last executing test programs:

2.684988307s ago: executing program 2 (id=5247):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x2c, 0x12, 0x1, 0x0, 0x5, "", [@nested={0x1c, 0x0, 0x0, 0x0, [@typed={0xc, 0x135, 0x0, 0x0, @u64}, @typed={0xc, 0x36, 0x0, 0x0, @u64=0x7}]}]}, 0x2c}], 0x1}, 0x0)

2.552880649s ago: executing program 2 (id=5249):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x34, 0x2, [@TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x7fffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffffa}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x40}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}]}}]}, 0x68}}, 0x4000090)

2.485075815s ago: executing program 2 (id=5251):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r1, &(0x7f00000001c0)={0x6, 0x8, 0x2}, 0x8)
accept4(r0, 0x0, 0x0, 0x800)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
unshare(0x20000400)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

1.604961323s ago: executing program 2 (id=5254):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
unshare(0x62040200)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0)
r11 = accept4(r10, 0x0, 0x0, 0x80800)
sendmmsg$alg(r11, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="0928ffffff", 0xffffffd9}, {&(0x7f00000002c0)="ebe3a0e9", 0x4}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x40800)
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0)

1.330936815s ago: executing program 0 (id=5257):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r1})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r2)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r6, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r8, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x18, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@typed={0x8, 0x6d, 0x0, 0x0, @pid}]}, 0x18}], 0x1, 0x0, 0x0, 0x1}, 0x84)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r6)
sendfile(r8, r7, 0x0, 0xf03a0005)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r5, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
close(0x3)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180006ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

1.257928015s ago: executing program 0 (id=5258):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111500008000000060000000000000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
r2 = socket(0x10, 0x803, 0x0) (rerun: 64)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff, 0x0, 0x400}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x2, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async, rerun: 32)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async, rerun: 32)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r7], 0x54}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0) (async)
r9 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r10], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000110001002dbd7000f9dbdf2500000000", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

934.801052ms ago: executing program 0 (id=5259):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
accept4$packet(r0, 0x0, &(0x7f0000000000), 0x40000)
socket$packet(0x11, 0x2, 0x300)
sendmsg(0xffffffffffffffff, 0x0, 0x844)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000580))
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000680)={@private0, 0x79})
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002bbd7000fbdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40000)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
sendto(r0, &(0x7f0000000500)="84d1af07149ca76d144dafe1c98f2fce9d62164df2f6f75750487738002571770f86d9adc80079d9b0e8dd215f0e9ade6070721fcf12815d8f6a1bd92d717d181456ca973b6e2a2a07f554b4ac42c794e6e5fc8defeb5930540778a68676f67b8f10482f9c21dcd88eb73147fe9eec10", 0x70, 0x20040006, &(0x7f0000000600)=@nl=@unspec, 0x80)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x298d80, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r6, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
readv(r7, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
write$tun(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbb4e22e78bdc126dc4be000000000000ff0200000001000000000000000000014f194e200018f7ffffff00000b00000000000100000000051ec66e3de07504f42fb7bc72afac000000000000000000007400e971b14ca57d2c593cc13e98e372ec204e22b00659c1269a84a23deba8ae4b90b0d6bf100cc1bb3f8e84a53bd797d62ca36a40bfac85e2ab5bbe95a9bfb7c716708c242c02b8d387fa8b6fdff9d8fe900324875c8739a900002594aece9b91add59b2beee8d76c100659dc86b1a44bb67a"], 0x52)
getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x51)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x20040884}, 0x0)

700.157463ms ago: executing program 0 (id=5263):
r0 = socket$inet_icmp(0x2, 0x2, 0x1) (async)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$rose(r2, 0x104, 0x1, 0x0, &(0x7f0000000140))
setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) (async)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000d80)={{0x2, 0x4e23, @broadcast}, {0x0, @local}, 0x0, {0x2, 0x4e20, @remote}, 'lo\x00'}) (async, rerun: 32)
recvmsg(r1, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) (rerun: 32)
sendto$inet(r0, 0x0, 0x2f, 0x60, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}}, 0xac}}, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) (async, rerun: 32)
sendmsg$NFT_BATCH(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) (rerun: 32)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r5, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f00000015c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0xe, 0x0, 0x8}, [{{0x254, 0x1, {{0x1, 0xffffff33}, 0x3, 0x0, 0x2, 0x401, 0x16, 'syz0\x00', "afb5f82e68578bffa16f123b4afbdb533ccdf7ee6904b342c7c4010379139ca0", "8853adffb2bfddf9dbee9dcc287dd1490064c46c7ca92cc40e13fc106ef6fb9e", [{0xa9, 0x1, {0x0, 0x27}}, {0x2, 0xd, {0x3, 0x1}}, {0x7, 0x9, {0x2, 0x2}}, {0x4008, 0x5, {0x2, 0x4}}, {0x400, 0x9, {0x2, 0xd2f}}, {0x8001, 0x0, {0x1, 0x100}}, {0x7, 0x9, {0x2, 0x6}}, {0x7, 0xffff, {0x0, 0x6621}}, {0x5, 0x3, {0x0, 0x5d7}}, {0x8, 0x7, {0x0, 0xfff}}, {0x3, 0x1, {0x2, 0x79b5}}, {0x4, 0x5, {0x1, 0x8dd}}, {0x0, 0x6, {0x0, 0x7f}}, {0x4b8, 0xffff, {0x1, 0x401}}, {0x6, 0x3, {0x3, 0x4}}, {0xa55, 0x5, {0x0, 0x9}}, {0x100, 0x8, {0x3, 0xffffffff}}, {0xd, 0x2, {0x0, 0x80000000}}, {0x2, 0xdd, {0x1, 0x3}}, {0x2, 0x80, {0x2, 0x9}}, {0x8001, 0x100, {0x3, 0x66b}}, {0xfff, 0x9, {0x0, 0x1}}, {0xf85, 0x7, {0x2, 0xfffffc00}}, {0x1a, 0xfff, {0x2, 0xfffffff5}}, {0x8000, 0x2, {0x3, 0x81}}, {0x6, 0xa, {0x0, 0x3}}, {0x86b, 0x225, {0x1, 0x81}}, {0x2, 0x6, {0x2, 0x7}}, {0x1, 0xe, {0x3, 0x6}}, {0x7a7, 0x7, {0x1, 0x9}}, {0x80, 0x4, {0x3}}, {0x7, 0xa, {0x0, 0x1}}, {0x2, 0x1, {0x3, 0x3}}, {0xa, 0x8000, {0x2, 0x7}}, {0x1, 0x5e, {0x3, 0x1000}}, {0x100, 0xd9f, {0x0, 0x82}}, {0x26, 0x8, {0x3, 0x8}}, {0x2, 0x581, {0x2, 0x6}}, {0x4, 0x1, {0x1, 0x3}}, {0x1, 0x8001, {0x2, 0xe98f}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x15}, 0x4000800)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
listen(r6, 0x0) (async, rerun: 32)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r6, 0x894b, 0x0) (async, rerun: 32)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x4c, r8, 0x1, 0xfffffffd, 0x25dfdbfc, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab}}, {0x8}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) (async)
sendmsg$DEVLINK_CMD_SB_GET(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0xcc, r8, 0x100, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x769}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffff}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000004c0)={0x6, &(0x7f0000000280)=[{0x93, 0xb, 0x6, 0xfffffff7}, {0xd59a, 0x5f, 0xd, 0x3ff}, {0x9, 0x5, 0x4, 0x10}, {0x2, 0x61, 0x7, 0x3d6}, {0x3, 0x3, 0x1}, {0x2, 0x1, 0xa4, 0xffff8000}]}, 0x10) (async)
getsockopt$netlink(r9, 0x10e, 0x3, &(0x7f0000000140)=""/252, &(0x7f0000000000)=0xfc)

698.777641ms ago: executing program 1 (id=5264):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5c00000012006b000040017ea608601602f3650440010008000000000002009ee517c356a7b0251e616859adaa133792a97f447af93a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
socket$rds(0x15, 0x5, 0x0)
unshare(0x24060400)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
splice(r1, 0x0, r2, 0x0, 0x100000000, 0x4)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
shutdown(r3, 0x2)
sendmsg$inet(r3, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x20000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="02060000250000000000020013003900010007"], 0x128}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000010000000f00000008000300", @ANYRES32=r7, @ANYBLOB="e20033004100fe10"], 0x24}}, 0x80)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x200)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r9, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

564.038362ms ago: executing program 0 (id=5265):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xd50, 0xffffffffffffff60, &(0x7f0000000380)="b9ff0300600d698cff9e14f08edd", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x124, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0xac, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x5f, 0x2, "6f28cae7e763e81067d4ceb813e7feb2a199aa4d55a1ab96f08a0f0e794136b12fef25420295cc1e507f98d439d24055b3819ebc8073730523a0a085ad7669c2155f69b15be1a3c2c548d7259b70c08e808f7af3a3406f731c9d6e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x41, 0x3, "5ae3420e80c07506bfd5002f75393ca25f1b4eaf61a166ad9b6b03caed34ec7ca2d030cc7a9c46dec5fa602fdf022276c1d032155f658f98a411e682d7"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x124}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="840000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00300000000000005400128009000100766c616e000000004400028006000100000000000600050081000000280003803900010006000000090000000c00010000040000000000008dff010040000000060000000600050088a8000008000a00", @ANYRES32, @ANYBLOB="080005"], 0x84}, 0x1, 0xba01}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r6, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4a}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000)

492.170263ms ago: executing program 0 (id=5266):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x2b, 0x100000005, 0x4000, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000002060101000000000300000000000000050005000a001800050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0)
read(r4, &(0x7f00000000c0)=""/81, 0x51)
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x7, 0x0, 0xff, 0x1}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r6, 0x8b32, &(0x7f0000000040))
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000305fcffffff000000000000000036e95ea4bfd4c074028ef2bf259ed7f19fb47ea9fb0c6a0a28a9d26fb8d613deb4555cf157e6a2f6122133047292524359f6d3d077b137c40c1a317d93e6af21f17da841998bb399e819760d34f4038c3af874227156eae77f4d885d4225143adf26aa409f471b41a7d0c7e41a2c42b268bf7e54243356f7436d68c813b9af37f6", @ANYRES32=0x0, @ANYBLOB="1133020031880000280012800b0001006d61637365630000180002800c0004000400000100c28000080005000304004008000500", @ANYRES32=r5, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)

491.609927ms ago: executing program 1 (id=5267):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) (async)
r0 = socket(0x1e, 0x1, 0x0)
listen(r0, 0xfff) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
listen(0xffffffffffffffff, 0xfffffffc) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) (async)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c) (async)
listen(0xffffffffffffffff, 0xb) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
unshare(0x400) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000200), 0x4) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="080008000300040000101400ffff521fb89757c6bbbbbbbbbbbb0011aa55c814ac0a886c6d68c3590a3cdcdeee06f3d930a3015c91023c8093368ae53e7452af128be4652926c3dee96111d2df9640aa7ca9d0a43488f1dce1e5394001a07ca5ecf46b3ad900000000"], 0x69) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7030000a3000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b0400000000000000000200000034000480300001800b0001007461726765740000200002800a000100415544495400000005000300ee00000008000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x88}}, 0x0) (async)
shutdown(r0, 0x2) (async)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/209, 0xd1}], 0x1}, 0x0)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={'bond_slave_1\x00', {0x2, 0x4e23, @remote}}) (async)
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r6, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) (async)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r7, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4)

421.813617ms ago: executing program 1 (id=5268):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@decl_tag={0x4, 0x0, 0x0, 0x11, 0x1, 0x9}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x20]}}, 0x0, 0x2e, 0x0, 0x1, 0x7}, 0x28)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x80000000}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {0x9}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x18}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000cd230000000000000000850000003d0000003265f3ac00000000db9c17a6b4bee2e8c6dba9725aca6ab9d0d8f4c7e5b0bc65cf8216f6945789a9252c82880fb7b8066f4da4e732856b83dedc4a5f9a89d6357c6c55e346e51fed68294d51e7c9b0c9c037c7ec4251dd55979a229a90bdfe4351c2b99ea6673d5ac025e22ae56153aaac49ee915e0fe09a63d3e284dda1fbd3547c4760ff6f3f"], &(0x7f0000000740)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x2d, 'net'}]}, 0x5)
ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
getpeername$unix(r2, &(0x7f00000003c0)=@abs, &(0x7f0000000480)=0x6e)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0xf}, {0xe, 0xfff3}, {0x9, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x4}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000900000000000000000a20000000000a01010000000000000000050000000900010073797a30000000004c000000030a01080000000000000000050000000900010073797a30000000000900030073797a320000000014000480080002400000001408000140000000020b000700e6696c746572"], 0x94}, 0x1, 0x0, 0x0, 0x40090}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000100001000000000000000000000000080a010800000000000000000700000a08000a40000000010c00034000000000000000030c000640000000000000000408000a400000000108000a400000000908000b4000000001140000001100010000000000000000000200000a"], 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x5)

343.329949ms ago: executing program 1 (id=5269):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000020601010000000000000000000000000900020073797a3000000000050001000600000005000500000000000500040000000000140007800800114000000000050015007a8537350d000300686173683a6d6163"], 0x5c}}, 0x4000)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001640)={'ip6_vti0\x00', &(0x7f00000015c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x3, 0x2, 0x53, @empty, @empty, 0x40, 0x80, 0xb, 0x872a}})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x20000884}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r3)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800001c0000000a00000008a02e0837000000000e0100000000080000002e0000cf0000122e00000000000000000000284b24f359ef16e085e059af946728b3c56b59dfdddf270570d406dbfb9eb526f3e744629596f69bfb9026748069af7941df1de3b156eacbfdb297885a3b99b6d31714c836e325871e09f50a1a9f37c2edbf6c67d2e9d5"], 0x0, 0x3e, 0x0, 0x6}, 0x28)
sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2ccbe9000000040a03000000000000000000020000080c000240030073797a320000"], 0x2c}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000020601010000000000000000000000000900020073797a3000000000050001000600000005000500000000000500040000000000140007800800114000000000050015007a8537350d000300686173683a6d6163"], 0x5c}}, 0x4000) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001640)={'ip6_vti0\x00', &(0x7f00000015c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x3, 0x2, 0x53, @empty, @empty, 0x40, 0x80, 0xb, 0x872a}}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r3) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800001c0000000a00000008a02e0837000000000e0100000000080000002e0000cf0000122e00000000000000000000284b24f359ef16e085e059af946728b3c56b59dfdddf270570d406dbfb9eb526f3e744629596f69bfb9026748069af7941df1de3b156eacbfdb297885a3b99b6d31714c836e325871e09f50a1a9f37c2edbf6c67d2e9d5"], 0x0, 0x3e, 0x0, 0x6}, 0x28) (async)
sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2ccbe9000000040a03000000000000000000020000080c000240030073797a320000"], 0x2c}, 0x1, 0x0, 0x0, 0x48800}, 0x0) (async)

