last executing test programs:

2.144535701s ago: executing program 0 (id=4924):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x44c, 0x0, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', r3, r4, 0x4, 0x3, 0x2}, 0x50)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x10)
bind$can_raw(r0, &(0x7f0000000040), 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f00000000c0)=r5, 0x4)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=@newsa={0x140, 0x10, 0x1, 0x7fffffc, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast2, 0x4, 0x6c}, @in6=@remote, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x5, 0x4, 0xd, 0xa}, {0x0, 0x400}, 0xfffffffc, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0x140}}, 0x20000000)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@local}, 0x0, @in=@private}}, &(0x7f0000000000)=0xe8)
setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x20}, @in=@empty, 0x4e23, 0x4, 0x4e21, 0x7, 0xa, 0x60, 0x20, 0x87, 0x0, r9}, {0x80000000, 0x7, 0xfffffffffffffffb, 0x7, 0x9, 0x7, 0x8, 0xb}, {0x0, 0x100, 0x100, 0x6a}, 0x400, 0x6e6bb9, 0x1, 0x1, 0x1, 0x2}, {{@in6=@mcast1, 0x4d4, 0x3c}, 0xa, @in=@remote, 0x3500, 0xbf0a59c5fd157c33, 0x1, 0x5, 0xff80, 0x8, 0x9}}, 0xe8)
unshare(0x6a040000)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4a, 0x0, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x12)
socket$kcm(0x29, 0x5, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r10)

1.761534069s ago: executing program 0 (id=4928):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="14030000", @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000"], 0x14}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendto$inet6(r3, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00120002000a0006005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) (async)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="14030000", @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000"], 0x14}}, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
sendto$inet6(r3, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00120002000a0006005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async)

1.651767063s ago: executing program 0 (id=4931):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='GPL\x00', 0x8}, 0x94)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4)
sendmmsg(r1, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, 0x0}}], 0x1, 0x2c000011)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000440)=0x3)
ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x50, 0xff, 0x0, 0xffeffffd}, {0x6, 0x5e, 0x0, 0x8}]})
ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000100)=0xfff)
write$ppp(r2, &(0x7f0000000300)="5af9", 0x2)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16=r3, @ANYRESDEC=r0], 0x184}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0)
r5 = socket(0x2, 0x2, 0x1)
bind$bt_sco(r5, 0x0, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSIFPFLAGS(r6, 0x8934, &(0x7f0000001ac0)={'vcan0\x00', 0x6})
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
unshare(0x6a040000)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r4, @ANYRES8=0x0, @ANYRES32=r3, @ANYRESDEC=r5], 0x7c}}, 0x4008814)
sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x68}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000000000000000000ff0100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
unshare(0x600)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
getpeername(r8, 0x0, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x309200, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000300)={'virt_wifi0\x00', 0x20})

998.183268ms ago: executing program 1 (id=4937):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r1 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
write$cgroup_pid(r0, &(0x7f00000000c0)=r1, 0x12)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2600000086aaa103909b0b67afddc69012ccae3f34d155a80ea1e336a725c0841d6325a094801a0e3f2fdf6dd78eb892d1203a24642d6bfdf359f8ea2e641f677f383007ce3c1dd3e1039fd19e2b1de5319400c97cfd3de22272fad1140c50a66f953d00d720a4a9ea7572550fecdeb10de72c4605fca1b0791876a33fc2152af217869e16247e8baf2e23d2fd", @ANYRES16=r6, @ANYBLOB="030f04000000fdffffff07000000180002800800020000000000040004000400040004000400"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="a42c7000010201010000000000000044000300000708000440000000020800044000000001080009d64000000007060c000000000000000001800c000280050001003a0000002c00018014000300fe80000000000000000000000001001114000400ff01000000000000000000000000000106000340000000000600034180020000065ebede8cd4cc8531000b00512e31333100000008004000007ea908000b007369"], 0xa4}, 0x1, 0x0, 0x0, 0x4008801}, 0x8000)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES64=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r9], 0x54}}, 0x0)
r10 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x20, 0xf8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x401, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r11 = socket$netlink(0x10, 0x3, 0x0)
r12 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r13, @ANYBLOB="0174dfdb0ddad488bc"], 0x20}}, 0x0)
r14 = socket(0x1, 0x803, 0x0)
getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)

997.562223ms ago: executing program 0 (id=4938):
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0x7, 0x0, 0x1, 0x5392, 0xc, 0x9, {<r0=>0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
r6 = socket$inet(0xa, 0x801, 0x84)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000540))
connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r6, 0x8)
r7 = accept4(r6, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x40}, &(0x7f0000000100)=0x8)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYRES64=r0, @ANYRES16=<r9=>r8, @ANYBLOB="01002cbd7000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="08002600760900000500180138000000080027"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x4)
sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r3, @ANYBLOB="10002cbd7000fedbdf251400000008000300", @ANYRES32=r5, @ANYBLOB="2c00be00fa81ae75e9193850cd27df657fb3839e0c18a0a444c36583c76a9e8c25049751cac81319c4a69d29de07e86249a4e9c5a5e2b72ec30600ed0030040000540081000500010013000000050001000500000005000000050001000500000005000200010000000500020080000000050002000000000005000200260000000500010009000000050001000700000005001301020000000500e400010000000500e400010000000600ed00b30200000500e4000100000000000000"], 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x5)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b000000080000fc8d9fe300090000000100005e4fc35f00", @ANYRESHEX=r9, @ANYBLOB='\x00'/20, @ANYBLOB="a5314265d8b370abbab6331c72113a8931c445b9535a55d93ada53b2909500283afe8d549586401707304b36023ad1aedbf87d5153aa09b5e9f1258110b07947f474698a61e482d1dc0806551805c91ab7a6820f4b74b9cc4c84146534e458054334582cc7f656d40cca33d025f894c130b9312d0440d560a4aff68277c76b2517", @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[@ANYBLOB="e8010000", @ANYRES16=r11, @ANYBLOB="040028bd7000ffdbdf252100000008000300", @ANYRES32=r13, @ANYBLOB="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"/460], 0x1e8}}, 0x40084)
r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2)
sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="00042dbd7000fedbdf254a0000000800030002000000080001007063690011000200303030303a30303a31302e30000000000f00a8007365636f6e646e616d6500000e0001006e657464657673696d0000000f0002006e657401007673696d3000000800030002000000"], 0x70}, 0x1, 0x0, 0x0, 0x45}, 0x4008000)

994.80094ms ago: executing program 2 (id=4939):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f0000000040)=0xfffffffffffffeeb)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

923.550758ms ago: executing program 1 (id=4940):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)={0x20, r1, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048814}, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095", @ANYRES32=r1, @ANYRESDEC=r1, @ANYRESOCT=r1, @ANYRESDEC], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x31}, 0x94)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r4=>0x0})
r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r2, r4, 0x25, 0x2, @void}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r5, 0x4)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
syz_emit_ethernet(0x107, &(0x7f0000000780)={@local, @local, @void, {@ipv4={0x800, @generic={{0xf, 0x4, 0x0, 0x19, 0xf9, 0x64, 0x0, 0x49, 0x21, 0x0, @private=0xa010101, @loopback, {[@cipso={0x86, 0x13, 0x1, [{0x1, 0x2}, {0x2, 0xb, "3924145218aa375608"}]}, @rr={0x7, 0xb, 0x65, [@remote, @multicast2]}, @generic={0x86, 0x7, "80cdcf4a1a"}]}}, "99e70d6e2d7c07c566175221db860ebcc0aaeb5c4b174ea97e0408726a70be00724eebd6c514e541bca121bcbac9152dc10f376798ccc0bf8c0fdba988769824f7dedd915b21b18cc40fe5d4aa3894c7defb58e329338573f691b777eec5bda6bcb2120023fb7052505680c1e90fac1f198b9c8e1946f8f5a100235162825607caec022904370e7266be622f0cbfa6ed4dac3d1ed690db477b53173d04167d13d0b7c90639024fa9af6a23e152db1c331a2fc0118730015442717108ec"}}}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=@setlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
sendto$inet6(r6, &(0x7f0000000080), 0x0, 0x4014, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f00000002c0)}, {&(0x7f0000000340)="d94469a91874fde3d54cf0261ed019a1743de9ea6aeb3a48c84fe243355bc50d49c475f6d7a83e162ee4ce52ba34872f5e0b62e54f0a669d25e869930f3f5858fc7ac5b45884996460645187518e98e83d588712c97a64a4806c", 0x5a}], 0x3}, 0x4000005)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f00000000c0), 0x4)
close(0xffffffffffffffff)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')

713.459131ms ago: executing program 2 (id=4941):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1, @ANYRESOCT=r2], 0x0, 0x0, 0x4, 0x0, 0x0, 0x2a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff4f, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r4 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0x4, 0x4, 0x398, 0xffffffff, 0x1a8, 0x1a8, 0xd0, 0xfeffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private2, [0x0, 0x0, 0x0, 0xff000000], [0xff000000], 'pim6reg0\x00', 'team_slave_1\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x0, 0x1}, {0x4, 0x5, 0x7}, 0x1, 0xf0f}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x58}}, @common=@eui64={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES64, @ANYRESDEC=0x0, @ANYRES16=r4], 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r5}, 0x8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20a0, 0x3b10c}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x45}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x3100, 0x11, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair(0x5, 0x6, 0x7ff, &(0x7f00000000c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000500000000000000800000009500000000000000bcb9508e8c02aeac64581a5ade0a6835a9888b5568e107ebf533d3171037e2c0d725ca9e1270aae35fccea433e94eb82"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x51}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$SIOCX25SFACILITIES(r10, 0x89e3, &(0x7f0000000780)={0x74, 0x101, 0x406, 0x7, 0x6, 0x81})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r9)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

713.019592ms ago: executing program 1 (id=4942):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
unshare(0x6a040000)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x4)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x0) (async)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async)
shutdown(r2, 0x1) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000c414000000002d690000000000000001000b63e26db42c4561c9368b29ef734e36f25c2da6983dde0d8b0b88c1ca5017992f1f3429734863d2d8b3cef8f6e95bf8fd689102f838752893b84542b11aabf79d72633d754222bbb8af542e3b210fc793f8890521e1dda91e86215d66dffd049c1b3e5887258eb8e50dc76030653135f26ee311cdfe3893a5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018910000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x82300, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e21, @local}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) (async)
sendto$inet6(r2, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) (async)
listen(r1, 0x39e) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x2) (async)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x33, &(0x7f0000000340)=0x7bc, 0x4) (async)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4)

513.925586ms ago: executing program 2 (id=4943):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000001900)={0x0, "41b7996ab02e70f18b75dacd8891e2b8"})
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001540)=ANY=[@ANYBLOB="280000001e00010000000000000000000700", @ANYRES32], 0x28}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x88aef0a5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xfffffffffffffeb1}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x8000)

353.925984ms ago: executing program 2 (id=4944):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002b000b0000000000000000000800001008000300040001000c0001800600000088480000"], 0x28}}, 0x8000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r2=>0x0})
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r5 = accept4(r4, 0x0, 0x0, 0x0)
ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000580))
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0)
getsockopt$sock_buf(r5, 0x1, 0x1a, 0x0, &(0x7f0000000340))
recvmmsg$unix(r5, &(0x7f0000012b80)=[{{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000640)=""/20, 0x14}, {&(0x7f000000d280)=""/4096, 0x1000}, {&(0x7f000000e280)=""/4096, 0x1000}, {&(0x7f0000000680)=""/141, 0x8d}], 0x4, &(0x7f0000000780)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r6=>0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000800), 0x6e, &(0x7f000000f480)=[{&(0x7f000000f280)=""/178, 0xb2}, {&(0x7f000000f340)=""/162, 0xa2}, {&(0x7f000000f400)=""/72, 0x48}], 0x3, &(0x7f000000f4c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f000000f540), 0x6e, &(0x7f0000012a00)=[{&(0x7f000000f5c0)=""/186, 0xba}, {&(0x7f000000f680)=""/238, 0xee}, {&(0x7f000000f780)=""/4096, 0x1000}, {&(0x7f0000010780)=""/121, 0x79}, {&(0x7f0000010800)}, {&(0x7f0000010840)=""/4096, 0x1000}, {&(0x7f0000011840)=""/194, 0xc2}, {&(0x7f0000011940)=""/4096, 0x1000}, {&(0x7f0000012940)=""/176, 0xb0}], 0x9, &(0x7f0000012ac0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}], 0x3, 0x60, &(0x7f0000012c40)={0x0, 0x989680})
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r13 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_netrom_SIOCDELRT(r6, 0x890c, &(0x7f00000003c0)={0x0, @default, @rose={'rose', 0x0}, 0x9, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xd2, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000008c0)={'veth1\x00', <r14=>0x0})
r15 = socket$nl_generic(0x10, 0x3, 0x10)
r16 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r16, 0x701, 0x0, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0x7c, r16, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004014}, 0x40000)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r14, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

295.115589ms ago: executing program 1 (id=4945):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r1=>r0, 0x7, 0xfffffffffffffffc, 0xfffffffffffffff5})
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14)

