last executing test programs:

1.118534715s ago: executing program 0 (id=7634):
r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000001280)=@abs, &(0x7f0000001240)=0x6e, 0x800)
sendto$unix(r0, &(0x7f00000001c0)="0d20b184084393b80879c8c8a5be74c6f58fb2208fb0bea627076c84c2d16e5ee8a8ed2aaa2d7f125c2678cf9db57e193693a256e6fbdc6b7755aa7fe6428ddd2594f77997710d9170ab64a8da4888cb4813bb3a7ac3369ba61c51d0da53939ab07f9cc880d00f40e1aa6fb4659c213aa8706158cb8a4a201fae65e41ebd8ff79244ebf20f70c46d623ad41984198001cde52da90e1a4e86c3b286795b1fd41ad069c5bb76c8bf33dd9bfdce517f2f2d53a177ec30be9656a5aaba9cb1c19fa46948d1dd9f8aae67a470232529d71bf976c115024ce3a6723d3c378fef1f723596f9b2b2a7499d26c055083650a1013a9299e9a7cbb2e008b321696913733cfe15e87f39ff8a2dc016fe833bff3fa022bd9d4483cb5e401181fb0441fb48fcf037f46f86ea08e1b0e200d79dc35b91d6991eb9f9a32132606e34a87beb13aaef0ef322f5d07bd4407ae14a9e2e5dceb02043fb0e7e1d3dcf6cdaf13763d2fbb25849ef238789e7cfc880c8c002dc9e825e93836b5e57ad892e07c4e1ce62d3569320e53e3ff5c843acb9635042eae90b0097d374773bbcdbb28e8d7fdd3b1e7733975d70e720baeb70ce1a6c7041fc7302b55fa220c8d827a6891e98b848a0db754d8bff9dbc4829c4925fbdd6d5f6fc345cb1a0c1f6d8d2d6f5c84c6b2ad54e979788c6db87d282afc9b7d4f1f81db72a32c53eebdd59a3aa064fcc51311e7ba83daf70ccb1be2f9143139c5b9e420af6a518d06da6c1cd413ff71c187d37d191857404adcfb9d37146861cdef88e4d85360ebdfeade51ab3a30ee4ed42f4aab609ab4d40798cd78b398bbaa9edf8385ba6c6f5c0021063612845d6589b19dbd0d1c8045111d6454835a396f5d799f0420a6a7fd4452f0fd635058a92713b862a4cbd2d99de6a0aafa6d761974d7c09e93676cc3a1c613f9956394a92cfc80e9ff8106ae584cd2d87173668c86506668beed2d7341ebb6007c29ef4bf03dbacf29e7edf733009b9d1153d8434d983494bd7a65789e7dc68d82a767e7a66cc8940204ec01086643a0dab0e4c65eb2ba334c54097e12a0e9634364213f4c612ee20f0ed3b06ab11363ea8d5a04c805f721d1f2ae02e620863da4ce0c55efa43ac53c782b75a1b0d653e646521f43476ae92a688c0e75441f70fa9d5753b512d254737e9b6069bd4a66fbcd95e86ef7c87439fb07600208140f8f4a29e2de5eb0e20dbe0c680edc22762e5644415f9bed77914559463922358414c769edff1c7d0e5b1905588b5f6120faed3c9e52348d5a5e446614fcc3fd83e5821c274413c8afc0c2c47470f5cdc21e4f467a76180e8529b068f8822533908784e9a3bc3185fb07b125a611ced84e1cf82a1d15e863a3f750adc3720b937c195f70ce6073016693016e54c522b88223b7bb8686471cd201495c6fccd6117c89b2aec8883635e3b913628b79b157e654ea2b354f03915a47f920e04dfd2b7bf5d408ee9ec5cd4bfa91ec79c778ccdf53909b69a55f77708046744ae33eee45a06b0d04bca820d451b6c6448bad6f1c0c77dc76d580858570d75d493603e7fadbf882b8fa56a24c4f3107c28be5013830c91fe3d70f0e2b338ab4d6c41bb046759027cc24dca4f5ded1802631c65949ec76854976e3f4c07f36f8e026dd0aab61d93c00bdacefede503286dadca4ca12ca12cbb06d799831c301ec4a5872be0466ba4d02c13d50ba1a9f57a15e689b6eab0f4371d4b45a691afae69f912bc4b9e75a14120ce5b186fda3a3baa12a69de99f78e5962111a4ddffd5002ae92c5df5b850d88307310c5317f7a4ac9fae82eff03f3518feaee4d0d696a4673fc1c41034362b62f9c2cb3225f053e0d98a4cdfde175686c35a7ac6600a8af78df64f76cb7841c67de389857c577ca136efc8f685315bc766db6d385b34e8e56510a2803da718e8047284845497c80a4967d278260d4abee178844eed33fdf30222a5f63d1eff9801d44a936f006697aa6f968cd7bf6b038fb5df5e6ad0056a513753e743ca3a6c4938784f0a9752ad71340668f7c19af8762119d8ec632a75b1c9dbeb56940b19c7b9a73118981da0c80d4a368abd046c199b6650fae02eac4b6a9e8e44aee3539a4990bfa6f829c96a33b738db040385ae18a95cc5ef36ff97a69c1ff5b6cd096ed0e267a27445f5e8ab3a9d4c32d6e0819c5abccc0089d9e0302617c993eb669ee9a695f67cb8734f7ddecc3a414c13d6adca2bdff9726f845593ac40ac87d98839fd8c24c4dfbda01029f722520e88e34ff4d2d1dc1442c2a3797ba54db991fd5a84809ae6aeaa3d5b659cab62e61c895eba8da534d5b535b56da68114ac108c3d63163b66fb66bfd1864681a6c45f1f82648117b9e3a585e01ff199ec6c033464179624af6bb2d96d43dbc3ca9fcae1dea94f9c53dd56956c1ffefbb0bbe1aac2704ae0beef1f76ea0a950b3a7b1a27e2fd21f5ff5c39511e72ea5e56d1d1110f6a37e11121f505855715139e15d7586ac8d7b8872f06c415959064dbb1b0658bfdac85338cf13c48c34d4cb0cda4a2e1ed12867719cd21d8e1a6321c6eeab59d3e04b236166063a71ad70c00b126bc457b56446075cb3f9b1c446d8b721a6eef0da4560b939516123f23153642a8eb2d17fd5134efb8d9fe05d2580ad515b9efa30cca8688b3f1458379aaea66b830d22b6b273f4dde6c016b99c2d6d5efef4480e08e0915bf3f72854bcdd79b7f6af6f3d320b65e896cff4851cec37d32329907d0d8846b1a854ee69532e5a3d2ee919c72cb0d84d0c37bed8182dca2a43d76530dd7646e16ce67e4360c367fad5a3f016d8edeb1e1322cd037b40ad27cfe62765c225c96f698e79b5a99c96a5196e06dc517f68b733c597c9adf4dfa6f0fc0a9d37f0b34904aca8e9d520fd437d18f64ea0fafa94ecb082419e157da855e4a1305ba9417e1ca7c1f7c53468878862bfe38e4e0e251daf2356f85ff644b704d05224e6e29effee6c3e74861012023084bd3838d0b3b3bb23234e9e23fa179dd94ba61a73ad854149b52052eeb66b214ac6f1d445068e4176d5d1d964105a1d77821d7dfa29d4c3adda5eb1efaac8db96060d9f068aa14d31ed5e845b123b958832897f063fea986f67aa3cd4c5082276be9acfcd72dce0eca9be2fc87912d6322275969b7b22c291898e478f92bf2f7f3f832bd1993dc3c1e655aa846fbdacd453cc47a4561b2c86361ee7859e20f52e38e1616021ce6a8e9253705dc9eb5be86827473a954e0803530557f18ec3db91046274c61ca0c5ac97a4e1df17f0a51ca55a8fecf2028c5ad2f545c61f2685b7c18f506dd68f04d567dc335279987e053df5a16d5e7e73217490dabd6bca63924bdb97d74edf5948728b30a2176bc20a4c107108e47740eff7ee5a786d28366f01b218b745ca145badd6e7419a103e0195ea533b4b4100efe795dcebd0d4b2d2dbc825d9ad228687f3b216d29598b9b5dc67c6d857ebc4406341c3afe9c50c145e45d77a94dfcbf695e7588e306302534366025a0d8735178757659a4b87348ce4956a74813c397c2db7fba58e87083d871f1587c59166187ec3ce627b1f2dea065f31303a2610b1a22255bba9c7b1723cc127130976bdd4e1c1aead8bb304221419ff9446cd0de01b81d0813565280b6e7ba85633031e090c5b0cdbb4bae1bbf59345ae0014d090d512a26d96064dea7ae759c0d76509b97e0372d86ce89e5b56bc5d58a123163cce697080ad68d500c93c8ee1dbfa88431e9288741f2f6211ab470b05f495fa828d0c6b03ce52ca66caabf496d3ec8b0b20e13f6ec9fccf2190e3f87859fb6456e8478b21a2d5a404f7c2aac3d99c8ec4fc7ac328d4c51d77ee15377a8c120ee78f0164bdc6879e57bb78b88400d5298017e8d60ef951aec84518ab09e84efd0ae860bc76f569ffb6aa6290934944e913dadfa6a66e6a1e0e4a27269f2813c25377021ee19d11a85f738666711ad396785bdff71ac4cc3e6f0d0c8f99efe9636793118927bf62e52698abb47bb7095e976e6210634165e5688e9a4d4293f7c5045eb6e07b99618f35873c379cca2c9a06aebd98418d8b3486cbdb477b8f42f49b0dee613bc4c7d006829ef7f3a7a9276942265afe4489f9da633e03ab81a0a620e8ff71a064c54c076b3b33fd0881f0cd78d3d38b2953098bf61a18cb25d8c1f2e85334b90648020c17315156f7cc1cd8e7c204f7ec0667efdf8f99f8a332e4004f2c1dda9497d06987601d1cf1cd0106d6ea79d2e5fdf6a00ad32ffd4f1430d657fe29711e385343b29854f74ae93ee4a0c54c8c4aa73cdb7fcf3c3eb5cfccddc6f1b13b3f2820fb7511ff7d8aed5326943ab108a6a92606a44b01fa51e5c92b5fb36e287ec61f82d510679c202400eabef9acd5aff4efcabc021f35b7f0858c4e6a089fea49a26c88a42212d3f90f43c82d185b9ac64b9694b96d72c2dbdd3d28047941093efe7148f3ef50f14c16d65dbb9cedefc9eae52082333dc1b48942ea13a790636d9467550c9436afa0aab37cf4db265b4580419ab1e93311d811c5e01b406991773e83724fdbef302e9240f65a2ca0a1a4a459c9748af27a0d09eb415743b15fc107312b6d7174f32b760293d8a13c0af6a87bb1926612b2ec4f8f1342ed4725b063c04bfe6a03e9da2051b8966df36eee5ae327ab11aef3af3f262b2ce6ef61efab349d299215da4393c958891985015c9f0e10ad8c8c8f99d4e327f9f778904401e17f5cd001cf7a66e11336c267792d8f659b811950eb1e2fe94a7b6fa13faeab992d4d95697aa104606bf51177090957ed93ae434a26964d8645e70eb66d4225bf1cfa2a88455953391d201f3d0d47ad0b7ed78cde3954b3aae7e7e35b4fd4f08290d4fdeb46204cf8a5fb76e8f548d52302a24e282e74a408695c6f7488ea7a087ed24eb360acdec083785ccef5c6fe0a5ebacb6a3125caa02f5796f16772ab27f7c068329ba1774c119c55873a589b6b702e19f2159a4b5e020579050156fe14b6e5906e93a2b9c763e7ce169b2e3c5adb64c990dcabcd08a4ec4f743b70fa71157801097a0f8727e82f23d2f5c9df8ac337223548bf44e3f67564ad1dd1c5276f2dca7e5991a0abcda1ccdd7586e50cb5af5a1f16ff51bde03da8e1a0cc7042fdef7864392902cfae9708ba487b892a68698b4a38477fcb511d31509f2a04cdff932bcd377abce1c1f7f0b45f9349ca0b1df47c6d0f84b3ed8b489e032dca831be574ad033a3f72a493bd93503e9fac84b00ab5dcccac9a62ad9a613298b55ec724b522213db86d3582b80a3bd4800fc2eb44108f3eea07c4fcb9650cf33846fd4d0bbdb748fb285bcb4485ba5158cca92bfe29e625e4615fb92db9f4cfc0f1770465c892bf4dc852de2bd44b829799c6a019a146a46799e2a4505f8ed9b1afaab654fabf6eecc463d18cf119dfcac4e69f6b7b1684fbc97e2ce18394fdfb0af734ac1661bec2d8bc97b26ea4c64c77b9d5407c6aa921b3edbae9f28ed947300a1fb344fa365009534d3016cffab098ed0f9d6c1379502efc95866aa9f3af2754fb7f668ecc10d7546ba332ac3f38147b8b20bb670c5de3dbb86f80f96175c927db1ec4f6d3f198e9b0f3c2cb9392650435365fcb32248aee1335fc42fbd8ccfa19198557e02d18907325a46a8a85490c0a6fdbb86ec4fe544439254d60939d0aec738a6ae2770727e339c7adbafeb71d892c45116af3e30f3f27945aaad3e8a1a7164549321d895cd5a12202caf2c393c62d933d37c8b724c153b4bfc68b15", 0x1000, 0x4040, &(0x7f00000011c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000305030000008000000000000000", @ANYRES32=0x0, @ANYBLOB="15010000000001002400128009000100626f6e64000000001400028008000300060000000800040000000000"], 0x44}}, 0x28000000)

1.116262627s ago: executing program 0 (id=7637):
socket$inet6(0xa, 0x80002, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, 0xffffffffffffffff, 0x1f4d2000)
r1 = syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x48805}, 0x8800)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff0100000000000000000200000114000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x4c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x35, 0x11, 0x0, 0x1, [@generic="9e15c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965fe09b7844e4b103706a1038bc955454ed2f"]}]}, 0x4c}], 0x1}, 0x300)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
r6 = socket$inet(0x2, 0x1, 0x100)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
close(r7)
r8 = accept(r6, &(0x7f0000000040)=@l2, &(0x7f00000000c0)=0x80)
bind$802154_dgram(r8, &(0x7f0000000100)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14)

990.85406ms ago: executing program 1 (id=7641):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000002b000701feffffff00000000037c00000c0001800100000001000000100002800c0001"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000200000000000000000000008500000087000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000e7140000850000000e00000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r8, 0x0, 0xe, 0x0, &(0x7f0000000300)="d9c1e2ffe2cbb6be679e0e79f378", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r13], 0x4)

950.930185ms ago: executing program 0 (id=7642):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x50)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x7f, 0x0, 0x1}, 0x3)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r0], 0x28}}, 0x0)
accept4$unix(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000280)=0x6e, 0x80000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000400000001000000800000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
accept4(r2, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x3, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008091)
sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x2)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x8000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="30003300c0000000ffffffffffff080211000000505050505050"], 0x4c}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x1}})
ioctl(r8, 0x8b1b, &(0x7f0000000040))
socket$nl_route(0x10, 0x3, 0x0)

832.084594ms ago: executing program 1 (id=7643):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x2, 0x300) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async)
close(0xffffffffffffffff) (async)
write$tun(r0, &(0x7f0000000040)=ANY=[], 0xfdef)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb023, 0x241}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}}, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x8, 0x12, 0xffffffffffffffff, 0xfffff000)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f3", 0x74}], 0x1}, 0x0) (async)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x800) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r6, @ANYBLOB="08000600"], 0x24}}, 0x4000) (async, rerun: 32)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r8=>0x0}) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="00001700000000001c0037800b0001006970"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0)

624.564766ms ago: executing program 0 (id=7646):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x3, 0x3, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x80000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x1801)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f80)={'caif0\x00', &(0x7f0000000540)=@ethtool_ringparam={0x11, 0x1, 0x0, 0xfffffffc, 0x3, 0x7, 0xfffffffa, 0x80000000, 0x7}})

622.882837ms ago: executing program 0 (id=7648):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, 0xffffffffffffffff, 0x1f4d2000)
r2 = syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x48805}, 0x8800)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff0100000000000000000200000114000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x4c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x35, 0x11, 0x0, 0x1, [@generic="9e15c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965fe09b7844e4b103706a1038bc955454ed2f"]}]}, 0x4c}], 0x1}, 0x300)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0xa8, 0xb, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_macvtap\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x401}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x24, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x9}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
listen(r7, 0xeac)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000000801040000000000ca000000070000030600455b8cfa6b976a7053232002408987f254c2fd0300060000000900010073797a30000000f7ff64737344cb3ae60b1d6acf6c82cd3701c3d7eccc9bdd0c6056334887aa3441e07ee4ed2cc59b0eb75c7a817fdacd033606795a0138add65b35d21e6aceba3a6c2abb65b0f02ed43cc5c88d9ef9fad04eb2164fbfa729aee31ce31d09bf3202d4cb58c88c423f4eacd2fe3f1d4019f91635770f00001ea6952265fee95ef289e220f590204ec739cf072e53b9455c4235bb6447d379f3889b5bbffa665df7d9b56c86576070cdb3dd6d987e8d10cd1139e07dcb871a79b4c649d75cc68091b5d61bcd2816a7b7e5738e3f9d9cb3bee15f2b8c4c1f52714eec01df01d320b9a2b58b789214cd121163f43fe740c6b2afb1f90400"/317], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20048084)
getsockname$qrtr(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc)

521.706562ms ago: executing program 1 (id=7649):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4004084) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12812, r5, 0x0) (async)
r6 = socket(0x28, 0x5, 0x0)
setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) (async)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000580)={0x4c, 0x2, 0x7, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xffffffffffff8001}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80000000}]}]}, 0x4c}}, 0x44)
socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7) (async)
ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000240)={'vcan0\x00'}) (async)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x0, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

270.955051ms ago: executing program 1 (id=7650):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x100, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x9}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048845}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@deltfilter={0x24, 0x2d, 0x5, 0x70bd2a, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0xfff3, 0x9}, {0x2, 0xf}, {0x1, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)={@map, r0, 0x2f, 0x2028, 0x4}, 0x20)

