] netlink: 'syz.1.3205': attribute type 7 has an invalid length.
[  210.299476][T13795] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  210.341211][T13797] sctp: [Deprecated]: syz.2.3208 (pid 13797) Use of struct sctp_assoc_value in delayed_ack socket option.
[  210.341211][T13797] Use struct sctp_sack_info instead
[  210.355900][T13797] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  210.404616][T13801] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  210.430778][T13806] dvmrp11: left allmulticast mode
[  210.463655][T13808] (unnamed net_device) (uninitialized): (slave gretap0): Device is not bonding slave
[  210.469390][T13808] (unnamed net_device) (uninitialized): option active_slave: invalid value (gretap0)
[  210.482264][T13805] lo speed is unknown, defaulting to 1000
[  210.486348][T13805] wg1 speed is unknown, defaulting to 1000
[  210.497905][T13806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3212'.
[  210.506955][T13810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3211'.
[  210.513545][T13806] rdma_rxe: rxe_newlink: failed to add lo
[  210.661965][T13825] netlink: 'syz.2.3219': attribute type 11 has an invalid length.
[  210.669257][T13825] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3219'.
[  211.803721][T13905] netlink: 'syz.1.3249': attribute type 1 has an invalid length.
[  211.804141][T13907] ip6tnl0: Caught tx_queue_len zero misconfig
[  211.856030][T13905] bond4: (slave ip6gretap3): Enslaving as a backup interface with an up link
[  211.862386][ T5963] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  211.863872][T13905] 8021q: adding VLAN 0 to HW filter on device bond4
[  211.900053][T13905] veth9: entered promiscuous mode
[  211.904937][T13913] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3251'.
[  211.983527][ T5717] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  213.097599][T13988] sctp: [Deprecated]: syz.2.3279 (pid 13988) Use of int in max_burst socket option.
[  213.097599][T13988] Use struct sctp_assoc_value instead
[  213.192886][T13994] netlink: 'syz.2.3280': attribute type 2 has an invalid length.
[  213.312142][T13999] netlink: 'syz.2.3283': attribute type 21 has an invalid length.
[  213.315614][T13999] netlink: 'syz.2.3283': attribute type 22 has an invalid length.
[  213.318895][T13999] netlink: 'syz.2.3283': attribute type 23 has an invalid length.
[  213.322172][T13999] netlink: 'syz.2.3283': attribute type 25 has an invalid length.
[  214.461098][T14091] __nla_validate_parse: 10 callbacks suppressed
[  214.461122][T14091] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3318'.
[  214.517117][T14094] audit_tg_check: 18 callbacks suppressed
[  214.517140][T14094] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  214.519849][T14096] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3320'.
[  214.719882][T14115] lo speed is unknown, defaulting to 1000
[  214.727012][T14115] wg1 speed is unknown, defaulting to 1000
[  215.107294][T14145] netlink: 'syz.1.3334': attribute type 11 has an invalid length.
[  215.110727][T14145] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3334'.
[  215.111028][T14144] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  215.121553][T14144] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  215.129526][T14144] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  215.138896][T14144] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  215.141955][T14147] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  215.148374][T14144] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  215.157134][T14144] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  215.169586][T14144] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  215.179753][T14144] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  215.275306][T14156] validate_nla: 2 callbacks suppressed
[  215.275321][T14156] netlink: 'syz.2.3339': attribute type 11 has an invalid length.
[  215.346849][T14157] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  215.431359][T14164] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  215.812227][T14198] syzkaller1: entered promiscuous mode
[  215.817024][T14198] syzkaller1: entered allmulticast mode
[  215.855684][T14199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3354'.
[  216.189499][T14235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3369'.
[  216.198265][T14235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3369'.
[  216.202560][T14235] netlink: 'syz.1.3369': attribute type 14 has an invalid length.
[  216.209546][T14235] netlink: 'syz.1.3369': attribute type 11 has an invalid length.
[  216.318852][T14243] openvswitch: netlink: Missing key (keys=1040, expected=10000000)
[  216.346900][T14245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3373'.
[  216.384467][T14247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3374'.