234.509226ms ago: executing program 2 (id=5270):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x4c, 0x0, &(0x7f0000000340)="26c9858d25786dcb426054a134cc71e462811cd3c296c8a2bf96926ac0dddae518cf0e561f6e85773cf57f6ac50cc676bd22b50b9ea6cf83feb91bd3d107870fc0c23b17c80199751da5140c", &(0x7f0000000000), 0x7, 0x0, 0xe5, 0xbc, &(0x7f00000003c0)="23d1777f71420bb1696787b4fc720bb05649de3f3451a466a0557372a47409cb7816a5e0c6a634951c87ae5f38c57cfb5a7ae9028d3aee3994b170d203cd5890605ee8b6d76f83a359fd27a2fccec5f6a58df03fee7c7904930e0e6f63b133b5fce3afd4063a1974da7f46f1165050ecf159553af9f07c3781e70026da9b623ac9546391dfe165971efe9c0fb70c2615e3d8336e8eae934478e38daabb29962c40dcd7aa724e34ba6b414a2517765d858caa471a7a651a27a55fd5a149a5734437bac7282ba623b2e8eefc92a3cb1ec3062e94ee83fc7affaf0ad1b697744c885980323943", &(0x7f00000004c0)="28e5e089d474b3179e0d958c16085771151b92e3f608fffcd902e91406f275bd6819ad3c5b696d5e9bed007cf851f846d003a5b54c06a5f44bdab8290619adbf809f0889bf2426827a77ffe6267b4dd2a59416e774a595891e953cfbeed53cb6eb4b31795489b7e4b6052f095c58d81d7ce6c2e58eb5c3b1732a3a5d7338805789b92505df4029e847770fc7d310f8183f47304b9be8e95ac5c01f3e40e60e998abd4ed60091bf000878bdd2f405e4482676f9306c14d9ca6cbb772c", 0x0, 0x0, 0x3}, 0x50)
sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)="118db76e8efb27d530b26a8302bad647e35540226c4052b6d573164d39ad8e0267632e8fe108cf55473bc22914286359c3bb3decf99ed04d34d1a73ae48dae0e69ee69fe", 0x44}], 0x4}}], 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff7f0000000000164c80b178ae020000000000000000006e000000040002800800047f088285ea8b25a5d021a5806899d98cc4bdecb9f4eb7c84ad6d334904de852616f670dd78b5927b2c17ff0abdffca6db105aad19809d8cec6e90600000000000000000000000000b6239ecdaf696f632603e38f58fa935c5ccda357d79ff9df526c82c07b061ef8877d98a735cfa780b453af2bb474a3e4300c3511a0bc01f30fd4f08a12a199bc8948a0bc5d2f43000da7671c2726c6f9f8eb6921b58e44ac3b1f"], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x40080}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@cgroup, 0x26, 0x1, 0x6, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r1=>0x0}, 0x40)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff0, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048845}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001900)=@deltfilter={0x24, 0x2d, 0x5, 0x70bd2a, 0x25dfdbf9, {0x0, 0x0, 0x0, r4, {0xfff3, 0x9}, {0xffff, 0xf}, {0x1, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c5}, 0x20008810)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff83}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r5, r6, 0x2f}, 0x20)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, <r7=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r6, r6, 0x2f, 0x2038, 0x4, @void, @void, @value=r7}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@ifindex=r4, 0xffffffffffffffff, 0x1b, 0x2034, 0x0, @void, @void, @value=r7, @void, r1}, 0x20)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
sendmmsg(r0, &(0x7f00000018c0)=[{{&(0x7f0000000180)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x6}}], 0x1, 0x8094)
r8 = socket(0x10, 0x80002, 0x0)
r9 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000000040)={r9})
sendmsg$FOU_CMD_DEL(r8, 0x0, 0x20040890)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
setsockopt$packet_int(r8, 0x107, 0x8, &(0x7f0000000140)=0x200, 0x4)
writev(r10, &(0x7f00000002c0)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}], 0x2)
sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0)

233.509465ms ago: executing program 1 (id=5271):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) (async, rerun: 64)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (rerun: 64)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) (async, rerun: 64)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', <r5=>0x0}) (async, rerun: 64)
r6 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000b0000000000060002404e22000008000500", @ANYRES32=r5], 0x4c}}, 0x20000004) (async)
sendmsg$nl_route_sched(r3, 0x0, 0x4804) (async)
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000080)=<r7=>0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000ac0)={{r1}, r7, 0x14, @inherit={0x50, &(0x7f0000000100)={0x1, 0x1, 0x4, 0x6f, {0x0, 0xfffffffffffffff3, 0x6, 0x6, 0x8}, [0x21]}}, @name="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"})
r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(r8, 0x0, 0x0) (async, rerun: 32)
sendfile(r8, 0xffffffffffffffff, 0x0, 0x10000) (async, rerun: 32)
write$cgroup_freezer_state(r8, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)

1.680741ms ago: executing program 1 (id=5272):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x4, 0x6}, 0x48) (async)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000200), &(0x7f0000000240)=@udp=r3, 0x1}, 0x20)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0)

0s ago: executing program 2 (id=5273):
socketpair(0x3, 0x3, 0x1, &(0x7f0000000000))
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x6}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket(0xa, 0x3, 0x3c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r4)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r5, @ANYBLOB="05043fbd7000fddbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="9800028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f616463617374"], 0xb4}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0)

kernel console output (not intermixed with test programs):