268.394773ms ago: executing program 0 (id=7651):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ppoll(&(0x7f0000000300)=[{r0, 0x100}], 0x1, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="f50d50f718feb8d99a14e1db3f500c17b383e2a7b19bdc5e6b439fb63bb56ef7c20cd87be3ba12abe8358d8655060e72dd6499ea4b2ac6bd60fa5171b8fdeaf34e091038a2743bbed6a82cf956dfa2d32a2f7f2faab79a26567a3274ad4d9deaa67b8eed9f2a03761b70f4c01fbc19e0fd8201", @ANYBLOB="966d23b6e46af41c35a76900eac061ed76ab74f740c77c506ae2afee56da979a4703dc4f5d291555a849d09adbf5e7dafe313d96d8b8fc9ee29e3069d764710ee5d77718309cb1ccc68215f81b4ae9df8c8d420f6f436297136ef35df3dbcc5a54092dbd65e25b7dac32984d29b879f2b1c27faf6fc0cb2c367c5aa78faec956028edfa809ca0b8ac71b7833f06daf384cddd5a3b0a15cb5a23119e3a9d29855b544900b8283b8ced68f20015412f199c1", @ANYRES64=r0, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES16=r0], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r2}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x2, 0x3, 0xff)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000040)=0x2105, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x4c800)
r6 = socket(0x2b, 0x80801, 0x1)
setsockopt$inet6_int(r6, 0x29, 0x1e, 0x0, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r9, &(0x7f0000000780)={&(0x7f00000001c0)=@in={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700), 0x0, &(0x7f0000000400)=[@sndinfo={0x20, 0x84, 0x2, {0x1, 0x8006, 0x9, 0x4}}], 0x20, 0x8000}, 0x20008000)
r10 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r10, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)

266.702714ms ago: executing program 2 (id=7652):
r0 = socket$packet(0x11, 0x3, 0x300)
sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="6f447f84384770cc05159265567a92e74fcff6d45db71f9ff0e11063d135f32146b800930e211d951d4964b658862fc02bd259705efdf2179a786958c600dabcc141e3036284bc17e0debec1b2c9f145401a4d7de2279c0db98d7040415015b90316811323550890069a5d97e5f2fe28c20f5a38fadc7c88562a721778d517051993380ebb71d58716e098dfca450d612f90c37321a3a0bc17c0", 0x9a, 0x4000000, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @mcast1, 0x4}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x3c, &(0x7f0000000400)=[{0x5d, 0xfc, 0x2, 0xfffbf010}, {0x825, 0x0, 0x0, 0x7ffff021}, {0x6, 0x0, 0x0, 0xffff}]}, 0xffffffffffffff7e)

236.263724ms ago: executing program 1 (id=7653):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x2, 0x7ff, 0x20, @dev={0xfe, 0x80, '\x00', 0x2a}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x700, 0xdfd, 0xc2}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) (async)
pselect6(0x40, &(0x7f0000000200)={0x100, 0x4, 0x9, 0x9, 0x8, 0x6, 0x1, 0x5a}, &(0x7f0000000240)={0x9, 0x0, 0x1, 0xda9, 0xa9, 0x28, 0x40, 0x8}, &(0x7f0000000280)={0x3ff, 0x3, 0x1, 0x7, 0x4, 0xfff, 0x4, 0x8}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x6]}, 0x8}) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x20008041) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) (async)
r5 = socket(0x2, 0x80805, 0x0) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) (async)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b000000000000005a319d0721bc580af1d8e2d8", @ANYRES32=0x0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x10, 0x21, 0x70bd29, 0x0, {0x3}, [@nested={0x7, 0x1, 0x0, 0x1, [@generic="24de95"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000400009dd34e042f30a6aef4d2a3f9aef0c222df150000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001700)={{}, &(0x7f0000000240), &(0x7f00000003c0)=r9}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="18080000ddf7ffff000000000000000018110000e61bd41a3210bb75c9fb3fb6175e7965f825dc5d026011612f83995416e9b827d21c4021338299f732d912ef9039820653b2ae8bf9575b416a41a35f355f25b1a46ef37c88672e83092d777e369445b1dae5eb4ac7e839d2e044f144a8b015ecc9d0807fa172c14c179128c539d27f023cda5b5c9a4ab1f3a00e6bcf9d62cfb02fa327a61f33a664f74d9b3117daae12f5099c0c56f1127fc10a9107f55da29e6b0001434134b36c71719a62c246", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000739af8ff00000000b509000001000000dbaaf8ff10010000bf8600000000000007080000fffdffffbfa400000000000007040000f0ffffffc702000008000000182200", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000010000008500000007000000b7000000000000009500000000000000"], &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) (async)
shutdown(r4, 0x0) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async)
shutdown(r3, 0x1) (async)
socket$packet(0x11, 0x2, 0x300) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff)

235.388721ms ago: executing program 1 (id=7654):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x2000000000000035, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x0, 0x80000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0)
write$nci(0xffffffffffffffff, 0x0, 0x12)
close(0x3)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0xc, 0x45003, 0xffffffffffffffff, 0x6}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="320101011ccca027a5c085b5a05f370bec8d2fdc1b626f7415d9904ed47bc48c1bb4a9d7935391e5aaddbb4c99bdc800353d39fb036acedc2eeb6edf4f33ce2e872c660d"], 0x4)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58)
r6 = accept$alg(r5, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r7 = accept(r6, 0x0, 0x0)
sendmmsg$inet6(r7, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)="148f550b27", 0x5}, {&(0x7f00000004c0)="9e42f33ae3010f2395c572c1852fe60b4f287f26ce401b21fdc7b9ba5126e88225018300004f482ab7cbc2d43a04afe15b22024d8bb04ad78438c7607fc35b5cd311c789", 0x44}], 0x2}}], 0x1, 0x4890)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x50}}, 0x0)

181.746158ms ago: executing program 2 (id=7655):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socket(0x28, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@cgroup, 0xffffffffffffffff, 0x1a, 0x3}, 0x20)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
connect$bt_rfcomm(r3, &(0x7f000000d400)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xad}, 0xfffffffffffffe3f)
socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', <r4=>0x0})
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="2342d152c7fe5fe6837a536548646821b7604f76a1fb1b492d4ec2de5244a3e3a99c9f94bcc3ecfbe13dad7669cd52c2f4fc06fe60df9f7b21cadda210511ee904b9415c101f6db5080fd11b58c4d5c1496244cc7910a8dd4482cc5c6f837fef87fddc7d59ca183de349ed2fd847f0980e67807870d562df88188cd2229330fa7a687423a83b249b29daa704c7b1bdcc05af1c5404bb060632fa096cb0a89e75eb94fcb5d635f447f7aaf994884b2f51ac6c063bcc6132eb8df900fb52969b"], 0x44}, 0x1, 0xba01}, 0x810)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000200)={0x1, 0xc, 0x82, &(0x7f0000000340)=""/130})
r5 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24)
sendmmsg(r5, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0)
sendmmsg(r5, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec00000000000000d5cecc3958e33b778d0407ccfdc628be37dcb40a633fdc30e73d9789917949572cce605812cd2e4025b09db2e37c0cf2d00d2972f783e4265a37f27a8a75afb6e30a3c28c5ef68a6a76e93aa6d7d51e9f32d6946d4"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0)
close(r5)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000060000000000000000000000180900002020702500000000002020207b1af8ff00000000bda004000000000027000000f8ffffffb702000008000000b7030000000004002500f8ff0600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x28}, 0x94)
socket$inet(0x2, 0x2, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
socket$inet6(0xa, 0x5, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000000)={'wlan0\x00'})
r7 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r7, 0x4)

131.926729ms ago: executing program 2 (id=7656):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000240)={0xffffffffffffffff, 0x4, 0x3a, 0xa59, @vifc_lcl_addr=@multicast1, @local}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x148, 0x30, 0x29, 0x0, 0x25dfdbfe, {}, [{0x134, 0x1, [@m_mpls={0x130, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x1880}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xd4e9}]}, {0xde, 0x4, "0e55a76800f5e0ba3b3caf75f2c44de134c87c51894e7f875453ae9cd4472c6d734c0dcf118b2966458e5bfa70ad7b7c313e2df501000000000000000510eb100edd727778e9a61f50cdf50e610e1e56b1bae91bcb049437d8313ec3714f210f4abd838a941e279804ffb708581664628a327d60f4c35c96e24d8a75f25e1430e437c23513b25223733e9edcb89139746314756f9f5ac4a3ed33ac67b631fe9407c9cc05c42aa49856cb2fdbc3a3883081e63297f89d4a5251a9754c2aec60cbb86c16d85a19abef133cccf1545cf3101c720f0f55b7a0b174b5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x148}}, 0x40)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x14, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r2)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x94, r4, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xa}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xcf}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004040)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x4, 0x4, 0xfffffffd, 0x1}, 0x10)
write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f0000000000000000020000080004000a000000", 0x24)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000040))

71.459525ms ago: executing program 2 (id=7657):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@bridge_getvlan={0x28, 0x72, 0x0, 0x70bd27, 0x25dfdbff, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}}, 0x880)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r2=>0x0})
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2}, 0x18)
sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x77, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2, 0x0, {0x2, 0x0, 0x4}}, 0x18, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0xee)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = socket(0x22, 0x2, 0x3)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x80000000, 0x4)
unshare(0x8040480)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x490}, 0x48)
r5 = socket$tipc(0x1e, 0x5, 0x0)
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
unshare(0x2e040400)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000060000000400"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r8, &(0x7f0000000040)}, 0x20)
ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000))
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000000)=0xffffffffffffffff)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=0xffffffffffffffff)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, 0x0, 0x0)

1.523101ms ago: executing program 2 (id=7658):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)={0x18, 0x5a, 0x30d, 0x0, 0x3, "", [@generic="3373619d52"]}, 0x18}], 0x1}, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0xfffffffe, 0x10000, 0xfffffffe}, 0x1c)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000000))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = getpid()
r4 = socket$netlink(0x10, 0x3, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1) (async)
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000400)=0xc) (async)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000400)=0xc)
sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x3c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r6}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0xa0, 0x0, 0x1, [@nested={0x14, 0xf6, 0x0, 0x1, [@nested={0x10, 0x146, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @u32=0xb3}, @nested={0x4, 0x4d}]}]}]}]}, 0x3c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000001c0)=0xc) (async)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, <r7=>0x0}, &(0x7f00000001c0)=0xc)
setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={r3, r6, r7}, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="140100001000010000000000000000000000000a4c000000060a0904000000000000000002000000200004801c0001800a00010072656469720000000c000280080001400000000f0900010073797a30000000000900020073797a3200000000000000000400000a000010000000000000000000"], 0x74}}, 0x0)

0s ago: executing program 2 (id=7659):
syz_emit_ethernet(0x86, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0xfffc, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast2, {[@noop, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@private=0xa010101, 0x7}]}, @cipso={0x86, 0x2c, 0x3, [{0x2, 0x6, "84924d89"}, {0x6, 0x2}, {0x2, 0xf, "d109567cb50ec760777fb80755"}, {0x5, 0xb, "c92d3002d91d907b79"}, {0x0, 0x2}, {0x0, 0x2}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "ade34b13"}]}]}}}}}}}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7800fcdbdf250700000014000200fc00000000000000000000000000000014000300fc00"/54], 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x637a74b3ba8292c3, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0xfffffffe}, 0x10}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000003e000701feffffff00000000017c00400c00428008000a"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
r4 = socket(0x10, 0x803, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000600)=r2, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)

kernel console output (not intermixed with test programs):