294.295076ms ago: executing program 1 (id=4946):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r3 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r3, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/uts\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f00000023c0)=r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r6=>0x0})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800)
r8 = accept$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @dccp={{0x9, 0x4, 0x0, 0x1, 0x34, 0x65, 0x0, 0x4, 0x21, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xc}, {[@generic={0x83, 0x8, "a464e654cfb7"}, @cipso={0x86, 0x6, 0x2}]}}, {{0x4e21, 0x4e22, 0x4, 0x1, 0x5, 0x0, 0x0, 0x4, 0x0, "9cc7e8", 0x3, "94125f"}}}}}}, 0x0)
recvmmsg$unix(r8, &(0x7f0000002240)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/36, 0x24}, {&(0x7f00000004c0)=""/180, 0xb4}, {&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x5, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [<r9=>0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [<r15=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001880)=""/188, 0xbc}, {&(0x7f0000001940)=""/167, 0xa7}, {&(0x7f0000001a00)=""/9, 0x9}, {&(0x7f0000001a40)=""/135, 0x87}, {&(0x7f0000001b00)=""/205, 0xcd}, {&(0x7f0000001c00)=""/26, 0x1a}], 0x6, &(0x7f0000001cc0)=[@rights={{0x14, 0x1, 0x1, [<r16=>0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000001d00)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001d80)=""/70, 0x46}], 0x1}}, {{&(0x7f0000001e40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001ec0)=""/61, 0x3d}, {&(0x7f0000001f00)=""/224, 0xe0}], 0x2}}, {{&(0x7f0000002040), 0x6e, &(0x7f0000002200)=[{&(0x7f00000021c0)=""/29, 0x1d}], 0x1}}], 0x5, 0x10002, &(0x7f0000002380)={0x77359400})
r17 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x30, 0x7, 0x6, 0x905, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x4001)
r18 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x470d0, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6vti={{0xb}, {0x4}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x48}}, 0x8000)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r17, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r6, @ANYBLOB="c46141a0c845c9a72f7680de078c359d26396001c6d7c4b4d80f82dfd579929490065b0673d5f6eab50456ad56aa44e8c6006d6ee93ff7cc3ce0435cb1c42fae019fd1d4ba02d04e5c33fb298166e20df03f38653ef3672c47024a9b3a39b04b040ce905377de40590d5d211646dd4201e793f6d39801f2a33f3a2fde03a942a0b34646d4fcb7891d7074cc8981f32c2a6d262"], 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a801400003218f19c00010014000200fc02000000000000000000000000000105001600320000001400010020010000000000000000000000000001"], 0x4c}}, 0x40000)
r19 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r19, 0x0, 0xe, 0x0, &(0x7f0000000340)="703aed9e3191c530f94c9366dd8d", 0x0, 0x5043, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r20 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002740)=@bpf_ext={0x1c, 0x35, &(0x7f00000024c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfbc1}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3a7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @jmp={0x5, 0x1, 0x18, 0xb, 0x3, 0x18}, @jmp={0x5, 0x0, 0x4, 0x3, 0x7, 0x100, 0xffffffffffffffff}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x641}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000020c0)='GPL\x00', 0x7, 0x55, &(0x7f0000002100)=""/85, 0x41100, 0x0, '\x00', r6, 0x0, r14, 0x8, &(0x7f0000002180)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000002680)={0x4, 0x0, 0x2, 0x1}, 0x10, 0x2455b, 0xffffffffffffffff, 0x1, &(0x7f00000026c0)=[r12, r16, r13, r15, r10], &(0x7f0000002700)=[{0x4, 0x2, 0xf, 0x9}], 0x10, 0x3}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002800)=@newlink={0xb0, 0x10, 0x439, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}, @IFLA_XDP={0x4c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r9}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r11}, @IFLA_XDP_FD={0x8, 0x1, r11}, @IFLA_XDP_FD={0x8, 0x1, r15}, @IFLA_XDP_FD={0x8, 0x1, r11}, @IFLA_XDP_FD={0x8, 0x1, r20}, @IFLA_XDP_FD={0x8, 0x1, r19}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x6}]}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x14}]}, 0xb0}}, 0x0)

104.580855ms ago: executing program 2 (id=4947):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=ANY=[@ANYBLOB="4001000010000100fcffff0700000000fc01000000000000000000000000000100000000000000000000000000000000000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e0000002000000000000000000000000000000046c0000000a01010100000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000110000000000000000000000000000100000000000000000050000000000000004000000000000000d000000000000000a00000000000000000000000004000000000000fcffffff000000000a0001060000000000000000480003006465666c6106dbc4abe21de0ef746500"/248], 0x140}}, 0x20000000)

103.495929ms ago: executing program 0 (id=4948):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010010000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="20000000280e0400280012800b0001006d6163736563000018000280050003000800000d0c00040001000001000280"], 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x2, 0x4)
socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc18c2, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x101, @dev}, 0x2, 0x4}}, 0x2e)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e)
getsockopt(r8, 0x111, 0x5, 0x0, &(0x7f0000000080)=0x5a)
r9 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_mreqn(r9, 0x0, 0x20, &(0x7f0000000200)={@rand_addr=0x64010102, @multicast2, r2}, 0xc)
write$cgroup_devices(r4, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
close(r5)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(0x4)

103.028974ms ago: executing program 1 (id=4949):
r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
connect$nfc_raw(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x5}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="050011c36d1704c100003f770400060000000400000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000070000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='afs_lookup\x00', r3, 0x0, 0x2}, 0x18)
r4 = socket$netlink(0x10, 0x3, 0x7)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x14, 0x18, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write(r6, &(0x7f0000000340), 0x11000)
sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x20000050)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4)
r7 = socket$kcm(0x2, 0x3, 0x106)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x20004000)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
sendmsg$inet(r7, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0x24}], 0x1}, 0x0)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0)
r10 = accept4(r9, 0x0, 0x0, 0x0)
sendmsg$kcm(r10, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[{0x10, 0x10b, 0x4}, {0x88, 0x117, 0x3, "77de7f5344df1ee04b05337d256ca58655241ca8307e41357c052a79ea609b67881c76b901028736dd203af68d196d31649d0d6ec328855709c1185247ec3264088cfe88b12f49712b858e4e2afd3bb81720356ac94c8320ef7aa130a77c4cb90e1d30bb075e1b7c3b63407f07d9b67aca695f707c7d54"}], 0x98}, 0x81)
r11 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r11, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10)
setsockopt$sock_int(r11, 0x1, 0x9, &(0x7f0000000200), 0x4)

1.555767ms ago: executing program 2 (id=4950):
r0 = socket$inet6(0xa, 0x2, 0x3a)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f000000d540)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r4, &(0x7f00000121c0)={0x0, 0x0, &(0x7f0000012180)={&(0x7f0000012140)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0)
recvmmsg(r2, &(0x7f0000004380), 0x0, 0xc0000000, &(0x7f0000004580)={0x77359400})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@initr0]}, 0x0}, 0x94)
r6 = socket$inet6(0xa, 0x1, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
r8 = socket(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r8, 0x891a, 0x0)
sendmsg$key(r7, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x7, @local, 0x5}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x200000c1, 0x0, 0x0)

0s ago: executing program 0 (id=4951):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x38}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10)

kernel console output (not intermixed with test programs):