[  216.389148][T14247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3374'.
[  216.392402][T14247] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3374'.
[  216.405350][T14245] syz.1.3373: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  216.411255][T14245] CPU: 1 UID: 0 PID: 14245 Comm: syz.1.3373 Not tainted syzkaller #0 PREEMPT(full) 
[  216.411281][T14245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  216.411289][T14245] Call Trace:
[  216.411295][T14245]  <TASK>
[  216.411302][T14245]  dump_stack_lvl+0x189/0x250
[  216.411323][T14245]  ? __pfx_dump_stack_lvl+0x10/0x10
[  216.411334][T14245]  ? __pfx__printk+0x10/0x10
[  216.411348][T14245]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  216.411367][T14245]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  216.411378][T14245]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  216.411389][T14245]  warn_alloc+0x214/0x310
[  216.411406][T14245]  ? stack_depot_save_flags+0x40/0x860
[  216.411422][T14245]  ? __pfx_warn_alloc+0x10/0x10
[  216.411435][T14245]  ? kasan_save_track+0x4f/0x80
[  216.411446][T14245]  ? xskq_create+0x56/0x170
[  216.411455][T14245]  ? xsk_init_queue+0xb0/0x110
[  216.411463][T14245]  ? xsk_setsockopt+0x4dc/0x8d0
[  216.411470][T14245]  ? do_sock_setsockopt+0x17c/0x1b0
[  216.411481][T14245]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  216.411490][T14245]  ? do_syscall_64+0xfa/0x3b0
[  216.411500][T14245]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.411512][T14245]  __vmalloc_node_range_noprof+0x125/0x12f0
[  216.411538][T14245]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  216.411550][T14245]  ? xskq_create+0x56/0x170
[  216.411560][T14245]  ? __kasan_kmalloc+0x93/0xb0
[  216.411573][T14245]  vmalloc_user_noprof+0xad/0xf0
[  216.411586][T14245]  ? xskq_create+0xbf/0x170
[  216.411595][T14245]  xskq_create+0xbf/0x170
[  216.411606][T14245]  xsk_init_queue+0xb0/0x110
[  216.411616][T14245]  xsk_setsockopt+0x4dc/0x8d0
[  216.411625][T14245]  ? __pfx_xsk_setsockopt+0x10/0x10
[  216.411634][T14245]  ? __pfx_aa_sk_perm+0x10/0x10
[  216.411649][T14245]  ? aa_sock_opt_perm+0xff/0x1b0
[  216.411659][T14245]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  216.411673][T14245]  ? __pfx_xsk_setsockopt+0x10/0x10
[  216.411686][T14245]  do_sock_setsockopt+0x17c/0x1b0
[  216.411733][T14245]  __x64_sys_setsockopt+0x13f/0x1b0
[  216.411748][T14245]  do_syscall_64+0xfa/0x3b0
[  216.411760][T14245]  ? lockdep_hardirqs_on+0x9c/0x150
[  216.411772][T14245]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.411781][T14245]  ? exc_page_fault+0x9f/0xf0
[  216.411791][T14245]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.411801][T14245] RIP: 0033:0x7f1ad758ec29
[  216.411810][T14245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  216.411818][T14245] RSP: 002b:00007f1ad838f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  216.411829][T14245] RAX: ffffffffffffffda RBX: 00007f1ad77d5fa0 RCX: 00007f1ad758ec29
[  216.411835][T14245] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000010
[  216.411841][T14245] RBP: 00007f1ad7611e41 R08: 0000000000000004 R09: 0000000000000000
[  216.411847][T14245] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  216.411852][T14245] R13: 00007f1ad77d6038 R14: 00007f1ad77d5fa0 R15: 00007fff731d8a38
[  216.411868][T14245]  </TASK>
[  216.411872][T14245] Mem-Info:
[  216.527688][T14245] active_anon:13518 inactive_anon:0 isolated_anon:0
[  216.527688][T14245]  active_file:1492 inactive_file:38299 isolated_file:0
[  216.527688][T14245]  unevictable:1768 dirty:218 writeback:0
[  216.527688][T14245]  slab_reclaimable:10418 slab_unreclaimable:58867
[  216.527688][T14245]  mapped:18277 shmem:2420 pagetables:1058
[  216.527688][T14245]  sec_pagetables:0 bounce:0
[  216.527688][T14245]  kernel_misc_reclaimable:0
[  216.527688][T14245]  free:261926 free_pcp:23338 free_cma:0