T23942] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  345.300312][T23942] syzkaller0: mtu less than device minimum
[  345.621360][T23978] netlink: 'syz.0.5164': attribute type 1 has an invalid length.
[  345.621440][T23977] netlink: 'syz.0.5164': attribute type 1 has an invalid length.
[  345.636473][T23978] bond31: entered promiscuous mode
[  345.639501][T23978] 8021q: adding VLAN 0 to HW filter on device bond31
[  345.691009][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.694180][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.955349][T23991] bridge12: entered allmulticast mode
[  346.105112][T24001] __nla_validate_parse: 28 callbacks suppressed
[  346.105127][T24001] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5171'.
[  346.111908][T24001] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5171'.
[  346.196931][T24003] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5172'.
[  346.373260][T24020] IPVS: Scheduler module ip_vs_sip not found
[  346.389285][T24024] netlink: 4208 bytes leftover after parsing attributes in process `syz.0.5180'.
[  346.400346][T24021] IPVS: Scheduler module ip_vs_sip not found
[  346.435743][T24027] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5181'.
[  346.459115][T24027] batadv2: entered promiscuous mode
[  346.461663][T24027] batadv2: entered allmulticast mode
[  346.635499][T24055] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  346.685281][T24064] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5191'.
[  346.721045][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  346.765564][T24064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5191'.
[  347.466102][T24148] team0: Device sit4 is of different type
[  347.575330][T24162] validate_nla: 6 callbacks suppressed
[  347.575344][T24162] netlink: 'syz.1.5221': attribute type 1 has an invalid length.
[  347.639561][T24170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5223'.
[  347.647790][T24170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5223'.
[  347.652923][T24170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5223'.
[  347.693823][T24170] lo speed is unknown, defaulting to 1000
[  347.727850][T24180] netlink: 'syz.2.5226': attribute type 3 has an invalid length.
[  347.741632][T24181] IPv6: sit4: Disabled Multicast RS
[  347.761023][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.764628][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.817646][T24170] lo speed is unknown, defaulting to 1000
[  347.820275][T24170] lo speed is unknown, defaulting to 1000
[  347.822858][T24170] wg1 speed is unknown, defaulting to 1000
[  348.705138][T24191] netlink: 'syz.2.5229': attribute type 11 has an invalid length.
[  348.897176][T24216] netlink: 'syz.1.5236': attribute type 29 has an invalid length.
[  348.900940][T24216] netlink: 'syz.1.5236': attribute type 29 has an invalid length.
[  348.907982][T24218] netlink: 'syz.2.5237': attribute type 10 has an invalid length.
[  348.933742][T24218] netlink: 'syz.2.5237': attribute type 10 has an invalid length.
[  348.938406][T24218] batadv0: entered allmulticast mode
[  349.019509][T24230] netlink: 'syz.1.5243': attribute type 6 has an invalid length.
[  349.022344][T24230] netlink: 'syz.1.5243': attribute type 5 has an invalid length.
[  349.066346][T24236] lo speed is unknown, defaulting to 1000
[  349.204816][T24245] netlink: 'syz.0.5249': attribute type 1 has an invalid length.
[  349.240476][T24245] 8021q: adding VLAN 0 to HW filter on device bond32
[  349.254020][T24236] lo speed is unknown, defaulting to 1000
[  349.275061][T24236] lo speed is unknown, defaulting to 1000
[  349.295447][T24236] wg1 speed is unknown, defaulting to 1000
[  349.432369][T24266] vlan0: entered allmulticast mode
[  349.538124][T24271] batadv_slave_0: entered promiscuous mode
[  349.559628][T24269] batadv_slave_0: left promiscuous mode
[  349.600591][T24278] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  349.654012][T16931] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  349.656931][T16931] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  349.659693][T16931] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  349.662956][T16931] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  349.841117][    C0] net_ratelimit: 3 callbacks suppressed
[  349.841132][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.847126][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  350.344859][   T33] audit: type=1107 audit(1755582425.000:12): pid=24307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  350.751177][T24325] batadv_slave_0: entered promiscuous mode
[  350.768306][T24325] team2: entered promiscuous mode
[  350.770218][T24325] team2: entered allmulticast mode
[  350.794147][T24331] team3: entered promiscuous mode
[  350.796431][T24331] team3: entered allmulticast mode
[  350.815158][T24333] vlan1: entered allmulticast mode
[  350.817351][T24333] bridge_slave_0: entered allmulticast mode
[  350.881132][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  350.884685][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.125287][T24345] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  351.562992][T24381] __nla_validate_parse: 29 callbacks suppressed
[  351.563003][T24381] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5289'.
[  351.655184][T24387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5291'.
[  351.671497][T24396] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  351.675250][T24396] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  351.741546][T24395] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5292'.
[  351.755923][T24395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5292'.
[  351.832794][T24400] tipc: Enabled bearer <eth:gre0>, priority 10
[  351.836711][T24400] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5293'.
[  351.921144][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.074263][T24410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5296'.
[  352.114255][T24413] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5297'.
[  352.217671][T24431] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5300'.
[  352.221860][T24431] netlink: 204732 bytes leftover after parsing attributes in process `syz.2.5300'.
[  352.227349][T24431] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5300'.
[  352.356283][T24450] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  352.749126][T24495] validate_nla: 7 callbacks suppressed
[  352.749142][T24495] netlink: 'syz.2.5317': attribute type 1 has an invalid length.
[  352.961260][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.963971][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.967954][T24514] netlink: 'syz.2.5321': attribute type 11 has an invalid length.
[  353.524525][T24525] netlink: 'syz.1.5325': attribute type 10 has an invalid length.
[  353.530192][T24525] team0: entered promiscuous mode
[  353.533659][T24525] 8021q: adding VLAN 0 to HW filter on device team0
[  353.565603][T24531] sctp: [Deprecated]: syz.1.5326 (pid 24531) Use of int in max_burst socket option.
[  353.565603][T24531] Use struct sctp_assoc_value instead
[  353.638709][T24535] 1{X: left allmulticast mode
[  353.649234][T24535] ip6gretap0: left promiscuous mode
[  353.652726][T24535] team0: left promiscuous mode
[  353.655709][T24535] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  353.687338][ T5873] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  353.787038][ T5873] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  353.865908][T24550] wireguard: wg1: Could not create IPv4 socket
[  353.871449][T24550] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  354.001331][T24572] sit0: left promiscuous mode
[  354.011598][ T5873] lo speed is unknown, defaulting to 1000
[  354.013953][ T5873] syz1: Port: 1 Link ACTIVE
[  354.021589][T24572] veth0_to_team: entered promiscuous mode
[  354.023986][T24572] veth0_to_team: entered allmulticast mode
[  354.061108][T24584] netlink: 'syz.2.5345': attribute type 14 has an invalid length.
[  354.174184][T24602] netlink: 'syz.0.5350': attribute type 1 has an invalid length.
[  354.273255][T24612] netlink: 'syz.2.5353': attribute type 11 has an invalid length.
[  354.396128][T24630] netlink: 'syz.1.5358': attribute type 9 has an invalid length.
[  354.626518][T24659] netlink: 'syz.1.5368': attribute type 9 has an invalid length.
[  354.717665][T16931] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  354.762529][T24672] netlink: 'syz.2.5373': attribute type 26 has an invalid length.
[  354.882565][T24699] netlink: 'syz.0.5381': attribute type 7 has an invalid length.
[  354.905977][T24702] raw_sendmsg: syz.1.5382 forgot to set AF_INET. Fix it!
[  355.041029][    C0] net_ratelimit: 3 callbacks suppressed
[  355.041045][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  355.046837][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  355.056437][T24721] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  355.282665][T24753] lo speed is unknown, defaulting to 1000
[  355.307017][T16931] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[  355.335004][T24759] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  355.356947][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  355.404071][T24753] lo speed is unknown, defaulting to 1000
[  355.407252][T24753] lo speed is unknown, defaulting to 1000
[  355.409782][T24753] wg1 speed is unknown, defaulting to 1000
[  355.508700][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  355.887053][ T5855] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  355.889976][ T5855] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  355.936900][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  356.084666][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  356.087452][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  356.976204][T24852] __nla_validate_parse: 35 callbacks suppressed
[  356.976217][T24852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5426'.
[  357.165098][T24875] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5434'.
[  357.170987][T24875] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5434'.
[  357.175017][T24875] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[  357.231583][T24878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5435'.
[  357.265108][T24878] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  357.290503][T24889] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5438'.
[  357.308801][T24893] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5439'.
[  357.319426][T24893] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5439'.
[  357.322411][T24893] 0{X: renamed from 31{X
[  357.327329][T24893] 0{X: entered allmulticast mode
[  357.329770][T24893] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  357.336484][T24893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5439'.
[  357.365645][T24897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5441'.
[  357.373493][T16931] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  357.373557][T24897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5441'.
[  357.376201][T16931] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  357.383334][T16931] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  357.386124][T16931] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  357.973873][T24914] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  358.911764][T24942] validate_nla: 9 callbacks suppressed
[  358.911782][T24942] netlink: 'syz.0.5453': attribute type 1 has an invalid length.
[  359.172853][T24975] lo speed is unknown, defaulting to 1000
[  359.382440][T24975] lo speed is unknown, defaulting to 1000
[  359.385392][T24975] lo speed is unknown, defaulting to 1000
[  359.388165][T24975] wg1 speed is unknown, defaulting to 1000
[  359.534496][T25001] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  359.534528][ T5855] bond0: (slave bond7): interface is now down
[  359.574463][ T5855] bond0: now running without any active interface!
[  359.766718][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  359.917981][T25028] netlink: 'syz.1.5477': attribute type 10 has an invalid length.
[  359.940338][T25028] batman_adv: batadv0: Adding interface: 
[  359.944062][T25028] batman_adv: batadv0: The MTU of interface  is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[  359.954049][T25028] batman_adv: batadv0: Interface activated: 
[  360.374882][T25061] netlink: 'syz.2.5487': attribute type 2 has an invalid length.
[  360.381269][T25061] sctp: [Deprecated]: syz.2.5487 (pid 25061) Use of struct sctp_assoc_value in delayed_ack socket option.
[  360.381269][T25061] Use struct sctp_sack_info instead
[  360.683294][T25096] lo speed is unknown, defaulting to 1000
[  360.727228][T25102] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  360.732566][T25102] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  360.798786][T25096] lo speed is unknown, defaulting to 1000
[  360.801529][T25096] lo speed is unknown, defaulting to 1000
[  360.804150][T25096] wg1 speed is unknown, defaulting to 1000
[  361.274554][T25120] netlink: 'syz.1.5506': attribute type 1 has an invalid length.
[  361.457499][T25133] tipc: Disabling bearer <udp:syz2>
[  361.778668][T25176] syzkaller1: entered promiscuous mode
[  361.780943][T25176] syzkaller1: entered allmulticast mode
[  361.841698][T25158] bond0: (slave bond21): Releasing active interface
[  361.846847][T25158] bond22: (slave geneve6): Releasing active interface
[  361.855417][T25158] bond24: (slave vxcan3): Releasing backup interface
[  361.861066][T25158] vxcan3: left promiscuous mode
[  361.864536][T25158] bond26: (slave wireguard0): Releasing backup interface
[  361.869187][T25158] wireguard0: left promiscuous mode
[  361.871150][T25158] bond26: (slave wireguard1): making interface the new active one
[  361.873673][T25158] wireguard1: entered promiscuous mode
[  361.878926][T25158] bond26: (slave wireguard1): Releasing backup interface
[  361.881277][T25158] wireguard1: left promiscuous mode
[  361.888610][T25158] bond29: (slave bridge17): Releasing active interface
[  361.891223][T25158] bond29: (slave bridge17): the permanent HWaddr of slave - 4e:ef:fd:6b:ae:81 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  361.900895][T25158] bond29: (slave bridge18): Releasing active interface
[  361.905896][T25158] bond30: (slave geneve8): Releasing active interface
[  361.911716][T25158] team0: Port device bridge0 removed
[  361.916051][T25158] team0: Port device bridge22 removed
[  361.922852][T25158] bond34: (slave ip6gretap0): Removing an active aggregator
[  361.928282][T25158] bond34: (slave ip6gretap0): Releasing backup interface
[  361.930799][T25158] bond34: (slave ip6gretap0): the permanent HWaddr of slave - f2:10:67:1b:44:bc - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  361.940528][T25158] bond34: (slave veth23): Releasing backup interface
[  361.946360][T25178] team0: Unable to change to the same mode the team is in
[  362.047952][T25195] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  362.092022][T25201] bridge0: port 1(batadv1) entered blocking state
[  362.094463][T25201] bridge0: port 1(batadv1) entered disabled state
[  362.097398][T25201] batadv1: entered allmulticast mode
[  362.100890][T25201] batadv1: entered promiscuous mode
[  362.128565][T25203] tap0: tun_chr_ioctl cmd 1074025677
[  362.130399][T25203] tap0: linktype set to 804
[  362.207996][T25210] __nla_validate_parse: 34 callbacks suppressed
[  362.208015][T25210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5533'.
[  362.295002][T25216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5536'.
[  362.299109][T25216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5536'.
[  362.302615][T25216] netlink: 'syz.0.5536': attribute type 5 has an invalid length.
[  362.345589][T25222] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5537'.
[  362.353063][T25224] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5538'.
[  362.370931][T25224] lo speed is unknown, defaulting to 1000
[  362.392555][T25228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5540'.
[  362.411522][T25229] netlink: 'syz.2.5538': attribute type 1 has an invalid length.
[  362.414116][T25229] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.5538'.
[  362.461877][T25224] lo speed is unknown, defaulting to 1000
[  362.464615][T25224] lo speed is unknown, defaulting to 1000
[  362.467424][T25224] wg1 speed is unknown, defaulting to 1000
[  362.598423][ T5921] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  362.601771][ T5921] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  362.619030][T25237] IPVS: length: 49 != 24
[  362.790623][T25257] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5548'.
[  362.793543][T25257] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5548'.
[  362.968057][T25266] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5552'.
[  363.040061][T25280] ip6gretap2: entered promiscuous mode
[  363.112965][T25287] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  363.348943][T25309] netlink: 'syz.0.5565': attribute type 1 has an invalid length.
[  363.352627][T25310] syzkaller0: entered promiscuous mode
[  363.354387][T25310] syzkaller0: entered allmulticast mode
[  363.355246][T25309] netlink: 'syz.0.5565': attribute type 1 has an invalid length.
[  363.360543][T25309] netlink: 'syz.0.5565': attribute type 1 has an invalid length.
[  363.363546][T25309] netlink: 'syz.0.5565': attribute type 1 has an invalid length.
[  363.593536][T25320] lo speed is unknown, defaulting to 1000
[  363.683069][T25320] lo speed is unknown, defaulting to 1000
[  363.685697][T25320] lo speed is unknown, defaulting to 1000
[  363.688515][T25320] wg1 speed is unknown, defaulting to 1000
[  364.064346][T25339] validate_nla: 30 callbacks suppressed
[  364.064358][T25339] netlink: 'syz.2.5573': attribute type 1 has an invalid length.
[  364.071222][T25339] netlink: 'syz.2.5573': attribute type 1 has an invalid length.
[  364.183382][T25350] netlink: 'syz.1.5577': attribute type 10 has an invalid length.
[  364.298834][T25373] net_ratelimit: 1 callbacks suppressed
[  364.298846][T25373] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  364.335975][T25375] netlink: 'syz.2.5584': attribute type 7 has an invalid length.
[  364.346099][T25375] netlink: 'syz.2.5584': attribute type 8 has an invalid length.
[  364.440682][T25386] bridge0: entered promiscuous mode
[  364.442524][T25386] macvtap1: entered allmulticast mode
[  364.444229][T25386] bridge0: entered allmulticast mode
[  364.484335][T25393] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  364.489755][T25393] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  364.508495][T25395] netlink: 'syz.0.5591': attribute type 15 has an invalid length.
[  364.581989][T25402] netlink: 'syz.0.5594': attribute type 22 has an invalid length.
[  364.584740][T25402] netlink: 'syz.0.5594': attribute type 22 has an invalid length.
[  364.590557][T25402] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  364.593019][T25402] syzkaller0: entered promiscuous mode
[  364.594916][T25402] syzkaller0: entered allmulticast mode
[  364.622063][T25402] tipc: Resetting bearer <eth:syzkaller0>
[  364.629853][T25401] tipc: Resetting bearer <eth:syzkaller0>
[  364.641047][T25401] tipc: Disabling bearer <eth:syzkaller0>
[  364.876311][T25425] gretap0: left allmulticast mode
[  364.889561][T25425] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  364.894542][T13489] lo speed is unknown, defaulting to 1000
[  364.896490][T13489] syz2: Port: 1 Link ACTIVE
[  364.992383][T25431] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  365.211437][T25458] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  365.218695][T25458] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  365.271165][T25472] veth0: entered promiscuous mode
[  366.016964][T25457] veth0: left promiscuous mode
[  366.126148][T25488] vlan0: entered promiscuous mode
[  366.128408][T25488] vlan0: entered allmulticast mode
[  366.168706][T25494] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  366.171881][T25494] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  367.222864][T25539] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  367.238960][T25546] netlink: 'syz.0.5624': attribute type 1 has an invalid length.
[  367.255900][T25546] 8021q: adding VLAN 0 to HW filter on device bond36
[  367.267104][T25546] bond36: (slave bridge15): making interface the new active one
[  367.270721][T25546] bond36: (slave bridge15): Enslaving as an active interface with an up link
[  367.281269][T25546] bond36: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  367.296311][T25551] netlink: 'syz.2.5626': attribute type 1 has an invalid length.
[  367.314511][T25551] 8021q: adding VLAN 0 to HW filter on device bond35
[  367.319351][T25551] __nla_validate_parse: 57 callbacks suppressed
[  367.319360][T25551] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5626'.
[  367.356205][T25557] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5627'.
[  367.388728][T25564] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.5629'.
[  367.568918][T25576] tipc: Resetting bearer <eth:gre0>
[  367.620538][T25576] batadv0: left allmulticast mode
[  367.626201][T25576] veth0_to_team: left promiscuous mode
[  367.629480][T25576] veth0_to_team: left allmulticast mode
[  367.632352][T25576] batadv_slave_0: left promiscuous mode
[  367.641671][T25576] gretap2: left promiscuous mode
[  367.643527][T25576] gtp0: left promiscuous mode
[  367.645204][T25576] sit1: left promiscuous mode
[  367.647551][T25576] bond19: left promiscuous mode
[  367.649165][T25576] bond19: left allmulticast mode
[  367.651789][T25576] macvlan3: left promiscuous mode
[  367.653606][T25576] macvlan3: left allmulticast mode
[  367.656542][T25576] veth19: left allmulticast mode
[  367.658861][T25576] mac80211_hwsim hwsim37 wlan0: left promiscuous mode
[  367.661113][T25576] bond24: left promiscuous mode
[  367.664299][T25576] tipc: Resetting bearer <eth:syzkaller0>
[  367.671121][T25576] mac80211_hwsim hwsim30 syzkaller0: left promiscuous mode
[  367.673657][T25576] mac80211_hwsim hwsim30 syzkaller0: left allmulticast mode
[  367.679214][T25576] bond26: left promiscuous mode
[  367.681315][T25576] ip6gre2: left allmulticast mode
[  367.683210][T25576] vlan1: left promiscuous mode
[  367.684838][T25576] 0{X: left promiscuous mode
[  367.687117][T25576] bridge0: left promiscuous mode
[  367.688717][T25576] bridge0: left allmulticast mode
[  367.690914][T25576] bridge22: left promiscuous mode
[  367.692950][T25576] bridge22: left allmulticast mode
[  367.698424][T25576] veth23: left promiscuous mode
[  367.700142][T25576] team2: left promiscuous mode
[  367.701834][T25576] team2: left allmulticast mode
[  367.703546][T25576] team3: left promiscuous mode
[  367.705081][T25576] team3: left allmulticast mode
[  367.735752][ T5873] lo speed is unknown, defaulting to 1000
[  367.737902][ T5873] syz1: Port: 1 Link DOWN
[  367.916724][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  368.105317][T25625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5642'.
[  368.175809][T25632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5645'.
[  368.175812][T25631] tap0: tun_chr_ioctl cmd 1074025677
[  368.182574][T25631] tap0: linktype set to 270
[  368.191377][T25629] IPVS: length: 49 != 24
[  368.194100][T25632] xfrm2: entered promiscuous mode
[  368.196417][T25632] xfrm2: entered allmulticast mode
[  368.281502][T25645] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5649'.
[  368.320889][T25652] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5651'.
[  368.342479][T25655] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5652'.
[  368.476323][T25678] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5657'.
[  368.704068][T25690] x9: renamed from bridge_slave_0
[  368.751770][T25686] lo speed is unknown, defaulting to 1000
[  368.838265][T25686] lo speed is unknown, defaulting to 1000
[  368.841019][T25686] lo speed is unknown, defaulting to 1000
[  368.843956][T25686] wg1 speed is unknown, defaulting to 1000
[  369.552540][T25716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5667'.
[  369.552629][T25715] validate_nla: 3 callbacks suppressed
[  369.552638][T25715] netlink: 'syz.1.5667': attribute type 15 has an invalid length.
[  369.555826][T25716] netlink: 'syz.1.5667': attribute type 15 has an invalid length.
[  369.563058][T25716] netlink: 'syz.1.5667': attribute type 15 has an invalid length.
[  369.619302][T25719] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  369.668333][T25721] netlink: 'syz.2.5669': attribute type 11 has an invalid length.