8.550730][T18692] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3229'.
[  408.576097][T18694] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  408.581317][T18694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3230'.
[  408.609655][T18694] 8021q: adding VLAN 0 to HW filter on device bond21
[  408.681958][T18702] netlink: zone id is out of range
[  408.683645][T18702] netlink: zone id is out of range
[  408.685425][T18702] netlink: zone id is out of range
[  408.688737][T18702] netlink: zone id is out of range
[  408.691922][T18702] netlink: zone id is out of range
[  408.693887][T18702] netlink: zone id is out of range
[  408.695513][T18702] netlink: zone id is out of range
[  408.706399][T18702] netlink: zone id is out of range
[  408.790806][T18713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3235'.
[  408.799756][T18711] netlink: 'syz.2.3234': attribute type 1 has an invalid length.
[  408.946458][T18722] netlink: 'syz.1.3235': attribute type 10 has an invalid length.
[  409.079296][T18730] lo speed is unknown, defaulting to 1000
[  409.083219][T18730] wg1 speed is unknown, defaulting to 1000
[  409.169176][T18739] lo speed is unknown, defaulting to 1000
[  409.172929][T18739] wg1 speed is unknown, defaulting to 1000
[  409.388494][T18761] netlink: 'syz.1.3242': attribute type 5 has an invalid length.
[  409.440587][T18761] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  409.629277][T18780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3246'.
[  409.791784][T18794] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  409.795562][T18794] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  409.862042][T18796] lo speed is unknown, defaulting to 1000
[  409.865683][T18796] wg1 speed is unknown, defaulting to 1000
[  410.318797][T18804] siw: device registration error -23
[  410.338743][T18804] lo speed is unknown, defaulting to 1000
[  410.342269][T18804] wg1 speed is unknown, defaulting to 1000
[  410.505821][T18809] sch_tbf: burst 5 is lower than device lo mtu (1550) !
[  410.807402][T18818] lo speed is unknown, defaulting to 1000
[  410.815902][T18818] wg1 speed is unknown, defaulting to 1000
[  411.014976][T18834] lo speed is unknown, defaulting to 1000
[  411.024322][T18834] wg1 speed is unknown, defaulting to 1000
[  411.069145][T18842] netlink: 'syz.1.3261': attribute type 3 has an invalid length.
[  411.382083][T18863] netlink: 'syz.0.3270': attribute type 2 has an invalid length.
[  411.388718][T18863] netlink: 'syz.0.3270': attribute type 2 has an invalid length.
[  411.392937][T18863] netlink: 'syz.0.3270': attribute type 2 has an invalid length.
[  411.431379][T18865] siw: device registration error -23
[  411.854485][T18888] netlink: 'syz.2.3274': attribute type 21 has an invalid length.
[  411.861949][T18888] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3274'.
[  412.666704][T18937] netlink: 'syz.0.3283': attribute type 1 has an invalid length.
[  412.672260][T18937] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3283'.
[  412.744591][T18943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3285'.
[  412.808040][T18953] bond4: left promiscuous mode
[  412.816810][T18953] bond4: left allmulticast mode
[  412.827455][T18953] 8021q: adding VLAN 0 to HW filter on device bond4
[  412.870233][   T13] net_ratelimit: 3 callbacks suppressed
[  412.870248][   T13] bond4: (slave macvlan2): failed to get link speed/duplex
[  412.986673][   T13] bond4: (slave macvlan2): failed to get link speed/duplex
[  413.008264][T18973] lo speed is unknown, defaulting to 1000
[  413.011163][T18973] wg1 speed is unknown, defaulting to 1000
[  413.117128][   T13] bond4: (slave macvlan2): failed to get link speed/duplex
[  413.227611][ T5858] bond4: (slave macvlan2): failed to get link speed/duplex
[  413.258127][T18985] lo speed is unknown, defaulting to 1000
[  413.269412][T18985] wg1 speed is unknown, defaulting to 1000
[  413.280009][T18990] lo speed is unknown, defaulting to 1000
[  413.283808][T18990] wg1 speed is unknown, defaulting to 1000
[  413.329886][T18998] 8021q: adding VLAN 0 to HW filter on device bond16
[  413.347276][T18989] macvlan0: entered promiscuous mode
[  413.349462][T18989] macvlan0: entered allmulticast mode
[  413.352624][T18989] bond16: entered promiscuous mode
[  413.355360][T18989] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  413.362024][T18989] bond16: left promiscuous mode
[  413.493065][T19004] netlink: 'syz.2.3296': attribute type 101 has an invalid length.
[  413.496705][ T8934] bond4: (slave macvlan2): failed to get link speed/duplex
[  413.501600][T19004] netlink: 'syz.2.3296': attribute type 7 has an invalid length.
[  413.505728][T19004] __nla_validate_parse: 1 callbacks suppressed
[  413.505743][T19004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3296'.
[  413.608166][ T5858] bond4: (slave macvlan2): failed to get link speed/duplex
[  413.726779][ T5858] bond4: (slave macvlan2): failed to get link speed/duplex
[  413.793778][T19021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3303'.
[  413.820237][T19028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3304'.
[  413.837090][ T5858] bond4: (slave macvlan2): failed to get link speed/duplex
[  413.854395][T19026] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3303'.
[  413.876106][T19033] lo speed is unknown, defaulting to 1000
[  413.880009][T19033] wg1 speed is unknown, defaulting to 1000
[  413.916031][T19036] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20003
[  413.946542][   T13] bond4: (slave macvlan2): failed to get link speed/duplex
[  413.999326][T19046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3310'.
[  414.053152][T19046] 8021q: adding VLAN 0 to HW filter on device bond17
[  414.053554][T19052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3310'.
[  414.058854][ T5858] bond4: (slave macvlan2): failed to get link speed/duplex
[  414.095218][T19052] macsec2: entered promiscuous mode
[  414.125599][T19052] bond17: entered promiscuous mode
[  414.130173][T19052] macsec2: entered allmulticast mode
[  414.131156][T19046] netlink: 'syz.2.3310': attribute type 9 has an invalid length.
[  414.136232][T19052] bond17: entered allmulticast mode
[  414.145122][T19052] bond17: left allmulticast mode
[  414.147403][T19052] bond17: left promiscuous mode
[  414.373806][T19064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3314'.
[  414.592863][T19078] lo speed is unknown, defaulting to 1000
[  414.596151][T19078] wg1 speed is unknown, defaulting to 1000
[  415.540778][T19095] nbd: couldn't find device at index 536870912
[  415.547852][T19095] dvmrp1: tun_chr_ioctl cmd 1074025677
[  415.549811][T19095] dvmrp1: linktype set to 768
[  415.608599][T19097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3321'.
[  415.701880][T19102] batadv0: left promiscuous mode
[  415.703576][T19102] batadv0: left allmulticast mode
[  415.705448][T19102] veth0: left promiscuous mode
[  415.717415][T19102] veth0: left allmulticast mode
[  415.719319][T19102] veth1: left promiscuous mode
[  415.721727][T19102] veth1: left allmulticast mode
[  415.724470][T19102] wg0: left promiscuous mode
[  415.727144][T19102] wg0: left allmulticast mode
[  415.728761][T19102] wg1: left promiscuous mode
[  415.731161][T19102] wg1: left allmulticast mode
[  415.733120][T19102] wg2: left promiscuous mode
[  415.734943][T19102] wg2: left allmulticast mode
[  415.738323][T19102] veth0_to_bridge: left promiscuous mode
[  415.740735][T19102] bridge_slave_0: left promiscuous mode
[  415.742920][T19102] bridge_slave_0: left allmulticast mode
[  415.745283][T19102] veth1_to_bridge: left promiscuous mode
[  415.748571][T19102] veth1_to_bridge: left allmulticast mode
[  415.751060][T19102] bridge_slave_1: left promiscuous mode
[  415.753550][T19102] bridge_slave_1: left allmulticast mode
[  415.755890][T19102] veth0_to_bond: left promiscuous mode
[  415.761217][T19102] veth0_to_bond: left allmulticast mode
[  415.763957][T19102] : left promiscuous mode
[  415.765763][T19102] : left allmulticast mode
[  415.769291][T19102] veth1_to_bond: left promiscuous mode
[  415.771698][T19102] veth1_to_bond: left allmulticast mode
[  415.774172][T19102] bond_slave_1: left promiscuous mode
[  415.778546][T19102] bond_slave_1: left allmulticast mode
[  415.783124][T19102] team_slave_0: left promiscuous mode
[  415.785321][T19102] team_slave_0: left allmulticast mode
[  415.788871][T19102] veth1_to_team: left promiscuous mode
[  415.792184][T19102] veth1_to_team: left allmulticast mode
[  415.794538][T19102] team_slave_1: left promiscuous mode
[  415.796983][T19102] team_slave_1: left allmulticast mode
[  415.799296][T19102] veth0_to_batadv: left promiscuous mode
[  415.801520][T19102] veth0_to_batadv: left allmulticast mode
[  415.803510][T19102] batadv_slave_0: left promiscuous mode
[  415.805706][T19102] batadv_slave_0: left allmulticast mode
[  415.808538][T19102] veth1_to_batadv: left promiscuous mode
[  415.810733][T19102] veth1_to_batadv: left allmulticast mode
[  415.813169][T19102] batadv_slave_1: left promiscuous mode
[  415.815420][T19102] batadv_slave_1: left allmulticast mode
[  415.817961][T19102] xfrm0: left promiscuous mode
[  415.819891][T19102] xfrm0: left allmulticast mode
[  415.821972][T19102] veth0_to_hsr: left promiscuous mode
[  415.824108][T19102] veth0_to_hsr: left allmulticast mode
[  415.826848][T19102] veth1_to_hsr: left promiscuous mode
[  415.828967][T19102] veth1_to_hsr: left allmulticast mode
[  415.831383][T19102] ..1: left allmulticast mode
[  415.833222][T19102] hsr_slave_0: left allmulticast mode
[  415.835371][T19102] hsr_slave_1: left allmulticast mode
[  415.837817][T19102] veth0_macvtap: left allmulticast mode
[  415.839853][T19102] macvtap0: left allmulticast mode
[  415.841526][T19102] macsec0: left promiscuous mode
[  415.843048][T19102] macsec0: left allmulticast mode
[  415.844751][T19102] geneve1: left promiscuous mode
[  415.847262][T19102] geneve1: left allmulticast mode
[  415.849924][T19102] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  415.852704][T19102] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  415.855725][T19102] nic: left promiscuous mode
[  415.857597][T19102] nic: left allmulticast mode
[  415.859292][T19102] sit1: left promiscuous mode
[  415.860877][T19102] sit1: left allmulticast mode
[  415.862537][T19102] bond1: left promiscuous mode
[  415.864317][T19102] bond1: left allmulticast mode
[  415.866586][T19102] sit2: left promiscuous mode
[  415.868190][T19102] sit2: left allmulticast mode
[  415.870277][T19102] macsec1: left promiscuous mode
[  415.872288][T19102] macsec1: left allmulticast mode
[  415.874257][T19102] bridge0: left promiscuous mode
[  415.876034][T19102] bridge0: left allmulticast mode
[  415.878491][T19102] ip6gre1: left promiscuous mode
[  415.880739][T19102] ip6gre1: left allmulticast mode
[  415.882952][T19102] mac80211_hwsim hwsim9 wlan2: left promiscuous mode
[  415.885643][T19102] mac80211_hwsim hwsim9 wlan2: left allmulticast mode
[  415.888558][T19102] mac80211_hwsim hwsim10 wlan3: left promiscuous mode
[  415.891286][T19102] mac80211_hwsim hwsim10 wlan3: left allmulticast mode
[  415.894186][T19102] bond2: left promiscuous mode
[  415.896590][T19102] bond2: left allmulticast mode
[  415.898764][T19102] ip6gretap1: left promiscuous mode
[  415.900866][T19102] ip6gretap1: left allmulticast mode
[  415.903456][T19102] bridge1: left promiscuous mode
[  415.905383][T19102] bridge1: left allmulticast mode
[  415.907807][T19102] k*: left allmulticast mode
[  415.909842][T19102] bridge2: left promiscuous mode
[  415.911796][T19102] bridge2: left allmulticast mode
[  415.913884][T19102] batadv1: left promiscuous mode
[  415.915891][T19102] batadv1: left allmulticast mode
[  415.918089][T19102] ip6tnl1: left promiscuous mode
[  415.920096][T19102] ip6tnl1: left allmulticast mode
[  415.922229][T19102] ip6gretap2: left promiscuous mode
[  415.924317][T19102] ip6gretap2: left allmulticast mode
[  415.926732][T19102] ip6gre2: left promiscuous mode
[  415.928594][T19102] ip6gre2: left allmulticast mode
[  415.930644][T19102] veth2: left promiscuous mode
[  415.932455][T19102] veth2: left allmulticast mode
[  415.934474][T19102] veth3: left promiscuous mode
[  415.936492][T19102] veth3: left allmulticast mode
[  415.938549][T19102] ip6tnl2: left promiscuous mode
[  415.940447][T19102] ip6tnl2: left allmulticast mode
[  415.942465][T19102] bond3: left promiscuous mode
[  415.944272][T19102] bond3: left allmulticast mode
[  415.946232][T19102] veth4: left promiscuous mode
[  415.948283][T19102] veth4: left allmulticast mode
[  415.950266][T19102] veth5: left promiscuous mode
[  415.951931][T19102] veth5: left allmulticast mode
[  415.953886][T19102] veth6: left promiscuous mode
[  415.955778][T19102] veth6: left allmulticast mode
[  415.958491][T19102] veth7: left promiscuous mode
[  415.960392][T19102] veth7: left allmulticast mode
[  415.963375][T19102] macvlan2: left promiscuous mode
[  415.965094][T19102] macvlan2: left allmulticast mode
[  415.967089][T19102] veth8: left promiscuous mode
[  415.968594][T19102] veth8: left allmulticast mode
[  415.970176][T19102] veth9: left promiscuous mode
[  415.972125][T19102] veth9: left allmulticast mode
[  415.973818][T19102] vxcan2: left promiscuous mode
[  415.975370][T19102] vxcan2: left allmulticast mode
[  415.977058][T19102] vxcan3: left promiscuous mode
[  415.978567][T19102] vxcan3: left allmulticast mode
[  415.980179][T19102] vti0: left promiscuous mode
[  415.982078][T19102] vti0: left allmulticast mode
[  415.984129][T19102] bridge3: left promiscuous mode
[  415.986152][T19102] bridge3: left allmulticast mode
[  415.988800][T19102] mac80211_hwsim hwsim16 wlan4: left promiscuous mode
[  415.991439][T19102] mac80211_hwsim hwsim16 wlan4: left allmulticast mode
[  415.993898][T19102] @: left promiscuous mode
[  415.995545][T19102] @: left allmulticast mode
[  415.997247][T19102] bridge4: left promiscuous mode
[  415.999113][T19102] bridge4: left allmulticast mode
[  416.001268][T19102] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  416.004081][T19102] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  416.007737][T19102] ip6tnl3: left promiscuous mode
[  416.009748][T19102] ip6tnl3: left allmulticast mode
[  416.011877][T19102] macvlan3: left promiscuous mode
[  416.013920][T19102] macvlan3: left allmulticast mode
[  416.016115][T19102] bond5: left promiscuous mode
[  416.018178][T19102] bond5: left allmulticast mode
[  416.020258][T19102] ipip0: left promiscuous mode
[  416.022199][T19102] ipip0: left allmulticast mode
[  416.024309][T19102] ipip1: left promiscuous mode
[  416.026486][T19102] ipip1: left allmulticast mode
[  416.028104][T19102] tun0: left promiscuous mode
[  416.029735][T19102] tun0: left allmulticast mode
[  416.031776][T19102] gtp0: left promiscuous mode
[  416.033652][T19102] gtp0: left allmulticast mode
[  416.035747][T19102] ip6tnl4: left promiscuous mode
[  416.037856][T19102] ip6tnl4: left allmulticast mode
[  416.039959][T19102] vxcan4: left promiscuous mode
[  416.041957][T19102] vxcan4: left allmulticast mode
[  416.044079][T19102] vxcan5: left promiscuous mode
[  416.046026][T19102] vxcan5: left allmulticast mode
[  416.048547][T19102] vxcan6: left promiscuous mode
[  416.050490][T19102] vxcan6: left allmulticast mode
[  416.052540][T19102] vxcan7: left promiscuous mode
[  416.054475][T19102] vxcan7: left allmulticast mode
[  416.056678][T19102] vxcan8: left promiscuous mode
[  416.058605][T19102] vxcan8: left allmulticast mode
[  416.060707][T19102] vxcan9: left promiscuous mode
[  416.062223][T19102] vxcan9: left allmulticast mode
[  416.063972][T19102] gtp1: left promiscuous mode
[  416.065857][T19102] gtp1: left allmulticast mode
[  416.068727][T19102] bond6: left promiscuous mode
[  416.070594][T19102] bond6: left allmulticast mode