[  216.546091][T14245] Node 0 active_anon:25764kB inactive_anon:0kB active_file:4272kB inactive_file:136320kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:26036kB dirty:572kB writeback:0kB shmem:4884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7600kB pagetables:2480kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  216.559679][T14245] Node 1 active_anon:28308kB inactive_anon:0kB active_file:1696kB inactive_file:16876kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:47072kB dirty:300kB writeback:0kB shmem:4796kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4556kB pagetables:1752kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  216.574391][T14245] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  216.589967][T14245] lowmem_reserve[]: 0 811 811 811 811
[  216.592428][T14245] Node 0 DMA32 free:178640kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25764kB inactive_anon:0kB active_file:4272kB inactive_file:136320kB unevictable:3536kB writepending:572kB present:1556484kB managed:830856kB mlocked:0kB bounce:0kB free_pcp:57020kB local_pcp:13352kB free_cma:0kB
[  216.608159][T14245] lowmem_reserve[]: 0 0 0 0 0
[  216.610247][T14245] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  216.630006][T14245] lowmem_reserve[]: 0 0 854 854 854
[  216.650864][T14245] Node 1 Normal free:395076kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28308kB inactive_anon:0kB active_file:1696kB inactive_file:16876kB unevictable:3536kB writepending:300kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:36992kB local_pcp:19284kB free_cma:0kB
[  216.663924][T14245] lowmem_reserve[]: 0 0 0 0 0
[  216.668962][ T5854] Bluetooth: hci2: link tx timeout
[  216.675985][ T5854] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  216.694997][T14245] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  216.703864][T14245] Node 0 DMA32: 2*4kB (UE) 32*8kB (M) 86*16kB (ME) 112*32kB (UM) 33*64kB (ME) 60*128kB (UME) 38*256kB (UME) 10*512kB (UME) 5*1024kB (UM) 4*2048kB (UM) 33*4096kB (UM) = 178344kB
[  216.713385][T14245] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  216.729303][T14245] Node 1 Normal: 813*4kB (UM) 619*8kB (UM) 224*16kB (UM) 61*32kB (UM) 286*64kB (UM) 134*128kB (UM) 65*256kB (UME) 27*512kB (UME) 12*1024kB (UM) 4*2048kB (UM) 72*4096kB (UM) = 395052kB
[  216.741537][T14245] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  216.746077][T14245] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  216.758323][T14245] 42214 total pagecache pages
[  216.761787][T14245] 0 pages in swap cache
[  216.766393][T14245] Free swap  = 124996kB
[  216.768406][T14245] Total swap = 124996kB
[  216.769863][T14245] 786301 pages RAM
[  216.775208][T14245] 0 pages HighMem/MovableOnly
[  216.778810][ T5858] Bluetooth: hci2: link tx timeout
[  216.780556][ T5858] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  216.792121][T14245] 241355 pages reserved
[  216.793967][T14245] 0 pages cma reserved
[  216.816348][ T5858] Bluetooth: hci2: link tx timeout
[  216.818182][ T5858] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  216.995991][ T5858] Bluetooth: hci2: link tx timeout
[  216.997736][ T5858] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  217.177939][T14302] syzkaller1: entered allmulticast mode
[  217.392046][T14307] (unnamed net_device) (uninitialized): (slave gretap0): Device is not bonding slave
[  217.397814][T14307] (unnamed net_device) (uninitialized): option active_slave: invalid value (gretap0)
[  217.534476][ T5858] Bluetooth: hci2: link tx timeout
[  217.536562][ T5858] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  217.919749][ T5858] Bluetooth: hci2: link tx timeout
[  217.924104][ T5858] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  218.013803][ T5858] Bluetooth: hci2: link tx timeout
[  218.016378][ T5858] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  218.026131][ T5858] Bluetooth: hci2: link tx timeout
[  218.028657][ T5858] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  218.149290][T14342] delete_channel: no stack
[  218.298326][T14355] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  218.429826][T14363] sctp: [Deprecated]: syz.0.3411 (pid 14363) Use of struct sctp_assoc_value in delayed_ack socket option.