nges committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   81.343733][ T6449] Illegal XDP return value 32768 on prog  (id 46) dev N/A, expect packet loss!
[   81.727708][ T6471] openvswitch: netlink: Message has 8 unknown bytes.
[   81.845950][ T6477] team0: entered promiscuous mode
[   81.848561][ T6477] team_slave_0: entered promiscuous mode
[   81.852135][ T6477] team_slave_1: entered promiscuous mode
[   81.858145][ T6477] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   82.293904][ T6508] __nla_validate_parse: 22 callbacks suppressed
[   82.293916][ T6508] netlink: 144 bytes leftover after parsing attributes in process `syz.2.256'.
[   82.518421][ T6523] netlink: 'syz.1.263': attribute type 11 has an invalid length.
[   82.775157][ T6538] lo speed is unknown, defaulting to 1000
[   82.778421][ T6538] lo speed is unknown, defaulting to 1000
[   82.786172][ T6538] lo speed is unknown, defaulting to 1000
[   82.800614][ T6538] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   82.824733][ T6538] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   82.890502][ T6539] netlink: 'syz.2.269': attribute type 4 has an invalid length.
[   82.906912][ T6538] lo speed is unknown, defaulting to 1000
[   82.919761][ T6538] lo speed is unknown, defaulting to 1000
[   82.924078][ T6538] lo speed is unknown, defaulting to 1000
[   83.322318][ T6574] netlink: 'syz.0.285': attribute type 3 has an invalid length.
[   83.326414][ T6571] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.475438][ T6586] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component
[   83.501296][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'.
[   83.625150][ T6597] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   83.869722][ T6615] netlink: 20 bytes leftover after parsing attributes in process `syz.1.303'.
[   84.849610][ T6651] netlink: 'syz.1.317': attribute type 1 has an invalid length.
[   84.853376][ T6651] netlink: 140 bytes leftover after parsing attributes in process `syz.1.317'.
[   84.877573][ T6651] netlink: 96 bytes leftover after parsing attributes in process `syz.1.317'.
[   85.685177][ T6694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'.
[   86.178378][   T47] IPVS: starting estimator thread 0...
[   86.269153][ T6731] IPVS: using max 38 ests per chain, 91200 per kthread
[   86.407413][ T6738] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.411000][ T6738] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.441837][ T6738] team0: left promiscuous mode
[   86.443807][ T6738] team_slave_0: left promiscuous mode
[   86.445635][ T6738] team_slave_1: left promiscuous mode
[   86.544641][ T6738] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.567187][ T6738] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.694651][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.699556][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.702534][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.705899][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.812046][ T6762] netlink: 71 bytes leftover after parsing attributes in process `syz.0.360'.
[   86.816482][ T6762] netlink: 'syz.0.360': attribute type 39 has an invalid length.
[   86.849613][ T6766] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[   87.218490][ T6780] netlink: 'syz.2.367': attribute type 1 has an invalid length.
[   88.495217][ T6839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.394'.
[   88.887726][ T6856] tipc: Started in network mode
[   88.889868][ T6856] tipc: Node identity 4, cluster identity 4711
[   88.892388][ T6856] tipc: Node number set to 4
[   89.192143][ T6871] tipc: Started in network mode
[   89.196020][ T6871] tipc: Node identity , cluster identity 4711
[   89.198801][ T6871] tipc: Failed to obtain node identity
[   89.201233][ T6871] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   89.206310][ T6871] syzkaller0: entered promiscuous mode
[   89.213090][ T6871] syzkaller0: entered allmulticast mode
[   89.339652][ T6875] vlan0: entered promiscuous mode
[   89.503218][ T6883] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.412'.
[   89.926119][ T6903] vlan2: entered promiscuous mode
[   89.944067][ T6903] team0: entered promiscuous mode
[   90.556038][ T6929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.434'.
[   90.562982][ T6929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.434'.
[   90.778344][ T6947] tipc: Started in network mode
[   90.780477][ T6947] tipc: Node identity 0247d79a745a, cluster identity 4711
[   90.786349][ T6947] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.792145][ T6947] syzkaller0: entered promiscuous mode
[   90.794382][ T6947] syzkaller0: entered allmulticast mode
[   90.821749][ T6947] tipc: Resetting bearer <eth:syzkaller0>
[   90.826126][ T6946] tipc: Resetting bearer <eth:syzkaller0>
[   90.840717][ T6946] tipc: Disabling bearer <eth:syzkaller0>
[   91.411275][ T6978] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   91.640306][ T6987] netlink: 36 bytes leftover after parsing attributes in process `syz.2.463'.
[   91.644348][ T6987] netlink: 16 bytes leftover after parsing attributes in process `syz.2.463'.
[   91.660172][ T6987] netlink: 36 bytes leftover after parsing attributes in process `syz.2.463'.
[   91.673750][ T6987] netlink: 36 bytes leftover after parsing attributes in process `syz.2.463'.
[   91.872196][ T7000] tipc: Started in network mode
[   91.874289][ T7000] tipc: Node identity 4e053e570bae, cluster identity 4711
[   91.877221][ T7000] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.890734][ T7000] syzkaller0: entered promiscuous mode
[   91.892867][ T7000] syzkaller0: entered allmulticast mode
[   91.919431][ T7000] tipc: Resetting bearer <eth:syzkaller0>
[   91.925541][ T6999] tipc: Resetting bearer <eth:syzkaller0>
[   91.946487][ T6999] tipc: Disabling bearer <eth:syzkaller0>
[   92.049633][ T7013] netlink: 'syz.0.474': attribute type 2 has an invalid length.
[   92.052420][ T7013] netlink: 4856 bytes leftover after parsing attributes in process `syz.0.474'.
[   92.186774][ T7021] netlink: 308 bytes leftover after parsing attributes in process `syz.0.477'.
[   92.224269][ T7023] netlink: 'syz.2.479': attribute type 1 has an invalid length.
[   92.238547][ T7021] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   92.525816][ T7049] bond0: option mode: unable to set because the bond device has slaves
[   93.736978][ T7143] __nla_validate_parse: 2 callbacks suppressed
[   93.736994][ T7143] netlink: 76 bytes leftover after parsing attributes in process `syz.1.528'.
[   94.423489][ T7200] netlink: 248 bytes leftover after parsing attributes in process `syz.0.553'.
[   94.787950][ T7226] netlink: 'syz.1.563': attribute type 19 has an invalid length.
[   94.808156][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.563'.
[   94.856231][ T7226] netlink: 'syz.1.563': attribute type 19 has an invalid length.
[   94.864383][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.563'.
[   94.894488][ T5883] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   94.906390][ T5883] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   94.934680][ T5883] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   94.937976][ T5883] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   96.491704][ T7310] netlink: 92 bytes leftover after parsing attributes in process `syz.2.590'.
[   96.495336][ T7310] netlink: 24 bytes leftover after parsing attributes in process `syz.2.590'.
[   96.516171][ T7310] netlink: 24 bytes leftover after parsing attributes in process `syz.2.590'.
[   96.950518][ T7341] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   96.955368][ T7341] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.025817][ T7341] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   97.032934][ T7341] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.127854][ T7341] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   97.132740][ T7341] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.251158][ T7341] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   97.255345][ T7341] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.758275][ T5883] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   98.762305][ T5883] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.815879][ T5883] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   98.823723][ T5883] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.827344][ T5883] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   98.834107][ T5883] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.850833][ T5883] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   98.853977][ T5883] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.034469][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.630'.
[   99.439911][ T7428] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   99.443549][ T7428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.643'.
[   99.446926][ T7428] netlink: 28 bytes leftover after parsing attributes in process `syz.2.643'.
[   99.453098][ T7428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.643'.
[   99.456708][ T7428] netlink: 28 bytes leftover after parsing attributes in process `syz.2.643'.
[   99.461113][ T7428] netlink: 'syz.2.643': attribute type 6 has an invalid length.
[   99.563929][ T7437] netlink: 36 bytes leftover after parsing attributes in process `syz.2.647'.
[   99.956620][ T7474] syz_tun: entered allmulticast mode
[   99.974408][ T7474] dvmrp8: entered allmulticast mode
[  100.100924][ T7473] syz_tun: left allmulticast mode
[  100.104641][ T7473] dvmrp8: left allmulticast mode
[  100.645617][ T7504] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  100.867301][ T7528] netlink: 788 bytes leftover after parsing attributes in process `syz.1.690'.
[  101.169108][ T7560] netlink: 'syz.0.704': attribute type 21 has an invalid length.
[  101.172416][ T7560] netlink: 128 bytes leftover after parsing attributes in process `syz.0.704'.
[  101.181962][ T7560] netlink: 'syz.0.704': attribute type 5 has an invalid length.
[  101.184941][ T7560] netlink: 'syz.0.704': attribute type 6 has an invalid length.
[  101.188203][ T7560] netlink: 3 bytes leftover after parsing attributes in process `syz.0.704'.
[  101.487060][ T7583] netlink: 28 bytes leftover after parsing attributes in process `syz.0.716'.
[  102.631951][ T5883] nci: nci_rx_work: unknown MT 0x1
[  103.572574][ T7685] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  104.163187][ T7712] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.170737][ T7712] syzkaller0: entered promiscuous mode
[  104.175596][ T7712] syzkaller0: entered allmulticast mode
[  104.203348][ T7712] tipc: Resetting bearer <eth:syzkaller0>
[  104.207860][ T7710] tipc: Resetting bearer <eth:syzkaller0>
[  104.221753][ T7710] tipc: Disabling bearer <eth:syzkaller0>
[  105.456751][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.796'.
[  105.461426][ T7804] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[  105.472057][ T7804] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.397322][ T7871] netlink: 6 bytes leftover after parsing attributes in process `syz.2.828'.
[  106.511050][ T7875] netlink: 28 bytes leftover after parsing attributes in process `syz.0.830'.
[  106.813545][ T7886] team0: No ports can be present during mode change
[  107.123461][ T7896] netlink: 'syz.0.840': attribute type 49 has an invalid length.
[  107.284838][ T7905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.844'.
[  107.291942][ T7905] netlink: 20 bytes leftover after parsing attributes in process `syz.1.844'.
[  107.358667][ T7905] netlink: 20 bytes leftover after parsing attributes in process `syz.1.844'.
[  107.363131][ T7905] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  107.533224][ T7908] netlink: 'syz.1.845': attribute type 3 has an invalid length.
[  107.536674][ T7908] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.845'.
[  107.746890][ T7921] pimreg3: entered allmulticast mode
[  108.043627][ T7940] netlink: 'syz.0.858': attribute type 1 has an invalid length.
[  108.647552][ T7962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.864'.
[  108.720706][ T7967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.865'.
[  108.953973][ T7984] netlink: 256 bytes leftover after parsing attributes in process `syz.1.874'.
[  108.962775][ T7985] syz.0.872 uses old SIOCAX25GETINFO
[  108.966352][ T7984] lo speed is unknown, defaulting to 1000
[  108.972402][ T7984] lo speed is unknown, defaulting to 1000
[  108.974839][ T7984] lo speed is unknown, defaulting to 1000
[  109.149496][ T7990] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.154323][ T7990] 8021q: adding VLAN 0 to HW filter on device team0
[  109.183199][ T7990] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  109.271750][ T7984] infiniband syz0: set active
[  109.274800][ T5315] lo speed is unknown, defaulting to 1000
[  109.277114][ T5315] syz0: Port: 1 Link ACTIVE
[  109.280960][ T7984] infiniband syz0: added lo
[  109.329738][ T7984] RDS/IB: syz0: added
[  109.332303][ T7984] smc: adding ib device syz0 with port count 1
[  109.340365][ T7984] smc:    ib device syz0 port 1 has pnetid 
[  109.355966][ T5884] lo speed is unknown, defaulting to 1000
[  109.371823][ T7984] lo speed is unknown, defaulting to 1000
[  109.849436][ T7990] syz.1.874 (7990) used greatest stack depth: 19008 bytes left
[  109.934258][ T7997] delete_channel: no stack
[  110.001680][ T7984] lo speed is unknown, defaulting to 1000
[  110.157489][ T8024] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.177934][ T8022] tipc: Resetting bearer <eth:syzkaller0>
[  111.416804][ T8022] tipc: Disabling bearer <eth:syzkaller0>
[  111.424580][ T7984] lo speed is unknown, defaulting to 1000
[  112.547959][ T8085] netlink: 'syz.2.915': attribute type 1 has an invalid length.
[  112.711675][ T8091] lo speed is unknown, defaulting to 1000
[  112.835917][ T8096] netlink: 'syz.1.920': attribute type 1 has an invalid length.
[  113.039306][ T8103] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.043279][ T8103] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.138066][ T8103] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.151881][ T8103] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.304448][ T5883] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.308442][ T5883] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.331434][ T5883] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.345046][ T5883] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.492425][ T8120] lo speed is unknown, defaulting to 1000
[  113.557166][ T8125] netlink: 'syz.0.932': attribute type 7 has an invalid length.
[  113.566553][ T8125] __nla_validate_parse: 1 callbacks suppressed
[  113.566565][ T8125] netlink: 224 bytes leftover after parsing attributes in process `syz.0.932'.
[  114.589942][ T8148] netlink: 56 bytes leftover after parsing attributes in process `syz.2.942'.
[  114.842938][ T8156] syzkaller1: entered promiscuous mode
[  114.845201][ T8156] syzkaller1: entered allmulticast mode
[  115.688296][ T8185] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.691834][ T8185] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.713086][ T8185] bond_slave_0: left promiscuous mode
[  115.715729][ T8185] bond_slave_1: left promiscuous mode
[  115.857504][ T8185] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.871090][ T8185] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.065537][ T8185] vlan2: left promiscuous mode
[  116.067511][ T8185] team0: left promiscuous mode
[  116.072080][ T8185] team_slave_0: left promiscuous mode
[  116.074671][ T8185] team_slave_1: left promiscuous mode
[  116.077077][ T8185] vxlan0: left promiscuous mode
[  116.090182][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  116.092817][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.095411][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  116.099679][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.103267][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  116.115692][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.119416][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  116.122660][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.205745][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'.
[  116.213944][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'.
[  116.293127][ T8209] can: request_module (can-proto-5) failed.
[  116.535497][ T8237] vlan0: left promiscuous mode
[  116.568591][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.980'.
[  116.588967][ T8237] hsr_slave_0: left promiscuous mode
[  116.592864][ T8246] netlink: 48 bytes leftover after parsing attributes in process `syz.1.984'.
[  116.592909][ T8237] hsr_slave_1: left promiscuous mode
[  116.681625][ T8250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.986'.
[  116.697962][ T8250] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5)
[  116.824219][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.988'.
[  117.127492][ T8281] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1000'.
[  117.241914][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1003'.
[  117.342864][ T8291] netlink: 'syz.0.1004': attribute type 1 has an invalid length.
[  117.581655][ T8299] lo speed is unknown, defaulting to 1000
[  117.585358][ T8304] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.923997][ T8370] lo speed is unknown, defaulting to 1000
[  119.103106][ T8369] lo speed is unknown, defaulting to 1000
[  119.458343][ T8385] __nla_validate_parse: 1 callbacks suppressed
[  119.458359][ T8385] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1043'.
[  119.501787][ T8385] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1043'.
[  119.532431][ T8390] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[  119.634150][ T8398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1049'.
[  120.121823][ T8433] lo speed is unknown, defaulting to 1000
[  120.258366][ T5296] udevd[5296]: worker [7951] terminated by signal 33 (Unknown signal 33)
[  120.269057][ T5296] udevd[5296]: worker [7951] failed while handling '/fs/nfs/net/nfs_client'
[  120.361293][ T8443] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1068'.
[  121.587292][ T8513] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1097'.
[  121.592450][ T8513] block nbd0: not configured, cannot reconfigure
[  121.895826][ T8521] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  121.956809][ T8521] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  121.992807][ T5315] IPVS: starting estimator thread 0...
[  122.053029][ T8521] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  122.079153][ T8543] IPVS: using max 36 ests per chain, 86400 per kthread
[  122.116731][ T8521] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  122.228406][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  122.246784][ T8553] lo speed is unknown, defaulting to 1000
[  122.275366][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  122.294485][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  122.343260][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  122.445100][ T8565] netlink: 'syz.1.1116': attribute type 8 has an invalid length.
[  122.805814][ T8585] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.813404][ T8574] lo speed is unknown, defaulting to 1000
[  123.537835][ T8604] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1127'.
[  123.543293][ T8604] netlink: 'syz.0.1127': attribute type 3 has an invalid length.
[  124.265766][ T8644] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  124.372825][ T8652] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[  124.559344][ T8669] netlink: 'syz.1.1156': attribute type 1 has an invalid length.
[  124.562513][ T8669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1156'.
[  124.567339][ T8669] netlink: 'syz.1.1156': attribute type 1 has an invalid length.
[  124.572818][ T8669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1156'.
[  124.577719][ T8669] netlink: 'syz.1.1156': attribute type 1 has an invalid length.
[  124.580873][ T8669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1156'.
[  124.587191][ T8669] netlink: 'syz.1.1156': attribute type 1 has an invalid length.
[  124.598945][ T8669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1156'.
[  124.602351][ T8669] netlink: 'syz.1.1156': attribute type 1 has an invalid length.
[  124.606157][ T8669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1156'.
[  124.611782][ T8669] netlink: 'syz.1.1156': attribute type 1 has an invalid length.
[  124.614643][ T8669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1156'.
[  124.619645][ T8669] netlink: 'syz.1.1156': attribute type 1 has an invalid length.
[  124.625259][ T8669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1156'.
[  124.632546][ T8669] netlink: 'syz.1.1156': attribute type 1 has an invalid length.
[  124.635810][ T8669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1156'.
[  124.642539][ T8669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1156'.
[  124.646847][ T8669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1156'.