[  416.072686][T19102] tun1: left promiscuous mode
[  416.074547][T19102] tun1: left allmulticast mode
[  416.076818][T19102] ip6erspan0: left promiscuous mode
[  416.078846][T19102] ip6erspan0: left allmulticast mode
[  416.081073][T19102] gre1: left promiscuous mode
[  416.082956][T19102] gre1: left allmulticast mode
[  416.085110][T19102] bridge5: left allmulticast mode
[  416.087965][T19102] veth11: left promiscuous mode
[  416.092212][T19102] gretap3: left allmulticast mode
[  416.110802][T19111] lo speed is unknown, defaulting to 1000
[  416.113545][T19111] wg1 speed is unknown, defaulting to 1000
[  416.223439][T19127] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  416.378400][T19140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3330'.
[  416.389284][T19136] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3330'.
[  416.632477][T19161] syz.1.3335: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  416.643351][T19161] CPU: 1 UID: 0 PID: 19161 Comm: syz.1.3335 Not tainted syzkaller #0 PREEMPT(full) 
[  416.643367][T19161] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  416.643373][T19161] Call Trace:
[  416.643378][T19161]  <TASK>
[  416.643384][T19161]  dump_stack_lvl+0x189/0x250
[  416.643401][T19161]  ? __pfx_dump_stack_lvl+0x10/0x10
[  416.643411][T19161]  ? __pfx__printk+0x10/0x10
[  416.643424][T19161]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  416.643435][T19161]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  416.643444][T19161]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  416.643454][T19161]  warn_alloc+0x214/0x310
[  416.643472][T19161]  ? __pfx_warn_alloc+0x10/0x10
[  416.643488][T19161]  ? __get_vm_area_node+0x28f/0x300
[  416.643500][T19161]  ? xskq_create+0xbf/0x170
[  416.643510][T19161]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  416.643536][T19161]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  416.643566][T19161]  ? __kasan_kmalloc+0x93/0xb0
[  416.643579][T19161]  vmalloc_user_noprof+0xad/0xf0
[  416.643591][T19161]  ? xskq_create+0xbf/0x170
[  416.643599][T19161]  xskq_create+0xbf/0x170
[  416.643609][T19161]  xsk_init_queue+0xb0/0x110
[  416.643617][T19161]  xsk_setsockopt+0x57b/0x8d0
[  416.643632][T19161]  ? __pfx_xsk_setsockopt+0x10/0x10
[  416.643644][T19161]  ? __pfx_aa_sk_perm+0x10/0x10
[  416.643660][T19161]  ? __fget_files+0x2a/0x420
[  416.643666][T19161]  ? aa_sock_opt_perm+0xff/0x1b0
[  416.643676][T19161]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  416.643685][T19161]  ? __pfx_xsk_setsockopt+0x10/0x10
[  416.643697][T19161]  do_sock_setsockopt+0x17c/0x1b0
[  416.643712][T19161]  __x64_sys_setsockopt+0x13f/0x1b0
[  416.643725][T19161]  do_syscall_64+0xfa/0x3b0
[  416.643735][T19161]  ? lockdep_hardirqs_on+0x9c/0x150
[  416.643743][T19161]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.643751][T19161]  ? exc_page_fault+0x9f/0xf0
[  416.643760][T19161]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.643768][T19161] RIP: 0033:0x7f88faf8ec29
[  416.643777][T19161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  416.643784][T19161] RSP: 002b:00007f88fbeff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  416.643794][T19161] RAX: ffffffffffffffda RBX: 00007f88fb1d5fa0 RCX: 00007f88faf8ec29
[  416.643800][T19161] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004
[  416.643807][T19161] RBP: 00007f88fb011e41 R08: 0000000000000004 R09: 0000000000000000
[  416.643811][T19161] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  416.643816][T19161] R13: 00007f88fb1d6038 R14: 00007f88fb1d5fa0 R15: 00007ffc780d6ec8
[  416.643829][T19161]  </TASK>
[  416.643833][T19161] Mem-Info:
[  416.725170][T19166] sctp: [Deprecated]: syz.2.3336 (pid 19166) Use of struct sctp_assoc_value in delayed_ack socket option.
[  416.725170][T19166] Use struct sctp_sack_info instead
[  416.735066][T19161] active_anon:5334 inactive_anon:0 isolated_anon:0
[  416.735066][T19161]  active_file:1394 inactive_file:38372 isolated_file:0
[  416.735066][T19161]  unevictable:1768 dirty:24 writeback:0
[  416.735066][T19161]  slab_reclaimable:11269 slab_unreclaimable:158683
[  416.735066][T19161]  mapped:18240 shmem:2455 pagetables:1018
[  416.735066][T19161]  sec_pagetables:0 bounce:0
[  416.735066][T19161]  kernel_misc_reclaimable:0
[  416.735066][T19161]  free:174111 free_pcp:26155 free_cma:0
[  416.766657][T19161] Node 0 active_anon:14220kB inactive_anon:0kB active_file:3684kB inactive_file:131868kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29928kB dirty:40kB writeback:0kB shmem:4908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6492kB pagetables:2276kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  416.777824][T19161] Node 1 active_anon:7204kB inactive_anon:0kB active_file:1892kB inactive_file:21620kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43012kB dirty:56kB writeback:0kB shmem:4920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7376kB pagetables:1852kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  416.789040][T19161] Node 0 DMA free:14968kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:388kB local_pcp:84kB free_cma:0kB
[  416.798305][T19161] lowmem_reserve[]: 0 811 811 811 811
[  416.800005][T19161] Node 0 DMA32 free:150368kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14084kB inactive_anon:0kB active_file:3684kB inactive_file:131868kB unevictable:3536kB writepending:40kB present:1556484kB managed:830852kB mlocked:0kB bounce:0kB free_pcp:42932kB local_pcp:16512kB free_cma:0kB
[  416.812457][T19161] lowmem_reserve[]: 0 0 0 0 0
[  416.814021][T19161] Node 1 DMA32 free:443916kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:14692kB local_pcp:4kB free_cma:0kB
[  416.823420][T19161] lowmem_reserve[]: 0 0 854 854 854
[  416.825385][T19161] Node 1 Normal free:87472kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7184kB inactive_anon:0kB active_file:1892kB inactive_file:21620kB unevictable:3536kB writepending:56kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:46892kB local_pcp:18924kB free_cma:0kB
[  416.836546][T19161] lowmem_reserve[]: 0 0 0 0 0
[  416.838831][T19161] Node 0 DMA: 2*4kB (UM) 4*8kB (UM) 1*16kB (M) 2*32kB (U) 0*64kB 2*128kB (M) 1*256kB (U) 2*512kB (UM) 1*1024kB (M) 2*2048kB (M) 2*4096kB (U) = 14968kB
[  416.843628][T19161] Node 0 DMA32: 284*4kB (M) 114*8kB (UME) 272*16kB (UME) 237*32kB (UME) 17*64kB (UME) 17*128kB (UME) 10*256kB (UME) 11*512kB (UME) 8*1024kB (U) 9*2048kB (UM) 24*4096kB (U) = 150368kB
[  416.849440][T19161] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 3*16kB (UM) 4*32kB (UM) 3*64kB (UM) 3*128kB (UM) 5*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 3*2048kB (UM) 105*4096kB (UM) = 443916kB
[  416.854776][T19161] Node 1 Normal: 1046*4kB (UME) 191*8kB (UM) 342*16kB (UME) 430*32kB (UME) 159*64kB (UME) 29*128kB (UME) 14*256kB (M) 14*512kB (UME) 7*1024kB (UME) 9*2048kB (UME) 3*4096kB (M) = 87472kB
[  416.860693][T19161] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  416.864337][T19161] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  416.867384][T19161] 42223 total pagecache pages
[  416.868975][T19161] 0 pages in swap cache
[  416.870307][T19161] Free swap  = 124996kB
[  416.871732][T19161] Total swap = 124996kB
[  416.873056][T19161] 786301 pages RAM
[  416.874223][T19161] 0 pages HighMem/MovableOnly
[  416.875689][T19161] 241356 pages reserved
[  416.877178][T19161] 0 pages cma reserved
[  417.278449][T19211] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  417.281642][T19211] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode
[  417.284168][T19211] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode
[  417.287932][T19211] tipc: Resetting bearer <eth:syzkaller0>
[  417.292491][T10424] tipc: Resetting bearer <eth:syzkaller0>
[  417.329364][T19211] tipc: Resetting bearer <eth:syzkaller0>
[  417.358070][T19217] IPVS: Unknown mcast interface: batadv0
[  417.362540][T19217] netlink: 'syz.0.3348': attribute type 3 has an invalid length.
[  417.432116][T19222] syzkaller1: entered promiscuous mode
[  417.433897][T19222] syzkaller1: entered allmulticast mode
[  417.523388][T19231] lo speed is unknown, defaulting to 1000
[  417.528105][T19231] wg1 speed is unknown, defaulting to 1000
[  417.834902][T19250] lo speed is unknown, defaulting to 1000
[  417.837978][T19250] wg1 speed is unknown, defaulting to 1000
[  418.095090][T10430] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  418.194978][T19285] lo speed is unknown, defaulting to 1000
[  418.202142][T19285] wg1 speed is unknown, defaulting to 1000
[  418.203836][T19284] lo speed is unknown, defaulting to 1000
[  418.217545][T19284] wg1 speed is unknown, defaulting to 1000
[  418.518355][T19296] lo speed is unknown, defaulting to 1000
[  418.522583][T19296] wg1 speed is unknown, defaulting to 1000
[  418.552908][T19297] macsec0: entered promiscuous mode
[  418.554737][T19297] macsec0: entered allmulticast mode
[  418.567401][T19297] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  418.570565][T19297] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  418.990449][T19306] lo speed is unknown, defaulting to 1000
[  418.994394][T19306] wg1 speed is unknown, defaulting to 1000
[  419.170080][T19312] lo speed is unknown, defaulting to 1000
[  419.173080][T19312] wg1 speed is unknown, defaulting to 1000
[  419.324791][T19323] __nla_validate_parse: 22 callbacks suppressed
[  419.324804][T19323] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3372'.
[  419.416978][T19323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3372'.
[  419.424489][T19323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3372'.
[  419.446230][T19323] netlink: 'syz.1.3372': attribute type 1 has an invalid length.
[  419.523605][T19331] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3374'.
[  419.681644][T19347] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3379'.
[  419.699042][T19349] netlink: 'syz.1.3380': attribute type 1 has an invalid length.
[  419.701632][T19349] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3380'.
[  419.972940][T19370] netlink: 'syz.1.3386': attribute type 1 has an invalid length.
[  420.042727][T19370] veth7: entered promiscuous mode
[  420.045712][T19370] net_ratelimit: 15 callbacks suppressed
[  420.045721][T19370] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  420.107822][T19372] lo speed is unknown, defaulting to 1000
[  420.111415][T19372] wg1 speed is unknown, defaulting to 1000
[  420.426057][T19385] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3390'.
[  420.462710][T19387] netlink: 277 bytes leftover after parsing attributes in process `syz.1.3391'.
[  420.500229][T19389] netlink: 'syz.1.3392': attribute type 1 has an invalid length.
[  420.526195][T19389] 8021q: adding VLAN 0 to HW filter on device bond23
[  420.630757][T19392] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3393'.
[  420.634313][T19392] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  420.751610][T19407] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3396'.
[  420.784917][T19407] netlink: 'syz.1.3396': attribute type 1 has an invalid length.
[  420.863167][T19418] veth11: entered promiscuous mode
[  420.899533][T19407] erspan0: entered allmulticast mode
[  420.972273][T19426] netlink: 'syz.0.3401': attribute type 2 has an invalid length.
[  421.200792][T19443] netlink: 'syz.1.3407': attribute type 3 has an invalid length.
[  422.150331][T19456] netlink: 'syz.1.3410': attribute type 2 has an invalid length.
[  422.153267][T19456] netlink: 'syz.1.3410': attribute type 8 has an invalid length.
[  422.219251][T19466] lo speed is unknown, defaulting to 1000
[  422.222041][T19466] wg1 speed is unknown, defaulting to 1000
[  422.376408][T19474] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  422.425629][T19474] lo speed is unknown, defaulting to 1000
[  422.428729][T19474] wg1 speed is unknown, defaulting to 1000
[  422.688710][T19485] netlink: 'syz.0.3415': attribute type 83 has an invalid length.
[  423.045148][T19506] openvswitch: netlink: Key type 8208 is out of range max 32
[  423.131316][T19515] lo speed is unknown, defaulting to 1000
[  423.134995][T19515] wg1 speed is unknown, defaulting to 1000
[  423.172969][T19519] macsec1: entered promiscuous mode
[  423.174916][T19519] macsec1: entered allmulticast mode
[  423.281445][T19526] netlink: 'syz.2.3426': attribute type 3 has an invalid length.
[  423.382709][T19528] netlink: 'syz.0.3430': attribute type 30 has an invalid length.
[  423.583195][T19537] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1550) !
[  423.624799][T19539] netlink: 'syz.0.3433': attribute type 96 has an invalid length.
[  424.172712][T19555] lo speed is unknown, defaulting to 1000
[  424.179085][T19555] wg1 speed is unknown, defaulting to 1000
[  424.219909][T19557] netlink: 'syz.2.3439': attribute type 1 has an invalid length.
[  424.253354][T19557] 8021q: adding VLAN 0 to HW filter on device bond18
[  424.272595][T19557] veth15: entered promiscuous mode
[  424.286408][T19557] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  424.330260][T19563] netlink: 'syz.2.3440': attribute type 5 has an invalid length.
[  424.339829][T19561] __nla_validate_parse: 12 callbacks suppressed
[  424.339839][T19561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3441'.
[  424.437552][T19574] netlink: 'syz.1.3444': attribute type 1 has an invalid length.
[  424.440132][T19574] netlink: 15 bytes leftover after parsing attributes in process `syz.1.3444'.
[  424.445797][T19574] netlink: 'syz.1.3444': attribute type 1 has an invalid length.
[  424.456357][T19574] netlink: 15 bytes leftover after parsing attributes in process `syz.1.3444'.
[  424.462040][T19580] netlink: 'syz.2.3445': attribute type 21 has an invalid length.
[  424.469307][T19580] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3445'.
[  424.561437][T19588] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3446'.
[  424.602089][T19592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3449'.
[  424.634344][T19592] netlink: 'syz.0.3449': attribute type 4 has an invalid length.
[  424.690621][T19600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3452'.
[  424.803903][T19608] lo speed is unknown, defaulting to 1000
[  424.808078][T19608] wg1 speed is unknown, defaulting to 1000
[  424.884612][T19620] lo speed is unknown, defaulting to 1000
[  424.892969][T19620] wg1 speed is unknown, defaulting to 1000
[  425.345851][T19656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3466'.
[  425.351314][T19657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3466'.
[  425.575199][T19679] lo speed is unknown, defaulting to 1000
[  425.578423][T19679] wg1 speed is unknown, defaulting to 1000
[  425.637466][T19677] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3473'.
[  425.695904][T19688] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  425.910396][T19708] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  426.117907][T19729] : entered promiscuous mode
[  426.252415][T19740] tipc: Enabled bearer <udp:syz2>, priority 10
[  426.582331][T19750] 8021q: adding VLAN 0 to HW filter on device bond23
[  426.602254][T19753] bond23: (slave veth11): Enslaving as an active interface with a down link
[  426.611648][T19747] lo speed is unknown, defaulting to 1000
[  426.614539][T19747] wg1 speed is unknown, defaulting to 1000
[  426.974754][T19770] xt_limit: Overflow, try lower: 604147548/4200216962
[  427.150638][T19786] tap0: tun_chr_ioctl cmd 1074025677
[  427.153869][T19786] tap0: linktype set to 774
[  427.193407][T19786] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  427.274981][T19798] xt_l2tp: missing protocol rule (udp|l2tpip)
[  428.275699][T19848] validate_nla: 5 callbacks suppressed
[  428.275711][T19848] netlink: 'syz.0.3516': attribute type 12 has an invalid length.
[  428.281561][T19848] netlink: 'syz.0.3516': attribute type 11 has an invalid length.