[  218.429826][T14363] Use struct sctp_sack_info instead
[  218.443700][ T5858] Bluetooth: hci2: link tx timeout
[  218.445383][ T5858] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  218.627030][T14387] netlink: 'syz.2.3421': attribute type 3 has an invalid length.
[  218.630263][T14387] netlink: 'syz.2.3421': attribute type 1 has an invalid length.
[  218.743195][ T5854] Bluetooth: hci2: command 0x0401 tx timeout
[  219.221234][T14431] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  219.349663][T14444] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  219.392450][T14449] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  219.500224][T14453] tipc: Resetting bearer <eth:syzkaller0>
[  219.555686][T14452] lo speed is unknown, defaulting to 1000
[  219.564175][T14452] wg1 speed is unknown, defaulting to 1000
[  219.690171][T14462] audit_tg_check: 36 callbacks suppressed
[  219.690189][T14462] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  219.727006][T14466] __nla_validate_parse: 18 callbacks suppressed
[  219.727023][T14466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3447'.
[  219.759331][T14468] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  219.816890][T14470] syzkaller1: entered promiscuous mode
[  219.819103][T14470] syzkaller1: entered allmulticast mode
[  219.895109][T14478] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  219.970979][T14483] veth15: entered promiscuous mode
[  219.990096][T14486] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  220.049214][T14490] (unnamed net_device) (uninitialized): (slave gretap0): Device is not bonding slave
[  220.056577][T14490] (unnamed net_device) (uninitialized): option active_slave: invalid value (gretap0)
[  220.183925][T14502] veth0_to_bridge: entered promiscuous mode
[  220.187293][T14502] veth0_to_bridge: left promiscuous mode
[  220.296052][T14512] netlink: 'syz.0.3466': attribute type 29 has an invalid length.
[  220.341577][T14515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3467'.
[  220.434398][T14525] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  220.472215][T14530] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  220.570555][T14544] netlink: 'syz.0.3475': attribute type 4 has an invalid length.
[  220.578666][T14544] netlink: 'syz.0.3475': attribute type 4 has an invalid length.
[  220.592073][ T5314] lo speed is unknown, defaulting to 1000
[  220.597888][T14545] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  220.600469][ T5314] syz2: Port: 1 Link ACTIVE
[  220.607306][T14546] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  220.685668][T14552] (unnamed net_device) (uninitialized): (slave gretap0): Device is not bonding slave
[  220.689677][T14552] (unnamed net_device) (uninitialized): option active_slave: invalid value (gretap0)
[  220.690957][T14554] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3479'.
[  220.698286][T14555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3479'.
[  220.748628][T14559] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3481'.
[  220.955715][T14570] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  220.959039][T14570] syzkaller0: entered promiscuous mode
[  220.961277][T14570] syzkaller0: entered allmulticast mode
[  220.967234][T14569] tipc: Resetting bearer <eth:syzkaller0>
[  220.985881][T14569] tipc: Disabling bearer <eth:syzkaller0>
[  221.144582][T14578] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  221.275499][T14587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3491'.
[  222.036658][T14597] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3496'.
[  222.040259][T14597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3496'.
[  222.046661][T14600] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  222.157105][T14608] lo speed is unknown, defaulting to 1000
[  222.190755][T14611] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  222.196432][T14612] (unnamed net_device) (uninitialized): (slave gretap0): Device is not bonding slave
[  222.200311][T14612] (unnamed net_device) (uninitialized): option active_slave: invalid value (gretap0)
[  222.309433][T14620] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3506'.
[  222.541381][T14638] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3510'.