[  124.657978][ T1273] lo speed is unknown, defaulting to 1000
[  126.624810][ T8819] netem: incorrect gi model size
[  126.627958][ T8819] netem: change failed
[  126.736971][ T5896] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.742540][ T5896] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.745178][ T5896] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.748067][ T5896] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.787167][   T33] audit: type=1804 audit(1757536325.578:2): pid=8836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1234" name="/newroot/392/cgroup.controllers" dev="tmpfs" ino=1994 res=1 errno=0
[  126.806677][   T33] audit: type=1800 audit(1757536325.588:3): pid=8836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1234" name="cgroup.controllers" dev="tmpfs" ino=1994 res=0 errno=0
[  126.823254][ T8838] tap0: tun_chr_ioctl cmd 1074025677
[  126.825502][ T8838] tap0: linktype set to 769
[  126.825526][   T33] audit: type=1800 audit(1757536325.588:4): pid=8836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1234" name="cgroup.controllers" dev="tmpfs" ino=1994 res=0 errno=0
[  127.067698][ T8856] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  127.489364][ T8873] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.504185][ T8873] bond0: (slave rose0): Enslaving as an active interface with an up link
[  128.396210][ T8919] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.503834][ T8925] sctp: [Deprecated]: syz.0.1264 (pid 8925) Use of struct sctp_assoc_value in delayed_ack socket option.
[  128.503834][ T8925] Use struct sctp_sack_info instead
[  128.548197][ T8927] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  130.371786][ T8948] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3952. macoff=96
[  131.909948][ T9000] __nla_validate_parse: 82 callbacks suppressed
[  131.909961][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1300'.
[  131.915905][ T9000] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.941807][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1302'.
[  131.944691][ T9004] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  131.947246][ T9004] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.197567][ T9021] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1310'.
[  132.206574][ T9021] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  132.214366][ T9025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1312'.
[  132.916191][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  133.102875][ T9087] validate_nla: 74 callbacks suppressed
[  133.102911][ T9087] netlink: 'syz.2.1339': attribute type 1 has an invalid length.
[  133.108266][ T9087] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1339'.
[  133.618291][ T9109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1346'.
[  133.629643][ T9109] team0: entered promiscuous mode
[  133.631404][ T9109] team_slave_0: entered promiscuous mode
[  133.633546][ T9109] team_slave_1: entered promiscuous mode
[  133.637280][ T9109] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  133.643874][ T9109] team0: left promiscuous mode
[  133.645804][ T9109] team_slave_0: left promiscuous mode
[  133.648366][ T9109] team_slave_1: left promiscuous mode
[  133.974335][ T9121] Bluetooth: MGMT ver 1.23
[  134.902059][ T9169] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1374'.
[  134.906196][ T9169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1374'.
[  134.915110][ T9169] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1374'.
[  134.922104][ T9169] netlink: 'syz.1.1374': attribute type 3 has an invalid length.
[  134.925721][ T9169] netlink: 'syz.1.1374': attribute type 2 has an invalid length.
[  134.931818][ T9169] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1374'.
[  135.318877][ T5854] Bluetooth: hci2: command 0x0405 tx timeout
[  135.778046][ T9193] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  135.954726][ T9216] ip6gre1: entered allmulticast mode
[  136.321304][ T9250] lo speed is unknown, defaulting to 1000
[  136.347265][ T9256] netlink: 'syz.0.1413': attribute type 1 has an invalid length.
[  136.871028][ T9294] 8021q: adding VLAN 0 to HW filter on device bond2
[  137.021187][ T9311] __nla_validate_parse: 5 callbacks suppressed
[  137.021198][ T9311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1438'.
[  137.027672][ T9311] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  137.041849][ T9313] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1439'.
[  137.048857][ T9313] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1439'.
[  137.126980][ T9323] netlink: 'syz.1.1444': attribute type 3 has an invalid length.
[  137.141126][ T9323] netlink: 'syz.1.1444': attribute type 1 has an invalid length.
[  137.164447][ T9323] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1444'.
[  137.165014][ T9329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1447'.
[  137.177911][ T9328] lo speed is unknown, defaulting to 1000
[  137.182759][ T9323] NCSI netlink: No device for ifindex 0
[  137.396619][ T9342] netlink: 'syz.1.1453': attribute type 2 has an invalid length.
[  137.403124][ T9342] netlink: 'syz.1.1453': attribute type 8 has an invalid length.
[  137.405940][ T9342] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1453'.
[  139.175994][ T9408] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1477'.
[  139.544748][ T5883] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[  140.035378][ T9463] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1494'.
[  140.388845][ T9511] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1500'.
[  140.593499][ T9526] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1504'.
[  140.596768][ T9526] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  141.260738][ T9570] netlink: 'syz.2.1524': attribute type 16 has an invalid length.
[  141.467541][ T9581] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  141.471686][ T9581] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  141.917605][ T9602] lo speed is unknown, defaulting to 1000
[  142.185905][ T9608] lo speed is unknown, defaulting to 1000
[  143.137872][ T9640] netlink: 'syz.1.1550': attribute type 1 has an invalid length.
[  143.148412][ T9640] __nla_validate_parse: 1 callbacks suppressed
[  143.148427][ T9640] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1550'.
[  143.303730][ T9648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1554'.
[  143.484841][ T9656] lo speed is unknown, defaulting to 1000
[  144.568089][ T9696] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1573'.
[  144.626667][   T33] audit: type=1800 audit(1757536343.418:5): pid=9701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1576" name="memory.events" dev="tmpfs" ino=2659 res=0 errno=0
[  144.649863][   T33] audit: type=1804 audit(1757536343.418:6): pid=9701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1576" name="/newroot/523/memory.events" dev="tmpfs" ino=2659 res=1 errno=0
[  145.107568][ T9736] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  145.118340][ T9736] vxcan2: entered promiscuous mode
[  145.223865][ T9740] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1594'.
[  145.226698][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1594'.
[  145.666364][ T9762] netlink: 'syz.0.1604': attribute type 2 has an invalid length.
[  145.682574][ T9762] : entered promiscuous mode
[  145.945878][ T9783] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1613'.
[  146.304058][ T9805] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1625'.
[  146.746706][ T9822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1632'.
[  146.750907][ T9822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1632'.
[  146.951606][ T9829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1635'.
[  147.223963][ T9841] lo speed is unknown, defaulting to 1000
[  147.869033][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  148.072303][ T9889] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.151836][ T9892] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1661'.
[  149.950654][ T9929] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  150.388443][ T1273] IPVS: starting estimator thread 0...
[  150.475937][ T9951] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  150.479200][ T9949] IPVS: using max 43 ests per chain, 103200 per kthread
[  150.611278][ T9955] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1683'.
[  150.763673][ T9962] netlink: 'syz.0.1686': attribute type 16 has an invalid length.
[  150.767044][ T9962] netlink: 'syz.0.1686': attribute type 3 has an invalid length.
[  150.771807][ T9962] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.1686'.
[  150.927162][ T9968] netlink: 'syz.1.1687': attribute type 10 has an invalid length.
[  150.940682][ T9968] team0: Port device dummy0 added
[  150.956115][ T9968] netlink: 'syz.1.1687': attribute type 10 has an invalid length.
[  150.993101][ T9968] team0: Port device dummy0 removed
[  151.016415][ T9968] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  151.047670][ T9975] bond0: (slave syz_tun): Releasing backup interface
[  151.052926][ T9975] bond0: (slave team0): Releasing backup interface
[  151.057411][ T9975] bridge_slave_0: left allmulticast mode
[  151.061150][ T9975] bridge_slave_0: left promiscuous mode
[  151.063612][ T9975] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.071947][ T9975] bridge_slave_1: left allmulticast mode
[  151.076843][ T9975] bridge_slave_1: left promiscuous mode
[  151.087972][ T9975] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.099926][ T9975] bond0: (slave bond_slave_0): Releasing backup interface
[  151.102218][ T9976] syz.0.1691: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  151.111627][ T9975] bond0: (slave bond_slave_1): Releasing backup interface
[  151.115450][ T9976] CPU: 0 UID: 0 PID: 9976 Comm: syz.0.1691 Not tainted syzkaller #0 PREEMPT(full) 
[  151.115471][ T9976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  151.115480][ T9976] Call Trace:
[  151.115494][ T9976]  <TASK>
[  151.115501][ T9976]  dump_stack_lvl+0x189/0x250
[  151.115527][ T9976]  ? __pfx_dump_stack_lvl+0x10/0x10
[  151.115544][ T9976]  ? __pfx__printk+0x10/0x10
[  151.115565][ T9976]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  151.115583][ T9976]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  151.115600][ T9976]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  151.115619][ T9976]  warn_alloc+0x214/0x310
[  151.115642][ T9976]  ? stack_depot_save_flags+0x40/0x860
[  151.115663][ T9976]  ? __pfx_warn_alloc+0x10/0x10
[  151.115685][ T9976]  ? kasan_save_track+0x4f/0x80
[  151.115704][ T9976]  ? xskq_create+0x56/0x170
[  151.115722][ T9976]  ? xsk_init_queue+0xb0/0x110
[  151.115738][ T9976]  ? xsk_setsockopt+0x4dc/0x8d0
[  151.115754][ T9976]  ? do_sock_setsockopt+0x17c/0x1b0
[  151.115767][ T9976]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  151.115779][ T9976]  ? do_syscall_64+0xfa/0x3b0
[  151.115791][ T9976]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.115810][ T9976]  __vmalloc_node_range_noprof+0x125/0x12f0
[  151.115851][ T9976]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  151.115876][ T9976]  ? __kasan_kmalloc+0x93/0xb0
[  151.115897][ T9976]  vmalloc_user_noprof+0xad/0xf0
[  151.115917][ T9976]  ? xskq_create+0xbf/0x170
[  151.115936][ T9976]  xskq_create+0xbf/0x170
[  151.115957][ T9976]  xsk_init_queue+0xb0/0x110
[  151.116009][ T9976]  xsk_setsockopt+0x4dc/0x8d0
[  151.116032][ T9976]  ? __pfx_xsk_setsockopt+0x10/0x10
[  151.116051][ T9976]  ? __pfx_aa_sk_perm+0x10/0x10
[  151.116073][ T9976]  ? aa_sock_opt_perm+0xff/0x1b0
[  151.116085][ T9976]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  151.116097][ T9976]  ? __pfx_xsk_setsockopt+0x10/0x10
[  151.116114][ T9976]  do_sock_setsockopt+0x17c/0x1b0
[  151.116129][ T9976]  __x64_sys_setsockopt+0x13f/0x1b0
[  151.116147][ T9976]  do_syscall_64+0xfa/0x3b0
[  151.116159][ T9976]  ? lockdep_hardirqs_on+0x9c/0x150
[  151.116178][ T9976]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.116188][ T9976]  ? exc_page_fault+0x9f/0xf0
[  151.116215][ T9976]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.116229][ T9976] RIP: 0033:0x7f47c898eba9
[  151.116245][ T9976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  151.116256][ T9976] RSP: 002b:00007f47c9884038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  151.116270][ T9976] RAX: ffffffffffffffda RBX: 00007f47c8bd6090 RCX: 00007f47c898eba9
[  151.116278][ T9976] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  151.116286][ T9976] RBP: 00007f47c8a11e19 R08: 0000000000000004 R09: 0000000000000000
[  151.116294][ T9976] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  151.116303][ T9976] R13: 00007f47c8bd6128 R14: 00007f47c8bd6090 R15: 00007ffec8323818
[  151.116326][ T9976]  </TASK>
[  151.116332][ T9976] Mem-Info:
[  151.246431][ T9975] team0: Port device team_slave_0 removed
[  151.247471][ T9976] active_anon:5732 inactive_anon:0 isolated_anon:0
[  151.247471][ T9976]  active_file:1359 inactive_file:38269 isolated_file:0
[  151.247471][ T9976]  unevictable:1768 dirty:187 writeback:0
[  151.247471][ T9976]  slab_reclaimable:10074 slab_unreclaimable:55499
[  151.247471][ T9976]  mapped:18076 shmem:2449 pagetables:945
[  151.247471][ T9976]  sec_pagetables:0 bounce:0
[  151.247471][ T9976]  kernel_misc_reclaimable:0
[  151.247471][ T9976]  free:292714 free_pcp:20859 free_cma:0
[  151.266863][ T9976] Node 0 active_anon:11928kB inactive_anon:0kB active_file:4404kB inactive_file:92288kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30176kB dirty:604kB writeback:0kB shmem:5292kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6616kB pagetables:2012kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  151.267775][ T9975] team0: Port device team_slave_1 removed
[  151.283532][ T9976] Node 1 active_anon:11000kB inactive_anon:0kB active_file:1032kB inactive_file:60788kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42128kB dirty:144kB writeback:0kB shmem:4504kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5164kB pagetables:1768kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  151.296541][ T9976] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  151.300559][ T9975] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.311158][ T9976] lowmem_reserve[]: 0 811 811 811 811
[  151.313622][ T9976] Node 0 DMA32 free:340488kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11928kB inactive_anon:0kB active_file:4404kB inactive_file:92288kB unevictable:3536kB writepending:604kB present:1556484kB managed:830928kB mlocked:0kB bounce:0kB free_pcp:33376kB local_pcp:13416kB free_cma:0kB
[  151.327470][ T9976] lowmem_reserve[]: 0 0 0 0 0
[  151.330162][ T9976] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  151.343326][ T9976] lowmem_reserve[]: 0 0 854 854 854
[  151.346931][ T9975] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.350181][ T9976] Node 1 Normal free:356392kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11000kB inactive_anon:0kB active_file:1032kB inactive_file:60788kB unevictable:3536kB writepending:144kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:49988kB local_pcp:18244kB free_cma:0kB
[  151.362130][ T9976] lowmem_reserve[]: 0 0 0 0 0
[  151.364231][ T9976] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  151.370542][ T9976] Node 0 DMA32: 934*4kB (UM) 594*8kB (UME) 32*16kB (UME) 543*32kB (UME) 
[  151.370928][ T9975] bond1: (slave macvlan2): Removing an active aggregator
[  151.377059][ T9976] 180*64kB (UME) 88*128kB (UM) 16*256kB (UM) 15*512kB (UME) 11*1024kB (UME) 5*2048kB (UME) 63*4096kB (UM) = 340488kB
[  151.382649][ T9975] bond1: (slave macvlan2): Releasing backup interface
[  151.385259][ T9976] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  151.393272][ T9975] team0: Port device vxlan0 removed
[  151.395253][ T9976] Node 1 Normal: 496*4kB (UME) 243*8kB (U) 141*16kB (UE) 252*32kB (UME) 323*64kB (UME) 115*128kB (UME) 44*256kB (UM) 15*512kB (U) 13*1024kB (UME) 6*2048kB (UME) 64*4096kB (UM) = 356328kB
[  151.403303][ T9976] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  151.414698][ T9976] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  151.417862][ T9976] 42077 total pagecache pages
[  151.420100][ T9976] 0 pages in swap cache
[  151.421642][ T9976] Free swap  = 124996kB
[  151.423450][ T9976] Total swap = 124996kB
[  151.425309][ T9976] 786301 pages RAM
[  151.426803][ T9976] 0 pages HighMem/MovableOnly
[  151.432432][ T9976] 241337 pages reserved
[  151.434079][ T9976] 0 pages cma reserved
[  151.574504][ T9986] syzkaller1: entered promiscuous mode
[  151.576642][ T9986] syzkaller1: entered allmulticast mode
[  151.919155][T10003] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.985317][T10003] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.035581][T10003] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.085053][T10003] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.173518][ T5867] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.188816][ T5867] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.198324][T10018] openvswitch: netlink: Message has 16 unknown bytes.
[  152.200020][ T5867] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.213306][ T5867] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.382282][T10027] netlink: 'syz.1.1712': attribute type 13 has an invalid length.
[  152.385020][T10027] netlink: 'syz.1.1712': attribute type 17 has an invalid length.
[  152.429911][T10027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  152.597565][T10048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1722'.
[  152.802815][T10060] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1727'.
[  152.816578][T10058] netlink: zone id is out of range
[  152.821653][T10058] netlink: zone id is out of range
[  152.832065][T10062] dummy0: entered promiscuous mode
[  152.835011][T10061] dummy0: left promiscuous mode
[  152.858458][T10058] netlink: set zone limit has 4 unknown bytes
[  152.877206][T10058] netlink: del zone limit has 4 unknown bytes
[  152.882665][T10064] netlink: 'syz.0.1729': attribute type 1 has an invalid length.
[  152.885116][T10064] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1729'.
[  153.282340][T10079] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1735'.
[  153.308015][   T56] block nbd0: Receive control failed (result -32)
[  153.422023][T10090] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1741'.
[  153.459996][T10094] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  153.516872][T10100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1746'.
[  153.555500][T10104] netlink: 'syz.1.1748': attribute type 1 has an invalid length.
[  153.559747][T10104] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1748'.
[  153.563604][T10104] netlink: 105 bytes leftover after parsing attributes in process `syz.1.1748'.
[  154.045965][T10127] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1758'.
[  154.061557][T10127] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1758'.
[  154.120695][T10129] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  154.153471][T10131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1760'.
[  154.309438][T10137] pim6reg1: entered promiscuous mode
[  154.314310][T10137] pim6reg1: entered allmulticast mode
[  154.681689][T10153] netlink: 'syz.1.1771': attribute type 9 has an invalid length.
[  154.797446][T10155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1772'.
[  155.279929][ T5855] cgroup: fork rejected by pids controller in /syz0
[  155.291839][T10185] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1786'.
[  155.470175][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.473260][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.034011][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  156.038885][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  156.048501][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  156.059270][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  156.062601][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  156.145768][T10220] lo speed is unknown, defaulting to 1000
[  156.338532][T10239] netlink: 'syz.2.1810': attribute type 7 has an invalid length.
[  156.679644][T10220] chnl_net:caif_netlink_parms(): no params data found
[  156.804343][T10220] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.807275][T10220] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.811282][T10220] bridge_slave_0: entered allmulticast mode
[  156.815354][T10220] bridge_slave_0: entered promiscuous mode
[  156.821720][T10220] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.825277][T10220] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.830360][T10220] bridge_slave_1: entered allmulticast mode
[  156.834250][T10220] bridge_slave_1: entered promiscuous mode
[  156.903286][T10220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  156.910986][T10220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  156.974325][T10220] team0: Port device team_slave_0 added
[  156.983209][T10220] team0: Port device team_slave_1 added