[  428.432201][T19864] netlink: 'syz.2.3522': attribute type 9 has an invalid length.
[  428.458553][T19862] lo speed is unknown, defaulting to 1000
[  428.461944][T19862] wg1 speed is unknown, defaulting to 1000
[  428.591429][T19879] vxcan1: entered allmulticast mode
[  428.811023][T19893] lo speed is unknown, defaulting to 1000
[  428.814208][T19893] wg1 speed is unknown, defaulting to 1000
[  428.888810][T19911] netlink: 'syz.2.3533': attribute type 4 has an invalid length.
[  428.904495][T19911] lo speed is unknown, defaulting to 1000
[  428.909509][T19911] wg1 speed is unknown, defaulting to 1000
[  429.791990][T19927] lo speed is unknown, defaulting to 1000
[  429.795959][T19927] wg1 speed is unknown, defaulting to 1000
[  429.856754][T19937] openvswitch: : Dropping previously announced user features
[  429.880826][T19940] netlink: 'syz.2.3539': attribute type 1 has an invalid length.
[  429.884001][T19940] netlink: 'syz.2.3539': attribute type 1 has an invalid length.
[  429.970317][T19943] __nla_validate_parse: 19 callbacks suppressed
[  429.970340][T19943] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.3540'.
[  429.980878][T19942] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.3540'.
[  429.982325][T19940] netlink: 'syz.2.3539': attribute type 1 has an invalid length.
[  430.018265][T19940] 8021q: adding VLAN 0 to HW filter on device bond20
[  430.029525][T19940] tipc: Resetting bearer <eth:wlan0>
[  430.081478][T19952] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  430.109834][T19954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3542'.
[  430.214454][T19964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3546'.
[  430.215242][T19963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3546'.
[  430.257536][T19968] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3547'.
[  430.260915][T19968] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3547'.
[  430.264192][T19968] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3547'.
[  430.272659][T19968] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3547'.
[  430.283924][T19968] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3547'.
[  430.308998][T19970] lo speed is unknown, defaulting to 1000
[  430.313706][T19970] wg1 speed is unknown, defaulting to 1000
[  430.804039][T20002] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  430.821450][T20002] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  430.829489][T20004] netlink: 'syz.1.3558': attribute type 1 has an invalid length.
[  430.903864][T20014] openvswitch: netlink: Multiple metadata blocks provided
[  430.907479][T20015] openvswitch: netlink: Multiple metadata blocks provided
[  431.958813][T20064] lo speed is unknown, defaulting to 1000
[  431.961863][T20064] wg1 speed is unknown, defaulting to 1000
[  431.983594][T20066] lo speed is unknown, defaulting to 1000
[  432.018040][T20066] wg1 speed is unknown, defaulting to 1000
[  432.144607][T20077] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  432.156584][T20077] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  432.870063][T20104] netlink: 'syz.1.3583': attribute type 1 has an invalid length.
[  432.928286][T20106] netlink: 'syz.1.3583': attribute type 1 has an invalid length.
[  433.005895][T20111] lo speed is unknown, defaulting to 1000
[  433.010260][T20111] wg1 speed is unknown, defaulting to 1000
[  433.113825][T20120] bond24: (slave vxcan7): The slave device specified does not support setting the MAC address
[  433.118436][T20120] bond24: (slave vxcan7): Error -95 calling set_mac_address
[  433.209061][T20120] macvlan0: entered promiscuous mode
[  433.211350][T20120] macvlan0: entered allmulticast mode
[  433.214247][T20120] bond24: entered promiscuous mode
[  433.219955][T20120] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  433.226472][T20120] bond24: left promiscuous mode
[  433.704354][T20156] ..0: renamed from ..1
[  433.711222][T20156] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  433.715348][T20156] ..0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  433.720918][T20156] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  433.743662][T20158] : entered promiscuous mode
[  433.875096][T20168] validate_nla: 1 callbacks suppressed
[  433.875139][T20168] netlink: 'syz.0.3602': attribute type 4 has an invalid length.
[  434.025793][T20179] netlink: 'syz.2.3607': attribute type 1 has an invalid length.
[  434.028891][T20179] netlink: 'syz.2.3607': attribute type 1 has an invalid length.
[  434.082882][T20182] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'AN
[  434.412590][T20200] smc: net device bond0 applied user defined pnetid SYZ2
[  434.415707][T20200] smc: net device bond0 erased user defined pnetid SYZ2
[  434.536155][T20205] lo speed is unknown, defaulting to 1000
[  434.565538][T20205] wg1 speed is unknown, defaulting to 1000
[  435.072816][T20208] lo speed is unknown, defaulting to 1000
[  435.098968][T20208] wg1 speed is unknown, defaulting to 1000
[  435.360970][T20216] netlink: 'syz.1.3619': attribute type 12 has an invalid length.
[  435.550321][T20221] openvswitch: : Dropping previously announced user features
[  435.622281][T20227] netlink: 'syz.1.3622': attribute type 9 has an invalid length.
[  435.625153][T20227] __nla_validate_parse: 75 callbacks suppressed
[  435.625162][T20227] netlink: 147436 bytes leftover after parsing attributes in process `syz.1.3622'.
[  435.742365][T20238] : entered promiscuous mode
[  435.800698][T20240] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3627'.
[  435.840698][T20242] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3628'.
[  435.861310][T20242] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3628'.
[  435.983683][T20254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3631'.
[  436.099719][T20259] lo speed is unknown, defaulting to 1000
[  436.104158][T20259] wg1 speed is unknown, defaulting to 1000
[  436.340336][T20264] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  436.383402][T20268] openvswitch: : Dropping previously announced user features
[  436.936702][T10429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  436.948338][T10429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  436.975831][ T1089] tipc: Resetting bearer <eth:wlan0>
[  437.036212][T20296] openvswitch: : Dropping previously announced user features
[  437.045866][T20295] lo speed is unknown, defaulting to 1000
[  437.052857][T20295] wg1 speed is unknown, defaulting to 1000
[  437.061107][T20299] netlink: 'syz.2.3643': attribute type 2 has an invalid length.
[  437.075385][T20299] netlink: 'syz.2.3643': attribute type 1 has an invalid length.
[  437.080790][T20299] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3643'.
[  437.084619][T20301] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20001
[  437.086583][T20299] netlink: 'syz.2.3643': attribute type 2 has an invalid length.
[  437.090317][T20299] netlink: 'syz.2.3643': attribute type 1 has an invalid length.
[  437.097229][T20301] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20003
[  437.103792][T20299] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3643'.
[  437.109725][T20299] netlink: 'syz.2.3643': attribute type 2 has an invalid length.
[  437.112786][T20299] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3643'.
[  437.119170][T20299] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3643'.
[  437.122691][T20299] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3643'.
[  437.266443][T20304] lo speed is unknown, defaulting to 1000
[  437.390703][T20306] tipc: Resetting bearer <eth:syzkaller0>
[  437.398002][T20303] tipc: Resetting bearer <eth:syzkaller0>
[  437.400868][T20304] wg1 speed is unknown, defaulting to 1000
[  437.881904][T20343] IPVS: Unknown mcast interface: ipvlan1
[  437.943942][T20345] macvtap1: entered promiscuous mode
[  437.946068][T20345] veth1_to_hsr: entered promiscuous mode
[  437.948703][T20345] macvtap1: entered allmulticast mode
[  437.950789][T20345] veth1_to_hsr: entered allmulticast mode
[  437.962226][T20345] macvtap2: entered promiscuous mode
[  437.964330][T20345] macvtap2: entered allmulticast mode
[  438.009992][T20345] syzkaller1: entered promiscuous mode
[  438.012559][T20345] syzkaller1: entered allmulticast mode
[  439.879678][ T1360] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  446.996847][   T47] page_pool_release_retry() stalled pool shutdown: id 152, 3329 inflight 60 sec
[  474.034163][T20356] validate_nla: 62 callbacks suppressed
[  474.034176][T20356] netlink: 'syz.1.3662': attribute type 1 has an invalid length.
[  474.059843][T20356] 8021q: adding VLAN 0 to HW filter on device bond24
[  474.087952][T20362] __nla_validate_parse: 36 callbacks suppressed
[  474.087972][T20362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3661'.
[  474.178368][T20380] netlink: 'syz.2.3667': attribute type 29 has an invalid length.
[  474.187601][T20380] netlink: 'syz.2.3667': attribute type 29 has an invalid length.
[  474.210323][T20384] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3668'.
[  474.247491][T20386] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3669'.
[  474.293964][T20388] lo speed is unknown, defaulting to 1000
[  474.297115][T20388] wg1 speed is unknown, defaulting to 1000
[  474.326657][T20392] lo speed is unknown, defaulting to 1000
[  474.333669][T20392] wg1 speed is unknown, defaulting to 1000
[  474.482421][T20398] lo speed is unknown, defaulting to 1000
[  474.485209][T20398] wg1 speed is unknown, defaulting to 1000
[  474.572881][T20407] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3674'.
[  474.634776][T20413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3675'.
[  474.637085][T20412] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3675'.
[  474.721913][T20418] lo speed is unknown, defaulting to 1000
[  474.730273][T20418] wg1 speed is unknown, defaulting to 1000
[  474.912902][T20440] netlink: 'syz.2.3683': attribute type 39 has an invalid length.
[  475.110455][T20444] lo speed is unknown, defaulting to 1000
[  475.113924][T20444] wg1 speed is unknown, defaulting to 1000
[  475.164603][T20448] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3686'.
[  475.178604][T20446] !: left promiscuous mode
[  475.186079][T20446] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  475.199068][T20446] bridge9: left promiscuous mode
[  475.201200][T20446] bridge9: left allmulticast mode
[  475.204008][T20446] macsec1: left promiscuous mode
[  475.207182][T20446] macsec1: left allmulticast mode
[  475.211477][T20446] veth1_to_hsr: left allmulticast mode
[  475.213817][T20446] veth1_to_hsr: left promiscuous mode
[  475.217090][T20446] macvtap1: left promiscuous mode
[  475.219621][T20446] macvtap1: left allmulticast mode
[  475.220389][T20453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3687'.
[  475.368907][T20465] openvswitch: netlink: Message has 113 unknown bytes.
[  475.550356][T20476] netlink: 'syz.1.3692': attribute type 2 has an invalid length.
[  475.553984][T20476] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3692'.
[  475.697909][T20483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3694'.
[  475.921301][T20490] lo speed is unknown, defaulting to 1000
[  475.925207][T20490] wg1 speed is unknown, defaulting to 1000
[  476.554528][T20522] netlink: 'syz.1.3705': attribute type 12 has an invalid length.
[  477.278063][T20541] lo speed is unknown, defaulting to 1000
[  477.281993][T20541] wg1 speed is unknown, defaulting to 1000
[  477.533948][T20547] bond11: option mode: unable to set because the bond device has slaves
[  477.614521][T20551] syzkaller1: entered promiscuous mode
[  477.617281][T20551] syzkaller1: entered allmulticast mode
[  477.911950][T20562] syzkaller1: entered promiscuous mode
[  477.914393][T20562] syzkaller1: entered allmulticast mode
[  478.037054][T20573] netlink: 'syz.2.3721': attribute type 10 has an invalid length.
[  478.764819][T20636] tipc: Resetting bearer <eth:wlan0>
[  478.934151][T20649] vxcan1: entered allmulticast mode
[  478.936772][T20649] vxcan1: left allmulticast mode
[  479.550376][T20679] lo speed is unknown, defaulting to 1000
[  479.554495][T20679] wg1 speed is unknown, defaulting to 1000
[  479.640573][T20679] netlink: 'syz.1.3741': attribute type 1 has an invalid length.
[  479.644070][T20679] __nla_validate_parse: 8 callbacks suppressed
[  479.644084][T20679] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3741'.
[  479.980747][T20693] lo speed is unknown, defaulting to 1000
[  479.984867][T20693] wg1 speed is unknown, defaulting to 1000
[  480.022477][T20702] netlink: 'syz.1.3746': attribute type 1 has an invalid length.
[  480.055341][T20702] 8021q: adding VLAN 0 to HW filter on device bond25
[  480.088547][T20702] 8021q: adding VLAN 0 to HW filter on device bond25
[  480.091661][T20702] bond25: (slave vxcan5): The slave device specified does not support setting the MAC address
[  480.098347][T20702] bond25: (slave vxcan5): Error -95 calling set_mac_address
[  480.127835][T20704] veth15: entered promiscuous mode
[  480.131920][T20704] bond25: (slave veth15): Enslaving as an active interface with a down link
[  480.148150][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  480.150973][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  480.275349][T20707] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  480.314501][T20714] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  480.317513][T20714] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  480.320697][T20714] tipc: Resetting bearer <eth:syzkaller0>
[  480.335487][T20716] netlink: 'syz.1.3748': attribute type 13 has an invalid length.
[  480.340747][T20716] netlink: 'syz.1.3748': attribute type 17 has an invalid length.
[  480.361900][T20716] erspan0: left allmulticast mode
[  480.389106][T20716] 8021q: adding VLAN 0 to HW filter on device team0
[  480.464018][T20716] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  480.469187][ T5912] lo speed is unknown, defaulting to 1000
[  480.471151][ T5912] syz2: Port: 1 Link ACTIVE
[  480.474699][T20717] xfrm0: entered promiscuous mode
[  480.479811][T20717] xfrm0: entered allmulticast mode
[  480.506580][T20718] lo speed is unknown, defaulting to 1000
[  480.509291][T20718] wg1 speed is unknown, defaulting to 1000
[  480.532693][T20720] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3750'.
[  480.585498][T20726] openvswitch: netlink: EtherType 50a is less than min 600
[  481.142406][T20730] lo speed is unknown, defaulting to 1000
[  481.146229][T20730] wg1 speed is unknown, defaulting to 1000
[  481.806865][T20748] lo speed is unknown, defaulting to 1000
[  481.811510][T20748] wg1 speed is unknown, defaulting to 1000
[  482.009597][T20759] lo speed is unknown, defaulting to 1000
[  482.012421][T20759] wg1 speed is unknown, defaulting to 1000
[  482.308925][T20767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3762'.
[  482.525611][T20794] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3770'.
[  482.571548][T20796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3771'.
[  482.582102][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  482.586121][T20796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3771'.
[  482.589973][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  482.593326][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  482.808056][T20824] dvmrp8: entered allmulticast mode
[  482.823541][T20823] lo speed is unknown, defaulting to 1000
[  482.828304][T20823] wg1 speed is unknown, defaulting to 1000
[  482.992198][T20836] lo speed is unknown, defaulting to 1000
[  482.995391][T20836] wg1 speed is unknown, defaulting to 1000
[  483.151175][T20823] dvmrp8: left allmulticast mode
[  483.402506][T20859] lo speed is unknown, defaulting to 1000