[  222.718538][   T10] lo speed is unknown, defaulting to 1000
[  222.720754][   T10] syz2: Port: 1 Link DOWN
[  222.837416][T14663] (unnamed net_device) (uninitialized): (slave gretap0): Device is not bonding slave
[  222.841127][T14663] (unnamed net_device) (uninitialized): option active_slave: invalid value (gretap0)
[  222.969293][T14675] netlink: 'syz.1.3527': attribute type 3 has an invalid length.
[  222.974327][ T5854] Bluetooth: hci1: command 0x0406 tx timeout
[  223.174044][T14703] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  223.804177][T14753] lo speed is unknown, defaulting to 1000
[  223.840281][T14756] netlink: 'syz.2.3558': attribute type 21 has an invalid length.
[  223.843583][T14757] netlink: 'syz.2.3558': attribute type 21 has an invalid length.
[  224.229855][T14776] bond2: (slave bridge0): Releasing backup interface
[  224.329204][T14778] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  224.463347][T14788] (unnamed net_device) (uninitialized): (slave gretap0): Device is not bonding slave
[  224.467308][T14788] (unnamed net_device) (uninitialized): option active_slave: invalid value (gretap0)
[  224.579117][T14797] ==================================================================
[  224.582496][T14797] BUG: KASAN: use-after-free in xfrm_alloc_spi+0x570/0xf30
[  224.584828][T14797] Read of size 4 at addr ffff888038fff244 by task syz.0.3572/14797
[  224.588630][T14797] 
[  224.589487][T14797] CPU: 1 UID: 0 PID: 14797 Comm: syz.0.3572 Not tainted syzkaller #0 PREEMPT(full) 
[  224.589501][T14797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  224.589508][T14797] Call Trace:
[  224.589520][T14797]  <TASK>
[  224.589527][T14797]  dump_stack_lvl+0x189/0x250
[  224.589545][T14797]  ? __kasan_check_byte+0x12/0x40
[  224.589559][T14797]  ? __pfx_dump_stack_lvl+0x10/0x10
[  224.589569][T14797]  ? lock_release+0x4b/0x3e0
[  224.589586][T14797]  ? __virt_addr_valid+0x4a5/0x5c0
[  224.589600][T14797]  print_report+0xca/0x240
[  224.589611][T14797]  ? xfrm_alloc_spi+0x570/0xf30
[  224.589624][T14797]  kasan_report+0x118/0x150
[  224.589644][T14797]  ? xfrm_alloc_spi+0x570/0xf30
[  224.589666][T14797]  xfrm_alloc_spi+0x570/0xf30
[  224.589687][T14797]  ? xfrm_alloc_spi+0x2a0/0xf30
[  224.589711][T14797]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  224.589723][T14797]  ? xfrm_find_acq+0x87/0xa0
[  224.589736][T14797]  xfrm_alloc_userspi+0x70b/0xc90
[  224.589748][T14797]  ? apparmor_capable+0x137/0x1b0
[  224.589759][T14797]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  224.589767][T14797]  ? __nla_parse+0x40/0x60
[  224.589778][T14797]  xfrm_user_rcv_msg+0x7a3/0xab0
[  224.589789][T14797]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  224.589805][T14797]  ? __pfx___mutex_trylock_common+0x10/0x10
[  224.589816][T14797]  ? rcu_is_watching+0x15/0xb0
[  224.589825][T14797]  ? trace_contention_end+0x39/0x120
[  224.589833][T14797]  ? __mutex_lock+0x335/0x1350
[  224.589846][T14797]  netlink_rcv_skb+0x208/0x470
[  224.589857][T14797]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  224.589866][T14797]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  224.589879][T14797]  ? netlink_deliver_tap+0x2e/0x1b0
[  224.589888][T14797]  ? netlink_deliver_tap+0x2e/0x1b0
[  224.589901][T14797]  xfrm_netlink_rcv+0x79/0x90
[  224.589909][T14797]  netlink_unicast+0x82f/0x9e0
[  224.589919][T14797]  ? __pfx_netlink_unicast+0x10/0x10
[  224.589927][T14797]  ? netlink_sendmsg+0x642/0xb30
[  224.589936][T14797]  ? skb_put+0x11b/0x210
[  224.589947][T14797]  netlink_sendmsg+0x805/0xb30
[  224.589959][T14797]  ? __pfx_netlink_sendmsg+0x10/0x10