[  369.744366][T25728] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  369.852147][T25738] netlink: 'syz.2.5673': attribute type 1 has an invalid length.
[  370.360982][T25784] netlink: 'syz.2.5688': attribute type 9 has an invalid length.
[  370.651030][T25804] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  370.874117][T25820] batman_adv: batadv0: Adding interface: dummy0
[  370.876237][T25820] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  370.885365][T25820] batman_adv: batadv0: Interface activated: dummy0
[  370.897578][T25820] batadv0: mtu less than device minimum
[  370.899973][T25820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  370.903998][T25820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  370.907942][T25820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  370.911808][T25820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  370.915909][T25820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  370.919846][T25820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  370.923662][T25820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  370.927631][T25820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  371.528602][T16482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  371.531572][T16482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.661006][T25862] __nla_validate_parse: 14 callbacks suppressed
[  372.661017][T25862] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5711'.
[  372.669852][T25862] netem: unknown loss type 13
[  372.672709][T25862] netem: change failed
[  372.692609][T25862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5711'.
[  372.737947][T25871] netlink: 596 bytes leftover after parsing attributes in process `syz.1.5712'.
[  372.822519][T25874] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5713'.
[  372.825603][T25874] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5713'.
[  372.828831][T25874] netlink: 'syz.0.5713': attribute type 4 has an invalid length.
[  373.488089][T25876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5714'.
[  373.590940][T25882] bridge27: entered allmulticast mode
[  373.699852][T25903] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5722'.
[  373.900891][T25925] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  373.904711][T25925] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode
[  373.910438][T25925] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode
[  373.917235][T25925] tipc: Resetting bearer <eth:syzkaller0>
[  373.950005][T25936] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5731'.
[  374.005371][T25942] netlink: 'syz.2.5734': attribute type 16 has an invalid length.
[  374.009884][T25942] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5734'.
[  374.223805][T25970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5742'.
[  374.255692][T25974] netlink: 'syz.2.5743': attribute type 29 has an invalid length.
[  374.260620][T25974] netlink: 'syz.2.5743': attribute type 29 has an invalid length.
[  374.282736][T25976] netlink: 'syz.2.5744': attribute type 1 has an invalid length.
[  374.321352][T25980] Unsupported ieee802154 address type: 0
[  374.637926][ T5233] Bluetooth: hci2: command 0x0405 tx timeout
[  374.772799][T26052] validate_nla: 2 callbacks suppressed
[  374.772815][T26052] netlink: 'syz.0.5765': attribute type 9 has an invalid length.
[  375.018833][T26086] lo speed is unknown, defaulting to 1000
[  375.118368][T26086] lo speed is unknown, defaulting to 1000
[  375.120965][T26086] lo speed is unknown, defaulting to 1000
[  375.123517][T26086] wg1 speed is unknown, defaulting to 1000
[  375.206446][T26095] netlink: 'syz.1.5776': attribute type 1 has an invalid length.
[  375.746455][T26136] workqueue: Failed to create a rescuer kthread for wq "nfc8_nci_rx_wq": -EINTR
[  376.019079][T26193] netlink: 'syz.0.5797': attribute type 4 has an invalid length.
[  376.291996][T16931] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  376.303880][T26213] netlink: 'syz.0.5802': attribute type 9 has an invalid length.
[  377.210056][T26242] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  377.254301][T26242] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  377.322624][T26242] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  377.332901][T26266] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  377.363872][T26242] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  377.381448][T26268] tipc: Enabling of bearer <eth:gre0> rejected, already enabled
[  377.400141][T26268] netlink: 'syz.2.5817': attribute type 1 has an invalid length.
[  377.434389][ T5921] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  377.452083][T10632] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  377.472189][ T5921] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  377.490576][ T5855] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  377.612026][T26276] netlink: 'syz.0.5820': attribute type 6 has an invalid length.
[  377.626290][T26276] bond38: entered promiscuous mode
[  377.753306][T26287] xt_policy: neither incoming nor outgoing policy selected
[  377.754829][T26288] netlink: 'syz.0.5823': attribute type 1 has an invalid length.
[  377.839920][T26293] netlink: 'syz.2.5825': attribute type 1 has an invalid length.
[  377.844244][T26293] netlink: 'syz.2.5825': attribute type 1 has an invalid length.
[  377.915640][T26307] netlink: 'syz.2.5830': attribute type 2 has an invalid length.
[  377.954521][T26307] 8021q: adding VLAN 0 to HW filter on device team0
[  377.959770][T26307] net_ratelimit: 118 callbacks suppressed
[  377.959779][T26307] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  377.971733][ T5893] lo speed is unknown, defaulting to 1000
[  377.974186][ T5893] syz1: Port: 1 Link ACTIVE
[  378.243471][T26345] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  378.484571][T26393] __nla_validate_parse: 16 callbacks suppressed
[  378.484591][T26393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5846'.
[  378.496117][T26393] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5846'.
[  378.519271][T26397] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5852'.
[  379.144365][T26378] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  379.210346][T26415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5858'.
[  379.238749][T26419] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5859'.
[  379.359429][T26433] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5863'.
[  379.363349][T26433] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5863'.
[  379.366375][T26433] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5863'.
[  379.374823][T26433] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5863'.
[  379.419021][T26446] netlink: 332 bytes leftover after parsing attributes in process `syz.1.5865'.
[  379.431963][T26446] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  379.465258][T26453] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  380.532056][T26498] IPVS: length: 209 != 253667825400
[  380.558676][T26501] validate_nla: 1 callbacks suppressed
[  380.558687][T26501] netlink: 'syz.2.5882': attribute type 19 has an invalid length.
[  380.621156][T26508] lo speed is unknown, defaulting to 1000
[  380.651769][T26512] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  380.744304][T26508] lo speed is unknown, defaulting to 1000
[  380.748568][T26508] lo speed is unknown, defaulting to 1000
[  380.751299][T26508] wg1 speed is unknown, defaulting to 1000
[  380.927662][T26527] delete_channel: no stack
[  381.365914][T26561] netlink: 'syz.2.5900': attribute type 3 has an invalid length.
[  381.370594][T26560] netlink: 'syz.2.5900': attribute type 3 has an invalid length.
[  381.494374][T26568] netlink: 'syz.0.5903': attribute type 2 has an invalid length.
[  382.249916][T26589] netlink: 'syz.2.5907': attribute type 7 has an invalid length.
[  382.260408][T26588] netlink: 'syz.1.5908': attribute type 5 has an invalid length.
[  382.362462][T26602] netlink: 'syz.1.5910': attribute type 1 has an invalid length.
[  382.495192][T26625] nbd: must specify at least one socket
[  382.499471][T26625] nbd: couldn't find device at index 0
[  382.604436][T26632] netlink: 'syz.0.5919': attribute type 39 has an invalid length.
[  382.626854][T26634] netlink: 'syz.2.5921': attribute type 1 has an invalid length.
[  382.657651][T26634] 8021q: adding VLAN 0 to HW filter on device bond37
[  382.671493][T26634] 8021q: adding VLAN 0 to HW filter on device bond37
[  382.674587][T26634] bond37: (slave vxcan1): The slave device specified does not support setting the MAC address
[  382.678863][T26634] bond37: (slave vxcan1): Error -95 calling set_mac_address
[  382.731137][T26648] syzkaller1: entered promiscuous mode
[  382.733449][T26648] syzkaller1: entered allmulticast mode
[  382.767385][T26634] veth25: entered promiscuous mode
[  382.773001][T26634] bond37: (slave veth25): Enslaving as an active interface with a down link
[  382.778713][T26634] erspan0: entered allmulticast mode
[  382.792391][T26634] bond37: (slave erspan0): making interface the new active one
[  382.795703][T26634] bond37: (slave erspan0): Enslaving as an active interface with an up link
[  382.799957][T26649] netlink: 'syz.2.5921': attribute type 1 has an invalid length.
[  382.818315][T26658] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  383.219602][T26713] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8
[  383.916987][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  384.181448][T26743] lo speed is unknown, defaulting to 1000
[  384.284730][T26751] __nla_validate_parse: 40 callbacks suppressed
[  384.284747][T26751] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5954'.
[  384.298381][T26751] ip6gre0: entered promiscuous mode
[  384.300319][T26751] ip6gre0: entered allmulticast mode
[  384.327076][T26743] lo speed is unknown, defaulting to 1000
[  384.327840][T26742] lo speed is unknown, defaulting to 1000
[  384.330607][T26743] lo speed is unknown, defaulting to 1000
[  384.347056][T26743] wg1 speed is unknown, defaulting to 1000
[  384.470011][T26756] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5957'.
[  384.491244][T26742] lo speed is unknown, defaulting to 1000
[  384.494257][T26742] lo speed is unknown, defaulting to 1000
[  384.497037][T26742] wg1 speed is unknown, defaulting to 1000
[  385.171003][T26791] netlink: 15538 bytes leftover after parsing attributes in process `syz.2.5967'.
[  385.205818][T26793] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5968'.
[  385.222476][T26793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5968'.
[  385.455276][T26811] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5974'.
[  385.589840][T26824] netlink: 11 bytes leftover after parsing attributes in process `syz.0.5979'.
[  385.595300][T26824] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5979'.
[  385.682329][T26827] validate_nla: 6 callbacks suppressed
[  385.682346][T26827] netlink: 'syz.0.5980': attribute type 13 has an invalid length.
[  385.688116][T26827] netlink: 'syz.0.5980': attribute type 17 has an invalid length.
[  385.712298][T26827] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  385.764970][T26832] lo speed is unknown, defaulting to 1000
[  385.812595][T26835] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  385.816122][T26835] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  385.819754][T26835] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  385.823254][T26835] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  385.828557][T26835] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  385.832046][T26835] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  385.835815][T26835] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  385.839573][T26835] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  385.843639][T26835] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  385.848188][T26835] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  385.860423][T26832] lo speed is unknown, defaulting to 1000
[  385.860536][T26828] lo speed is unknown, defaulting to 1000
[  385.863002][T26832] lo speed is unknown, defaulting to 1000
[  385.871735][T26832] wg1 speed is unknown, defaulting to 1000
[  385.982690][T26843] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  386.071015][T26828] lo speed is unknown, defaulting to 1000
[  386.077134][T26828] lo speed is unknown, defaulting to 1000
[  386.079946][T26828] wg1 speed is unknown, defaulting to 1000
[  386.370881][T26860] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5987'.
[  386.485995][T26866] syzkaller1: entered promiscuous mode
[  386.488453][T26866] syzkaller1: entered allmulticast mode
[  386.571172][T26870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5990'.
[  386.836237][T26888] lo speed is unknown, defaulting to 1000
[  387.005680][T26888] lo speed is unknown, defaulting to 1000
[  387.018245][T26888] lo speed is unknown, defaulting to 1000
[  387.020985][T26888] wg1 speed is unknown, defaulting to 1000
[  387.799891][T26950] tipc: Resetting bearer <eth:gre0>
[  387.811979][T26950] erspan0: left allmulticast mode
[  387.856030][T26950] tipc: Resetting bearer <eth:syzkaller0>
[  387.872681][T26950] mac80211_hwsim hwsim30 syzkaller0: left promiscuous mode
[  387.875554][T26950] mac80211_hwsim hwsim30 syzkaller0: left allmulticast mode
[  387.880423][T26950] xfrm2: left promiscuous mode
[  387.883002][T26950] xfrm2: left allmulticast mode
[  387.887974][T26950] bridge27: left allmulticast mode
[  387.898433][T26950] veth25: left promiscuous mode
[  387.901751][T13490] lo speed is unknown, defaulting to 1000
[  387.904332][T13490] syz1: Port: 1 Link DOWN
[  388.849901][T26963] syzkaller0: entered promiscuous mode
[  388.852095][T26963] syzkaller0: entered allmulticast mode
[  388.904349][T26973] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  389.022915][T26985] netlink: del zone limit has 4 unknown bytes
[  389.753326][T26990] __nla_validate_parse: 11 callbacks suppressed
[  389.753342][T26990] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6025'.
[  389.753758][T26991] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6025'.
[  389.966099][T26995] syzkaller1: entered promiscuous mode
[  389.968618][T26995] syzkaller1: entered allmulticast mode
[  390.163498][T27026] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  390.264795][T27031] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6035'.
[  390.872446][T27048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6039'.
[  390.892363][T27047] bond39: (slave vxcan1): The slave device specified does not support setting the MAC address
[  390.898676][T27047] bond39: (slave vxcan1): Error -95 calling set_mac_address
[  391.068981][T27056] lo speed is unknown, defaulting to 1000
[  391.239852][T27056] lo speed is unknown, defaulting to 1000
[  391.242993][T27056] lo speed is unknown, defaulting to 1000
[  391.245838][T27056] wg1 speed is unknown, defaulting to 1000
[  391.260964][T27071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6044'.
[  391.263998][T27071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6044'.
[  391.289493][T27071] bridge0: port 1(vlan1) entered blocking state
[  391.293354][T27071] bridge0: port 1(vlan1) entered disabled state
[  391.296193][T27071] vlan1: entered allmulticast mode
[  391.312807][T27071] vlan1: left allmulticast mode
[  391.375734][T27079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  391.383158][T27079] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode
[  391.385712][T27079] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode
[  391.389266][T27079] tipc: Resetting bearer <eth:syzkaller0>
[  391.392580][T27081] netem: change failed
[  391.466451][T27086] netlink: 'syz.2.6049': attribute type 29 has an invalid length.
[  391.479450][T27086] netlink: 'syz.2.6049': attribute type 29 has an invalid length.
[  391.482748][T27086] netlink: 500 bytes leftover after parsing attributes in process `syz.2.6049'.
[  391.566137][T27089] syzkaller1: entered allmulticast mode
[  391.582416][T27089] lo speed is unknown, defaulting to 1000
[  391.596192][T27090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6051'.
[  391.608267][T27090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6051'.
[  391.691728][T27095] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6052'.
[  391.757604][T27089] lo speed is unknown, defaulting to 1000
[  391.769494][T27089] lo speed is unknown, defaulting to 1000
[  391.781262][T27089] wg1 speed is unknown, defaulting to 1000
[  391.894051][T27120] netlink: 'syz.0.6058': attribute type 1 has an invalid length.
[  392.082399][T27130] netlink: 'syz.1.6061': attribute type 8 has an invalid length.
[  392.179523][T27134] pim6reg: left allmulticast mode
[  392.262460][T27132] bridge0: port 1(macsec1) entered blocking state
[  392.264819][T27132] bridge0: port 1(macsec1) entered disabled state
[  392.269993][T27132] macsec1: entered allmulticast mode
[  392.274683][T27132] macsec1: left allmulticast mode
[  392.392005][T27141] netlink: 'syz.0.6064': attribute type 3 has an invalid length.
[  392.394985][T27141] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  392.487750][T27145] veth0_to_bridge: entered promiscuous mode
[  392.490672][T27145] veth0_to_bridge: left promiscuous mode
[  392.820162][T27159] 8021q: adding VLAN 0 to HW filter on device bond38
[  392.832095][T27159] bond38: (slave batadv2): Opening slave failed
[  393.228128][T27202] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  393.232552][T27202] mac80211_hwsim hwsim30 syzkaller0: left allmulticast mode
[  393.280958][T27207] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  393.284732][T27207] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode
[  393.667317][T27250] netlink: 'syz.2.6095': attribute type 1 has an invalid length.
[  393.670628][T27250] netlink: 'syz.2.6095': attribute type 3 has an invalid length.
[  393.761652][T27262] netlink: 'syz.0.6099': attribute type 32 has an invalid length.
[  393.765038][T27262] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  393.865334][T27274] sctp: [Deprecated]: syz.0.6103 (pid 27274) Use of int in max_burst socket option deprecated.
[  393.865334][T27274] Use struct sctp_assoc_value instead
[  394.158288][T27312] syzkaller0: entered promiscuous mode
[  394.160123][T27312] syzkaller0: entered allmulticast mode
[  394.311902][T27326] Unsupported ieee802154 address type: 0
[  394.479484][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82
[  394.482785][T27337] vlan1: entered promiscuous mode
[  394.792208][T27379] __nla_validate_parse: 24 callbacks suppressed
[  394.792221][T27379] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6130'.
[  394.842757][T27384] netlink: 248 bytes leftover after parsing attributes in process `syz.0.6131'.
[  395.035426][T27402] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6136'.
[  395.127575][T27408] IPVS: Scheduler module ip_vs_sip not found
[  395.183654][T27414] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7)
[  395.495737][T27450] netlink: 'syz.1.6147': attribute type 2 has an invalid length.
[  395.499045][T27450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6147'.
[  395.508741][T27450] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6147'.
[  395.877710][T27483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6154'.
[  396.204246][T27505] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6158'.
[  396.531862][T27522] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  396.618148][T27529] netlink: 'syz.0.6162': attribute type 16 has an invalid length.
[  396.621950][T27529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6162'.
[  396.749498][T27552] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6167'.
[  396.764922][T27554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6168'.
[  396.806730][T27554] lo speed is unknown, defaulting to 1000
[  396.924202][T27572] netlink: 'syz.2.6174': attribute type 9 has an invalid length.
[  396.941002][T27554] lo speed is unknown, defaulting to 1000
[  396.944109][T27554] lo speed is unknown, defaulting to 1000
[  396.947438][T27554] wg1 speed is unknown, defaulting to 1000
[  397.293123][T27604] netlink: 'syz.0.6186': attribute type 7 has an invalid length.
[  397.405968][T27617] netlink: 'syz.2.6190': attribute type 10 has an invalid length.
[  397.479755][T27629] sctp: [Deprecated]: syz.2.6190 (pid 27629) Use of struct sctp_assoc_value in delayed_ack socket option.
[  397.479755][T27629] Use struct sctp_sack_info instead
[  397.490660][T27629] sctp: [Deprecated]: syz.2.6190 (pid 27629) Use of struct sctp_assoc_value in delayed_ack socket option.
[  397.490660][T27629] Use struct sctp_sack_info instead
[  397.491429][T27627] netlink: 'syz.0.6193': attribute type 4 has an invalid length.
[  397.500465][T27630] sctp: [Deprecated]: syz.1.6194 (pid 27630) Use of int in max_burst socket option deprecated.
[  397.500465][T27630] Use struct sctp_assoc_value instead
[  397.594754][T27640] netlink: 'syz.1.6197': attribute type 13 has an invalid length.
[  397.735465][T27655] dvmrp8: entered allmulticast mode
[  397.803174][T27664] netlink: 'syz.1.6205': attribute type 1 has an invalid length.
[  397.816287][T27664] 8021q: adding VLAN 0 to HW filter on device bond25
[  397.820176][T27654] dvmrp8: left allmulticast mode
[  397.885938][T27668] netlink: 'syz.0.6206': attribute type 1 has an invalid length.
[  398.582425][T27714] netlink: 'syz.0.6223': attribute type 1 has an invalid length.
[  398.585664][T27714] netlink: 'syz.0.6223': attribute type 5 has an invalid length.
[  398.730536][T27738] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  398.733304][T27736] syzkaller0: entered promiscuous mode
[  398.735539][T27736] syzkaller0: entered allmulticast mode
[  398.829475][T27738] tipc: Resetting bearer <eth:syzkaller0>
[  398.844420][T27738] tipc: Disabling bearer <eth:syzkaller0>
[  399.184237][T27777] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  399.199879][T27777] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  400.130195][T27819] __nla_validate_parse: 20 callbacks suppressed
[  400.130210][T27819] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6251'.
[  400.249105][T27827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6253'.
[  400.499371][T27848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6256'.
[  400.519218][T27844] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6257'.
[  400.675035][T27862] macsec2: entered promiscuous mode
[  400.677238][T27862] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  400.679680][T27862] macsec2: entered allmulticast mode
[  400.681449][T27862] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  400.771682][T27867] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6261'.
[  400.834777][T27867] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6261'.
[  400.850892][T27867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6261'.
[  401.008327][T27893] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6267'.
[  401.114742][T27902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6271'.
[  401.122454][T27902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6271'.
[  401.300171][T27937] team0: Cannot enslave team device to itself
[  401.310938][T27952] bridge0: entered allmulticast mode
[  402.570414][T28014] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  402.696064][T28035] bond0: (slave rose0): Error: Device can not be enslaved while up
[  402.855287][T28046] netlink: 'syz.1.6305': attribute type 11 has an invalid length.
[  402.859327][T28046] validate_nla: 4 callbacks suppressed
[  402.859335][T28046] netlink: 'syz.1.6305': attribute type 4 has an invalid length.
[  402.886540][T28052] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  403.331755][T28085] macvlan0: left promiscuous mode
[  403.334155][T28085] macvlan0: entered allmulticast mode
[  403.338670][T28085] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  403.484554][T28097] netlink: 'syz.0.6320': attribute type 2 has an invalid length.
[  403.488235][T28097] netlink: 'syz.0.6320': attribute type 2 has an invalid length.
[  403.491544][T28097] netlink: 'syz.0.6320': attribute type 2 has an invalid length.
[  403.521374][T28101] netlink: 'syz.0.6322': attribute type 2 has an invalid length.
[  403.523977][T28101] netlink: 'syz.0.6322': attribute type 1 has an invalid length.
[  403.642776][T28106] netlink: 'syz.1.6324': attribute type 13 has an invalid length.
[  403.705699][T28106] batman_adv: batadv0: Interface deactivated: 
[  403.744627][T28106] tipc: Resetting bearer <eth:syzkaller0>
[  403.808509][T28106] bridge0: left allmulticast mode