[  483.413695][T20859] wg1 speed is unknown, defaulting to 1000
[  483.590312][T20870] lo speed is unknown, defaulting to 1000
[  483.593043][T20870] wg1 speed is unknown, defaulting to 1000
[  483.800778][T20892] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  483.813259][T20892] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  483.843388][T20888] lo speed is unknown, defaulting to 1000
[  483.859143][T20888] wg1 speed is unknown, defaulting to 1000
[  483.871335][T20894] lo speed is unknown, defaulting to 1000
[  483.898370][T20894] wg1 speed is unknown, defaulting to 1000
[  485.197447][T20915] netlink: 'syz.2.3797': attribute type 1 has an invalid length.
[  485.200609][T20915] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3797'.
[  485.309668][T20919] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3799'.
[  485.351572][T20930] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  485.365352][T20930] syzkaller1: entered promiscuous mode
[  485.367908][T20930] syzkaller1: entered allmulticast mode
[  485.396745][T20935] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3804'.
[  485.403121][T20935] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3804'.
[  485.407074][T20935] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3804'.
[  485.418316][T20935] netlink: 11328 bytes leftover after parsing attributes in process `syz.1.3804'.
[  485.547473][T20945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3806'.
[  485.552266][T20945] tipc: Resetting bearer <eth:syzkaller0>
[  485.695427][T20953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3809'.
[  485.735125][T20965] netlink: 'syz.1.3811': attribute type 4 has an invalid length.
[  485.750212][T20959] netlink: 'syz.0.3810': attribute type 8 has an invalid length.
[  485.759807][T20959] netlink: 304 bytes leftover after parsing attributes in process `syz.0.3810'.
[  486.004168][T20998] pim6reg1: entered promiscuous mode
[  486.006049][T20998] pim6reg1: entered allmulticast mode
[  486.135348][T21005] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  486.313419][T21029] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  486.325718][T21032] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  486.384295][T21035] netlink: 'syz.0.3827': attribute type 16 has an invalid length.
[  486.395022][T21037] netlink: 'syz.2.3828': attribute type 7 has an invalid length.
[  486.463984][T21043] netlink: 'syz.0.3831': attribute type 1 has an invalid length.
[  486.508134][T21043] bond25: (slave gretap2): making interface the new active one
[  486.512030][T21043] bond25: (slave gretap2): Enslaving as an active interface with an up link
[  486.571664][T21055] netlink: 'syz.2.3834': attribute type 11 has an invalid length.
[  486.672697][T21063] netlink: 'syz.2.3838': attribute type 1 has an invalid length.
[  486.739034][T21068] lo speed is unknown, defaulting to 1000
[  486.743920][T21068] wg1 speed is unknown, defaulting to 1000
[  486.815598][   T47] IPVS: starting estimator thread 0...
[  486.875400][T21079] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3841'.
[  486.906657][T21073] IPVS: using max 63 ests per chain, 151200 per kthread
[  487.142449][   T13] IPVS: stop unused estimator thread 0...
[  487.283427][T21100] lo speed is unknown, defaulting to 1000
[  487.286867][T21100] wg1 speed is unknown, defaulting to 1000
[  487.325630][T21102] syzkaller1: entered promiscuous mode
[  487.329391][T21102] syzkaller1: entered allmulticast mode
[  487.382111][T21093] hsr_slave_1 (unregistering): left promiscuous mode
[  487.858295][T21136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  488.063227][T21150] netlink: 'syz.0.3861': attribute type 1 has an invalid length.
[  488.111366][T21150] 8021q: adding VLAN 0 to HW filter on device bond26
[  488.155022][T21156] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  488.165783][T21156] syzkaller1: entered promiscuous mode
[  488.168589][T21156] syzkaller1: entered allmulticast mode
[  488.492153][T21170] sctp: [Deprecated]: syz.1.3868 (pid 21170) Use of int in max_burst socket option.
[  488.492153][T21170] Use struct sctp_assoc_value instead
[  489.830914][T21227] netlink: zone id is out of range
[  489.833706][T21227] netlink: zone id is out of range
[  489.838443][T21227] netlink: zone id is out of range
[  489.840055][T21227] netlink: get zone limit has 8 unknown bytes
[  489.988497][T21247] lo speed is unknown, defaulting to 1000
[  489.998242][T21247] wg1 speed is unknown, defaulting to 1000
[  490.043866][T21250] mac80211_hwsim hwsim15 syzkaller0: left promiscuous mode
[  490.047439][T21250] mac80211_hwsim hwsim15 syzkaller0: left allmulticast mode
[  490.050982][T21250] tipc: Resetting bearer <eth:syzkaller0>
[  490.109826][T21258] nbd: must specify at least one socket
[  490.114345][T21258] block nbd2: NBD_DISCONNECT
[  490.120609][T21258] block nbd2: Send disconnect failed -22
[  490.122695][T21258] block nbd2: shutting down sockets
[  490.202825][T21260] lo speed is unknown, defaulting to 1000
[  490.207286][T21260] wg1 speed is unknown, defaulting to 1000
[  490.685245][T21279] __nla_validate_parse: 11 callbacks suppressed
[  490.685258][T21279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3900'.
[  490.785542][T21292] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3902'.
[  490.935210][T21303] geneve4: entered promiscuous mode
[  490.949047][T20501] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  490.955131][T20501] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  490.962037][T20501] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  490.966118][T20501] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  490.972378][T21303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3905'.
[  491.011512][T21309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3906'.
[  491.014303][T21309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3906'.
[  491.102504][T21319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3910'.
[  491.113009][T21318] netlink: 'syz.1.3909': attribute type 3 has an invalid length.
[  491.295067][T21328] lo speed is unknown, defaulting to 1000
[  491.298054][T21328] wg1 speed is unknown, defaulting to 1000
[  491.324997][T21338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3916'.
[  491.347688][T21335] macsec0: entered promiscuous mode
[  491.349683][T21335] macsec0: entered allmulticast mode
[  491.357567][T21341] netlink: 'syz.2.3917': attribute type 33 has an invalid length.
[  491.360474][T21341] netlink: 'syz.2.3917': attribute type 19 has an invalid length.
[  491.363781][T21335] veth1_macvtap: entered allmulticast mode
[  491.365850][T21335] macsec0: left promiscuous mode
[  491.368390][T21335] macsec0: left allmulticast mode
[  491.370444][T21335] veth1_macvtap: left allmulticast mode
[  491.402527][T21335] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  491.407007][T21335] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  491.461826][T21344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3918'.
[  491.488620][T21344] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3918'.
[  491.543794][T21344] lo speed is unknown, defaulting to 1000
[  491.550465][T21344] wg1 speed is unknown, defaulting to 1000
[  491.975627][T21358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3920'.
[  492.087721][T21363] netlink: 'syz.1.3922': attribute type 10 has an invalid length.
[  492.141650][T21365] netlink: 'syz.2.3923': attribute type 83 has an invalid length.
[  492.147861][T21363] !: entered promiscuous mode
[  492.150763][T21363] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  492.412791][T21377] lo speed is unknown, defaulting to 1000
[  492.416031][T21377] wg1 speed is unknown, defaulting to 1000
[  492.789448][T21386] netlink: 'syz.0.3929': attribute type 4 has an invalid length.
[  492.792763][T21387] netlink: 'syz.0.3929': attribute type 4 has an invalid length.
[  493.050181][T21408] netlink: 'syz.1.3933': attribute type 13 has an invalid length.
[  493.053670][T21408] netlink: 'syz.1.3933': attribute type 17 has an invalid length.
[  493.059044][T21408] netlink: 'syz.1.3933': attribute type 27 has an invalid length.
[  493.093008][T21408] lo speed is unknown, defaulting to 1000
[  493.097569][T21408] wg1 speed is unknown, defaulting to 1000
[  493.262659][T21415] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  494.816065][T21498] lo speed is unknown, defaulting to 1000
[  494.819773][T21498] wg1 speed is unknown, defaulting to 1000
[  495.716177][T21525] __nla_validate_parse: 10 callbacks suppressed
[  495.716201][T21525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3964'.
[  495.981440][T21525] lo speed is unknown, defaulting to 1000
[  495.985300][T21525] wg1 speed is unknown, defaulting to 1000
[  496.107110][T21533] tipc: Resetting bearer <eth:syzkaller0>
[  496.131363][T21535] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3967'.
[  496.162222][ T5912] lo speed is unknown, defaulting to 1000
[  496.164446][ T5912] syz2: Port: 1 Link DOWN
[  496.170674][ T5858] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  496.183390][ T5858] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  496.196775][ T5858] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  496.200886][T21536] syzkaller1: entered promiscuous mode
[  496.203182][T21536] syzkaller1: entered allmulticast mode
[  496.348541][T21546] unknown channel width for channel at 909000KHz?
[  496.351207][T21546] unknown channel width for channel at 909000KHz?
[  496.362307][T21546] unknown channel width for channel at 909000KHz?
[  496.528020][T21550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3971'.
[  496.531788][T21553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3971'.
[  496.737998][T21564] lo speed is unknown, defaulting to 1000
[  496.741732][T21564] wg1 speed is unknown, defaulting to 1000
[  496.991251][T21585] lo speed is unknown, defaulting to 1000
[  496.994304][T21585] wg1 speed is unknown, defaulting to 1000
[  497.314607][T21610] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3986'.
[  497.318430][T21610] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3986'.
[  497.323865][T21610] validate_nla: 3 callbacks suppressed
[  497.323884][T21610] netlink: 'syz.1.3986': attribute type 12 has an invalid length.
[  497.333016][T21610] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.3986'.
[  497.403610][T21614] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3988'.
[  497.413509][T21614] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3988'.
[  497.542911][T21629] lo speed is unknown, defaulting to 1000
[  497.550553][T21629] wg1 speed is unknown, defaulting to 1000
[  497.550785][T21626] dvmrp1: tun_chr_ioctl cmd 1074025677
[  497.555157][T21626] dvmrp1: linktype set to 768
[  497.558160][T21631] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3991'.
[  497.730967][T21636] lo speed is unknown, defaulting to 1000
[  497.735163][T21636] wg1 speed is unknown, defaulting to 1000
[  497.835671][T21634] lo speed is unknown, defaulting to 1000
[  497.840032][T21634] wg1 speed is unknown, defaulting to 1000
[  498.006420][T21652] IPVS: set_ctl: invalid protocol: 103 10.1.1.0:20001
[  498.015002][T21652] netlink: 'syz.1.3999': attribute type 3 has an invalid length.
[  498.321979][T21675] lo speed is unknown, defaulting to 1000
[  498.324799][T21675] wg1 speed is unknown, defaulting to 1000
[  498.825031][T21705] lo speed is unknown, defaulting to 1000
[  498.827988][T21705] wg1 speed is unknown, defaulting to 1000
[  499.620572][T21749] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  499.845817][T21761] netlink: 'syz.2.4029': attribute type 83 has an invalid length.
[  499.935526][T21765] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  500.048021][T21769] tun2: tun_chr_ioctl cmd 1074025675
[  500.049706][T21769] tun2: persist enabled
[  500.344968][T21782] lo speed is unknown, defaulting to 1000
[  500.348703][T21782] wg1 speed is unknown, defaulting to 1000
[  501.025976][T21796] netlink: 'syz.0.4041': attribute type 1 has an invalid length.
[  501.036443][T21796] __nla_validate_parse: 15 callbacks suppressed
[  501.036464][T21796] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4041'.
[  501.100167][T21802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4044'.
[  501.148194][T21806] lo speed is unknown, defaulting to 1000
[  501.152107][T21806] wg1 speed is unknown, defaulting to 1000
[  501.295015][T21814] netlink: 'syz.2.4047': attribute type 1 has an invalid length.
[  501.307062][T21814] netlink: 'syz.2.4047': attribute type 1 has an invalid length.
[  501.329847][ T1360] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  501.862361][T21855] lo speed is unknown, defaulting to 1000
[  501.870422][T21855] wg1 speed is unknown, defaulting to 1000
[  501.959658][T21848] syz.0.4058: vmalloc error: size 67112960, failed to allocated page array size 131080, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  501.967121][T21848] CPU: 0 UID: 0 PID: 21848 Comm: syz.0.4058 Not tainted syzkaller #0 PREEMPT(full) 
[  501.967135][T21848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  501.967141][T21848] Call Trace:
[  501.967145][T21848]  <TASK>
[  501.967150][T21848]  dump_stack_lvl+0x189/0x250
[  501.967169][T21848]  ? __pfx_dump_stack_lvl+0x10/0x10
[  501.967179][T21848]  ? __pfx__printk+0x10/0x10
[  501.967192][T21848]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  501.967204][T21848]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  501.967213][T21848]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  501.967224][T21848]  warn_alloc+0x214/0x310
[  501.967241][T21848]  ? __pfx_warn_alloc+0x10/0x10
[  501.967257][T21848]  ? __get_vm_area_node+0x28f/0x300
[  501.967269][T21848]  ? nf_tables_newset+0x132b/0x2530
[  501.967285][T21848]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  501.967311][T21848]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  501.967324][T21848]  ? rcu_is_watching+0x15/0xb0
[  501.967334][T21848]  ? nf_tables_newset+0x132b/0x2530
[  501.967345][T21848]  ? nf_tables_newset+0x132b/0x2530
[  501.967354][T21848]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  501.967367][T21848]  ? nf_tables_newset+0x132b/0x2530
[  501.967378][T21848]  ? nft_table_lookup+0x211/0x230
[  501.967389][T21848]  ? nft_set_lookup+0x128/0x150
[  501.967396][T21848]  ? nft_hash_privsize+0x1f/0xf0
[  501.967408][T21848]  nf_tables_newset+0x132b/0x2530
[  501.967426][T21848]  ? __pfx_nf_tables_newset+0x10/0x10
[  501.967446][T21848]  ? __nla_parse+0x40/0x60
[  501.967459][T21848]  nfnetlink_rcv+0x1132/0x2520
[  501.967483][T21848]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  501.967547][T21848]  ? netlink_deliver_tap+0x2e/0x1b0
[  501.967568][T21848]  netlink_unicast+0x82f/0x9e0
[  501.967581][T21848]  ? __pfx_netlink_unicast+0x10/0x10
[  501.967589][T21848]  ? netlink_sendmsg+0x642/0xb30
[  501.967597][T21848]  ? skb_put+0x11b/0x210
[  501.967611][T21848]  netlink_sendmsg+0x805/0xb30
[  501.967624][T21848]  ? __pfx_netlink_sendmsg+0x10/0x10
[  501.967635][T21848]  ? aa_sock_msg_perm+0xf1/0x1d0
[  501.967645][T21848]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  501.967655][T21848]  ? __pfx_netlink_sendmsg+0x10/0x10
[  501.967664][T21848]  __sock_sendmsg+0x21c/0x270
[  501.967674][T21848]  ____sys_sendmsg+0x505/0x830
[  501.967688][T21848]  ? __pfx_____sys_sendmsg+0x10/0x10
[  501.967702][T21848]  ? import_iovec+0x74/0xa0
[  501.967715][T21848]  ___sys_sendmsg+0x21f/0x2a0
[  501.967726][T21848]  ? __pfx____sys_sendmsg+0x10/0x10
[  501.967754][T21848]  ? __fget_files+0x2a/0x420
[  501.967762][T21848]  ? __fget_files+0x3a0/0x420
[  501.967773][T21848]  __x64_sys_sendmsg+0x19b/0x260
[  501.967785][T21848]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  501.967800][T21848]  ? rcu_is_watching+0x15/0xb0