[  157.025890][T10220] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.032572][T10220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.041669][T10220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.046490][T10220] batman_adv: batadv0: Adding interface: batadv_slave_1
[  157.051057][T10220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.059607][T10220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  157.092917][T10220] hsr_slave_0: entered promiscuous mode
[  157.095521][T10220] hsr_slave_1: entered promiscuous mode
[  157.097812][T10220] debugfs: 'hsr0' already exists in 'hsr'
[  157.100087][T10220] Cannot create hsr debugfs directory
[  157.302220][T10220] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.377812][T10220] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.445962][T10220] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.509204][T10220] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.727609][T10220] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  157.752298][T10220] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  157.759676][T10220] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  157.782342][T10220] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  157.946015][T10220] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.976286][T10220] 8021q: adding VLAN 0 to HW filter on device team0
[  157.991616][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.994524][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.016318][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.019212][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.117039][   T55] Bluetooth: hci1: command tx timeout
[  158.332293][T10220] 8021q: adding VLAN 0 to HW filter on device batadv0
[  158.400705][T10220] veth0_vlan: entered promiscuous mode
[  158.416462][T10320] netlink: 'syz.2.1837': attribute type 2 has an invalid length.
[  158.424759][T10220] veth1_vlan: entered promiscuous mode
[  158.425389][T10320] netlink: 'syz.2.1837': attribute type 2 has an invalid length.
[  158.466120][T10220] veth0_macvtap: entered promiscuous mode
[  158.480600][T10220] veth1_macvtap: entered promiscuous mode
[  158.508653][T10220] batman_adv: batadv0: Interface activated: batadv_slave_0
[  158.530075][T10220] batman_adv: batadv0: Interface activated: batadv_slave_1
[  158.537625][ T5883] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.563725][ T5883] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.580399][ T5883] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.625826][ T5896] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.293116][T10333] netlink: 'syz.2.1844': attribute type 1 has an invalid length.
[  159.382636][  T651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.389518][  T651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.416451][ T9496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.419935][ T9496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.677688][T10351] __nla_validate_parse: 1 callbacks suppressed
[  159.677701][T10351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1850'.
[  159.703917][T10353] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1851'.
[  159.937962][T10364] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1856'.
[  160.007780][T10366] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1857'.
[  160.199494][   T55] Bluetooth: hci1: command tx timeout
[  160.582531][T10386] lo speed is unknown, defaulting to 1000
[  160.997591][T10410] netlink: 'syz.1.1876': attribute type 9 has an invalid length.
[  161.018882][T10410] netlink: 'syz.1.1876': attribute type 6 has an invalid length.
[  161.431747][T10432] netlink: 'syz.0.1887': attribute type 4 has an invalid length.
[  161.599840][T10440] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.614550][T10440] syzkaller0: entered promiscuous mode
[  161.616765][T10440] syzkaller0: entered allmulticast mode
[  161.687946][T10440] tipc: Resetting bearer <eth:syzkaller0>
[  161.705813][T10439] tipc: Resetting bearer <eth:syzkaller0>
[  161.722460][T10439] tipc: Disabling bearer <eth:syzkaller0>
[  162.125034][T10485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1912'.
[  162.269029][   T55] Bluetooth: hci1: command tx timeout
[  162.576980][T10519] netlink: 'syz.0.1928': attribute type 21 has an invalid length.
[  162.581027][T10519] netlink: 'syz.0.1928': attribute type 1 has an invalid length.
[  162.584292][T10519] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1928'.
[  162.645567][T10524] bridge1: entered allmulticast mode
[  162.652863][T10525] !: renamed from dummy0 (while UP)
[  162.775639][T10530] lo speed is unknown, defaulting to 1000
[  162.851522][T10537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1934'.
[  163.045744][T10545] netlink: 'syz.0.1936': attribute type 1 has an invalid length.
[  163.061012][T10545] netlink: 'syz.0.1936': attribute type 2 has an invalid length.
[  163.445620][T10566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1942'.
[  163.957011][T10605] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1947'.
[  164.067315][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1949'.
[  164.353432][   T55] Bluetooth: hci1: command tx timeout
[  164.423898][T10618] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  164.438553][T10618] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  164.443926][T10618] bond0 (unregistering): Released all slaves
[  164.960099][ T5883] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9
[  165.114232][T10674] openvswitch: netlink: IP tunnel dst address not specified
[  165.802266][T10686] netlink: 'syz.0.1975': attribute type 1 has an invalid length.
[  165.824072][T10686] bond1: entered promiscuous mode
[  165.827805][T10686] 8021q: adding VLAN 0 to HW filter on device bond1
[  165.875289][T10686] 8021q: adding VLAN 0 to HW filter on device bond2
[  165.882111][T10686] bond1: (slave bond2): making interface the new active one
[  165.889763][T10686] bond2: entered promiscuous mode
[  165.892440][T10686] bond1: (slave bond2): Enslaving as an active interface with an up link
[  165.973515][T10702] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1979'.
[  165.977988][T10702] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1979'.
[  165.981560][T10701] tipc: Started in network mode
[  165.983213][T10701] tipc: Node identity fec0ffffffffffff0000000000000001, cluster identity 4711
[  165.986260][T10701] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  165.989128][T10702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1979'.
[  166.061012][T10708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1981'.
[  166.065280][T10708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1981'.
[  166.073751][T10708] netlink: 'syz.2.1981': attribute type 1 has an invalid length.
[  166.079837][T10708] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1981'.
[  166.110806][T10708] nbd: socks must be embedded in a SOCK_ITEM attr
[  166.117849][T10708] block nbd1: shutting down sockets
[  166.635681][T10764] netlink: 'syz.1.2006': attribute type 13 has an invalid length.
[  166.659441][T10764] netlink: 'syz.1.2006': attribute type 17 has an invalid length.
[  166.676606][T10764] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  166.716770][T10767] lo speed is unknown, defaulting to 1000
[  166.852922][T10764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  167.867678][T10843] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  167.903153][T10847] netlink: 'syz.1.2036': attribute type 1 has an invalid length.
[  167.905911][T10847] netlink: 'syz.1.2036': attribute type 2 has an invalid length.
[  169.038300][T10918] netlink: 'syz.1.2070': attribute type 1 has an invalid length.
[  169.044422][T10918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2070'.
[  169.053509][T10918] netlink: 45 bytes leftover after parsing attributes in process `syz.1.2070'.
[  169.351990][T10942] lo speed is unknown, defaulting to 1000
[  169.662515][T10954] trusted_key: syz.0.2086 sent an empty control message without MSG_MORE.
[  169.884849][T10960] netlink: 'syz.1.2089': attribute type 10 has an invalid length.
[  169.901183][T10960] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2089'.
[  169.931580][T10960] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  170.124748][T10968] netlink: 'syz.1.2093': attribute type 1 has an invalid length.
[  170.127758][T10968] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2093'.
[  170.404090][T10980] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  170.412928][T10981] bridge0: entered allmulticast mode
[  170.424948][T10981] pim6reg: entered allmulticast mode
[  170.441008][T10981] bridge_slave_1: left allmulticast mode
[  170.443415][T10981] bridge_slave_1: left promiscuous mode
[  170.446047][T10981] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.473491][T10981] bridge_slave_0: left allmulticast mode
[  170.475818][T10981] bridge_slave_0: left promiscuous mode
[  170.478311][T10981] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.625098][T10981] bridge0 (unregistering): left allmulticast mode
[  170.701566][T10995] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  170.704937][T10995] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  170.789118][T11001] IPv6: addrconf: prefix option has invalid lifetime
[  170.971398][T11023] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  171.023283][T11028] vlan3: entered promiscuous mode
[  171.025418][T11028] team0: entered promiscuous mode
[  171.027425][T11028] team_slave_0: entered promiscuous mode
[  171.030758][T11028] team_slave_1: entered promiscuous mode
[  171.816295][T11113] __nla_validate_parse: 2 callbacks suppressed
[  171.816308][T11113] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2160'.
[  172.086086][T11127] lo speed is unknown, defaulting to 1000
[  172.635327][T11155] netlink: 'syz.0.2177': attribute type 1 has an invalid length.
[  173.141213][T11172] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2185'.
[  174.105020][T11216] lo speed is unknown, defaulting to 1000
[  174.403197][T11213] lo speed is unknown, defaulting to 1000
[  175.046486][T11223] lo speed is unknown, defaulting to 1000
[  176.428364][T11275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2226'.
[  176.968969][T11301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2239'.
[  176.973223][T11301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2239'.
[  176.977047][T11301] netlink: 'syz.1.2239': attribute type 5 has an invalid length.
[  176.981156][T11301] netlink: 'syz.1.2239': attribute type 6 has an invalid length.
[  177.434753][T11337] bond_slave_0: entered promiscuous mode
[  177.438160][T11337] bond_slave_1: entered promiscuous mode
[  177.442807][T11337] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  177.447126][T11337] bond_slave_0: left promiscuous mode
[  177.449484][T11337] bond_slave_1: left promiscuous mode
[  177.986826][T11355] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  177.992636][T11355] syzkaller0: entered promiscuous mode
[  177.994871][T11355] syzkaller0: entered allmulticast mode
[  178.030878][T11355] tipc: Resetting bearer <eth:syzkaller0>
[  178.036358][T11354] tipc: Resetting bearer <eth:syzkaller0>
[  178.072517][T11354] tipc: Disabling bearer <eth:syzkaller0>
[  178.183953][T11363] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2262'.
[  178.277683][T11369] : renamed from team_slave_1 (while UP)
[  178.317075][T11371] netlink: 284 bytes leftover after parsing attributes in process `syz.2.2266'.
[  179.336668][T11457] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.343270][T11457] syzkaller0: entered promiscuous mode
[  179.345579][T11457] syzkaller0: entered allmulticast mode
[  179.391672][T11457] tipc: Resetting bearer <eth:syzkaller0>
[  179.396182][T11456] tipc: Resetting bearer <eth:syzkaller0>
[  179.423661][T11456] tipc: Disabling bearer <eth:syzkaller0>
[  179.599321][T11467] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.645659][T11467] syzkaller0: entered promiscuous mode
[  179.648104][T11467] syzkaller0: entered allmulticast mode
[  179.651963][T11467] tipc: Resetting bearer <eth:syzkaller0>
[  179.659152][T11466] tipc: Resetting bearer <eth:syzkaller0>
[  180.640005][   T10] tipc: Node number set to 1168850519
[  180.999116][T11466] tipc: Disabling bearer <eth:syzkaller0>
[  181.073335][T11479] lo speed is unknown, defaulting to 1000
[  181.270824][T11498] netlink: 'syz.1.2319': attribute type 12 has an invalid length.
[  181.451566][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2324'.
[  181.457949][T11512] netlink: 'syz.2.2324': attribute type 14 has an invalid length.
[  181.475753][T11512] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2324'.
[  181.557836][T11520] batadv2: entered promiscuous mode
[  181.559772][T11520] batadv2: entered allmulticast mode
[  181.572663][T11522] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2330'.
[  181.665781][T11530] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2334'.
[  181.711723][T11535] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.715048][T11535] syzkaller0: entered promiscuous mode
[  181.717597][T11535] syzkaller0: entered allmulticast mode
[  181.737567][T11535] tipc: Resetting bearer <eth:syzkaller0>
[  181.745546][T11534] tipc: Resetting bearer <eth:syzkaller0>
[  181.763322][T11534] tipc: Disabling bearer <eth:syzkaller0>
[  181.795044][T11544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2341'.
[  181.868022][T11552] netlink: 'syz.2.2346': attribute type 10 has an invalid length.
[  181.872880][T11554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2345'.
[  182.049462][   T33] audit: type=1800 audit(1757536380.838:7): pid=11565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2349" name="memory.events" dev="tmpfs" ino=925 res=0 errno=0
[  182.183408][T11584] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  182.207175][T11580] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2357'.
[  182.211014][T11580] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2357'.
[  182.214683][T11580] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2357'.
[  182.723036][T11621] lo speed is unknown, defaulting to 1000
[  182.815566][T11631] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2379'.
[  182.819239][T11631] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2379'.
[  184.114009][T11723] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2420'.
[  185.328395][T11777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2444'.
[  185.355258][T11777] bond3: entered promiscuous mode
[  185.357758][T11777] 8021q: adding VLAN 0 to HW filter on device bond3
[  185.474192][T11777] bond3 (unregistering): Released all slaves
[  185.656706][   T47] IPVS: starting estimator thread 0...
[  185.768813][T11790] IPVS: using max 64 ests per chain, 153600 per kthread
[  186.626489][T11826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2462'.
[  186.635016][T11826] batadv0: entered promiscuous mode
[  186.641642][T11826] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  186.645492][T11826] batadv0: left promiscuous mode
[  186.807950][T11830] tipc: New replicast peer: 255.255.255.255
[  186.812711][T11830] tipc: Enabled bearer <udp:syz2>, priority 10
[  187.108917][T11839] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2468'.
[  187.234939][T11851] syzkaller0: entered promiscuous mode
[  187.236968][T11851] syzkaller0: entered allmulticast mode
[  187.929081][   T10] tipc: Node number set to 20905985
[  188.561232][T11860] netlink: 'syz.2.2476': attribute type 1 has an invalid length.
[  188.741333][T11875] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2483'.
[  188.744143][T11875] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2483'.
[  189.013022][ T5883] syzkaller0: tun_net_xmit 76
[  189.014882][ T5883] syzkaller0: tun_net_xmit 48
[  189.018355][T11890] syzkaller0: create flow: hash 2758539782 index 1
[  189.041432][   T10] syzkaller0: tun_net_xmit 76
[  189.071843][T11890] syzkaller0: delete flow: hash 2758539782 index 1
[  190.241390][T11912] netlink: 'syz.1.2501': attribute type 5 has an invalid length.
[  190.266734][T11919] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.600703][T11954] netlink: 'syz.1.2521': attribute type 1 has an invalid length.
[  190.693449][T11960] netlink: 'syz.0.2523': attribute type 1 has an invalid length.
[  190.727025][T11960] 8021q: adding VLAN 0 to HW filter on device bond3
[  190.754505][T11960] 8021q: adding VLAN 0 to HW filter on device bond3
[  190.757250][T11960] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  190.772002][T11960] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  190.810676][   T47] lo speed is unknown, defaulting to 1000
[  190.813120][   T47] syz0: Port: 1 Link DOWN
[  190.815637][   T47] lo speed is unknown, defaulting to 1000
[  191.801354][T12002] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2542'.
[  191.905449][T12010] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2546'.
[  191.998542][T12021] netlink: 'syz.2.2550': attribute type 5 has an invalid length.
[  192.041952][T12026] netlink: 'syz.2.2553': attribute type 39 has an invalid length.
[  192.550593][T12066] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2572'.
[  192.553890][T12066] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2572'.
[  192.556795][T12066] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2572'.
[  193.004914][T12107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2590'.
[  193.174946][T12126] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2600'.
[  193.661193][T12164] nbd: socks must be embedded in a SOCK_ITEM attr
[  193.674605][T12164] block nbd2: shutting down sockets
[  194.021348][T12194] : entered promiscuous mode
[  194.352968][ T1365] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  194.570266][T12255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2655'.
[  194.581516][T12255] bridge_slave_1: left allmulticast mode
[  194.583825][T12255] bridge_slave_1: left promiscuous mode
[  194.597280][T12255] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.611244][T12255] bridge_slave_0: left allmulticast mode
[  194.613333][T12255] bridge_slave_0: left promiscuous mode
[  194.615774][T12255] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.683686][T12264] nbd: socks must be embedded in a SOCK_ITEM attr
[  194.952658][T12284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2668'.
[  195.107954][T12303] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.121121][T12294] tipc: Resetting bearer <eth:syzkaller0>
[  195.137377][T12294] tipc: Disabling bearer <eth:syzkaller0>
[  195.559148][T12342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2694'.
[  196.220962][T12370] netlink: 'syz.0.2706': attribute type 13 has an invalid length.
[  196.224405][T12370] netlink: 'syz.0.2706': attribute type 17 has an invalid length.
[  196.268223][T12370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  196.417987][T12379] Bluetooth: MGMT ver 1.23
[  196.575836][T12388] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  196.986677][T12399] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2718'.
[  197.066461][T12403] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2720'.
[  197.069646][T12403] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2720'.
[  197.073086][T12403] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2720'.
[  197.076667][T12403] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2720'.
[  197.584089][T12429] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2729'.
[  197.609605][T12429] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  197.658030][T12433] syzkaller0: entered promiscuous mode
[  197.664162][T12433] syzkaller0: entered allmulticast mode
[  199.330815][T12459] netlink: 'syz.2.2743': attribute type 1 has an invalid length.
[  199.456643][T12469] netlink: 'syz.0.2748': attribute type 1 has an invalid length.
[  199.462309][T12469] netlink: 'syz.0.2748': attribute type 2 has an invalid length.
[  199.465679][T12469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2748'.
[  199.720025][T12488] lo speed is unknown, defaulting to 1000
[  199.865016][T12496] lo speed is unknown, defaulting to 1000
[  199.875605][T12496] lo speed is unknown, defaulting to 1000
[  199.888238][T12496] lo speed is unknown, defaulting to 1000
[  199.905207][T12497] netlink: 'syz.2.2760': attribute type 4 has an invalid length.
[  199.912413][T12496] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  199.933963][T12496] lo speed is unknown, defaulting to 1000
[  199.937308][T12496] lo speed is unknown, defaulting to 1000
[  199.943751][T12496] lo speed is unknown, defaulting to 1000
[  199.947501][T12496] lo speed is unknown, defaulting to 1000
[  199.951929][T12496] lo speed is unknown, defaulting to 1000
[  200.618027][   T33] audit: type=1800 audit(1757536399.408:8): pid=12524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2771" name="@" dev="tmpfs" ino=1720 res=0 errno=0
[  200.650296][T12526] openvswitch: netlink: Flow actions attr not present in new flow.
[  200.736964][T12531] xfrm0: entered promiscuous mode
[  200.739379][T12531] xfrm0: entered allmulticast mode