[  403.819508][T28106] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  403.822442][T28106] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  403.834042][T13489] lo speed is unknown, defaulting to 1000
[  403.834169][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  403.840854][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  403.844324][   T12] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  403.847026][T13489] sz1: Port: 1 Link DOWN
[  403.848290][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  403.853313][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  403.857014][   T12] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  403.863419][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  403.866245][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  403.873552][   T12] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  403.878728][T13489] lo speed is unknown, defaulting to 1000
[  403.878972][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  403.890641][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  403.895433][   T12] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  403.908682][T28127] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  404.042807][T28140] openvswitch: netlink: IP tunnel TTL not specified.
[  404.210777][T28162] netlink: 'syz.1.6336': attribute type 11 has an invalid length.
[  404.625152][T28197] netlink: 'syz.2.6344': attribute type 1 has an invalid length.
[  404.736545][T28199] netlink: 'syz.2.6345': attribute type 4 has an invalid length.
[  404.764388][T28199] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  404.771995][T28199] team0: Device macvtap1 is already an upper device of the team interface
[  404.802781][T13489] lo speed is unknown, defaulting to 1000
[  404.805031][T13489] syz1: Port: 1 Link ACTIVE
[  405.317329][T28217] syzkaller0: entered allmulticast mode
[  405.336812][T28217] syzkaller0 (unregistering): left allmulticast mode
[  405.394687][T28221] __nla_validate_parse: 54 callbacks suppressed
[  405.394697][T28221] netlink: 124 bytes leftover after parsing attributes in process `syz.1.6352'.
[  405.403551][T28221] IPVS: length: 209 != 24
[  405.474766][T28229] netlink: 312 bytes leftover after parsing attributes in process `syz.0.6354'.
[  405.550651][T28231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6355'.
[  405.668949][T28244] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6359'.
[  405.700418][T28244] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  405.708436][T28244] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6359'.
[  405.711994][T28244] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  405.899390][   T33] audit: type=1107 audit(1755582480.560:13): pid=28254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='XR%zh+RG
[  405.899390][   T33] .Ҡ̂G.|0U2Ix9es(=؞{LiF;@Rk͸khGD PŞuL>EˌYg'
[  405.932773][T28259] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6365'.
[  405.943263][T28259] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6365'.
[  406.114742][T28273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6369'.
[  406.172840][T28279] netlink: 324 bytes leftover after parsing attributes in process `syz.2.6371'.
[  406.302435][T28291] IPv6: sit7: Disabled Multicast RS
[  406.304773][T28291] sit7: entered allmulticast mode
[  406.498680][T28299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6379'.
[  406.781982][T28333] unknown channel width for channel at 909000KHz?
[  406.935816][T28355] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  407.405860][T28418] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  407.496957][T28426] syzkaller0: left promiscuous mode
[  407.499212][T28426] syzkaller0: left allmulticast mode
[  407.634334][T28440] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  407.837761][T28448] veth0_to_bridge: entered promiscuous mode
[  407.980872][T28447] veth0_to_bridge: left promiscuous mode
[  408.071334][T28485] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  408.082806][T28477] batman_adv: batadv0: Interface deactivated: dummy0
[  408.093619][T28477] vlan1: left promiscuous mode
[  408.105774][T28477] mac80211_hwsim hwsim40 wlan1: left allmulticast mode
[  408.118285][T28477] veth21: left promiscuous mode
[  408.139110][T28477] bond31: left promiscuous mode
[  408.142040][T28477] bridge12: left allmulticast mode
[  408.158423][T28477] bond38: left promiscuous mode
[  408.168688][T13489] lo speed is unknown, defaulting to 1000
[  408.171011][T13489] syz2: Port: 1 Link DOWN
[  408.172905][ T5855] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  408.177407][ T5855] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  408.180839][ T5855] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  408.184619][ T5855] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  408.190012][T28492] openvswitch: netlink: Missing key (keys=40, expected=80)
[  408.271796][T28504] validate_nla: 73 callbacks suppressed
[  408.271806][T28504] netlink: 'syz.0.6436': attribute type 7 has an invalid length.
[  408.561753][T28546] netlink: 'syz.0.6450': attribute type 1 has an invalid length.
[  408.645826][T28549] lo speed is unknown, defaulting to 1000
[  408.730554][T28549] lo speed is unknown, defaulting to 1000
[  408.733202][T28549] lo speed is unknown, defaulting to 1000
[  408.735893][T28549] wg1 speed is unknown, defaulting to 1000
[  408.992619][T28569] netlink: 'syz.2.6457': attribute type 21 has an invalid length.
[  408.995631][T28568] lo speed is unknown, defaulting to 1000
[  408.996016][T28569] netlink: 'syz.2.6457': attribute type 4 has an invalid length.
[  409.035843][T28569] netlink: 'syz.2.6457': attribute type 3 has an invalid length.
[  409.143777][T28568] lo speed is unknown, defaulting to 1000
[  409.146544][T28568] lo speed is unknown, defaulting to 1000
[  409.151732][T28568] wg1 speed is unknown, defaulting to 1000
[  409.277248][T28582] nbd1: detected capacity change from 0 to 127
[  409.294041][   T56] block nbd1: Receive control failed (result -104)
[  409.466219][T28607] IPv6: sit8: Disabled Multicast RS
[  409.541082][T28615] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  409.640118][T28634] tipc: Resetting bearer <eth:syzkaller0>
[  409.664005][ T5893] lo speed is unknown, defaulting to 1000
[  409.668934][ T5893] syz1: Port: 1 Link DOWN
[  409.733822][T28638] macvlan0: left allmulticast mode
[  409.736255][T28638] netlink: 'syz.1.6476': attribute type 1 has an invalid length.
[  409.743418][T28638] netlink: 'syz.1.6476': attribute type 2 has an invalid length.
[  410.266277][T28676] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  410.457808][T28683] __nla_validate_parse: 32 callbacks suppressed
[  410.457817][T28683] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6489'.
[  410.600932][T28693] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6493'.
[  410.605549][T28693] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6493'.
[  410.611157][T28693] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  410.724217][T28704] netlink: 'syz.1.6497': attribute type 21 has an invalid length.
[  410.726465][T28708] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.6498'.
[  410.727945][T28704] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6497'.
[  410.796347][T28715] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[  410.803722][T28708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6498'.
[  410.860899][T28719] netlink: 236 bytes leftover after parsing attributes in process `syz.2.6501'.
[  411.467389][T28746] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  411.472956][T28747] syzkaller0: entered promiscuous mode
[  411.475515][T28747] syzkaller0: entered allmulticast mode
[  411.494968][T28745] tipc: Resetting bearer <eth:syzkaller0>
[  411.512704][T28745] tipc: Disabling bearer <eth:syzkaller0>
[  411.710039][T28756] sctp: [Deprecated]: syz.0.6511 (pid 28756) Use of int in max_burst socket option deprecated.
[  411.710039][T28756] Use struct sctp_assoc_value instead
[  411.779168][T28758] syzkaller1: entered promiscuous mode
[  411.781169][T28758] syzkaller1: entered allmulticast mode
[  411.918777][T28771] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  412.354444][T28812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6530'.
[  412.357699][T28812] nbd: couldn't find a device at index 0
[  412.359700][T28813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6530'.
[  412.362770][T28813] nbd: couldn't find a device at index 0
[  412.370581][T28813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6530'.
[  412.373693][T28813] bridge_slave_0: default FDB implementation only supports local addresses
[  412.378135][T28812] bridge_slave_0: default FDB implementation only supports local addresses
[  412.423737][T28817] 8021q: adding VLAN 0 to HW filter on device bond26
[  412.652033][   T61] block nbd1: Connection timed out, retrying (0/1 alive)
[  412.656304][   T61] block nbd1: Connection timed out, retrying (0/1 alive)
[  412.659977][   T61] block nbd1: Connection timed out, retrying (0/1 alive)
[  412.663180][   T61] block nbd1: Connection timed out, retrying (0/1 alive)
[  412.666926][   T61] block nbd1: Dead connection, failed to find a fallback
[  412.671516][   T61] block nbd1: shutting down sockets
[  412.674120][   T61] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  412.678426][   T61] Buffer I/O error on dev nbd1, logical block 3, async page read
[  412.681798][   T61] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  412.685667][   T61] Buffer I/O error on dev nbd1, logical block 2, async page read
[  412.689346][   T61] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  412.693152][   T61] Buffer I/O error on dev nbd1, logical block 1, async page read
[  412.697011][   T61] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  412.700993][   T61] Buffer I/O error on dev nbd1, logical block 0, async page read
[  412.705632][T28530] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  412.710504][T28530] Buffer I/O error on dev nbd1, logical block 0, async page read
[  412.714155][T28530] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  412.724988][T28530] Buffer I/O error on dev nbd1, logical block 1, async page read
[  412.728506][T28530] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  412.732296][T28530] Buffer I/O error on dev nbd1, logical block 2, async page read
[  412.735581][T28530] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  412.739775][T28530] Buffer I/O error on dev nbd1, logical block 3, async page read
[  412.743140][T28530] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  412.747288][T28530] Buffer I/O error on dev nbd1, logical block 0, async page read
[  412.750675][T28530] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  412.754566][T28530] Buffer I/O error on dev nbd1, logical block 1, async page read
[  412.760345][T28530] ldm_validate_partition_table(): Disk read failed.
[  412.765022][T28530] Dev nbd1: unable to read RDB block 0
[  412.769067][T28530]  nbd1: unable to read partition table
[  412.777565][T28830] netlink: 'syz.0.6535': attribute type 6 has an invalid length.
[  412.779168][T28530] ldm_validate_partition_table(): Disk read failed.
[  412.784395][T28530] Dev nbd1: unable to read RDB block 0
[  412.789721][T28530]  nbd1: unable to read partition table
[  412.833445][T28831] sctp: [Deprecated]: syz.0.6535 (pid 28831) Use of int in maxseg socket option.
[  412.833445][T28831] Use struct sctp_assoc_value instead
[  413.264987][T28839] netlink: 'syz.2.6538': attribute type 3 has an invalid length.
[  413.459175][T28860] netlink: 'syz.1.6544': attribute type 1 has an invalid length.
[  413.490343][T28860] 8021q: adding VLAN 0 to HW filter on device bond27
[  413.506087][T28860] vlan1: entered promiscuous mode
[  413.512306][T28860] bond27: entered promiscuous mode
[  413.514267][T28860] vlan1: entered allmulticast mode
[  413.516064][T28860] bond27: entered allmulticast mode
[  413.777713][T28889] mac80211_hwsim hwsim30 syzkaller0: left promiscuous mode
[  413.780440][T28889] mac80211_hwsim hwsim30 syzkaller0: left allmulticast mode
[  413.784371][T28889] tipc: Resetting bearer <eth:syzkaller0>
[  414.006936][ T5233] Bluetooth: hci2: command 0x0405 tx timeout
[  414.009019][ T5843] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  414.409574][T28927] netlink: 'syz.0.6562': attribute type 1 has an invalid length.
[  414.423782][T28927] 8021q: adding VLAN 0 to HW filter on device bond42
[  414.438905][T28927] 8021q: adding VLAN 0 to HW filter on device bond42
[  414.441677][T28927] bond42: (slave vxcan1): The slave device specified does not support setting the MAC address
[  414.445868][T28927] bond42: (slave vxcan1): Error -95 calling set_mac_address
[  414.454117][T28928] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  414.591778][T28942] netlink: 'syz.2.6565': attribute type 1 has an invalid length.
[  414.619656][T28942] netlink: 'syz.2.6565': attribute type 3 has an invalid length.
[  414.795381][T28964] netlink: 'syz.0.6571': attribute type 6 has an invalid length.
[  414.833076][T28972] pim6reg1: entered promiscuous mode
[  414.835396][T28972] pim6reg1: entered allmulticast mode
[  414.945468][T28985] netlink: 'syz.0.6576': attribute type 4 has an invalid length.
[  415.047262][T28989] bond43: entered promiscuous mode
[  415.049571][T28989] bond43: entered allmulticast mode
[  415.052115][T28989] 8021q: adding VLAN 0 to HW filter on device bond43
[  415.405409][T29012] netlink: 'syz.0.6585': attribute type 1 has an invalid length.
[  415.527437][T29019] __nla_validate_parse: 20 callbacks suppressed
[  415.527453][T29019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6587'.
[  415.533862][T29019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6587'.
[  415.537992][T29019] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6587'.
[  416.118706][T29049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6596'.
[  416.374023][T29070] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  416.379039][T29070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6601'.
[  416.382105][T29070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6601'.
[  416.462681][T29077] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  416.465522][T29077] syzkaller0: entered promiscuous mode
[  416.469784][T29077] syzkaller0: entered allmulticast mode
[  416.474930][T29077] tipc: Resetting bearer <eth:syzkaller0>
[  416.479615][T29075] tipc: Resetting bearer <eth:syzkaller0>
[  416.489555][T29075] tipc: Disabling bearer <eth:syzkaller0>
[  416.513977][   T12] nci: nci_rx_work: unknown MT 0x1
[  416.983724][T29088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6606'.
[  416.989973][T29089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6606'.
[  417.035136][T29093] netlink: 'syz.2.6607': attribute type 1 has an invalid length.
[  417.145491][T29099] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6610'.
[  417.152441][T29099] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6610'.
[  417.478071][T29118] tipc: Resetting bearer <eth:syzkaller0>
[  417.540635][T29131] netlink: 'syz.1.6622': attribute type 1 has an invalid length.
[  417.902085][T29174] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  417.905185][T29174] syzkaller0: entered promiscuous mode
[  417.907520][T29174] syzkaller0: entered allmulticast mode
[  418.273097][T29220] nbd: couldn't find a device at index 65546
[  418.308286][T29222] nbd: nbd1 already in use
[  418.315991][T29222] netlink: 'syz.1.6653': attribute type 1 has an invalid length.
[  418.353853][T29222] bond29: (slave bridge21): making interface the new active one
[  418.357185][T29222] bond29: (slave bridge21): Enslaving as an active interface with an up link
[  418.397320][ T5233] Bluetooth: hci2: command 0x0405 tx timeout
[  418.397575][ T5843] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  418.842103][T29267] GUP no longer grows the stack in syz.1.6669 (29267): 200000003000-20000000a000 (200000001000)
[  418.847341][T29267] CPU: 0 UID: 0 PID: 29267 Comm: syz.1.6669 Not tainted syzkaller #0 PREEMPT(full) 
[  418.847362][T29267] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  418.847371][T29267] Call Trace:
[  418.847377][T29267]  <TASK>
[  418.847382][T29267]  dump_stack_lvl+0x189/0x250
[  418.847408][T29267]  ? __pfx_dump_stack_lvl+0x10/0x10
[  418.847425][T29267]  ? __pfx__printk+0x10/0x10
[  418.847442][T29267]  ? find_vma+0xe7/0x160
[  418.847461][T29267]  ? __lock_acquire+0xab9/0xd20
[  418.847489][T29267]  __get_user_pages+0x24d0/0x2ce0
[  418.847504][T29267]  ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190
[  418.847536][T29267]  ? rcu_is_watching+0x15/0xb0
[  418.847552][T29267]  __gup_longterm_locked+0xde9/0x1660
[  418.847575][T29267]  ? sanity_check_pinned_pages+0x123a/0x1300
[  418.847594][T29267]  gup_fast_fallback+0x1e6a/0x2010
[  418.847633][T29267]  ? __pfx_gup_fast_fallback+0x10/0x10
[  418.847647][T29267]  ? stack_trace_save+0x9c/0xe0
[  418.847660][T29267]  ? __pfx_stack_trace_save+0x10/0x10
[  418.847679][T29267]  ? pin_user_pages_fast+0x4d/0xb0
[  418.847696][T29267]  iov_iter_extract_pages+0x35a/0x5e0
[  418.847717][T29267]  extract_iter_to_sg+0xe46/0x24e0
[  418.847746][T29267]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  418.847778][T29267]  ? __asan_memset+0x22/0x50
[  418.847826][T29267]  af_alg_get_rsgl+0x436/0x810
[  418.847859][T29267]  aead_recvmsg+0x4cc/0x13f0
[  418.847883][T29267]  ? rcu_is_watching+0x15/0xb0
[  418.847904][T29267]  ? __pfx_aead_recvmsg+0x10/0x10
[  418.847926][T29267]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  418.847942][T29267]  ? __pfx_aead_recvmsg+0x10/0x10
[  418.847959][T29267]  sock_recvmsg_nosec+0x186/0x1c0
[  418.847979][T29267]  ____sys_recvmsg+0x3aa/0x460
[  418.847998][T29267]  ? __pfx_____sys_recvmsg+0x10/0x10
[  418.848024][T29267]  ? import_iovec+0x74/0xa0
[  418.848041][T29267]  ___sys_recvmsg+0x1b5/0x510
[  418.848057][T29267]  ? __pfx____sys_recvmsg+0x10/0x10
[  418.848094][T29267]  ? __might_fault+0xb0/0x130
[  418.848115][T29267]  do_recvmmsg+0x307/0x770
[  418.848135][T29267]  ? __pfx_do_recvmmsg+0x10/0x10
[  418.848147][T29267]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[  418.848176][T29267]  ? __pfx_do_futex+0x10/0x10
[  418.848206][T29267]  __x64_sys_recvmmsg+0x190/0x240
[  418.848223][T29267]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  418.848234][T29267]  ? __task_pid_nr_ns+0x28/0x470
[  418.848253][T29267]  ? do_syscall_64+0xbe/0x3b0
[  418.848275][T29267]  do_syscall_64+0xfa/0x3b0
[  418.848291][T29267]  ? lockdep_hardirqs_on+0x9c/0x150
[  418.848314][T29267]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.848327][T29267]  ? exc_page_fault+0x9f/0xf0
[  418.848347][T29267]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.848359][T29267] RIP: 0033:0x7fd277f8ebe9
[  418.848372][T29267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  418.848384][T29267] RSP: 002b:00007fd278e98038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  418.848399][T29267] RAX: ffffffffffffffda RBX: 00007fd2781b6090 RCX: 00007fd277f8ebe9
[  418.848409][T29267] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000c
[  418.848417][T29267] RBP: 00007fd278011e19 R08: 0000000000000000 R09: 0000000000000000
[  418.848425][T29267] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  418.848433][T29267] R13: 00007fd2781b6128 R14: 00007fd2781b6090 R15: 00007fffcf423da8
[  418.848455][T29267]  </TASK>
[  419.460077][T29272] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  419.568125][   T33] audit: type=1800 audit(1755582494.230:14): pid=29284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6675" name="memory.events" dev="tmpfs" ino=11808 res=0 errno=0
[  419.717627][T29301] netlink: 'syz.1.6679': attribute type 1 has an invalid length.
[  420.708912][T29338] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  420.712513][T29338] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode
[  420.715311][T29338] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode
[  420.720727][T29338] tipc: Resetting bearer <eth:syzkaller0>
[  420.819689][T29353] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  420.822871][T29353] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  420.880916][T29365] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  421.020473][T29376] lo speed is unknown, defaulting to 1000
[  421.118029][T29376] lo speed is unknown, defaulting to 1000
[  421.120892][T29376] lo speed is unknown, defaulting to 1000
[  421.129718][T29376] wg1 speed is unknown, defaulting to 1000
[  421.160561][T29389] __nla_validate_parse: 20 callbacks suppressed
[  421.160581][T29389] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6706'.
[  421.458268][T29406] netlink: 348 bytes leftover after parsing attributes in process `syz.0.6711'.
[  421.492698][T29411] IPv6: sit7: Disabled Multicast RS
[  421.495128][T29411] sit7: entered allmulticast mode
[  421.565388][T29411] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.6712'.
[  421.600109][T29411] netlink: 'syz.0.6712': attribute type 5 has an invalid length.
[  421.630268][T29415] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.6713'.
[  421.633539][T29415] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  421.636361][T29415] openvswitch: netlink: Duplicate key (type 0).
[  421.721139][T29423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6716'.
[  421.752142][T29429] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  421.901700][T29443] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.6723'.
[  422.007900][T29456] bridge0: port 1(erspan0) entered blocking state
[  422.010203][T29456] bridge0: port 1(erspan0) entered disabled state
[  422.012442][T29456] erspan0: entered allmulticast mode
[  422.017902][T29456] erspan0: left allmulticast mode
[  422.021285][T29456] netlink: 277 bytes leftover after parsing attributes in process `syz.0.6727'.
[  422.051024][T29459] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  422.078843][T29463] : renamed from wg2
[  422.120967][T29468] tipc: Resetting bearer <eth:syzkaller0>
[  422.212969][T29481] syzkaller1: entered allmulticast mode
[  422.292253][T29490] netlink: 312 bytes leftover after parsing attributes in process `syz.2.6737'.
[  422.334541][T29501] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6739'.
[  422.531718][T29525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6744'.
[  422.998547][T29565] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  423.064985][T29577] sctp: [Deprecated]: syz.1.6754 (pid 29577) Use of int in max_burst socket option deprecated.
[  423.064985][T29577] Use struct sctp_assoc_value instead
[  423.184322][T29586] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[  423.465285][T29598] netlink: 'syz.1.6757': attribute type 4 has an invalid length.
[  423.594772][T29623] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  423.690184][T29631] bridge20: entered promiscuous mode
[  423.692023][T29631] bridge20: entered allmulticast mode
[  423.735875][T29637] 8021q: adding VLAN 0 to HW filter on device bond30
[  423.825486][T29651] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  423.830527][T29651] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  424.428783][T29668] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  424.672530][T29670] netlink: 'syz.1.6780': attribute type 5 has an invalid length.
[  424.912475][T29721] sctp: [Deprecated]: syz.1.6795 (pid 29721) Use of int in max_burst socket option.
[  424.912475][T29721] Use struct sctp_assoc_value instead
[  425.084455][T29734] syzkaller1: entered promiscuous mode
[  425.086465][T29734] syzkaller1: entered allmulticast mode
[  425.092806][T29734] nbd: illegal input index 65508
[  425.284690][T29750] netlink: 'syz.1.6804': attribute type 1 has an invalid length.
[  425.287979][T29750] netlink: 'syz.1.6804': attribute type 1 has an invalid length.
[  425.813526][T29779] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  425.890365][T29793] veth0_virt_wifi: entered allmulticast mode
[  425.893649][T29794] syz.0.6819: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  425.899037][T29794] CPU: 1 UID: 0 PID: 29794 Comm: syz.0.6819 Not tainted syzkaller #0 PREEMPT(full) 
[  425.899048][T29794] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  425.899053][T29794] Call Trace:
[  425.899056][T29794]  <TASK>
[  425.899060][T29794]  dump_stack_lvl+0x189/0x250
[  425.899074][T29794]  ? __pfx_dump_stack_lvl+0x10/0x10
[  425.899083][T29794]  ? __pfx__printk+0x10/0x10
[  425.899094][T29794]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  425.899102][T29794]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  425.899111][T29794]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  425.899120][T29794]  warn_alloc+0x214/0x310