[  501.967811][T21848]  ? do_syscall_64+0xbe/0x3b0
[  501.967830][T21848]  do_syscall_64+0xfa/0x3b0
[  501.967838][T21848]  ? lockdep_hardirqs_on+0x9c/0x150
[  501.967847][T21848]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  501.967855][T21848]  ? exc_page_fault+0x9f/0xf0
[  501.967864][T21848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  501.967872][T21848] RIP: 0033:0x7f2e16b8ec29
[  501.967882][T21848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  501.967890][T21848] RSP: 002b:00007f2e17a2b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  501.967900][T21848] RAX: ffffffffffffffda RBX: 00007f2e16dd5fa0 RCX: 00007f2e16b8ec29
[  501.967906][T21848] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  501.967911][T21848] RBP: 00007f2e16c11e41 R08: 0000000000000000 R09: 0000000000000000
[  501.967916][T21848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  501.967920][T21848] R13: 00007f2e16dd6038 R14: 00007f2e16dd5fa0 R15: 00007ffee0d93198
[  501.967934][T21848]  </TASK>
[  501.967937][T21848] Mem-Info:
[  502.096001][T21848] active_anon:5061 inactive_anon:0 isolated_anon:0
[  502.096001][T21848]  active_file:1427 inactive_file:38400 isolated_file:0
[  502.096001][T21848]  unevictable:1768 dirty:101 writeback:0
[  502.096001][T21848]  slab_reclaimable:11694 slab_unreclaimable:143956
[  502.096001][T21848]  mapped:18132 shmem:2426 pagetables:975
[  502.096001][T21848]  sec_pagetables:0 bounce:0
[  502.096001][T21848]  kernel_misc_reclaimable:0
[  502.096001][T21848]  free:197103 free_pcp:20198 free_cma:0
[  502.112033][T21848] Node 0 active_anon:12856kB inactive_anon:0kB active_file:3644kB inactive_file:131868kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29820kB dirty:144kB writeback:0kB shmem:4872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6364kB pagetables:1696kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  502.124466][T21848] Node 1 active_anon:7388kB inactive_anon:0kB active_file:2064kB inactive_file:21732kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42708kB dirty:260kB writeback:0kB shmem:4832kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7392kB pagetables:2136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  502.134727][T21848] Node 0 DMA free:6820kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:344kB local_pcp:344kB free_cma:0kB
[  502.144873][T21848] lowmem_reserve[]: 0 811 811 811 811
[  502.147133][T21848] Node 0 DMA32 free:75884kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12856kB inactive_anon:0kB active_file:3644kB inactive_file:131868kB unevictable:3536kB writepending:144kB present:1556484kB managed:830852kB mlocked:0kB bounce:0kB free_pcp:23788kB local_pcp:10580kB free_cma:0kB
[  502.158030][T21848] lowmem_reserve[]: 0 0 0 0 0
[  502.159605][T21848] Node 1 DMA32 free:446636kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:11972kB local_pcp:4kB free_cma:0kB
[  502.169981][T21848] lowmem_reserve[]: 0 0 854 854 854
[  502.171775][T21848] Node 1 Normal free:259072kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7388kB inactive_anon:0kB active_file:2064kB inactive_file:21732kB unevictable:3536kB writepending:260kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:45060kB local_pcp:14988kB free_cma:0kB
[  502.183078][T21848] lowmem_reserve[]: 0 0 0 0 0
[  502.184930][T21848] Node 0 DMA: 5*4kB (UM) 4*8kB (UM) 3*16kB (UM) 4*32kB (UM) 3*64kB (U) 4*128kB (UM) 1*256kB (U) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (M) 0*4096kB = 6820kB
[  502.203002][T21848] Node 0 DMA32: 1546*4kB (UM) 957*8kB (UME) 600*16kB (UME) 306*32kB (UME) 85*64kB (UME) 59*128kB (UM) 24*256kB (UME) 8*512kB (UME) 7*1024kB (UM) 6*2048kB (UM) 0*4096kB = 75920kB
[  502.234549][T21848] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 3*16kB (UM) 5*32kB (UM) 3*64kB (UM) 2*128kB (UM) 4*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 106*4096kB (UM) = 446636kB
[  502.238616][T21874] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4063'.
[  502.245006][T21848] Node 1 Normal: 1077*4kB (UM) 875*8kB (UME) 350*16kB (UME) 297*32kB (UME) 239*64kB (UE) 64*128kB (UME) 15*256kB (UM) 3*512kB (UME) 7*1024kB (UME) 8*2048kB (UME) 44*4096kB (U) = 259052kB
[  502.262930][T21848] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  502.266906][T21848] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  502.270095][T21848] 42253 total pagecache pages
[  502.271651][T21848] 0 pages in swap cache
[  502.276134][T21848] Free swap  = 124996kB
[  502.280854][T21848] Total swap = 124996kB
[  502.295520][T21848] 786301 pages RAM
[  502.297328][T21848] 0 pages HighMem/MovableOnly
[  502.299000][T21848] 241356 pages reserved
[  502.300420][T21848] 0 pages cma reserved
[  502.350231][T21877] netlink: 'syz.1.4065': attribute type 10 has an invalid length.
[  502.353003][T21877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4065'.
[  502.385538][T21879] netlink: 'syz.0.4066': attribute type 4 has an invalid length.
[  503.092640][T21888] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4069'.
[  503.142375][T21890] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4070'.
[  503.269314][T21898] netlink: 'syz.1.4072': attribute type 28 has an invalid length.
[  504.285418][T21935] netlink: 'syz.1.4083': attribute type 1 has an invalid length.
[  504.319226][T21935] 8021q: adding VLAN 0 to HW filter on device bond26
[  504.349733][T21935] veth19: entered promiscuous mode
[  504.354248][T21935] bond26: (slave veth19): Enslaving as an active interface with a down link
[  504.364697][T10429] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  504.378041][T21940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4085'.
[  504.384132][T21940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4085'.
[  504.485187][T21946] veth0_to_bridge: entered promiscuous mode
[  504.501454][T21946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4086'.
[  504.512293][T21941] veth0_to_bridge: left promiscuous mode
[  504.595494][T21957] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4091'.
[  504.821490][T21968] netlink: 'syz.1.4093': attribute type 10 has an invalid length.
[  505.495104][T21971] lo speed is unknown, defaulting to 1000
[  505.499785][T21971] wg1 speed is unknown, defaulting to 1000
[  505.759619][T21987] lo speed is unknown, defaulting to 1000
[  505.775381][T21987] wg1 speed is unknown, defaulting to 1000
[  505.782847][T21993] dvmrp0: left allmulticast mode
[  506.084853][T22018] __nla_validate_parse: 6 callbacks suppressed
[  506.084867][T22018] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4107'.
[  506.209109][T22021] tipc: Resetting bearer <eth:syzkaller0>
[  506.211863][T22016] lo speed is unknown, defaulting to 1000
[  506.215832][T22016] wg1 speed is unknown, defaulting to 1000
[  506.333041][T22027] lo speed is unknown, defaulting to 1000
[  506.338327][T22027] wg1 speed is unknown, defaulting to 1000
[  506.356973][T22031] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4110'.
[  506.360286][T22031] nbd: must specify a size in bytes for the device
[  506.397882][T22031] bond21: entered promiscuous mode
[  506.399827][T22031] bond21: entered allmulticast mode
[  506.402513][T22031] 8021q: adding VLAN 0 to HW filter on device bond21
[  506.610161][T22040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4111'.
[  506.966718][T22047] nbd1: detected capacity change from 0 to 63
[  506.970715][T22051] block nbd1: NBD_DISCONNECT
[  506.972803][T22051] block nbd1: Disconnected due to user request.
[  506.975299][T22051] block nbd1: shutting down sockets
[  506.991667][    C0] blk_print_req_error: 138 callbacks suppressed
[  506.991683][    C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  506.997692][    C0] buffer_io_error: 138 callbacks suppressed
[  506.997712][    C0] Buffer I/O error on dev nbd1, logical block 0, async page read
[  507.004841][    C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  507.008522][    C0] Buffer I/O error on dev nbd1, logical block 1, async page read
[  507.011823][    C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  507.015533][    C0] Buffer I/O error on dev nbd1, logical block 2, async page read
[  507.018929][    C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  507.022459][    C0] Buffer I/O error on dev nbd1, logical block 3, async page read
[  507.027859][T21478] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  507.032314][T21478] Buffer I/O error on dev nbd1, logical block 0, async page read
[  507.035654][T21478] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  507.039959][T21478] Buffer I/O error on dev nbd1, logical block 1, async page read
[  507.043973][T21478] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  507.050288][T21478] Buffer I/O error on dev nbd1, logical block 2, async page read
[  507.053909][T21478] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  507.057857][T21478] Buffer I/O error on dev nbd1, logical block 3, async page read
[  507.061490][T21478] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  507.065099][T21478] Buffer I/O error on dev nbd1, logical block 0, async page read
[  507.068938][T21478] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  507.072744][T21478] Buffer I/O error on dev nbd1, logical block 1, async page read
[  507.080741][T21478] ldm_validate_partition_table(): Disk read failed.
[  507.085086][T21478] Dev nbd1: unable to read RDB block 0
[  507.089912][T21478]  nbd1: unable to read partition table
[  507.094471][T22047] bond27: entered promiscuous mode
[  507.102224][T22047] bond27: entered allmulticast mode
[  507.104238][T21478] ldm_validate_partition_table(): Disk read failed.
[  507.108290][T22047] 8021q: adding VLAN 0 to HW filter on device bond27
[  507.109880][T21478] Dev nbd1: unable to read RDB block 0
[  507.115344][T21478]  nbd1: unable to read partition table
[  507.182742][T22059] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4115'.
[  507.239798][T22063] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4117'.
[  507.300599][T22065] netlink: 268 bytes leftover after parsing attributes in process `syz.1.4118'.
[  507.305032][T22066] netlink: 268 bytes leftover after parsing attributes in process `syz.1.4118'.
[  507.320078][ T5911] page_pool_release_retry() stalled pool shutdown: id 152, 3329 inflight 120 sec
[  507.550749][T22081] lo speed is unknown, defaulting to 1000
[  507.554031][T22081] wg1 speed is unknown, defaulting to 1000
[  507.611043][T22078] lo speed is unknown, defaulting to 1000
[  507.625661][T22078] wg1 speed is unknown, defaulting to 1000
[  508.396937][T22117] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4133'.
[  508.419842][T22128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4135'.
[  508.553029][T22137] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4138'.
[  508.624730][T22143] veth18: entered promiscuous mode
[  508.626934][T22143] veth18: entered allmulticast mode
[  508.840345][T22155] lo speed is unknown, defaulting to 1000
[  508.844243][T22155] wg1 speed is unknown, defaulting to 1000
[  509.152180][T22162] netlink: 'syz.1.4148': attribute type 1 has an invalid length.
[  509.155208][T22162] netlink: 'syz.1.4148': attribute type 2 has an invalid length.
[  509.158623][T22162] netlink: 'syz.1.4148': attribute type 1 has an invalid length.
[  509.359961][T22174] lo speed is unknown, defaulting to 1000
[  509.363525][T22174] wg1 speed is unknown, defaulting to 1000
[  509.451839][T22174] syzkaller1: entered promiscuous mode
[  509.453678][T22174] syzkaller1: entered allmulticast mode
[  509.467473][T22181] ..1: renamed from ..0
[  509.470974][T22181] ..1: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  509.475537][T22181] ..1: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  509.479555][T22181] ..1: entered allmulticast mode
[  509.481324][T22181] hsr_slave_0: entered allmulticast mode
[  509.483095][T22181] hsr_slave_1: entered allmulticast mode
[  509.485881][T22181] A link change request failed with some changes committed already. Interface ..1 may have been left with an inconsistent configuration, please check.
[  509.771181][T22184] lo speed is unknown, defaulting to 1000
[  509.775203][T22184] wg1 speed is unknown, defaulting to 1000
[  511.339004][T22242] __nla_validate_parse: 6 callbacks suppressed
[  511.339017][T22242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4170'.
[  511.357973][T22255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4172'.
[  511.393081][T22261] netlink: 'syz.1.4174': attribute type 1 has an invalid length.
[  511.438584][T22261] bond28: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  511.452090][T20501] bond28: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  511.462799][T22261] 8021q: adding VLAN 0 to HW filter on device bond28
[  511.525795][T22266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4174'.
[  511.546710][T22261] veth21: entered promiscuous mode
[  511.571149][   T12] bond28: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  511.623993][T22270] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4177'.
[  511.643196][T22270] vlan0: entered promiscuous mode
[  511.645327][T22270] vlan0: entered allmulticast mode
[  511.651850][T22268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4176'.
[  511.656245][T22268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4176'.
[  511.672751][T22272] lo speed is unknown, defaulting to 1000
[  511.677225][T22272] wg1 speed is unknown, defaulting to 1000
[  511.710992][T22268] netlink: 'syz.2.4176': attribute type 10 has an invalid length.
[  511.714348][T22270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4177'.
[  511.720017][T22268] bond0: (slave wlan1): refused to change device type
[  511.821806][T22268] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  511.826029][T22268] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  512.132870][T22294] lo speed is unknown, defaulting to 1000
[  512.137017][T22294] wg1 speed is unknown, defaulting to 1000
[  512.511004][T22318] erspan0: left promiscuous mode
[  512.526603][T22320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4190'.
[  512.537953][T22318] 8021q: adding VLAN 0 to HW filter on device bond0
[  512.538054][   T12] bond0: (slave wlan1): interface is now down
[  512.545408][T22318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  512.558845][T20501] bond0: (slave wlan1): interface is now down
[  512.570264][T20501] bond0: now running without any active interface!
[  512.659611][T22330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4194'.
[  512.698109][T22330] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4194'.
[  512.709256][T22332] lo speed is unknown, defaulting to 1000
[  512.712311][T22332] wg1 speed is unknown, defaulting to 1000
[  512.761415][ T5912] IPVS: starting estimator thread 0...
[  512.866680][T22337] IPVS: using max 36 ests per chain, 86400 per kthread
[  513.064409][   T12] IPVS: stop unused estimator thread 0...
[  513.114166][T22353] syzkaller1: entered promiscuous mode
[  513.118525][T22353] syzkaller1: entered allmulticast mode
[  513.411380][T22368] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  513.415207][T22368] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  516.553344][T22384] __nla_validate_parse: 34 callbacks suppressed
[  516.553362][T22384] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4209'.
[  516.564793][T22384] bond0: Device is already in use.
[  516.599790][T22385] lo speed is unknown, defaulting to 1000
[  516.603826][T22385] wg1 speed is unknown, defaulting to 1000
[  516.683496][T22394] ip6gre3: entered allmulticast mode
[  516.834704][T22397] lo speed is unknown, defaulting to 1000
[  516.844944][T22397] wg1 speed is unknown, defaulting to 1000
[  517.082612][T22409] lo speed is unknown, defaulting to 1000
[  517.086848][T22411] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4215'.