[  201.110360][T12559] lo speed is unknown, defaulting to 1000
[  201.285570][T12559] lo speed is unknown, defaulting to 1000
[  201.727031][T12583] batadv_slave_0: entered promiscuous mode
[  201.733022][T12582] batadv_slave_0: left promiscuous mode
[  201.794812][T12585] netdevsim netdevsim0: Direct firmware load for  failed with error -2
[  201.797833][T12585] netdevsim netdevsim0: Falling back to sysfs fallback for: 
[  202.444776][T12603] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2807'.
[  202.594692][T12613] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2810'.
[  202.746826][T12622] netlink: 'syz.1.2813': attribute type 1 has an invalid length.
[  202.750645][T12622] netlink: 'syz.1.2813': attribute type 1 has an invalid length.
[  202.757568][T12622] netlink: 'syz.1.2813': attribute type 1 has an invalid length.
[  202.943465][T12634] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2820'.
[  203.288314][T12650] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2826'.
[  203.294260][T12650] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2826'.
[  203.298026][T12650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2826'.
[  203.354213][T12654] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2828'.
[  203.357915][T12654] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  203.367956][T12656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2829'.
[  203.409999][T12658] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2831'.
[  203.633940][T12676] netlink: 'syz.1.2838': attribute type 1 has an invalid length.
[  203.657610][T12676] 8021q: adding VLAN 0 to HW filter on device bond1
[  203.686565][T12681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2840'.
[  204.009601][ T9496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.012612][ T9496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.712841][T12758] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  204.734745][T12758] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  207.259714][T12923] netlink: 'syz.2.2948': attribute type 1 has an invalid length.
[  207.298333][T12923] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.336165][T12923] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.343303][T12923] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[  207.348486][T12923] bond0: (slave vxcan3): Error -95 calling set_mac_address
[  207.384097][T12931] veth3: entered promiscuous mode
[  207.393318][T12931] bond0: (slave veth3): Enslaving as an active interface with a down link
[  207.406658][T12932] bridge3: entered allmulticast mode
[  207.436422][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.441190][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.550390][T12940] netlink: 'syz.0.2955': attribute type 1 has an invalid length.
[  207.553728][T12940] __nla_validate_parse: 9 callbacks suppressed
[  207.553737][T12940] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2955'.
[  207.558637][T12940] netlink: 'syz.0.2955': attribute type 2 has an invalid length.
[  207.563886][T12940] netlink: 'syz.0.2955': attribute type 1 has an invalid length.
[  208.362987][T12972] erspan0: entered promiscuous mode
[  208.413378][T12972] 8021q: adding VLAN 0 to HW filter on device team0
[  208.417578][T12979] IPVS: persistence engine module ip_vs_pe_ not found
[  208.436150][T12972] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  208.451187][ T5884] lo speed is unknown, defaulting to 1000
[  208.453905][ T5884] syz2: Port: 1 Link ACTIVE
[  208.487452][T12982] lo speed is unknown, defaulting to 1000
[  208.712314][T12982] lo speed is unknown, defaulting to 1000
[  209.545157][T13023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2990'.
[  209.548607][T13023] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2990'.
[  209.553058][T13023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2990'.
[  209.556502][T13023] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2990'.
[  209.565307][T13023] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2990'.
[  209.715299][T13035] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2995'.
[  209.866546][T13040] rdma_rxe: rxe_newlink: failed to add lo
[  209.996981][T13052] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  210.285337][T13078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3015'.
[  210.289324][T13078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3015'.
[  210.456677][T13094] siw: device registration error -23
[  210.494175][T13094] netlink: 'syz.1.3022': attribute type 4 has an invalid length.
[  210.954439][T13125] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3035'.
[  211.406024][T13156] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  211.714697][T13168] tap0: tun_chr_ioctl cmd 1074025677
[  211.716872][T13168] tap0: linktype set to 774
[  211.979971][T13180] openvswitch: netlink: Flow actions attr not present in new flow.
[  212.087033][T13187] tun0: tun_chr_ioctl cmd 2147767521
[  212.817902][   T33] audit: type=1800 audit(1757536411.608:9): pid=13233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3080" name="memory.events" dev="tmpfs" ino=5272 res=0 errno=0
[  214.204360][T13281] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  214.507960][T13313] __nla_validate_parse: 6 callbacks suppressed
[  214.507975][T13313] netlink: 268 bytes leftover after parsing attributes in process `syz.2.3116'.
[  214.571442][T13320] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3118'.
[  214.646715][T13324] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3120'.
[  215.992817][T13383] syzkaller1: entered promiscuous mode
[  215.995433][T13383] syzkaller1: entered allmulticast mode
[  216.025195][T13388] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3138'.
[  216.562389][T13432] bond3: entered promiscuous mode
[  216.564627][T13432] 8021q: adding VLAN 0 to HW filter on device bond3
[  216.565326][T13435] sctp: [Deprecated]: syz.0.3156 (pid 13435) Use of struct sctp_assoc_value in delayed_ack socket option.
[  216.565326][T13435] Use struct sctp_sack_info instead
[  216.713457][T13451] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.095051][T13482] netlink: 'syz.2.3176': attribute type 10 has an invalid length.
[  217.098936][T13482] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3176'.
[  217.106539][T13482] batman_adv: batadv0: Adding interface: virt_wifi0
[  217.110115][T13482] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.120640][T13482] batman_adv: batadv0: Interface activated: virt_wifi0
[  217.187194][T13489] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3180'.
[  217.192347][T13489] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3180'.
[  217.195705][T13489] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3180'.
[  217.234761][T13491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  217.523763][T13531] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  217.695786][T13545] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  218.384179][T13573] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3218'.
[  218.404175][T13573] lo speed is unknown, defaulting to 1000
[  218.432014][T13577] bridge: RTM_NEWNEIGH with invalid ether address
[  218.488651][T13580] IPVS: Error connecting to the multicast addr
[  218.536315][T13582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3222'.
[  218.623088][T13573] lo speed is unknown, defaulting to 1000
[  219.209150][T13625] 8021q: adding VLAN 0 to HW filter on device bond4
[  219.271891][T13625] bond_slave_0: entered promiscuous mode
[  219.274037][T13625] bond_slave_1: entered promiscuous mode
[  219.276574][T13625] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  219.281434][T13625] bond4: (slave macvlan3): Enslaving as a backup interface with an up link
[  219.726156][T13679] __nla_validate_parse: 3 callbacks suppressed
[  219.726172][T13679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3266'.
[  219.776785][T13685] netlink: 'syz.2.3269': attribute type 1 has an invalid length.
[  220.065705][T13707] netlink: 'syz.0.3280': attribute type 1 has an invalid length.
[  220.069678][T13707] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3280'.
[  220.082509][T13707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3280'.
[  220.155087][T13715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3283'.
[  220.523688][T13736] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.560314][T13734] netlink: 'syz.0.3292': attribute type 1 has an invalid length.
[  220.624176][T13734] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  220.632544][T13734] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  220.702194][T13734] gretap1: entered promiscuous mode
[  220.707880][T13734] bond5: (slave gretap1): making interface the new active one
[  220.715831][T13734] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  220.725717][T13734] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3292'.
[  220.733980][T13734] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  220.825140][T13757] netlink: 'syz.0.3301': attribute type 9 has an invalid length.
[  220.877497][T13760] netlink: 'syz.2.3305': attribute type 1 has an invalid length.
[  220.881749][T13760] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3305'.
[  220.898100][T13762] netlink: 'syz.1.3304': attribute type 13 has an invalid length.
[  222.535904][T13829] openvswitch: netlink: Duplicate or invalid key (type 0).
[  222.543442][T13829] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  222.753982][T13846] lo speed is unknown, defaulting to 1000
[  222.893493][T13846] lo speed is unknown, defaulting to 1000
[  222.994118][T13860] netlink: 'syz.0.3346': attribute type 1 has an invalid length.
[  223.215231][T13866] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3349'.
[  223.367481][T13876] sctp: [Deprecated]: syz.0.3354 (pid 13876) Use of struct sctp_assoc_value in delayed_ack socket option.
[  223.367481][T13876] Use struct sctp_sack_info instead
[  223.421623][T13878] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3355'.
[  223.872561][T13903] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  224.098483][T13913] netlink: 'syz.1.3370': attribute type 1 has an invalid length.
[  224.102042][T13913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3370'.
[  224.213657][T13915] erspan0: entered promiscuous mode
[  224.218642][T13915] erspan0: left promiscuous mode
[  224.574142][T13930] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3377'.
[  224.679884][T13939] sctp: [Deprecated]: syz.2.3378 (pid 13939) Use of struct sctp_assoc_value in delayed_ack socket option.
[  224.679884][T13939] Use struct sctp_sack_info instead
[  224.862631][T13955] __nla_validate_parse: 2 callbacks suppressed
[  224.862649][T13955] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3389'.
[  225.217716][T13985] netlink: 'syz.0.3403': attribute type 10 has an invalid length.
[  225.290744][T13991] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  225.296582][T13991] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  225.313108][T13991] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  225.328838][T13991] tipc: Resetting bearer <eth:syzkaller0>
[  225.394732][T13997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3408'.
[  225.454530][T14004] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3411'.
[  225.931242][T14036] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  225.933637][T14036] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  225.999892][T14041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3425'.
[  226.003773][T14041] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  226.007518][T14041] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  226.162254][T14054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3429'.
[  226.243824][T14061] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  226.248589][ T5867] bond0: (slave bond_slave_0): interface is now down
[  226.261257][ T5867] bond0: (slave bond_slave_1): interface is now down
[  226.273179][ T5867] bond0: (slave 0!): interface is now down
[  226.300648][ T5867] bond0: (slave bond_slave_0): interface is now down
[  226.311677][ T5867] bond0: (slave bond_slave_1): interface is now down
[  226.315121][ T5867] bond0: (slave 0!): interface is now down
[  226.340403][ T5867] bond0: (slave bond_slave_0): interface is now down
[  226.344490][ T5867] bond0: (slave bond_slave_1): interface is now down
[  226.352007][ T5867] bond0: (slave 0!): interface is now down
[  226.376776][ T5867] bond0: now running without any active interface!
[  226.481650][T14079] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3434'.
[  226.567347][T14085] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  226.573710][T14085] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  226.576716][T14085] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  227.389344][T14140] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3462'.
[  227.398414][T14140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3462'.
[  227.425090][T14140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3462'.
[  227.853111][T14158] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16)
[  227.856075][T14158] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  227.863498][T14158] netlink: 'syz.1.3469': attribute type 12 has an invalid length.
[  228.272411][T14184] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  228.287509][T14185] netlink: 'syz.2.3481': attribute type 4 has an invalid length.
[  228.291768][T14185] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3481'.
[  229.045399][T14244] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  229.049501][T14244] syzkaller0: entered promiscuous mode
[  229.051822][T14244] syzkaller0: entered allmulticast mode
[  229.071743][T14244] tipc: Resetting bearer <eth:syzkaller0>
[  229.076606][T14243] tipc: Resetting bearer <eth:syzkaller0>
[  229.091565][T14243] tipc: Disabling bearer <eth:syzkaller0>
[  229.177425][T14250] syzkaller0: entered promiscuous mode
[  229.182330][T14250] syzkaller0: entered allmulticast mode
[  229.187292][T14250] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  229.195020][T14250] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  229.214062][T14250] tipc: Resetting bearer <eth:syzkaller0>
[  229.219792][T14249] tipc: Resetting bearer <eth:syzkaller0>
[  229.246451][T14249] tipc: Disabling bearer <eth:syzkaller0>
[  229.759328][T14286] pimreg: entered allmulticast mode
[  230.045377][T14297] syz_tun: entered allmulticast mode
[  230.210324][T14297] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  230.214413][T14297] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  230.246038][ T5867] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  230.252509][ T5867] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  230.255156][ T5867] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  230.269067][ T5867] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  230.652426][T14322] netlink: 'syz.0.3542': attribute type 4 has an invalid length.
[  230.655433][T14322] __nla_validate_parse: 3 callbacks suppressed
[  230.655445][T14322] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3542'.
[  230.714091][T14322] : renamed from bond0 (while UP)
[  230.725845][T14322] bond_slave_0: left promiscuous mode
[  230.728342][T14322] bond_slave_1: left promiscuous mode
[  230.771740][T14319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3540'.
[  231.316843][T14363] netlink: zone id is out of range
[  231.687040][T14385] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  231.691571][T14385] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  232.073453][T14414] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  232.079993][T14414] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  232.083179][T14414] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  232.086821][T14414] tipc: Resetting bearer <eth:syzkaller0>
[  232.121558][T14416] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  232.196152][T14422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3590'.
[  232.203076][T14422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3590'.
[  232.640861][   T32] tipc: Resetting bearer <eth:syzkaller0>
[  232.679433][T14459] netlink: 'syz.2.3606': attribute type 21 has an invalid length.
[  232.682799][T14459] netlink: 'syz.2.3606': attribute type 6 has an invalid length.
[  232.686171][T14459] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3606'.
[  233.107485][T14488] lo speed is unknown, defaulting to 1000
[  233.495227][T14491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3621'.
[  233.600075][T14488] lo speed is unknown, defaulting to 1000
[  234.055114][T14506] netlink: 'syz.2.3628': attribute type 3 has an invalid length.
[  234.067333][T14506] netlink: 'syz.2.3628': attribute type 3 has an invalid length.
[  234.163176][T14510] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3630'.
[  234.167052][T14510] IPVS: Unknown mcast interface: vetN1_macvtap
[  234.570147][T14544] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  234.917247][T14558] lo speed is unknown, defaulting to 1000
[  235.171566][T14558] lo speed is unknown, defaulting to 1000
[  235.996046][T14627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3685'.
[  236.422064][T14656] lo speed is unknown, defaulting to 1000
[  236.625004][T14663] netlink: 'syz.1.3700': attribute type 1 has an invalid length.
[  236.641403][T14656] lo speed is unknown, defaulting to 1000
[  236.916706][T14669] syz_tun: entered promiscuous mode
[  236.921783][T14669] vlan2: entered promiscuous mode
[  237.250063][T14681] IPVS: stopping backup sync thread 14682 ...
[  237.553524][T14696] netlink: 'syz.0.3711': attribute type 1 has an invalid length.
[  237.575184][T14700] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  237.756499][T14713] netlink: 'syz.1.3719': attribute type 1 has an invalid length.
[  237.846292][T14724] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  238.050429][T14726] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  238.060554][T14726] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  238.066919][T14726] xfrm0: left promiscuous mode
[  238.071138][T14726] xfrm0: left allmulticast mode
[  238.180463][T14726] bridge1: left allmulticast mode
[  238.190131][T14726] bond1: left promiscuous mode
[  238.192258][T14726] bond2: left promiscuous mode
[  238.211979][T14726] bridge3: left allmulticast mode
[  238.225215][T14726] gretap1: left promiscuous mode
[  238.241624][T14730] macvtap0: entered promiscuous mode
[  238.243967][T14730] macvtap0: entered allmulticast mode
[  238.246830][T14730] dummy0: entered promiscuous mode
[  238.249816][T14730] dummy0: entered allmulticast mode
[  238.256343][T14730] team0: Device macvtap0 failed to register rx_handler
[  238.260553][T14730] dummy0: left allmulticast mode
[  238.263143][T14730] dummy0: left promiscuous mode
[  238.293833][ T5867] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  238.297634][ T5867] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  238.313443][ T5867] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  238.318183][ T5867] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  238.663636][T14766] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5
[  238.726192][T14780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3747'.
[  238.981046][T14797] netlink: 'syz.2.3752': attribute type 13 has an invalid length.
[  238.983773][T14797] netlink: 'syz.2.3752': attribute type 17 has an invalid length.
[  239.000280][T14799] netlink: 332 bytes leftover after parsing attributes in process `syz.1.3754'.
[  239.003832][T14799] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3754'.
[  239.007466][T14799] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3754'.
[  239.045007][T14797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  239.343301][T14816] netlink: 'syz.1.3762': attribute type 7 has an invalid length.
[  239.346036][T14816] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3762'.
[  239.527328][T14834] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3771'.
[  239.956236][T14877] netlink: 'syz.2.3791': attribute type 21 has an invalid length.
[  239.979489][T14878] netlink: 'syz.1.3789': attribute type 13 has an invalid length.
[  239.982614][T14878] netlink: 'syz.1.3789': attribute type 17 has an invalid length.
[  240.037666][T14878] 8021q: adding VLAN 0 to HW filter on device bond0
[  240.061988][T14878] 8021q: adding VLAN 0 to HW filter on device team0
[  240.071090][T14878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  240.078420][ T5884] lo speed is unknown, defaulting to 1000
[  240.084535][ T5884] syz0: Port: 1 Link ACTIVE
[  240.086551][ T5884] lo speed is unknown, defaulting to 1000
[  240.172188][T14883] lo speed is unknown, defaulting to 1000
[  240.178608][T14878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  240.436537][T14883] lo speed is unknown, defaulting to 1000
[  240.488116][    C0] vcan0: j1939_tp_rxtimer: 0xffff888037ac1000: rx timeout, send abort