[  224.589969][T14797]  ? aa_sock_msg_perm+0xf1/0x1d0
[  224.589977][T14797]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  224.589986][T14797]  ? __pfx_netlink_sendmsg+0x10/0x10
[  224.589996][T14797]  __sock_sendmsg+0x21c/0x270
[  224.590005][T14797]  ____sys_sendmsg+0x505/0x830
[  224.590017][T14797]  ? __pfx_____sys_sendmsg+0x10/0x10
[  224.590036][T14797]  ? import_iovec+0x74/0xa0
[  224.590054][T14797]  ___sys_sendmsg+0x21f/0x2a0
[  224.590070][T14797]  ? __pfx____sys_sendmsg+0x10/0x10
[  224.590097][T14797]  ? __fget_files+0x2a/0x420
[  224.590109][T14797]  ? __fget_files+0x3a0/0x420
[  224.590124][T14797]  __x64_sys_sendmsg+0x19b/0x260
[  224.590142][T14797]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  224.590206][T14797]  ? rcu_is_watching+0x15/0xb0
[  224.590223][T14797]  ? do_syscall_64+0xbe/0x3b0
[  224.590246][T14797]  do_syscall_64+0xfa/0x3b0
[  224.590263][T14797]  ? lockdep_hardirqs_on+0x9c/0x150
[  224.590281][T14797]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.590294][T14797]  ? exc_page_fault+0x9f/0xf0
[  224.590309][T14797]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.590322][T14797] RIP: 0033:0x7fa20858ec29
[  224.590336][T14797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  224.590349][T14797] RSP: 002b:00007fa20936e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  224.590376][T14797] RAX: ffffffffffffffda RBX: 00007fa2087d5fa0 RCX: 00007fa20858ec29
[  224.590389][T14797] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000047
[  224.590399][T14797] RBP: 00007fa208611e41 R08: 0000000000000000 R09: 0000000000000000
[  224.590407][T14797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  224.590416][T14797] R13: 00007fa2087d6038 R14: 00007fa2087d5fa0 R15: 00007ffcf7b79838
[  224.590432][T14797]  </TASK>
[  224.590437][T14797] 
[  224.720870][T14797] The buggy address belongs to the physical page:
[  224.723090][T14797] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38fff
[  224.725825][T14797] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  224.728049][T14797] raw: 00fff00000000000 ffffea0000e3ff88 ffffea0001091108 0000000000000000
[  224.731290][T14797] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  224.734600][T14797] page dumped because: kasan: bad access detected
[  224.737095][T14797] page_owner tracks the page as freed
[  224.739397][T14797] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 14230, tgid 14229 (syz.0.3367), ts 216133679516, free_ts 216227808410
[  224.746770][T14797]  post_alloc_hook+0x240/0x2a0
[  224.748697][T14797]  get_page_from_freelist+0x21e4/0x22c0
[  224.750876][T14797]  __alloc_frozen_pages_noprof+0x181/0x370
[  224.753119][T14797]  alloc_pages_mpol+0x232/0x4a0
[  224.755007][T14797]  alloc_pages_noprof+0xa9/0x190
[  224.756743][T14797]  __vmalloc_node_range_noprof+0x97d/0x12f0
[  224.758983][T14797]  vmalloc_user_noprof+0xad/0xf0
[  224.760987][T14797]  xskq_create+0xbf/0x170
[  224.762812][T14797]  xsk_init_queue+0xb0/0x110
[  224.764710][T14797]  xsk_setsockopt+0x57b/0x8d0
[  224.766569][T14797]  do_sock_setsockopt+0x17c/0x1b0
[  224.768687][T14797]  __x64_sys_setsockopt+0x13f/0x1b0
[  224.770792][T14797]  do_syscall_64+0xfa/0x3b0
[  224.772540][T14797]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.774871][T14797] page last free pid 14229 tgid 14229 stack trace:
[  224.777423][T14797]  __free_frozen_pages+0xbc4/0xd30
[  224.779443][T14797]  vfree+0x25a/0x400
[  224.781054][T14797]  xskq_destroy+0x40/0x60
[  224.782762][T14797]  xsk_release+0x4c7/0x700
[  224.784523][T14797]  sock_close+0xc3/0x240