[  425.899132][T29794]  ? stack_depot_save_flags+0x40/0x860
[  425.899143][T29794]  ? __pfx_warn_alloc+0x10/0x10
[  425.899154][T29794]  ? kasan_save_track+0x4f/0x80
[  425.899164][T29794]  ? xskq_create+0x56/0x170
[  425.899182][T29794]  ? xsk_init_queue+0xb0/0x110
[  425.899190][T29794]  ? xsk_setsockopt+0x4dc/0x8d0
[  425.899197][T29794]  ? do_sock_setsockopt+0x17c/0x1b0
[  425.899204][T29794]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  425.899210][T29794]  ? do_syscall_64+0xfa/0x3b0
[  425.899219][T29794]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.899229][T29794]  __vmalloc_node_range_noprof+0x125/0x12f0
[  425.899252][T29794]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  425.899262][T29794]  ? xskq_create+0x56/0x170
[  425.899272][T29794]  ? __kasan_kmalloc+0x93/0xb0
[  425.899283][T29794]  vmalloc_user_noprof+0xad/0xf0
[  425.899293][T29794]  ? xskq_create+0xbf/0x170
[  425.899302][T29794]  xskq_create+0xbf/0x170
[  425.899312][T29794]  xsk_init_queue+0xb0/0x110
[  425.899322][T29794]  xsk_setsockopt+0x4dc/0x8d0
[  425.899331][T29794]  ? __pfx_xsk_setsockopt+0x10/0x10
[  425.899340][T29794]  ? __pfx_aa_sk_perm+0x10/0x10
[  425.899354][T29794]  ? aa_sock_opt_perm+0xff/0x1b0
[  425.899362][T29794]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  425.899370][T29794]  ? __pfx_xsk_setsockopt+0x10/0x10
[  425.899379][T29794]  do_sock_setsockopt+0x17c/0x1b0
[  425.899388][T29794]  __x64_sys_setsockopt+0x13f/0x1b0
[  425.899397][T29794]  do_syscall_64+0xfa/0x3b0
[  425.899406][T29794]  ? lockdep_hardirqs_on+0x9c/0x150
[  425.899415][T29794]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.899422][T29794]  ? exc_page_fault+0x9f/0xf0
[  425.899432][T29794]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.899439][T29794] RIP: 0033:0x7ff61ab8ebe9
[  425.899446][T29794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  425.899453][T29794] RSP: 002b:00007ff61ba27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  425.899461][T29794] RAX: ffffffffffffffda RBX: 00007ff61adb6090 RCX: 00007ff61ab8ebe9
[  425.899466][T29794] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009
[  425.899471][T29794] RBP: 00007ff61ac11e19 R08: 0000000000000004 R09: 0000000000000000
[  425.899475][T29794] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  425.899480][T29794] R13: 00007ff61adb6128 R14: 00007ff61adb6090 R15: 00007ffe8fe06888
[  425.899492][T29794]  </TASK>
[  425.899494][T29794] Mem-Info:
[  425.931909][T29797] netlink: 'syz.2.6820': attribute type 10 has an invalid length.
[  425.933170][T29794] active_anon:18001 inactive_anon:0 isolated_anon:0
[  425.933170][T29794]  active_file:1588 inactive_file:38349 isolated_file:0
[  425.933170][T29794]  unevictable:1768 dirty:76 writeback:0
[  425.933170][T29794]  slab_reclaimable:12015 slab_unreclaimable:111624
[  425.933170][T29794]  mapped:18194 shmem:2563 pagetables:1059
[  425.933170][T29794]  sec_pagetables:0 bounce:0
[  425.933170][T29794]  kernel_misc_reclaimable:0
[  425.933170][T29794]  free:215235 free_pcp:20611 free_cma:0
[  426.021080][T29794] Node 0 active_anon:26724kB inactive_anon:0kB active_file:4572kB inactive_file:140180kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32444kB dirty:168kB writeback:0kB shmem:5308kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10332kB pagetables:2420kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB
[  426.031362][T29794] Node 1 active_anon:45280kB inactive_anon:0kB active_file:1780kB inactive_file:13216kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40332kB dirty:136kB writeback:0kB shmem:4944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7788kB pagetables:1816kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  426.042254][T29794] Node 0 DMA free:14444kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:748kB local_pcp:392kB free_cma:0kB
[  426.051912][T29794] lowmem_reserve[]: 0 811 811 811 811
[  426.053777][T29794] Node 0 DMA32 free:151696kB boost:6144kB min:39804kB low:48216kB high:56628kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26724kB inactive_anon:0kB active_file:4572kB inactive_file:140180kB unevictable:3536kB writepending:168kB present:1556484kB managed:830952kB mlocked:0kB bounce:0kB free_pcp:42292kB local_pcp:13732kB free_cma:0kB
[  426.064486][T29794] lowmem_reserve[]: 0 0 0 0 0
[  426.066135][T29794] Node 1 DMA32 free:455932kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:2684kB local_pcp:2684kB free_cma:0kB
[  426.076106][T29794] lowmem_reserve[]: 0 0 854 854 854
[  426.079102][T29794] Node 1 Normal free:238664kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45280kB inactive_anon:0kB active_file:1780kB inactive_file:13216kB unevictable:3536kB writepending:136kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:37124kB local_pcp:19984kB free_cma:0kB
[  426.090826][T29794] lowmem_reserve[]: 0 0 0 0 0
[  426.092585][T29794] Node 0 DMA: 2*4kB (U) 1*8kB (U) 4*16kB (U) 9*32kB (U) 4*64kB (U) 4*128kB (U) 6*256kB (U) 7*512kB (U) 4*1024kB (U) 2*2048kB (UM) 0*4096kB = 14448kB
[  426.097986][T29794] Node 0 DMA32: 777*4kB (UM) 1169*8kB (UME) 1040*16kB (UME) 685*32kB (UME) 251*64kB (UME) 107*128kB (UM) 11*256kB (UME) 21*512kB (UM) 18*1024kB (UE) 5*2048kB (UM) 7*4096kB (UM) = 151692kB
[  426.104528][T29794] Node 1 DMA32: 3*4kB (UM) 6*8kB (UM) 4*16kB (UM) 2*32kB (U) 1*64kB (U) 4*128kB (UM) 4*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 108*4096kB (M) = 455932kB
[  426.123207][T29794] Node 1 Normal: 765*4kB (UE) 1093*8kB (UME) 714*16kB (UM) 398*32kB (UME) 295*64kB (UM) 108*128kB (UM) 98*256kB (UME) 69*512kB (UM) 37*1024kB (UME) 13*2048kB (U) 11*4096kB (UM) = 238652kB
[  426.129588][T29794] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  426.132686][T29794] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  426.135816][T29794] 42500 total pagecache pages
[  426.137946][T29794] 0 pages in swap cache
[  426.139341][T29794] Free swap  = 124996kB
[  426.140933][T29794] Total swap = 124996kB
[  426.142339][T29794] 786301 pages RAM
[  426.143601][T29794] 0 pages HighMem/MovableOnly
[  426.145231][T29794] 241331 pages reserved
[  426.146825][T29794] 0 pages cma reserved
[  426.260110][T29820] lo speed is unknown, defaulting to 1000
[  426.267297][T29826] netlink: 'syz.0.6829': attribute type 1 has an invalid length.
[  426.270026][T29826] __nla_validate_parse: 103 callbacks suppressed
[  426.270034][T29826] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6829'.
[  426.387573][T29820] lo speed is unknown, defaulting to 1000
[  426.390309][T29820] lo speed is unknown, defaulting to 1000
[  426.393084][T29820] wg1 speed is unknown, defaulting to 1000
[  426.421305][T29836] openvswitch: netlink: Key type 16144 is out of range max 32
[  426.496657][T29843] lo speed is unknown, defaulting to 1000
[  426.512664][T29848] netlink: 'syz.2.6834': attribute type 1 has an invalid length.
[  426.629686][T29843] lo speed is unknown, defaulting to 1000
[  426.632184][T29843] lo speed is unknown, defaulting to 1000
[  426.634585][T29843] wg1 speed is unknown, defaulting to 1000
[  426.710560][T29862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6838'.
[  426.852158][T29867] openvswitch: netlink: Message has 16 unknown bytes.
[  426.919560][T29877] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6842'.
[  426.951151][T29883] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6844'.
[  426.960333][ T5233] Bluetooth: hci2: command 0x0405 tx timeout
[  427.015346][T29888] netlink: 'syz.1.6846': attribute type 1 has an invalid length.
[  427.088995][T29901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6849'.
[  427.106634][T29901] syz_tun (unregistering): left promiscuous mode
[  427.113380][T29904] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6850'.
[  427.222605][T29918] netlink: 'syz.2.6853': attribute type 21 has an invalid length.
[  427.225266][T29918] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6853'.
[  427.237365][T29918] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6853'.
[  427.494406][T29943] netlink: 'syz.0.6859': attribute type 29 has an invalid length.
[  427.499334][T29944] netlink: 'syz.0.6859': attribute type 29 has an invalid length.
[  427.502198][T29944] netlink: 'syz.0.6859': attribute type 29 has an invalid length.
[  427.509772][T29943] pim6reg9: entered allmulticast mode
[  427.567172][T29950] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.6861'.
[  427.570831][T29950] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.6861'.
[  427.863530][T29985] 0{X: refused to change device tx_queue_len
[  427.866405][T29985] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  428.079588][T30018] sit10: entered promiscuous mode
[  428.509252][T30061] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  428.553944][T30067] bond0: option use_carrier: invalid value (6)
[  428.848720][T30097] delete_channel: no stack
[  429.341053][T30125] openvswitch: netlink: Message has 5 unknown bytes.
[  429.676359][T30147] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20001
[  429.798381][T30155] tun0: tun_chr_ioctl cmd 2147767520
[  430.797501][ T5843] Bluetooth: hci2: command 0x0405 tx timeout
[  430.932715][T30198] tun0: tun_chr_ioctl cmd 2147767520
[  430.994003][T30201] sctp: [Deprecated]: syz.1.6941 (pid 30201) Use of struct sctp_assoc_value in delayed_ack socket option.
[  430.994003][T30201] Use struct sctp_sack_info instead
[  431.116799][T30209] veth29: entered promiscuous mode
[  431.130962][T30205] veth31: entered promiscuous mode
[  431.185375][T30213] veth32: entered allmulticast mode
[  431.334484][T30214] __nla_validate_parse: 55 callbacks suppressed
[  431.334501][T30214] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6944'.
[  431.856224][T30218] validate_nla: 8 callbacks suppressed
[  431.856239][T30218] netlink: 'syz.0.6946': attribute type 2 has an invalid length.
[  431.966257][T30224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6947'.
[  432.290712][T30253] tun0: tun_chr_ioctl cmd 2147767520
[  432.595513][T30269] lo speed is unknown, defaulting to 1000
[  432.688600][T30269] lo speed is unknown, defaulting to 1000
[  432.691861][T30269] lo speed is unknown, defaulting to 1000
[  432.694551][T30269] wg1 speed is unknown, defaulting to 1000
[  432.834272][T30274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6961'.
[  432.839332][T30274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6961'.
[  432.843756][T30274] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6961'.
[  432.942107][T30278] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6963'.
[  433.059768][T30287] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6965'.
[  433.063492][T30287] netlink: 'syz.1.6965': attribute type 4 has an invalid length.
[  433.188699][T30299] : left promiscuous mode
[  433.242870][T30308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6973'.
[  433.249170][T30308] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6973'.
[  433.383440][T30325] openvswitch: netlink: Actions may not be safe on all matching packets
[  433.443250][T30333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6982'.
[  434.053357][T30392] netlink: 'syz.2.6997': attribute type 1 has an invalid length.
[  434.122292][T30396] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20003
[  434.124852][T30397] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20003
[  434.380174][T30418] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  434.925087][T30443] ip6gretap1: entered promiscuous mode
[  434.964142][T30443] netlink: 'syz.2.7011': attribute type 1 has an invalid length.
[  435.199828][T30453] batadv_slave_0: entered promiscuous mode
[  435.319203][T30456] lo speed is unknown, defaulting to 1000
[  435.408908][T30456] lo speed is unknown, defaulting to 1000
[  435.411872][T30456] lo speed is unknown, defaulting to 1000
[  435.415752][T30456] wg1 speed is unknown, defaulting to 1000
[  435.417602][T30458] lo speed is unknown, defaulting to 1000
[  435.559993][T30458] lo speed is unknown, defaulting to 1000
[  435.562768][T30458] lo speed is unknown, defaulting to 1000
[  435.565418][T30458] wg1 speed is unknown, defaulting to 1000
[  435.850663][   T33] audit: type=1107 audit(1755582510.510:15): pid=30470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='U#6[49׷:AE/$dV+%jBϯ	"@Y̸1znD'tdILO'TzsXmUN6+ݍFףS}`I2An(,v)id'
[  435.904995][T30474] netlink: 'syz.0.7021': attribute type 1 has an invalid length.
[  435.927222][T30474] 8021q: adding VLAN 0 to HW filter on device bond45
[  435.959356][T30481] tap2: tun_chr_ioctl cmd 1074025676
[  435.961170][T30481] tap2: owner set to 0
[  435.962578][T30482] tap2: tun_chr_ioctl cmd 1074025676
[  435.964486][T30482] tap2: owner set to 0
[  436.021469][T30452] batadv_slave_0: left promiscuous mode
[  436.250263][T30511] netlink: 'syz.0.7031': attribute type 2 has an invalid length.
[  436.380501][T30531] __nla_validate_parse: 12 callbacks suppressed
[  436.380514][T30531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7037'.
[  436.397311][T30524] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7034'.
[  436.442546][T30531] netlink: 596 bytes leftover after parsing attributes in process `syz.2.7037'.
[  436.705817][T30556] netlink: 204172 bytes leftover after parsing attributes in process `syz.2.7042'.
[  436.713053][T30556] openvswitch: netlink: Message has 5 unknown bytes.
[  437.327777][T30561] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  437.337981][T30561] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7044'.
[  437.467277][T30566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7045'.
[  437.488444][T30566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7045'.
[  437.492484][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  437.496186][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  437.505733][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  437.512831][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  437.683098][   T33] audit: type=1800 audit(1755582512.340:16): pid=30592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7053" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=12499 res=0 errno=0
[  437.934913][T30611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7056'.
[  438.248718][T30625] netlink: 'syz.0.7063': attribute type 83 has an invalid length.
[  438.649981][T30627] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7064'.
[  438.654559][T30627] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7064'.
[  438.710908][T30629] can: request_module (can-proto-0) failed.
[  438.714596][T30629] openvswitch: netlink: IPv4 tun info is not correct
[  439.011866][T30653] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  439.014916][T30653] team0: Device ipvlan0 is already an upper device of the team interface
[  439.111650][T30658] netlink: 'syz.2.7076': attribute type 10 has an invalid length.
[  439.129759][T30670] netlink: 'syz.1.7081': attribute type 3 has an invalid length.
[  439.278222][T30691] bond37: (slave erspan0): Releasing active interface
[  439.286534][T30691] batadv1: left allmulticast mode
[  439.289793][T30691] batadv1: left promiscuous mode
[  439.291892][T30691] bridge0: port 1(batadv1) entered disabled state
[  439.297853][T30691] bond37: (slave veth25): Releasing active interface
[  439.358561][T30703] netlink: 'syz.0.7090': attribute type 10 has an invalid length.
[  439.367905][T30691] netlink: 'syz.2.7083': attribute type 10 has an invalid length.
[  439.531811][T30720] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  439.552005][T30727] _Z`Ԁ@: entered promiscuous mode
[  439.697928][T30754] netlink: 'syz.1.7106': attribute type 2 has an invalid length.
[  439.710643][T30754] netlink: 'syz.1.7106': attribute type 2 has an invalid length.
[  439.713259][T30754] netlink: 'syz.1.7106': attribute type 2 has an invalid length.
[  439.720464][T30759] sctp: [Deprecated]: syz.2.7110 (pid 30759) Use of int in max_burst socket option.
[  439.720464][T30759] Use struct sctp_assoc_value instead
[  439.854586][T30779] macvlan3: entered allmulticast mode
[  439.860070][T30779] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  439.960049][T30791] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  440.040031][T30805] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  440.069778][T30788] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  440.129389][T30811] netlink: 'syz.0.7125': attribute type 10 has an invalid length.
[  440.214272][T30821] netlink: 'syz.1.7128': attribute type 1 has an invalid length.
[  440.234804][T30821] 8021q: adding VLAN 0 to HW filter on device bond31
[  440.568374][T30843] tipc: Enabled bearer <ib:caif0>, priority 14
[  440.925698][T30868] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  441.012996][T30877] veth1_virt_wifi: entered promiscuous mode
[  441.017469][T30877] veth0_to_bridge: entered promiscuous mode
[  441.021547][T30873] veth0_to_bridge: left promiscuous mode
[  441.024273][T30873] veth1_virt_wifi: left promiscuous mode
[  441.172397][T30899] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  441.176546][T30899] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  441.435930][T30926] __nla_validate_parse: 21 callbacks suppressed
[  441.435941][T30926] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7165'.
[  441.471376][T30926] netlink: 1172 bytes leftover after parsing attributes in process `syz.2.7165'.
[  441.953761][T30934] netlink: 277 bytes leftover after parsing attributes in process `syz.0.7167'.
[  442.126061][T30938] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7169'.
[  442.179345][T30941] batadv0 (unregistering): left promiscuous mode
[  442.312604][T30946] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7172'.
[  442.368603][T30951] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7174'.
[  442.502079][T30965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7178'.
[  442.507152][T30965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7178'.
[  442.510052][T30965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7178'.
[  442.514427][T30965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7178'.
[  442.519767][T30965] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  443.020834][T31002] bond32: (slave vxcan9): The slave device specified does not support setting the MAC address
[  443.028317][T31002] bond32: (slave vxcan9): Error -95 calling set_mac_address
[  443.265020][T31029] validate_nla: 7 callbacks suppressed
[  443.265036][T31029] netlink: 'syz.1.7196': attribute type 2 has an invalid length.
[  443.279884][T31029] netlink: 'syz.1.7196': attribute type 9 has an invalid length.
[  443.702389][T31068] IPVS: Scheduler module ip_vs_sip not found
[  443.804694][T31079] sctp: [Deprecated]: syz.2.7211 (pid 31079) Use of int in max_burst socket option.
[  443.804694][T31079] Use struct sctp_assoc_value instead
[  443.997829][T31100] smc: net device bond0 applied user defined pnetid SYZ2
[  444.060234][T31105] netlink: 'syz.2.7222': attribute type 4 has an invalid length.
[  444.068238][T31105] batadv_slave_0: entered promiscuous mode
[  444.071940][T31103] batadv_slave_0: left promiscuous mode
[  444.752361][T31174] bond0: option mode: unable to set because the bond device has slaves
[  444.800690][T31178] netlink: 'syz.1.7245': attribute type 83 has an invalid length.
[  444.903870][T31186] netlink: 'syz.0.7246': attribute type 21 has an invalid length.
[  445.372723][T31206] netlink: 'syz.2.7253': attribute type 9 has an invalid length.
[  445.378507][T31206] netlink: 'syz.2.7253': attribute type 6 has an invalid length.
[  445.744188][T31216] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  446.082382][T31243] sctp: [Deprecated]: syz.0.7264 (pid 31243) Use of struct sctp_assoc_value in delayed_ack socket option.
[  446.082382][T31243] Use struct sctp_sack_info instead
[  446.141479][T31251] sctp: [Deprecated]: syz.0.7264 (pid 31251) Use of int in maxseg socket option.
[  446.141479][T31251] Use struct sctp_assoc_value instead
[  446.401597][T31269] lo speed is unknown, defaulting to 1000
[  446.483098][T31273] netlink: 'syz.2.7272': attribute type 1 has an invalid length.
[  446.486846][T31273] __nla_validate_parse: 20 callbacks suppressed
[  446.486855][T31273] netlink: 232 bytes leftover after parsing attributes in process `syz.2.7272'.
[  446.491965][T31273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7272'.
[  446.541058][T31269] lo speed is unknown, defaulting to 1000
[  446.543900][T31269] lo speed is unknown, defaulting to 1000
[  446.547992][T31269] wg1 speed is unknown, defaulting to 1000
[  446.622444][T31284] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  446.783136][T31300] netlink: 'syz.2.7280': attribute type 10 has an invalid length.
[  446.786975][T31303] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7280'.
[  446.945563][T31325] dvmrp0: entered allmulticast mode
[  447.012317][T31334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7291'.
[  447.091935][T31339] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7293'.
[  447.212497][T31345] lo speed is unknown, defaulting to 1000
[  447.300120][T31360] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7301'.
[  447.367053][T31345] lo speed is unknown, defaulting to 1000
[  447.428027][T31345] lo speed is unknown, defaulting to 1000
[  447.438935][T31345] wg1 speed is unknown, defaulting to 1000
[  447.737435][T31381] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  447.742326][T31381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7304'.
[  447.746117][T31381] siw: device registration error -23
[  448.109416][T31392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7307'.
[  448.418660][T31418] tipc: Enabling of bearer <et`:syzkaller0> rejected, media not registered
[  448.493024][T31430] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7317'.
[  448.501896][T31430] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7317'.
[  448.794292][T31467] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[  448.951023][T31496] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  448.978389][T31498] lo speed is unknown, defaulting to 1000
[  449.098633][T31505] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  449.104115][T31498] lo speed is unknown, defaulting to 1000
[  449.114935][T31498] lo speed is unknown, defaulting to 1000
[  449.122722][T31498] wg1 speed is unknown, defaulting to 1000
[  449.222245][T31518] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.503396][T31536] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  449.506806][T31536] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  449.509782][T31536] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  449.512643][T31536] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  449.515404][T31536] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  449.519850][T31536] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  449.551782][T31542] netlink: 'syz.0.7353': attribute type 5 has an invalid length.
[  449.583376][T31546] netlink: 'syz.1.7354': attribute type 11 has an invalid length.
[  449.927964][T31582] smc: net device bond0 applied user defined pnetid SYZ2
[  449.930895][T31582] smc: net device bond0 erased user defined pnetid SYZ2
[  450.036191][T31595] sch_fq: defrate 0 ignored.
[  450.253555][T31610] bond0: (slave rose0): Error: Device can not be enslaved while up
[  450.310981][T31615] netlink: 'syz.2.7374': attribute type 13 has an invalid length.
[  450.316111][T31615] netlink: 'syz.2.7374': attribute type 13 has an invalid length.
[  450.461932][T31622] lo speed is unknown, defaulting to 1000
[  450.515564][T31629] netlink: 'syz.1.7376': attribute type 1 has an invalid length.
[  450.568310][T31629] bond33: (slave ip6gretap3): Enslaving as a backup interface with an up link
[  450.621487][T31622] lo speed is unknown, defaulting to 1000
[  450.624204][T31622] lo speed is unknown, defaulting to 1000
[  450.627058][T31622] wg1 speed is unknown, defaulting to 1000
[  450.740181][T31662] netlink: 'syz.2.7388': attribute type 8 has an invalid length.
[  450.945965][T10632] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  450.952342][T10632] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  450.974778][T10632] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  450.977916][T10632] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  451.671420][T31722] netlink: 'syz.1.7404': attribute type 1 has an invalid length.
[  451.689699][T31722] 8021q: adding VLAN 0 to HW filter on device bond34
[  451.709003][T31722] bond34: (slave veth13): Enslaving as an active interface with a down link
[  451.713177][T31726] __nla_validate_parse: 45 callbacks suppressed