[  240.992539][    C0] vcan0: j1939_tp_rxtimer: 0xffff888037ac1000: abort rx timeout. Force session deactivation
[  241.377140][T14909] syzkaller1: entered promiscuous mode
[  241.379710][T14909] syzkaller1: entered allmulticast mode
[  242.148041][T14951] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3823'.
[  242.152991][T14951] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3823'.
[  242.156947][T14951] netlink: 'syz.0.3823': attribute type 4 has an invalid length.
[  242.219337][T14955] geneve0: entered allmulticast mode
[  242.363600][T14968] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3831'.
[  242.841633][T14995] Bluetooth: MGMT ver 1.23
[  242.856080][T14997] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3843'.
[  242.860061][T14997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3843'.
[  242.863745][T14997] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3843'.
[  242.945411][T15003] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  242.962235][T15003] netdevsim netdevsim0 netdevsim0: refused to change device tx_queue_len
[  243.197310][T15019] openvswitch: netlink: Missing valid actions attribute.
[  243.201109][T15019] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  243.559997][T15040] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3861'.
[  244.126273][T15084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3881'.
[  244.982771][T15095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3885'.
[  245.725226][T15117] netlink: 'syz.1.3895': attribute type 6 has an invalid length.
[  245.837772][T15123] pim6reg1: entered promiscuous mode
[  245.848911][T15123] pim6reg1: entered allmulticast mode
[  246.333054][T15174] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[  246.467602][T15183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3926'.
[  246.484036][T15183] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  246.622749][T15192] lo speed is unknown, defaulting to 1000
[  246.795070][T15192] lo speed is unknown, defaulting to 1000
[  247.279012][T15231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3948'.
[  247.281908][T15231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3948'.
[  247.284977][T15231] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3948'.
[  247.297718][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  247.305412][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  247.336005][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  247.351079][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  247.481858][T15244] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  247.486601][T15242] syzkaller0: entered promiscuous mode
[  247.492850][T15242] syzkaller0: entered allmulticast mode
[  247.497423][T15246] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3954'.
[  247.544448][T15242] sch_fq: defrate 257 ignored.
[  247.550711][T15242] tipc: Resetting bearer <eth:syzkaller0>
[  247.557023][T15241] tipc: Resetting bearer <eth:syzkaller0>
[  247.580409][T15241] tipc: Disabling bearer <eth:syzkaller0>
[  247.588884][T15250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3956'.
[  247.737011][T15254] pimreg: entered allmulticast mode
[  247.743825][T15254] pimreg: left allmulticast mode
[  247.854372][T15256] netlink: 'syz.0.3959': attribute type 12 has an invalid length.
[  247.858269][T15256] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3959'.
[  248.336082][T15265] macsec0: entered allmulticast mode
[  248.623505][T15277] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3969'.
[  248.641628][T15277] bond0: entered promiscuous mode
[  248.643558][T15277] bond_slave_0: entered promiscuous mode
[  248.645591][T15277] bond_slave_1: entered promiscuous mode
[  248.647700][T15277] !: entered promiscuous mode
[  248.653137][T15277] bond0: left promiscuous mode
[  248.655193][T15277] bond_slave_0: left promiscuous mode
[  248.657355][T15277] bond_slave_1: left promiscuous mode
[  248.661082][T15277] !: left promiscuous mode
[  248.686390][T15278] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  248.987715][T15293] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  249.441538][T15316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3985'.
[  249.445180][T15316] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3985'.
[  249.820390][T15345] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3999'.
[  249.823380][T15345] netlink: 'syz.1.3999': attribute type 3 has an invalid length.
[  249.963300][T15355] netlink: 'syz.2.4004': attribute type 10 has an invalid length.
[  250.379921][T15385] syzkaller1: entered promiscuous mode
[  250.382148][T15385] syzkaller1: entered allmulticast mode
[  250.761334][T15423] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001
[  250.918564][T15427] bond0: (slave gretap0): Error: Device type is different from other slaves
[  250.954341][ T9505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.957486][ T9505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  251.106577][T15433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  251.844404][T15464] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6
[  251.901992][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  251.904828][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  251.910451][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  251.913156][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  252.391692][T15506] lo speed is unknown, defaulting to 1000
[  252.502226][T15506] lo speed is unknown, defaulting to 1000
[  252.885433][T15532] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4082'.
[  252.896281][T15532] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4082'.
[  252.919517][T15532] netlink: 'syz.1.4082': attribute type 6 has an invalid length.
[  252.926234][T15532] netlink: 'syz.1.4082': attribute type 5 has an invalid length.
[  252.929947][T15532] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4082'.
[  253.262437][T15569] netlink: 'syz.1.4100': attribute type 21 has an invalid length.
[  253.580717][T15595] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4113'.
[  253.800371][T15624] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  253.896959][T15636] netlink: 'syz.0.4132': attribute type 5 has an invalid length.
[  253.967143][T15644] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4135'.
[  254.112032][T15660] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4144'.
[  254.233327][T15674] netlink: 'syz.0.4151': attribute type 1 has an invalid length.
[  254.236336][T15674] netlink: 'syz.0.4151': attribute type 2 has an invalid length.
[  254.337982][T15689] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4158'.
[  255.011589][T15741] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  255.014632][T15741] syzkaller0: entered promiscuous mode
[  255.016645][T15741] syzkaller0: entered allmulticast mode
[  255.033475][T15741] tipc: Resetting bearer <eth:syzkaller0>
[  255.037450][T15739] tipc: Resetting bearer <eth:syzkaller0>
[  255.051795][T15739] tipc: Disabling bearer <eth:syzkaller0>
[  255.068502][T15744] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4184'.
[  255.089108][T15744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4184'.
[  255.486945][T15772] netlink: 'syz.1.4198': attribute type 1 has an invalid length.
[  255.495952][T15772] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4198'.
[  255.792194][ T1365] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  256.580373][T15845] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  256.587294][T15845] syzkaller0: entered promiscuous mode
[  256.589790][T15845] syzkaller0: entered allmulticast mode
[  256.601429][T15845] tipc: Resetting bearer <eth:syzkaller0>
[  256.628213][T15845] tipc: Resetting bearer <eth:syzkaller0>
[  256.657103][T15845] tipc: Disabling bearer <eth:syzkaller0>
[  257.280473][T15890] team0: Device macvtap1 is already an upper device of the team interface
[  258.033039][T15888] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  258.404417][T15922] __nla_validate_parse: 1 callbacks suppressed
[  258.404432][T15922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4261'.
[  258.497052][T15926] openvswitch: netlink: IP tunnel dst address not specified
[  258.847737][T15956] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  258.968448][T15967] netlink: 'syz.0.4283': attribute type 1 has an invalid length.
[  260.276199][T16050] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  260.314677][T16050] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4318'.
[  260.421380][T16065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4326'.
[  260.599505][T16079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4329'.
[  262.060290][T16122] lo speed is unknown, defaulting to 1000
[  262.247083][T16134] dvmrp8: entered allmulticast mode
[  262.295397][T16134] lo speed is unknown, defaulting to 1000
[  262.300063][T16122] lo speed is unknown, defaulting to 1000
[  262.469682][T16145] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  262.579453][T16134] lo speed is unknown, defaulting to 1000
[  262.724977][T16154] wireguard0: entered promiscuous mode
[  262.729727][T16154] wireguard0: entered allmulticast mode
[  262.766772][T16151] lo speed is unknown, defaulting to 1000
[  262.898561][T16168] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  262.909255][T16168] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  263.054405][T16162] lo speed is unknown, defaulting to 1000
[  263.059973][T16151] lo speed is unknown, defaulting to 1000
[  263.322499][T16162] lo speed is unknown, defaulting to 1000
[  263.560783][T16191] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4371'.
[  263.585852][T16191] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4371'.
[  263.593572][T16191] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4371'.
[  263.601490][T16191] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4371'.
[  263.605219][T16191] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4371'.
[  263.621242][T16191] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4371'.
[  263.625377][T16191] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4371'.
[  263.645547][T16191] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4371'.
[  263.650235][T16191] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4371'.
[  263.659376][T16191] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4371'.
[  263.743699][T16197] netlink: 'syz.0.4374': attribute type 1 has an invalid length.
[  263.780244][   T47] lo speed is unknown, defaulting to 1000
[  263.782744][   T47] syz0: Port: 1 Link DOWN
[  263.785417][   T47] lo speed is unknown, defaulting to 1000
[  263.916874][T16199] netlink: 'syz.2.4376': attribute type 4 has an invalid length.
[  264.143087][T16208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  264.270407][T16217] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  264.275263][T16217] gretap2: entered promiscuous mode
[  264.277476][T16217] gretap2: entered allmulticast mode
[  265.474971][T16245] netlink: 'syz.2.4392': attribute type 1 has an invalid length.
[  265.548551][T16245] bond4: (slave gretap2): making interface the new active one
[  265.557920][T16245] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  265.874713][T16276] netlink: 'syz.0.4409': attribute type 20 has an invalid length.
[  266.037592][T16294] tipc: Cannot configure node identity twice
[  266.041222][T16294] tipc: Cannot configure node identity twice
[  266.162966][T16296] IPv6: Can't replace route, no match found
[  266.376199][T16315] lo speed is unknown, defaulting to 1000
[  266.593041][T16315] lo speed is unknown, defaulting to 1000
[  267.099349][T16334] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  267.314400][T16338] lo speed is unknown, defaulting to 1000
[  267.523132][T16338] lo speed is unknown, defaulting to 1000
[  267.821920][T16373] 8021q: adding VLAN 0 to HW filter on device bond5
[  268.109378][ T5854] Bluetooth: hci2: command 0x0405 tx timeout
[  268.186443][T16401] netlink: 'syz.0.4464': attribute type 1 has an invalid length.
[  268.227889][T16401] 8021q: adding VLAN 0 to HW filter on device bond0
[  268.245007][T16401] vlan1: entered allmulticast mode
[  268.248975][T16401] batadv0: entered allmulticast mode
[  268.251869][T16401] bond0: (slave vlan1): Opening slave failed
[  268.272856][T16406] dvmrp0: entered allmulticast mode
[  268.425870][T16419] @: renamed from veth0_vlan
[  269.044853][T16458] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  269.071245][T16458] syzkaller0: entered promiscuous mode
[  269.072966][T16458] syzkaller0: entered allmulticast mode
[  269.107819][T16458] tipc: Resetting bearer <eth:syzkaller0>
[  269.115981][T16457] tipc: Resetting bearer <eth:syzkaller0>
[  269.151564][T16457] tipc: Disabling bearer <eth:syzkaller0>
[  269.884659][T16525] __nla_validate_parse: 28 callbacks suppressed
[  269.884677][T16525] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4519'.
[  270.109939][T16536] block nbd3: server does not support multiple connections per device.
[  270.116498][T16536] block nbd3: shutting down sockets
[  270.161092][T16543] netlink: 'syz.2.4527': attribute type 1 has an invalid length.
[  270.306424][T16555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4533'.
[  271.264423][T16588] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4547'.
[  271.693489][T16622] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4562'.
[  272.429639][ T5854] Bluetooth: hci1: command 0x0405 tx timeout
[  273.465418][T16682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4589'.
[  273.644553][T16703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4597'.
[  273.675024][T16703] team1: entered promiscuous mode
[  273.676687][T16703] team1: entered allmulticast mode
[  273.678544][T16703] 8021q: adding VLAN 0 to HW filter on device team1
[  273.783993][T16715] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4603'.
[  273.819781][T16718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4604'.
[  274.501738][T16770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4626'.
[  274.505221][T16770] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4626'.
[  274.521379][T16767] lo speed is unknown, defaulting to 1000
[  274.692437][T16767] lo speed is unknown, defaulting to 1000
[  275.009949][T16804] __nla_validate_parse: 1 callbacks suppressed
[  275.009961][T16804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4643'.
[  275.028519][T16804] netlink: 'syz.2.4643': attribute type 20 has an invalid length.
[  275.031896][T16804] netlink: 'syz.2.4643': attribute type 21 has an invalid length.
[  275.343648][T16826] lo speed is unknown, defaulting to 1000
[  275.792230][T16826] lo speed is unknown, defaulting to 1000
[  275.922935][T16836] veth0_to_bond: entered promiscuous mode
[  276.737764][T16880] netlink: 'syz.0.4672': attribute type 2 has an invalid length.
[  276.740746][T16880] netlink: 'syz.0.4672': attribute type 1 has an invalid length.
[  276.781817][T16880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4672'.
[  276.808545][T16880] bond6 (unregistering): Released all slaves
[  277.188579][T16921] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4691'.
[  277.195056][T16921] unsupported nlmsg_type 40
[  277.243439][T16928] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4694'.
[  277.514471][T16958] netlink: 'syz.2.4707': attribute type 1 has an invalid length.
[  277.517651][T16958] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4707'.
[  277.990667][T17000] block nbd3: server does not support multiple connections per device.
[  277.993597][T17000] block nbd3: shutting down sockets
[  278.228850][T17013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4734'.
[  278.641001][T17059] netlink: 'syz.1.4754': attribute type 2 has an invalid length.
[  278.643860][T17059] netlink: 'syz.1.4754': attribute type 8 has an invalid length.
[  278.647868][T17059] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4754'.
[  278.916152][T17088] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4767'.
[  279.096595][T17107] lo speed is unknown, defaulting to 1000
[  279.366053][T17107] lo speed is unknown, defaulting to 1000
[  279.583551][T17128] wg2: entered promiscuous mode
[  279.585225][T17128] wg2: entered allmulticast mode
[  279.701378][T17135] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4785'.
[  279.734668][T17137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4786'.
[  279.791375][T17137] netlink: 'syz.0.4786': attribute type 39 has an invalid length.
[  279.836242][T17141] macvtap1: entered promiscuous mode
[  279.838370][T17141] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  279.843076][T17142] netlink: 'syz.0.4786': attribute type 10 has an invalid length.
[  279.853749][T17142] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  279.866631][T17142] : (slave netdevsim0): Enslaving as an active interface with an up link
[  280.405470][T17161] lo speed is unknown, defaulting to 1000
[  280.822411][T17161] lo speed is unknown, defaulting to 1000
[  280.825612][T17171] lo speed is unknown, defaulting to 1000
[  281.114858][T17171] lo speed is unknown, defaulting to 1000
[  282.206140][T17267] lo speed is unknown, defaulting to 1000
[  282.305264][T17271] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  282.383614][ T5917] lo speed is unknown, defaulting to 1000
[  282.386015][ T5917] syz2: Port: 1 Link DOWN
[  282.401523][T17278] __nla_validate_parse: 1 callbacks suppressed
[  282.401539][T17278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4832'.
[  282.407682][T17278] netlink: 'syz.0.4832': attribute type 11 has an invalid length.
[  282.416679][T17278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4832'.
[  282.419961][T17278] netlink: 'syz.0.4832': attribute type 11 has an invalid length.
[  282.444911][T17267] lo speed is unknown, defaulting to 1000
[  282.581064][T17284] netlink: 'syz.0.4834': attribute type 11 has an invalid length.
[  282.645896][T17286] raw_sendmsg: syz.0.4835 forgot to set AF_INET. Fix it!
[  282.798411][T17293] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4838'.
[  282.921945][T17299] sctp: [Deprecated]: syz.0.4841 (pid 17299) Use of int in maxseg socket option.
[  282.921945][T17299] Use struct sctp_assoc_value instead
[  283.637708][T17349] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4864'.
[  284.294347][T17404] netlink: 'syz.1.4890': attribute type 1 has an invalid length.
[  284.297179][T17404] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4890'.
[  284.398591][T17408] lo speed is unknown, defaulting to 1000
[  284.556530][T17408] lo speed is unknown, defaulting to 1000
[  284.633136][   T33] audit: type=1800 audit(1757536483.428:10): pid=17421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4898" name="memory.events" dev="tmpfs" ino=5332 res=0 errno=0
[  284.649830][   T33] audit: type=1804 audit(1757536483.438:11): pid=17421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4898" name="/newroot/1052/memory.events" dev="tmpfs" ino=5332 res=1 errno=0
[  285.135457][T17437] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4905'.
[  285.139503][T17437] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4905'.
[  285.143274][T17437] netlink: 'syz.0.4905': attribute type 5 has an invalid length.
[  285.146531][T17437] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4905'.
[  285.247275][T17441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4907'.
[  285.461798][T17449] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4909'.
[  285.616528][T17449] batadv2: entered promiscuous mode
[  285.627286][T17449] batadv2: entered allmulticast mode
[  286.783775][T17535] 8021q: adding VLAN 0 to HW filter on device bond6
[  286.805479][T17535] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  286.811867][T17535] bond6: (slave macvlan2): Enslaving as a backup interface with a down link
[  286.819889][T17535] team0: Port device team_slave_0 removed
[  286.823069][T17535] team0: Port device team_slave_1 removed
[  286.825179][T17535] batman_adv: batadv0: Removing interface: batadv_slave_0
[  286.831334][T17535] batman_adv: batadv0: Removing interface: batadv_slave_1
[  286.836078][T17535] batman_adv: batadv0: Removing interface: virt_wifi0
[  286.844017][T17535] bond0: (slave veth3): Releasing active interface
[  286.852971][T17535] bond4: (slave gretap2): Releasing active interface
[  286.859669][T17535] bond6: (slave macvlan2): Releasing backup interface
[  286.892729][   T33] audit: type=1107 audit(1757536485.688:12): pid=17539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  286.941324][T17542] Unsupported ieee802154 address type: 0
[  287.420887][T17570] netlink: 'syz.1.4948': attribute type 1 has an invalid length.
[  287.423989][T17570] __nla_validate_parse: 2 callbacks suppressed
[  287.424001][T17570] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4948'.
[  287.431380][T17570] netlink: 105 bytes leftover after parsing attributes in process `syz.1.4948'.
[  287.459338][T17573] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4949'.
[  287.554306][T17582] openvswitch: netlink: Missing valid actions attribute.