[  224.786207][T14797]  __fput+0x44c/0xa70
[  224.787804][T14797]  task_work_run+0x1d4/0x260
[  224.789676][T14797]  exit_to_user_mode_loop+0xec/0x110
[  224.791767][T14797]  do_syscall_64+0x2bd/0x3b0
[  224.793604][T14797]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.795859][T14797] 
[  224.796840][T14797] Memory state around the buggy address:
[  224.799050][T14797]  ffff888038fff100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  224.802192][T14797]  ffff888038fff180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  224.805357][T14797] >ffff888038fff200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  224.808482][T14797]                                            ^
[  224.810876][T14797]  ffff888038fff280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  224.813941][T14797]  ffff888038fff300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  224.817084][T14797] ==================================================================
[  224.820622][T14797] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  224.823393][T14797] CPU: 1 UID: 0 PID: 14797 Comm: syz.0.3572 Not tainted syzkaller #0 PREEMPT(full) 
[  224.827017][T14797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  224.830929][T14797] Call Trace:
[  224.832284][T14797]  <TASK>
[  224.833470][T14797]  dump_stack_lvl+0x99/0x250
[  224.835320][T14797]  ? __asan_memcpy+0x40/0x70
[  224.837189][T14797]  ? __pfx_dump_stack_lvl+0x10/0x10
[  224.839285][T14797]  ? __pfx__printk+0x10/0x10
[  224.840959][T14797]  vpanic+0x281/0x750
[  224.842297][T14797]  ? __pfx_vpanic+0x10/0x10
[  224.843752][T14797]  ? irqentry_exit+0x74/0x90
[  224.845209][T14797]  panic+0xb9/0xc0
[  224.846336][T14797]  ? __pfx_panic+0x10/0x10
[  224.847826][T14797]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  224.849793][T14797]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  224.851682][T14797]  ? xfrm_alloc_spi+0x570/0xf30
[  224.853619][T14797]  check_panic_on_warn+0x89/0xb0
[  224.855580][T14797]  ? xfrm_alloc_spi+0x570/0xf30
[  224.857534][T14797]  end_report+0x78/0x160
[  224.859253][T14797]  kasan_report+0x129/0x150
[  224.860997][T14797]  ? xfrm_alloc_spi+0x570/0xf30
[  224.862656][T14797]  xfrm_alloc_spi+0x570/0xf30
[  224.864303][T14797]  ? xfrm_alloc_spi+0x2a0/0xf30
[  224.865993][T14797]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  224.867866][T14797]  ? xfrm_find_acq+0x87/0xa0
[  224.869436][T14797]  xfrm_alloc_userspi+0x70b/0xc90
[  224.871422][T14797]  ? apparmor_capable+0x137/0x1b0
[  224.873419][T14797]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  224.875531][T14797]  ? __nla_parse+0x40/0x60
[  224.877305][T14797]  xfrm_user_rcv_msg+0x7a3/0xab0
[  224.879254][T14797]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  224.881392][T14797]  ? __pfx___mutex_trylock_common+0x10/0x10
[  224.883707][T14797]  ? rcu_is_watching+0x15/0xb0
[  224.885585][T14797]  ? trace_contention_end+0x39/0x120
[  224.887672][T14797]  ? __mutex_lock+0x335/0x1350
[  224.889576][T14797]  netlink_rcv_skb+0x208/0x470
[  224.891415][T14797]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  224.893381][T14797]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  224.895175][T14797]  ? netlink_deliver_tap+0x2e/0x1b0
[  224.897053][T14797]  ? netlink_deliver_tap+0x2e/0x1b0
[  224.899098][T14797]  xfrm_netlink_rcv+0x79/0x90
[  224.900708][T14797]  netlink_unicast+0x82f/0x9e0
[  224.902393][T14797]  ? __pfx_netlink_unicast+0x10/0x10
[  224.904310][T14797]  ? netlink_sendmsg+0x642/0xb30
[  224.906001][T14797]  ? skb_put+0x11b/0x210
[  224.907324][T14797]  netlink_sendmsg+0x805/0xb30