[  451.713189][T31726] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7405'.
[  451.845580][T31739] lo speed is unknown, defaulting to 1000
[  451.935061][T31739] lo speed is unknown, defaulting to 1000
[  451.937955][T31739] lo speed is unknown, defaulting to 1000
[  451.940722][T31739] wg1 speed is unknown, defaulting to 1000
[  452.170854][T31764] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7415'.
[  452.175579][T31764] batman_adv: batadv0: Removing interface: dummy0
[  452.183578][T31770] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7417'.
[  452.188451][T31764] bond0: (slave bond29): Releasing backup interface
[  452.191316][T31764] bond29: left promiscuous mode
[  452.193947][T31764] bond36: (slave bridge15): Releasing active interface
[  452.210340][T31764] net_ratelimit: 27 callbacks suppressed
[  452.210351][T31764] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  452.229136][T31775] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7418'.
[  452.354610][T31786] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7420'.
[  452.357965][T31786] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7420'.
[  452.387306][T31787] lo speed is unknown, defaulting to 1000
[  452.509098][T31798] netlink: 'syz.2.7424': attribute type 4 has an invalid length.
[  452.558572][T31787] lo speed is unknown, defaulting to 1000
[  452.561821][T31787] lo speed is unknown, defaulting to 1000
[  452.565077][T31787] wg1 speed is unknown, defaulting to 1000
[  452.848991][T31824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7432'.
[  452.861244][T31824] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  453.008360][T31835] syzkaller1: entered promiscuous mode
[  453.010464][T31835] syzkaller1: entered allmulticast mode
[  453.142699][T31839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7434'.
[  453.150605][T31839] pim6reg: entered allmulticast mode
[  453.153559][T31839] pim6reg: left allmulticast mode
[  453.282995][T31846] netlink: 'syz.0.7436': attribute type 1 has an invalid length.
[  453.286758][T31846] netlink: 244 bytes leftover after parsing attributes in process `syz.0.7436'.
[  453.295872][T31850] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  453.356500][T31852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7438'.
[  453.587824][T31874] netlink: 'syz.0.7444': attribute type 4 has an invalid length.
[  453.806350][T31905] siw: device registration error -23
[  453.888279][T31914] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  454.009737][T31930] tap0: tun_chr_ioctl cmd 1074025676
[  454.012014][T31930] tap0: owner set to 0
[  454.164240][T31945] C: renamed from lo
[  454.169591][T31945] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  454.985397][T31997] openvswitch: netlink: Flow actions attr not present in new flow.
[  455.311936][T32032] sctp: [Deprecated]: syz.2.7496 (pid 32032) Use of struct sctp_assoc_value in delayed_ack socket option.
[  455.311936][T32032] Use struct sctp_sack_info instead
[  455.353587][T32041] validate_nla: 1 callbacks suppressed
[  455.353602][T32041] netlink: 'syz.2.7498': attribute type 1 has an invalid length.
[  455.359292][T32041] netlink: 'syz.2.7498': attribute type 2 has an invalid length.
[  455.682122][T32080] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  455.750027][T32083] netlink: 'syz.0.7510': attribute type 5 has an invalid length.
[  456.007319][ T5843] Bluetooth: hci2: command 0x0405 tx timeout
[  456.109229][T32115] C speed is unknown, defaulting to 1000
[  456.185107][T32118] netlink: 'syz.1.7518': attribute type 1 has an invalid length.
[  456.190888][T32118] netlink: 'syz.1.7518': attribute type 1 has an invalid length.
[  456.200863][T32115] lo speed is unknown, defaulting to 1000
[  456.203796][T32115] lo speed is unknown, defaulting to 1000
[  456.206871][T32115] wg1 speed is unknown, defaulting to 1000
[  456.565697][T32136] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  456.642674][T32146] netlink: 'syz.0.7529': attribute type 1 has an invalid length.
[  456.651890][T32146] batadv2: entered promiscuous mode
[  456.654056][T32146] batadv2: entered allmulticast mode
[  456.735372][T32158] __nla_validate_parse: 24 callbacks suppressed
[  456.735383][T32158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7533'.
[  456.741920][T32159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7533'.
[  456.786329][T32146] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7529'.
[  456.806067][T32165] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7535'.
[  456.895000][T32172] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7537'.
[  456.899208][T32172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7537'.
[  456.979615][T32192] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7542'.
[  457.017729][T32198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7543'.
[  457.022940][T32197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7545'.
[  457.132460][T32211] netlink: 'syz.1.7548': attribute type 5 has an invalid length.
[  457.145827][T32211] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  457.181803][T32214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7549'.
[  457.761344][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.765118][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.924344][T32220] openvswitch: netlink: Flow actions attr not present in new flow.
[  458.156543][T32246] IPVS: set_ctl: invalid protocol: 92 100.1.1.2:20004
[  458.170235][T32246] netlink: 'syz.1.7558': attribute type 1 has an invalid length.
[  458.194492][T32245] C speed is unknown, defaulting to 1000
[  458.365218][T32245] lo speed is unknown, defaulting to 1000
[  458.370308][T32245] lo speed is unknown, defaulting to 1000
[  458.373329][T32245] wg1 speed is unknown, defaulting to 1000
[  458.378917][T32266] netlink: 'syz.1.7568': attribute type 6 has an invalid length.
[  458.459143][T32280] netlink: 'syz.1.7571': attribute type 6 has an invalid length.
[  458.515047][T32288] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  459.240069][T32353] C speed is unknown, defaulting to 1000
[  459.365389][T32353] lo speed is unknown, defaulting to 1000
[  459.369151][T32353] lo speed is unknown, defaulting to 1000
[  459.371950][T32353] wg1 speed is unknown, defaulting to 1000
[  460.051042][T32403] syzkaller1: entered promiscuous mode
[  460.053615][T32403] syzkaller1: entered allmulticast mode
[  460.181124][T32416] wireguard0: entered promiscuous mode
[  460.182994][T32416] wireguard0: entered allmulticast mode
[  460.937622][T32410] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  461.273147][T32478] validate_nla: 20 callbacks suppressed
[  461.273156][T32478] netlink: 'syz.1.7623': attribute type 3 has an invalid length.
[  461.286986][T32478] netlink: 'syz.1.7623': attribute type 2 has an invalid length.
[  461.289903][T32478] netlink: 'syz.1.7623': attribute type 2 has an invalid length.
[  461.580480][T32499] netlink: 'syz.2.7629': attribute type 2 has an invalid length.
[  461.586261][T32499] : entered promiscuous mode
[  462.161377][T32501] __nla_validate_parse: 48 callbacks suppressed
[  462.161387][T32501] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7630'.
[  462.172338][T32501] netlink: 420 bytes leftover after parsing attributes in process `syz.1.7630'.
[  462.310790][T32510] netlink: 'syz.1.7633': attribute type 1 has an invalid length.
[  462.328649][T32510] 8021q: adding VLAN 0 to HW filter on device bond35
[  462.341821][T32510] veth15: entered promiscuous mode
[  462.346226][T32510] bond35: (slave veth15): Enslaving as an active interface with a down link
[  462.351956][T32510] erspan0: entered allmulticast mode
[  462.484814][T32527] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  462.491760][T32527] CPU: 0 UID: 0 PID: 32527 Comm: syz.0.7637 Not tainted syzkaller #0 PREEMPT(full) 
[  462.491772][T32527] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  462.491777][T32527] Call Trace:
[  462.491780][T32527]  <TASK>
[  462.491784][T32527]  dump_stack_lvl+0x189/0x250
[  462.491801][T32527]  ? __pfx_dump_stack_lvl+0x10/0x10
[  462.491812][T32527]  ? __pfx__printk+0x10/0x10
[  462.491825][T32527]  ? kernfs_path_from_node+0x2f/0x290
[  462.491857][T32527]  ? kernfs_path_from_node+0x250/0x290
[  462.491866][T32527]  ? kernfs_path_from_node+0x2f/0x290
[  462.491877][T32527]  sysfs_warn_dup+0x8e/0xa0
[  462.491885][T32527]  sysfs_do_create_link_sd+0xc0/0x110
[  462.491895][T32527]  device_add_class_symlinks+0x1cf/0x240
[  462.491906][T32527]  device_add+0x475/0xb50
[  462.491918][T32527]  wiphy_register+0x1ba6/0x28d0
[  462.491936][T32527]  ? __pfx_wiphy_register+0x10/0x10
[  462.491945][T32527]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  462.491957][T32527]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  462.491973][T32527]  ieee80211_register_hw+0x3425/0x4080
[  462.491989][T32527]  ? ieee80211_register_hw+0x13f1/0x4080
[  462.492001][T32527]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  462.492012][T32527]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  462.492026][T32527]  ? __hrtimer_setup+0x187/0x210
[  462.492033][T32527]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  462.492045][T32527]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  462.492068][T32527]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  462.492076][T32527]  ? trace_kmalloc+0x1f/0xd0
[  462.492085][T32527]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  462.492095][T32527]  ? kstrndup+0xbf/0x160
[  462.492107][T32527]  hwsim_new_radio_nl+0xea4/0x1b10
[  462.492117][T32527]  ? __pfx___nla_validate_parse+0x10/0x10
[  462.492136][T32527]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  462.492151][T32527]  ? __nla_parse+0x40/0x60
[  462.492163][T32527]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  462.492175][T32527]  genl_family_rcv_msg_doit+0x215/0x300
[  462.492187][T32527]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  462.492201][T32527]  ? bpf_lsm_capable+0x9/0x20
[  462.492211][T32527]  ? security_capable+0x7e/0x2e0
[  462.492224][T32527]  genl_rcv_msg+0x60e/0x790
[  462.492236][T32527]  ? __pfx_genl_rcv_msg+0x10/0x10
[  462.492245][T32527]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  462.492260][T32527]  netlink_rcv_skb+0x208/0x470
[  462.492270][T32527]  ? __lock_acquire+0xab9/0xd20
[  462.492281][T32527]  ? __pfx_genl_rcv_msg+0x10/0x10
[  462.492289][T32527]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  462.492308][T32527]  ? down_read+0x1ad/0x2e0
[  462.492319][T32527]  genl_rcv+0x28/0x40
[  462.492326][T32527]  netlink_unicast+0x82f/0x9e0
[  462.492339][T32527]  ? __pfx_netlink_unicast+0x10/0x10
[  462.492350][T32527]  ? netlink_sendmsg+0x642/0xb30
[  462.492359][T32527]  ? skb_put+0x11b/0x210
[  462.492368][T32527]  netlink_sendmsg+0x805/0xb30
[  462.492382][T32527]  ? __pfx_netlink_sendmsg+0x10/0x10
[  462.492418][T32527]  ? aa_sock_msg_perm+0xf1/0x1d0
[  462.492431][T32527]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  462.492440][T32527]  ? __pfx_netlink_sendmsg+0x10/0x10
[  462.492451][T32527]  __sock_sendmsg+0x21c/0x270
[  462.492463][T32527]  ____sys_sendmsg+0x505/0x830
[  462.492474][T32527]  ? __pfx_____sys_sendmsg+0x10/0x10
[  462.492487][T32527]  ? import_iovec+0x74/0xa0
[  462.492498][T32527]  ___sys_sendmsg+0x21f/0x2a0
[  462.492506][T32527]  ? __pfx____sys_sendmsg+0x10/0x10
[  462.492532][T32527]  ? __fget_files+0x2a/0x420
[  462.492542][T32527]  ? __fget_files+0x3a0/0x420
[  462.492558][T32527]  __x64_sys_sendmsg+0x19b/0x260
[  462.492566][T32527]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  462.492578][T32527]  ? rcu_is_watching+0x15/0xb0
[  462.492588][T32527]  ? do_syscall_64+0xbe/0x3b0
[  462.492601][T32527]  do_syscall_64+0xfa/0x3b0
[  462.492610][T32527]  ? lockdep_hardirqs_on+0x9c/0x150
[  462.492620][T32527]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.492627][T32527]  ? exc_page_fault+0x9f/0xf0
[  462.492638][T32527]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.492644][T32527] RIP: 0033:0x7ff61ab8ebe9
[  462.492653][T32527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  462.492659][T32527] RSP: 002b:00007ff61ba27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  462.492668][T32527] RAX: ffffffffffffffda RBX: 00007ff61adb6090 RCX: 00007ff61ab8ebe9
[  462.492674][T32527] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009
[  462.492679][T32527] RBP: 00007ff61ac11e19 R08: 0000000000000000 R09: 0000000000000000
[  462.492683][T32527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  462.492688][T32527] R13: 00007ff61adb6128 R14: 00007ff61adb6090 R15: 00007ffe8fe06888
[  462.492700][T32527]  </TASK>
[  462.496326][T32531] netlink: 'syz.2.7640': attribute type 1 has an invalid length.
[  462.505691][T32532] netlink: 'syz.1.7641': attribute type 1 has an invalid length.
[  462.507014][T32530] netlink: 'syz.2.7640': attribute type 1 has an invalid length.
[  463.002482][T32563] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  463.007726][T32570] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7648'.
[  463.011595][T32566] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  463.015646][T32566] CPU: 0 UID: 0 PID: 32566 Comm: syz.0.7648 Not tainted syzkaller #0 PREEMPT(full) 
[  463.015658][T32566] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  463.015663][T32566] Call Trace:
[  463.015667][T32566]  <TASK>
[  463.015671][T32566]  dump_stack_lvl+0x189/0x250
[  463.015688][T32566]  ? __pfx_dump_stack_lvl+0x10/0x10
[  463.015698][T32566]  ? __pfx__printk+0x10/0x10
[  463.015712][T32566]  ? kernfs_path_from_node+0x2f/0x290
[  463.015722][T32566]  ? kernfs_path_from_node+0x250/0x290
[  463.015729][T32566]  ? kernfs_path_from_node+0x2f/0x290
[  463.015740][T32566]  sysfs_warn_dup+0x8e/0xa0
[  463.015748][T32566]  sysfs_do_create_link_sd+0xc0/0x110
[  463.015758][T32566]  device_add_class_symlinks+0x1cf/0x240
[  463.015768][T32566]  device_add+0x475/0xb50
[  463.015777][T32566]  wiphy_register+0x1ba6/0x28d0
[  463.015795][T32566]  ? __pfx_wiphy_register+0x10/0x10
[  463.015805][T32566]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  463.015816][T32566]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  463.015830][T32566]  ieee80211_register_hw+0x3425/0x4080
[  463.015848][T32566]  ? ieee80211_register_hw+0x13f1/0x4080
[  463.015860][T32566]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  463.015887][T32566]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  463.015902][T32566]  ? __hrtimer_setup+0x187/0x210
[  463.015910][T32566]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  463.015923][T32566]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  463.015946][T32566]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  463.015954][T32566]  ? trace_kmalloc+0x1f/0xd0
[  463.015965][T32566]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  463.015975][T32566]  ? kstrndup+0xbf/0x160
[  463.015988][T32566]  hwsim_new_radio_nl+0xea4/0x1b10
[  463.015999][T32566]  ? __pfx___nla_validate_parse+0x10/0x10
[  463.016020][T32566]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  463.016036][T32566]  ? __nla_parse+0x40/0x60
[  463.016048][T32566]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  463.016061][T32566]  genl_family_rcv_msg_doit+0x215/0x300
[  463.016072][T32566]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  463.016086][T32566]  ? bpf_lsm_capable+0x9/0x20
[  463.016096][T32566]  ? security_capable+0x7e/0x2e0
[  463.016109][T32566]  genl_rcv_msg+0x60e/0x790
[  463.016120][T32566]  ? __pfx_genl_rcv_msg+0x10/0x10
[  463.016127][T32566]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  463.016143][T32566]  netlink_rcv_skb+0x208/0x470
[  463.016152][T32566]  ? __lock_acquire+0xab9/0xd20
[  463.016162][T32566]  ? __pfx_genl_rcv_msg+0x10/0x10
[  463.016171][T32566]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  463.016190][T32566]  ? down_read+0x1ad/0x2e0
[  463.016202][T32566]  genl_rcv+0x28/0x40
[  463.016209][T32566]  netlink_unicast+0x82f/0x9e0
[  463.016222][T32566]  ? __pfx_netlink_unicast+0x10/0x10
[  463.016232][T32566]  ? netlink_sendmsg+0x642/0xb30
[  463.016241][T32566]  ? skb_put+0x11b/0x210
[  463.016250][T32566]  netlink_sendmsg+0x805/0xb30
[  463.016265][T32566]  ? __pfx_netlink_sendmsg+0x10/0x10
[  463.016276][T32566]  ? aa_sock_msg_perm+0xf1/0x1d0
[  463.016288][T32566]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  463.016296][T32566]  ? __pfx_netlink_sendmsg+0x10/0x10
[  463.016307][T32566]  __sock_sendmsg+0x21c/0x270
[  463.016318][T32566]  ____sys_sendmsg+0x505/0x830
[  463.016328][T32566]  ? __pfx_____sys_sendmsg+0x10/0x10
[  463.016339][T32566]  ? import_iovec+0x74/0xa0
[  463.016350][T32566]  ___sys_sendmsg+0x21f/0x2a0
[  463.016358][T32566]  ? __pfx____sys_sendmsg+0x10/0x10
[  463.016382][T32566]  ? __fget_files+0x2a/0x420
[  463.016419][T32566]  ? __fget_files+0x3a0/0x420
[  463.016435][T32566]  __x64_sys_sendmsg+0x19b/0x260
[  463.016445][T32566]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  463.016458][T32566]  ? rcu_is_watching+0x15/0xb0
[  463.016469][T32566]  ? do_syscall_64+0xbe/0x3b0
[  463.016481][T32566]  do_syscall_64+0xfa/0x3b0
[  463.016491][T32566]  ? lockdep_hardirqs_on+0x9c/0x150
[  463.016501][T32566]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  463.016508][T32566]  ? exc_page_fault+0x9f/0xf0
[  463.016519][T32566]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  463.016526][T32566] RIP: 0033:0x7ff61ab8ebe9
[  463.016534][T32566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  463.016541][T32566] RSP: 002b:00007ff61ba27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  463.016566][T32566] RAX: ffffffffffffffda RBX: 00007ff61adb6090 RCX: 00007ff61ab8ebe9
[  463.016574][T32566] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009
[  463.016579][T32566] RBP: 00007ff61ac11e19 R08: 0000000000000000 R09: 0000000000000000
[  463.016584][T32566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  463.016597][T32566] R13: 00007ff61adb6128 R14: 00007ff61adb6090 R15: 00007ffe8fe06888
[  463.016611][T32566]  </TASK>
[  463.265180][T32576] netlink: 'syz.2.7652': attribute type 10 has an invalid length.
[  463.307132][T32587] bond0: Device is already in use.
[  463.357996][   T12] nci: nci_rx_work: unknown MT 0x1
[  463.394581][T32595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7656'.
[  463.485484][T32603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7658'.
[  463.586067][T32607] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7659'.
[  463.592074][T32607] openvswitch: netlink: Flow key attr not present in new flow.
[  464.195147][T32610] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  464.199967][T32610] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  464.203984][T32610] CPU: 0 UID: 0 PID: 32610 Comm: syz.0.7660 Not tainted syzkaller #0 PREEMPT(full) 
[  464.208147][T32610] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  464.212279][T32610] RIP: 0010:xfrm_alloc_spi+0xe0e/0xf30
[  464.214622][T32610] Code: 00 fc ff df 80 3c 03 00 4c 8b 34 24 74 08 4c 89 f7 e8 86 8b 01 f8 4d 8b 36 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 48 8b 5c 24 58 74 08 4c 89 f7 e8 4f 8c 01 f8 4d 89 3e
[  464.222495][T32610] RSP: 0018:ffffc9000a0470e0 EFLAGS: 00010246
[  464.225088][T32610] RAX: 0000000000000000 RBX: 1ffff1100595f096 RCX: dffffc0000000000
[  464.228430][T32610] RDX: ffffc900035f1000 RSI: 00000000000001cb RDI: 00000000000001cc
[  464.231770][T32610] RBP: ffffc9000a047230 R08: dffffc0000000000 R09: 0000000000000002
[  464.235096][T32610] R10: 000000000000000a R11: 0000000000000002 R12: 1ffff110226461b6
[  464.238391][T32610] R13: ffff88802caf84b0 R14: 0000000000000000 R15: ffff88802caf84a8
[  464.240986][T32610] FS:  00007ff61ba486c0(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  464.244396][T32610] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  464.247156][T32610] CR2: 0000200000000580 CR3: 00000000444d8000 CR4: 00000000000006f0
[  464.250486][T32610] Call Trace:
[  464.251906][T32610]  <TASK>
[  464.253181][T32610]  ? xfrm_alloc_spi+0x2a0/0xf30
[  464.255259][T32610]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  464.257459][T32610]  ? xfrm_find_acq+0x87/0xa0
[  464.259403][T32610]  xfrm_alloc_userspi+0x70b/0xc90
[  464.261547][T32610]  ? apparmor_capable+0x137/0x1b0
[  464.263664][T32610]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  464.266073][T32610]  ? __nla_parse+0x40/0x60
[  464.267994][T32610]  xfrm_user_rcv_msg+0x7a3/0xab0
[  464.269890][T32610]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  464.271632][T32610]  ? __pfx___mutex_trylock_common+0x10/0x10
[  464.274130][T32610]  ? rcu_is_watching+0x15/0xb0
[  464.276249][T32610]  ? trace_contention_end+0x39/0x120
[  464.278552][T32610]  ? __mutex_lock+0x335/0x1360
[  464.280634][T32610]  netlink_rcv_skb+0x208/0x470
[  464.282641][T32610]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  464.284934][T32610]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  464.287195][T32610]  ? netlink_deliver_tap+0x2e/0x1b0
[  464.289369][T32610]  ? netlink_deliver_tap+0x2e/0x1b0
[  464.291588][T32610]  xfrm_netlink_rcv+0x79/0x90
[  464.292897][T32617] macsec1: entered promiscuous mode
[  464.293581][T32610]  netlink_unicast+0x82f/0x9e0
[  464.295905][T32617] macsec1: entered allmulticast mode
[  464.297516][T32610]  ? __pfx_netlink_unicast+0x10/0x10
[  464.297538][T32610]  ? netlink_sendmsg+0x642/0xb30
[  464.297556][T32610]  ? skb_put+0x11b/0x210
[  464.297571][T32610]  netlink_sendmsg+0x805/0xb30
[  464.297593][T32610]  ? __pfx_netlink_sendmsg+0x10/0x10
[  464.310006][T32610]  ? aa_sock_msg_perm+0xf1/0x1d0
[  464.312098][T32610]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  464.314326][T32610]  ? __pfx_netlink_sendmsg+0x10/0x10
[  464.316601][T32610]  __sock_sendmsg+0x21c/0x270
[  464.318640][T32610]  ____sys_sendmsg+0x505/0x830
[  464.320665][T32610]  ? __pfx_____sys_sendmsg+0x10/0x10
[  464.322841][T32610]  ? import_iovec+0x74/0xa0
[  464.324424][T32610]  ___sys_sendmsg+0x21f/0x2a0
[  464.326264][T32610]  ? __pfx____sys_sendmsg+0x10/0x10
[  464.328554][T32610]  ? futex_wait+0x285/0x360
[  464.330564][T32610]  ? __lock_acquire+0xab9/0xd20
[  464.332617][T32610]  __x64_sys_sendmsg+0x19b/0x260
[  464.334695][T32610]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  464.336560][T32610]  ? rcu_is_watching+0x15/0xb0
[  464.338116][T32610]  ? do_syscall_64+0xbe/0x3b0
[  464.339668][T32610]  do_syscall_64+0xfa/0x3b0
[  464.341172][T32610]  ? lockdep_hardirqs_on+0x9c/0x150
[  464.342826][T32610]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.344746][T32610]  ? exc_page_fault+0x9f/0xf0
[  464.346679][T32610]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.349018][T32610] RIP: 0033:0x7ff61ab8ebe9
[  464.350435][T32610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  464.356711][T32610] RSP: 002b:00007ff61ba48038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  464.359555][T32610] RAX: ffffffffffffffda RBX: 00007ff61adb5fa0 RCX: 00007ff61ab8ebe9
[  464.362789][T32610] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004
[  464.365998][T32610] RBP: 00007ff61ac11e19 R08: 0000000000000000 R09: 0000000000000000
[  464.369322][T32610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  464.372767][T32610] R13: 00007ff61adb6038 R14: 00007ff61adb5fa0 R15: 00007ffe8fe06888
[  464.376109][T32610]  </TASK>
[  464.377430][T32610] Modules linked in:
[  464.378889][T32610] ---[ end trace 0000000000000000 ]---
[  464.381035][T32610] RIP: 0010:xfrm_alloc_spi+0xe0e/0xf30
[  464.382946][T32610] Code: 00 fc ff df 80 3c 03 00 4c 8b 34 24 74 08 4c 89 f7 e8 86 8b 01 f8 4d 8b 36 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 48 8b 5c 24 58 74 08 4c 89 f7 e8 4f 8c 01 f8 4d 89 3e
[  464.390543][T32610] RSP: 0018:ffffc9000a0470e0 EFLAGS: 00010246
[  464.393141][T32610] RAX: 0000000000000000 RBX: 1ffff1100595f096 RCX: dffffc0000000000
[  464.396474][T32610] RDX: ffffc900035f1000 RSI: 00000000000001cb RDI: 00000000000001cc
[  464.399883][T32610] RBP: ffffc9000a047230 R08: dffffc0000000000 R09: 0000000000000002
[  464.403167][T32610] R10: 000000000000000a R11: 0000000000000002 R12: 1ffff110226461b6
[  464.406436][T32610] R13: ffff88802caf84b0 R14: 0000000000000000 R15: ffff88802caf84a8
[  464.409781][T32610] FS:  00007ff61ba486c0(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  464.413451][T32610] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  464.416173][T32610] CR2: 0000200000000580 CR3: 00000000444d8000 CR4: 00000000000006f0
[  464.419532][T32610] Kernel panic - not syncing: Fatal exception in interrupt
[  464.422907][T32610] Kernel Offset: disabled
[  464.424735][T32610] Rebooting in 86400 seconds..