[  287.557397][T17582] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  288.193724][T17611] lo speed is unknown, defaulting to 1000
[  288.735737][T17611] lo speed is unknown, defaulting to 1000
[  288.960824][T17667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4976'.
[  289.216549][T17678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4980'.
[  289.547221][T17700] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7
[  289.645649][T17706] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4992'.
[  289.659518][T17709] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  289.805870][   T55] Bluetooth: hci1: link tx timeout
[  289.808257][   T55] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  290.162707][T17760] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  290.294174][T17763] lo speed is unknown, defaulting to 1000
[  290.477263][T17768] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5016'.
[  290.676756][T17763] lo speed is unknown, defaulting to 1000
[  291.680384][T17810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5036'.
[  291.685813][T17810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5036'.
[  291.783449][T17808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5035'.
[  291.872002][ T5854] Bluetooth: hci1: command 0x0405 tx timeout
[  292.596722][T17830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5043'.
[  292.634014][T17830] batman_adv: batadv0: Removing interface: batadv_slave_1
[  293.482066][T17895] sctp: [Deprecated]: syz.2.5073 (pid 17895) Use of int in maxseg socket option.
[  293.482066][T17895] Use struct sctp_assoc_value instead
[  293.736879][T17914] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5083'.
[  293.944382][T17932] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  294.176010][T17949] vlan2: entered promiscuous mode
[  294.178064][T17949] bridge0: entered promiscuous mode
[  294.215073][T17951] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5100'.
[  294.218577][T17951] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5100'.
[  294.256548][T17953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5101'.
[  294.260511][T17953] vlan0: entered promiscuous mode
[  294.262566][T17953] bridge0: entered promiscuous mode
[  294.922671][T18006] netlink: 165 bytes leftover after parsing attributes in process `syz.1.5124'.
[  295.037758][T18014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5128'.
[  295.093720][T18019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5129'.
[  295.238395][T18030] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5133'.
[  295.336707][T18037] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5136'.
[  295.425912][T18036] lo speed is unknown, defaulting to 1000
[  295.704424][T18036] lo speed is unknown, defaulting to 1000
[  296.297482][T18090] netlink: 'syz.2.5155': attribute type 1 has an invalid length.
[  296.673263][T18124] veth1_to_bond: entered allmulticast mode
[  296.702235][T18124] : (slave bond_slave_1): Releasing backup interface
[  296.733948][T18124] veth1_to_bond (unregistering): left allmulticast mode
[  296.832196][T18135] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  296.858156][T18131] lo speed is unknown, defaulting to 1000
[  297.065874][T18131] lo speed is unknown, defaulting to 1000
[  297.368506][T18154] netlink: 'syz.0.5185': attribute type 1 has an invalid length.
[  297.461955][T18154] 8021q: adding VLAN 0 to HW filter on device bond6
[  297.615259][T18173] tipc: Can't bind to reserved service type 2
[  297.816786][T18183] __nla_validate_parse: 4 callbacks suppressed
[  297.816804][T18183] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5197'.
[  297.823771][T18183] .70: renamed from hsr0
[  297.835230][T18183] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  297.840243][T18183] .70: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  297.844855][T18183] .70: entered allmulticast mode
[  297.847039][T18183] hsr_slave_0: entered allmulticast mode
[  297.854401][T18183] hsr_slave_1: entered allmulticast mode
[  297.857784][T18183] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[  298.383806][T18222] netlink: 51 bytes leftover after parsing attributes in process `syz.0.5210'.
[  298.586425][T18227] netlink: 'syz.0.5215': attribute type 1 has an invalid length.
[  298.611330][T18227] netlink: 'syz.0.5215': attribute type 2 has an invalid length.
[  298.637876][T18229] netlink: 'syz.1.5214': attribute type 10 has an invalid length.
[  298.646241][T18229] 8021q: adding VLAN 0 to HW filter on device team0
[  298.651839][T18229] bond0: (slave team0): Enslaving as an active interface with a down link
[  298.656518][T18229] netlink: 'syz.1.5214': attribute type 10 has an invalid length.
[  298.666401][T18229] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  298.683036][ T5867] bond0: (slave syz_tun): interface is now down
[  298.701449][ T5867] bond0: (slave syz_tun): interface is now down
[  298.704475][ T5867] bond0: now running without any active interface!
[  299.507945][T18257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5225'.
[  299.941546][T18296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5241'.
[  299.964382][T18296] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  299.970622][T18296] team0: Device ipvlan2 is already an upper device of the team interface
[  300.281833][T18314] tipc: Resetting bearer <eth:syzkaller0>
[  300.555455][T18329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5252'.
[  301.190832][T18350] netlink: 'syz.2.5254': attribute type 13 has an invalid length.
[  301.193798][T18350] netlink: 'syz.2.5254': attribute type 17 has an invalid length.
[  301.226697][T18350] erspan0: left promiscuous mode
[  301.256880][T18350] 8021q: adding VLAN 0 to HW filter on device team0
[  301.281272][T18350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  301.295375][ T1273] lo speed is unknown, defaulting to 1000
[  301.302686][ T1273] syz2: Port: 1 Link ACTIVE
[  301.337390][T18355] lo speed is unknown, defaulting to 1000
[  301.393571][T18350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  301.629480][T18368] netlink: 'syz.0.5258': attribute type 1 has an invalid length.
[  301.673724][T18367] netlink: 'syz.0.5258': attribute type 1 has an invalid length.
[  301.676890][T18367] netlink: 'syz.0.5258': attribute type 1 has an invalid length.
[  301.680892][T18368] netlink: 'syz.0.5258': attribute type 1 has an invalid length.
[  301.683915][T18368] netlink: 'syz.0.5258': attribute type 1 has an invalid length.
[  301.686862][T18368] netlink: 'syz.0.5258': attribute type 1 has an invalid length.
[  301.689889][T18367] netlink: 'syz.0.5258': attribute type 1 has an invalid length.
[  301.692822][T18368] netlink: 'syz.0.5258': attribute type 1 has an invalid length.
[  301.695741][T18368] netlink: 'syz.0.5258': attribute type 1 has an invalid length.
[  301.698624][T18368] netlink: 'syz.0.5258': attribute type 1 has an invalid length.
[  301.848596][T18355] lo speed is unknown, defaulting to 1000
[  302.026705][T18388] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5262'.
[  302.073754][T18395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5264'.
[  302.080090][T18392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5263'.
[  302.085945][T18392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5263'.
[  302.091780][T18395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5264'.
[  302.096079][T18395] batman_adv: batadv0: Removing interface: batadv_slave_0
[  302.101845][T18395] batman_adv: batadv0: Removing interface: batadv_slave_1
[  302.820275][T18448] __nla_validate_parse: 13 callbacks suppressed
[  302.820289][T18448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5273'.
[  302.841114][T18448] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5273'.
[  302.911906][T18448] team0: Mode changed to "broadcast"
[  303.396008][T17703] ==================================================================
[  303.399197][T17703] BUG: KASAN: slab-use-after-free in __mutex_lock+0x801/0x1350
[  303.402159][T17703] Read of size 8 at addr ffff8880203080a0 by task khidpd_15c25886/17703
[  303.405885][T17703] 
[  303.407024][T17703] CPU: 1 UID: 0 PID: 17703 Comm: khidpd_15c25886 Not tainted syzkaller #0 PREEMPT(full) 
[  303.407037][T17703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  303.407043][T17703] Call Trace:
[  303.407048][T17703]  <TASK>
[  303.407053][T17703]  dump_stack_lvl+0x189/0x250
[  303.407066][T17703]  ? __kasan_check_byte+0x12/0x40
[  303.407080][T17703]  ? __pfx_dump_stack_lvl+0x10/0x10
[  303.407089][T17703]  ? lock_release+0x4b/0x3e0
[  303.407103][T17703]  ? __virt_addr_valid+0x4a5/0x5c0
[  303.407115][T17703]  print_report+0xca/0x240
[  303.407122][T17703]  ? __mutex_lock+0x801/0x1350
[  303.407129][T17703]  kasan_report+0x118/0x150
[  303.407140][T17703]  ? __mutex_lock+0x801/0x1350
[  303.407148][T17703]  __mutex_lock+0x801/0x1350
[  303.407156][T17703]  ? __mutex_lock+0x5bb/0x1350
[  303.407163][T17703]  ? l2cap_unregister_user+0x6a/0x1b0
[  303.407174][T17703]  ? __pfx___mutex_lock+0x10/0x10
[  303.407181][T17703]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  303.407194][T17703]  l2cap_unregister_user+0x6a/0x1b0
[  303.407205][T17703]  hidp_session_thread+0x3c9/0x410
[  303.407217][T17703]  ? __pfx_hidp_session_thread+0x10/0x10
[  303.407226][T17703]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  303.407236][T17703]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  303.407247][T17703]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  303.407257][T17703]  ? __kthread_parkme+0x7b/0x200
[  303.407266][T17703]  ? __kthread_parkme+0x1a1/0x200
[  303.407275][T17703]  kthread+0x711/0x8a0
[  303.407285][T17703]  ? __pfx_hidp_session_thread+0x10/0x10
[  303.407294][T17703]  ? __pfx_kthread+0x10/0x10
[  303.407303][T17703]  ? _raw_spin_unlock_irq+0x23/0x50
[  303.407313][T17703]  ? lockdep_hardirqs_on+0x9c/0x150
[  303.407324][T17703]  ? __pfx_kthread+0x10/0x10
[  303.407333][T17703]  ret_from_fork+0x3fc/0x770
[  303.407342][T17703]  ? __pfx_ret_from_fork+0x10/0x10
[  303.407350][T17703]  ? __switch_to_asm+0x39/0x70
[  303.407359][T17703]  ? __switch_to_asm+0x33/0x70
[  303.407369][T17703]  ? __pfx_kthread+0x10/0x10
[  303.407378][T17703]  ret_from_fork_asm+0x1a/0x30
[  303.407391][T17703]  </TASK>
[  303.407394][T17703] 
[  303.475924][T17703] Allocated by task 10220:
[  303.477489][T17703]  kasan_save_track+0x3e/0x80
[  303.478919][T17703]  __kasan_kmalloc+0x93/0xb0
[  303.480841][T17703]  __kmalloc_noprof+0x27a/0x4f0
[  303.482727][T17703]  hci_alloc_dev_priv+0x28/0x2060
[  303.484637][T17703]  vhci_create_device+0x120/0x650
[  303.486722][T17703]  vhci_write+0x3ce/0x4a0
[  303.488582][T17703]  vfs_write+0x5c9/0xb30
[  303.490486][T17703]  ksys_write+0x145/0x250
[  303.492309][T17703]  do_syscall_64+0xfa/0x3b0
[  303.494172][T17703]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.496575][T17703] 
[  303.497543][T17703] Freed by task 10220:
[  303.499197][T17703]  kasan_save_track+0x3e/0x80
[  303.501076][T17703]  kasan_save_free_info+0x46/0x50
[  303.503153][T17703]  __kasan_slab_free+0x5b/0x80
[  303.505134][T17703]  kfree+0x18e/0x440
[  303.506760][T17703]  bt_host_release+0x82/0x90
[  303.508696][T17703]  device_release+0x9c/0x1c0
[  303.510702][T17703]  kobject_put+0x22b/0x480
[  303.512824][T17703]  vhci_release+0x15a/0x1a0
[  303.514612][T17703]  __fput+0x44c/0xa70
[  303.516218][T17703]  task_work_run+0x1d4/0x260
[  303.518087][T17703]  do_exit+0x6b5/0x2300
[  303.519931][T17703]  do_group_exit+0x21c/0x2d0
[  303.521565][T17703]  __x64_sys_exit_group+0x3f/0x40
[  303.523492][T17703]  x64_sys_call+0x21f7/0x2200
[  303.525404][T17703]  do_syscall_64+0xfa/0x3b0
[  303.527239][T17703]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.529127][T17703] 
[  303.530074][T17703] Last potentially related work creation:
[  303.531981][T17703]  kasan_save_stack+0x3e/0x60
[  303.533503][T17703]  kasan_record_aux_stack+0xbd/0xd0
[  303.535199][T17703]  insert_work+0x3d/0x330
[  303.536676][T17703]  __queue_work+0xbaf/0xfb0
[  303.538180][T17703]  queue_work_on+0x181/0x270
[  303.539863][T17703]  process_scheduled_works+0xae1/0x17b0
[  303.542045][T17703]  worker_thread+0x8a0/0xda0
[  303.543797][T17703]  kthread+0x711/0x8a0
[  303.545453][T17703]  ret_from_fork+0x3fc/0x770
[  303.547347][T17703]  ret_from_fork_asm+0x1a/0x30
[  303.549413][T17703] 
[  303.550481][T17703] Second to last potentially related work creation:
[  303.553357][T17703]  kasan_save_stack+0x3e/0x60
[  303.555527][T17703]  kasan_record_aux_stack+0xbd/0xd0
[  303.557664][T17703]  insert_work+0x3d/0x330
[  303.559325][T17703]  __queue_work+0xcd2/0xfb0
[  303.561209][T17703]  call_timer_fn+0x17e/0x5f0
[  303.563221][T17703]  __run_timer_base+0x646/0x860
[  303.565419][T17703]  run_timer_softirq+0xb7/0x180
[  303.567365][T17703]  handle_softirqs+0x286/0x870
[  303.569002][T17703]  __irq_exit_rcu+0xca/0x1f0
[  303.570464][T17703]  irq_exit_rcu+0x9/0x30
[  303.571724][T17703]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  303.573389][T17703]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  303.575298][T17703] 
[  303.576035][T17703] The buggy address belongs to the object at ffff888020308000
[  303.576035][T17703]  which belongs to the cache kmalloc-8k of size 8192
[  303.580180][T17703] The buggy address is located 160 bytes inside of
[  303.580180][T17703]  freed 8192-byte region [ffff888020308000, ffff88802030a000)
[  303.585114][T17703] 
[  303.586125][T17703] The buggy address belongs to the physical page:
[  303.588449][T17703] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20308
[  303.591806][T17703] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  303.594768][T17703] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  303.597559][T17703] page_type: f5(slab)
[  303.598965][T17703] raw: 00fff00000000040 ffff88801a442280 dead000000000100 dead000000000122
[  303.601572][T17703] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  303.604975][T17703] head: 00fff00000000040 ffff88801a442280 dead000000000100 dead000000000122
[  303.608602][T17703] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  303.612314][T17703] head: 00fff00000000003 ffffea000080c201 00000000ffffffff 00000000ffffffff
[  303.615227][T17703] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  303.617714][T17703] page dumped because: kasan: bad access detected
[  303.619579][T17703] page_owner tracks the page as allocated
[  303.621309][T17703] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5591, tgid 5591 (S41dhcpcd), ts 39021213549, free_ts 38809182131
[  303.628912][T17703]  post_alloc_hook+0x240/0x2a0
[  303.630780][T17703]  get_page_from_freelist+0x21e4/0x22c0
[  303.632963][T17703]  __alloc_frozen_pages_noprof+0x181/0x370
[  303.635235][T17703]  alloc_pages_mpol+0x232/0x4a0
[  303.636746][T17703]  allocate_slab+0x8a/0x370
[  303.638147][T17703]  ___slab_alloc+0xbeb/0x1410
[  303.639599][T17703]  __kmalloc_cache_noprof+0x296/0x3d0
[  303.641257][T17703]  tomoyo_init_log+0x111f/0x1f70
[  303.643136][T17703]  tomoyo_supervisor+0x340/0x1480
[  303.644935][T17703]  tomoyo_env_perm+0x149/0x1e0
[  303.646516][T17703]  tomoyo_find_next_domain+0x15cf/0x1aa0
[  303.648909][T17703]  tomoyo_bprm_check_security+0x11c/0x180
[  303.651108][T17703]  security_bprm_check+0x89/0x270
[  303.652792][T17703]  bprm_execve+0x8ee/0x1450
[  303.654403][T17703]  do_execveat_common+0x510/0x6a0
[  303.656092][T17703]  __x64_sys_execve+0x94/0xb0
[  303.657738][T17703] page last free pid 5586 tgid 5586 stack trace:
[  303.660048][T17703]  __free_frozen_pages+0xbc4/0xd30
[  303.662134][T17703]  __put_partials+0x156/0x1a0
[  303.664203][T17703]  put_cpu_partial+0x17c/0x250
[  303.666167][T17703]  __slab_free+0x2d5/0x3c0
[  303.667902][T17703]  qlist_free_all+0x97/0x140
[  303.669376][T17703]  kasan_quarantine_reduce+0x148/0x160
[  303.671005][T17703]  __kasan_slab_alloc+0x22/0x80
[  303.672786][T17703]  __kmalloc_noprof+0x224/0x4f0
[  303.674774][T17703]  tomoyo_supervisor+0xbd5/0x1480
[  303.676480][T17703]  tomoyo_env_perm+0x149/0x1e0
[  303.678555][T17703]  tomoyo_find_next_domain+0x15cf/0x1aa0
[  303.681024][T17703]  tomoyo_bprm_check_security+0x11c/0x180
[  303.683479][T17703]  security_bprm_check+0x89/0x270
[  303.685612][T17703]  bprm_execve+0x8ee/0x1450
[  303.687216][T17703]  do_execveat_common+0x510/0x6a0
[  303.688990][T17703]  __x64_sys_execve+0x94/0xb0
[  303.690857][T17703] 
[  303.691776][T17703] Memory state around the buggy address:
[  303.693768][T17703]  ffff888020307f80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[  303.696622][T17703]  ffff888020308000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  303.699536][T17703] >ffff888020308080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  303.702536][T17703]                                ^
[  303.704421][T17703]  ffff888020308100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  303.707607][T17703]  ffff888020308180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  303.710713][T17703] ==================================================================
[  303.713787][T17703] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  303.716223][T17703] CPU: 1 UID: 0 PID: 17703 Comm: khidpd_15c25886 Not tainted syzkaller #0 PREEMPT(full) 
[  303.719530][T17703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  303.723185][T17703] Call Trace:
[  303.724266][T17703]  <TASK>
[  303.725227][T17703]  dump_stack_lvl+0x99/0x250
[  303.726703][T17703]  ? __asan_memcpy+0x40/0x70
[  303.728189][T17703]  ? __pfx_dump_stack_lvl+0x10/0x10
[  303.730017][T17703]  ? __pfx__printk+0x10/0x10
[  303.731487][T17703]  vpanic+0x281/0x750
[  303.732785][T17703]  ? __pfx_vpanic+0x10/0x10
[  303.734170][T17703]  ? irqentry_exit+0x74/0x90
[  303.735780][T17703]  panic+0xb9/0xc0
[  303.737366][T17703]  ? __pfx_panic+0x10/0x10
[  303.739263][T17703]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  303.741667][T17703]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  303.743571][T17703]  ? __mutex_lock+0x801/0x1350
[  303.745104][T17703]  check_panic_on_warn+0x89/0xb0
[  303.746673][T17703]  ? __mutex_lock+0x801/0x1350
[  303.748230][T17703]  end_report+0x78/0x160
[  303.749585][T17703]  kasan_report+0x129/0x150
[  303.751089][T17703]  ? __mutex_lock+0x801/0x1350
[  303.752649][T17703]  __mutex_lock+0x801/0x1350
[  303.754184][T17703]  ? __mutex_lock+0x5bb/0x1350
[  303.755699][T17703]  ? l2cap_unregister_user+0x6a/0x1b0
[  303.757437][T17703]  ? __pfx___mutex_lock+0x10/0x10
[  303.759504][T17703]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  303.762034][T17703]  l2cap_unregister_user+0x6a/0x1b0
[  303.764184][T17703]  hidp_session_thread+0x3c9/0x410
[  303.765894][T17703]  ? __pfx_hidp_session_thread+0x10/0x10
[  303.767675][T17703]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  303.769570][T17703]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  303.771459][T17703]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  303.773432][T17703]  ? __kthread_parkme+0x7b/0x200
[  303.775095][T17703]  ? __kthread_parkme+0x1a1/0x200
[  303.776804][T17703]  kthread+0x711/0x8a0
[  303.778407][T17703]  ? __pfx_hidp_session_thread+0x10/0x10
[  303.780335][T17703]  ? __pfx_kthread+0x10/0x10
[  303.782080][T17703]  ? _raw_spin_unlock_irq+0x23/0x50
[  303.784244][T17703]  ? lockdep_hardirqs_on+0x9c/0x150
[  303.785815][T17703]  ? __pfx_kthread+0x10/0x10
[  303.787660][T17703]  ret_from_fork+0x3fc/0x770
[  303.789548][T17703]  ? __pfx_ret_from_fork+0x10/0x10
[  303.791784][T17703]  ? __switch_to_asm+0x39/0x70
[  303.793759][T17703]  ? __switch_to_asm+0x33/0x70
[  303.795776][T17703]  ? __pfx_kthread+0x10/0x10
[  303.797670][T17703]  ret_from_fork_asm+0x1a/0x30
[  303.799674][T17703]  </TASK>
[  303.801707][T17703] Kernel Offset: disabled
[  303.803241][T17703] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:35:02  Registers:
info registers vcpu 0

CPU#0
RAX=dffffc0000000000 RBX=ffffffff90340b55 RCX=ffffffff8fb7d884 RDX=ffffffff90340b50
RSI=0000000000000002 RDI=ffffffff8be337a0 RBP=1ffff92000811ec2 RSP=ffffc9000408f538
R8 =0000000000000001 R9 =ffffffff8172c195 R10=ffffc9000408f658 R11=ffffffff81ac3820
R12=ffffc9000408fc40 R13=ffffc9000408f658 R14=ffffc9000408f608 R15=ffffc9000408f610
RIP=ffffffff8172cbc1 RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558295a500 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0d42e87e20 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000ff000000 0000000000000000 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=00000000000003f9
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f9 RSP=ffffc90002faf370
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff854f38c0
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f393c RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff42e707d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007ff42dba76c3 00007ff42dba76c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=207365746174735f 6c61746f74203020
XMM06=6e736e695f726570 5f7365746174735f XMM07=78616d2029303030 303030312074696d
XMM08=0000000000000000 00007ff42da12ee7 XMM09=0000000000000000 00007ff42da12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