[  224.908851][T14797]  ? __pfx_netlink_sendmsg+0x10/0x10
[  224.910688][T14797]  ? aa_sock_msg_perm+0xf1/0x1d0
[  224.912439][T14797]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  224.914257][T14797]  ? __pfx_netlink_sendmsg+0x10/0x10
[  224.916117][T14797]  __sock_sendmsg+0x21c/0x270
[  224.917926][T14797]  ____sys_sendmsg+0x505/0x830
[  224.919842][T14797]  ? __pfx_____sys_sendmsg+0x10/0x10
[  224.921913][T14797]  ? import_iovec+0x74/0xa0
[  224.923738][T14797]  ___sys_sendmsg+0x21f/0x2a0
[  224.925637][T14797]  ? __pfx____sys_sendmsg+0x10/0x10
[  224.927705][T14797]  ? __fget_files+0x2a/0x420
[  224.929537][T14797]  ? __fget_files+0x3a0/0x420
[  224.931428][T14797]  __x64_sys_sendmsg+0x19b/0x260
[  224.933414][T14797]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  224.935561][T14797]  ? rcu_is_watching+0x15/0xb0
[  224.937164][T14797]  ? do_syscall_64+0xbe/0x3b0
[  224.938679][T14797]  do_syscall_64+0xfa/0x3b0
[  224.940084][T14797]  ? lockdep_hardirqs_on+0x9c/0x150
[  224.941950][T14797]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.944220][T14797]  ? exc_page_fault+0x9f/0xf0
[  224.945807][T14797]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.947683][T14797] RIP: 0033:0x7fa20858ec29
[  224.949065][T14797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  224.955223][T14797] RSP: 002b:00007fa20936e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  224.958172][T14797] RAX: ffffffffffffffda RBX: 00007fa2087d5fa0 RCX: 00007fa20858ec29
[  224.960694][T14797] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000047
[  224.963264][T14797] RBP: 00007fa208611e41 R08: 0000000000000000 R09: 0000000000000000
[  224.965813][T14797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  224.968369][T14797] R13: 00007fa2087d6038 R14: 00007fa2087d5fa0 R15: 00007ffcf7b79838
[  224.971313][T14797]  </TASK>
[  224.972972][T14797] Kernel Offset: disabled
[  224.974388][T14797] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:36:42  Registers:
info registers vcpu 0

CPU#0
RAX=d75f416a431a7800 RBX=ffffffff819693f8 RCX=d75f416a431a7800 RDX=0000000000000001
RSI=ffffffff8d9ba6b8 RDI=ffffffff8be33c00 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38e30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7af3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001ec0 CR3=0000000112086000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=3200000000bb0000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 00000000020000a6
XMM04=12388f8c21f0e31c bfba935042bada52 XMM05=a6954a4a786e005c 097b12af1d2717d0
XMM06=b84a4f6a093b9eb4 7a587abdce37c399 XMM07=f807568512b9952d 75114ca249e242df
XMM08=0000000000000000 00007fa208612f0f XMM09=0000000000000000 00007fa208612fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bee60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=00000000000013ae RDI=00000000000013af RBP=ffffffff99df76b0 RSP=ffffc90002d2e990
R8 =ffff888107180237 R9 =1ffff11020e30046 R10=dffffc0000000000 R11=ffffffff854f94f0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df7420 R15=0000000000000000
RIP=ffffffff854f9567 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa20936e6c0 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000112086000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fa2087a7498 00007fa2087a7470 XMM03=00007fa2087a74a8 00007fa2087a74a0
XMM04=00007fa20930d100 00007fa2087a7460 XMM05=00007fa2087a7478 00007fa2087a74c0
XMM06=00007fa2087a74b8 00007fa2087a74b0 XMM07=00007fa2087a74a8 00007fa2087a74a0
XMM08=0000000000000000 00007fa208612f0f XMM09=0000000000000000 00007fa208612fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