VM DIAGNOSIS:
05:48:59  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000ded RDI=0000000000000dee RBP=00000000000003f8 RSP=ffffc9000a046910
R8 =ffff888020508237 R9 =1ffff110040a1046 R10=dffffc0000000000 R11=ffffffff854eff70
R12=dffffc0000000000 R13=ffffffff99af9917 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854effec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff61ba486c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000580 CR3=00000000444d8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007ff61ad87498 00007ff61ad87470 XMM03=00007ff61ad874a8 00007ff61ad874a0
XMM04=00007ff61b8ed100 00007ff61ad87460 XMM05=00007ff61ad87478 00007ff61ad874c0
XMM06=00007ff61ad874b8 00007ff61ad874b0 XMM07=00007ff61ad874a8 00007ff61ad874a0
XMM08=0000000000000000 00007ff61ac12ee7 XMM09=0000000000000000 00007ff61ac12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000001 RCX=0a7711c7852c6d00 RDX=0000000028c75208
RSI=0000000000000008 RDI=ffffffff8fa37e30 RBP=ffffc9000308f9e0 RSP=ffffc9000308f880
R8 =00000000deaa3031 R9 =00000000959b5af3 R10=000000000000000d R11=ffffffff81ac3910
R12=dffffc0000000000 R13=1ffff92000611f24 R14=ffffffff8218d6d0 R15=0000000000000000
RIP=ffffffff822317f0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f984b5bd440 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 000000000000ff00 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 000000000000ff00 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