[  517.090465][T22411] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4215'.
[  517.094055][T22411] netlink: 'syz.0.4215': attribute type 4 has an invalid length.
[  517.099844][T22409] wg1 speed is unknown, defaulting to 1000
[  517.127713][T22415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4216'.
[  517.174835][T22415] 8021q: adding VLAN 0 to HW filter on device bond27
[  517.253090][   T12] bond0 (unregistering): Released all slaves
[  517.362803][T22426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4219'.
[  517.369659][T22426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4219'.
[  517.380003][T22426] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4219'.
[  517.384006][T22426] sch_tbf: burst 0 is lower than device lo mtu (81) !
[  517.621501][T20501] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  517.920587][T22445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4223'.
[  517.976843][T22445] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4223'.
[  518.161253][T22452] lo speed is unknown, defaulting to 1000
[  518.165010][T22452] wg1 speed is unknown, defaulting to 1000
[  518.458020][T22464] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  518.461154][T22464] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  518.593312][T22466] lo speed is unknown, defaulting to 1000
[  518.598022][T22466] wg1 speed is unknown, defaulting to 1000
[  518.618226][T22476] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4230'.
[  518.802759][T22484] lo speed is unknown, defaulting to 1000
[  518.818835][T22484] wg1 speed is unknown, defaulting to 1000
[  518.860821][T22491] netlink: 'syz.2.4234': attribute type 1 has an invalid length.
[  518.900096][T22491] bond22: entered promiscuous mode
[  518.902462][T22491] 8021q: adding VLAN 0 to HW filter on device bond22
[  518.918829][T22491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  518.921545][T22491] IPv6: NLM_F_CREATE should be set when creating new route
[  518.923881][T22491] IPv6: NLM_F_CREATE should be set when creating new route
[  518.933453][T22491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  518.978464][T22491] 8021q: adding VLAN 0 to HW filter on device bond22
[  518.980909][T22491] bond22: (slave wireguard0): The slave device specified does not support setting the MAC address
[  518.986081][T22491] bond22: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  519.001989][T22491] bond22: (slave wireguard0): making interface the new active one
[  519.005350][T22491] wireguard0: entered promiscuous mode
[  519.009775][T22491] bond22: (slave wireguard0): Enslaving as an active interface with an up link
[  519.248483][T22505] lo speed is unknown, defaulting to 1000
[  519.252536][T22505] wg1 speed is unknown, defaulting to 1000
[  519.583568][T22524] lo speed is unknown, defaulting to 1000
[  519.589810][T22524] wg1 speed is unknown, defaulting to 1000
[  519.651667][T22534] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  519.693033][T22532] lo speed is unknown, defaulting to 1000
[  519.698053][T22532] wg1 speed is unknown, defaulting to 1000
[  519.859989][T22538] veth1_macvtap: entered allmulticast mode
[  519.862536][T22538] veth1_macvtap: entered promiscuous mode
[  519.865227][T22538] macsec0: left promiscuous mode
[  519.867774][T22538] veth1_macvtap: left promiscuous mode
[  519.870442][T22538] macsec0: left allmulticast mode
[  519.872601][T22538] veth1_macvtap: left allmulticast mode
[  519.907168][T22538] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  519.911416][T22538] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  520.157510][T22551] netlink: 'syz.0.4248': attribute type 11 has an invalid length.
[  520.272496][T22555] netlink: 'syz.0.4250': attribute type 1 has an invalid length.
[  520.637175][T22570] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  520.693883][T22574] openvswitch: netlink: Key type 310 is out of range max 32
[  520.740927][T22575] lo speed is unknown, defaulting to 1000
[  520.745213][T22575] wg1 speed is unknown, defaulting to 1000
[  521.704046][T22593] __nla_validate_parse: 8 callbacks suppressed
[  521.704068][T22593] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4261'.
[  521.724724][T22593] syzkaller1: entered promiscuous mode
[  521.727789][T22593] syzkaller1: entered allmulticast mode
[  521.874404][T22598] lo speed is unknown, defaulting to 1000
[  521.879157][T22598] wg1 speed is unknown, defaulting to 1000
[  521.965996][T22601] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:20001
[  522.145409][T22609] lo speed is unknown, defaulting to 1000
[  522.160860][T22609] wg1 speed is unknown, defaulting to 1000
[  522.440532][T22613] lo speed is unknown, defaulting to 1000
[  522.443938][T22613] wg1 speed is unknown, defaulting to 1000
[  522.541406][T22613] netlink: 'syz.0.4265': attribute type 16 has an invalid length.
[  522.544747][T22613] netlink: 'syz.0.4265': attribute type 17 has an invalid length.
[  522.572839][T22613] IPv6: NLM_F_REPLACE set, but no existing node found!
[  522.871316][T22619] netlink: 'syz.1.4267': attribute type 9 has an invalid length.
[  522.972377][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  522.974895][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  523.045571][T22626] netlink: 'syz.1.4271': attribute type 1 has an invalid length.
[  523.049407][T22626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4271'.
[  523.052475][T22626] netlink: 45 bytes leftover after parsing attributes in process `syz.1.4271'.
[  523.064836][T22626] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4271'.
[  523.408303][T22657] lo speed is unknown, defaulting to 1000
[  523.437421][T22657] wg1 speed is unknown, defaulting to 1000
[  523.707191][T22676] netem: change failed
[  523.935976][T22691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4292'.
[  523.981844][T22698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4293'.
[  523.987269][T22698] netlink: 'syz.0.4293': attribute type 5 has an invalid length.
[  524.070404][T22702] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4295'.
[  524.075433][T22702] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4295'.
[  524.179076][T22704] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  524.559560][T22711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4298'.
[  524.563684][T22711] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  524.942622][T22716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4299'.
[  526.995884][T22711] lo speed is unknown, defaulting to 1000
[  527.000866][T22711] wg1 speed is unknown, defaulting to 1000
[  527.046608][T22725] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4302'.
[  527.049075][T22723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4301'.
[  527.055505][T22723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4301'.
[  527.059153][T22723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4301'.
[  527.063548][T22723] openvswitch: netlink: ct_state flags 7fffffff unsupported
[  527.435658][T22742] siw: device registration error -23
[  527.486238][T22745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4308'.
[  527.529374][T22747] tipc: Resetting bearer <eth:syzkaller0>
[  527.601407][T22751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4310'.
[  527.607979][T22752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4311'.
[  527.643245][T22752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4311'.
[  528.152865][T22796] lo speed is unknown, defaulting to 1000
[  528.157537][T22796] wg1 speed is unknown, defaulting to 1000
[  528.326904][T22804] lo speed is unknown, defaulting to 1000
[  528.332051][T22804] wg1 speed is unknown, defaulting to 1000
[  528.363487][T22805] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4324'.
[  528.606107][T22816] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4327'.
[  528.924478][T22832] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  528.927633][T22840] siw: device registration error -23
[  529.231897][T22865] netlink: 'syz.1.4341': attribute type 9 has an invalid length.
[  529.234770][ T5858] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  529.241184][ T5858] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  529.253761][ T5858] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  529.258275][ T5858] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  529.263217][T22865] tipc: Resetting bearer <eth:syzkaller0>
[  529.400962][T22877] netem: change failed
[  529.405280][T22877] mac80211_hwsim hwsim15 wlan0: entered allmulticast mode
[  529.432598][T22872] netlink: 'syz.2.4342': attribute type 4 has an invalid length.
[  529.506772][T22883] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  529.509466][T22883] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  529.603814][T22892] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  529.612878][T22892] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode
[  529.620965][T22892] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode
[  529.714102][T22902] tipc: Bearer <eth:gre0>: already 2 bearers with priority 10
[  529.717816][T22902] tipc: Bearer <eth:gre0>: trying with adjusted priority
[  529.720874][T22902] tipc: Enabling of bearer <eth:gre0> rejected, max 3 bearers permitted
[  529.757352][T22903] lo speed is unknown, defaulting to 1000
[  529.760697][T22901] lo speed is unknown, defaulting to 1000
[  529.762038][T22906] netlink: 'syz.2.4350': attribute type 1 has an invalid length.
[  529.763341][T22903] wg1 speed is unknown, defaulting to 1000
[  529.771671][T22901] wg1 speed is unknown, defaulting to 1000
[  529.947370][T22912] lo speed is unknown, defaulting to 1000
[  529.950923][T22912] wg1 speed is unknown, defaulting to 1000
[  529.994676][T22916] lo speed is unknown, defaulting to 1000
[  530.001222][T22916] wg1 speed is unknown, defaulting to 1000
[  530.407882][T22932] netlink: 'syz.1.4358': attribute type 2 has an invalid length.
[  530.418925][T22932] k*: entered promiscuous mode
[  530.456049][T22932] 8021q: adding VLAN 0 to HW filter on device team0
[  530.461355][T22932] !: left promiscuous mode
[  530.469688][T22932] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  530.476042][   T47] lo speed is unknown, defaulting to 1000
[  530.479180][   T47] syz2: Port: 1 Link ACTIVE
[  530.919093][T22951] netlink: 'syz.2.4363': attribute type 4 has an invalid length.
[  530.975668][T22961] lo speed is unknown, defaulting to 1000
[  530.978945][T22961] wg1 speed is unknown, defaulting to 1000
[  531.135137][T22966] syzkaller1: entered promiscuous mode
[  531.144111][T22966] syzkaller1: entered allmulticast mode
[  531.227771][T22971] lo speed is unknown, defaulting to 1000
[  531.235368][T22971] wg1 speed is unknown, defaulting to 1000
[  531.285831][T22973] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:18
[  532.565484][T23012] dvmrp8: entered allmulticast mode
[  532.595949][T23012] lo speed is unknown, defaulting to 1000
[  532.601722][T23012] wg1 speed is unknown, defaulting to 1000
[  532.689082][T23022] netlink: 'syz.1.4380': attribute type 1 has an invalid length.
[  532.730831][T23013] dvmrp8: left allmulticast mode
[  532.844580][T23032] netlink: 'syz.1.4384': attribute type 1 has an invalid length.
[  532.872743][T23027] lo speed is unknown, defaulting to 1000
[  532.879144][T23027] wg1 speed is unknown, defaulting to 1000
[  533.282612][T23062] lo speed is unknown, defaulting to 1000
[  533.286061][T23062] wg1 speed is unknown, defaulting to 1000
[  533.331133][T23067] macsec0: entered promiscuous mode
[  533.333220][T23067] macsec0: entered allmulticast mode
[  533.347614][T23067] veth1_macvtap: entered allmulticast mode
[  533.350905][T23067] macsec0: left promiscuous mode
[  533.353123][T23067] macsec0: left allmulticast mode
[  533.355120][T23067] veth1_macvtap: left allmulticast mode
[  533.388182][T23067] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  533.398110][T23073] __nla_validate_parse: 11 callbacks suppressed
[  533.398128][T23073] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4391'.
[  533.409374][T23067] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  533.483921][T23081] netlink: 'syz.2.4393': attribute type 3 has an invalid length.
[  533.566121][T23092] netlink: 'syz.2.4396': attribute type 1 has an invalid length.
[  533.875245][T23116] lo speed is unknown, defaulting to 1000
[  533.879908][T23116] wg1 speed is unknown, defaulting to 1000
[  533.918700][T23118] netlink: 'syz.0.4403': attribute type 4 has an invalid length.
[  534.041432][T23129] vlan0: entered allmulticast mode
[  534.043200][T23129] bridge_slave_0: entered allmulticast mode
[  534.078100][T23131] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4407'.
[  534.217736][T23132] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4406'.
[  534.222288][T23132] bond0: Device is already in use.
[  534.311763][T23144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4409'.
[  534.407683][T23150] lo speed is unknown, defaulting to 1000
[  534.410806][T23150] wg1 speed is unknown, defaulting to 1000
[  534.690766][T23154] C: entered promiscuous mode
[  534.692782][T23154] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  535.023268][T23191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4422'.
[  535.070200][T23191] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4422'.
[  535.074078][T23191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4422'.
[  535.091416][T23191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4422'.
[  535.356364][T23201] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4424'.
[  535.404453][T23201] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4424'.
[  535.524897][T23207] netlink: 'syz.0.4426': attribute type 1 has an invalid length.
[  535.851347][T23215] lo speed is unknown, defaulting to 1000
[  535.855297][T23215] wg1 speed is unknown, defaulting to 1000
[  536.016867][T23219] lo speed is unknown, defaulting to 1000
[  536.019538][T23219] wg1 speed is unknown, defaulting to 1000
[  536.121686][T23225] lo speed is unknown, defaulting to 1000
[  536.125491][T23225] wg1 speed is unknown, defaulting to 1000
[  536.267054][T23229] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  536.270252][T23229] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  536.361767][T23236] netlink: 'syz.2.4436': attribute type 1 has an invalid length.
[  536.384224][T23236] 8021q: adding VLAN 0 to HW filter on device bond23
[  536.982469][T23283] 8021q: adding VLAN 0 to HW filter on device bond24
[  536.995573][T23283] macsec2: entered promiscuous mode
[  536.997769][T23283] bond24: entered promiscuous mode
[  536.999413][T23283] macsec2: entered allmulticast mode
[  537.001047][T23283] bond24: entered allmulticast mode
[  537.004332][T23283] bond24: left allmulticast mode
[  537.008534][T23283] bond24: left promiscuous mode
[  537.111991][T23293] tc_dump_action: action bad kind
[  537.178030][T23299] lo speed is unknown, defaulting to 1000
[  537.181616][T23299] wg1 speed is unknown, defaulting to 1000
[  537.264881][T23306] syzkaller1: entered promiscuous mode
[  537.269988][T23306] syzkaller1: entered allmulticast mode
[  538.295427][T23340] lo speed is unknown, defaulting to 1000
[  538.299870][T23340] wg1 speed is unknown, defaulting to 1000
[  538.425020][T23344] __nla_validate_parse: 14 callbacks suppressed
[  538.425038][T23344] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4463'.
[  538.440736][T23356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4465'.
[  538.544383][T23363] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4467'.
[  538.579777][T23365] lo speed is unknown, defaulting to 1000
[  538.583611][T23365] wg1 speed is unknown, defaulting to 1000
[  538.743837][T23379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4472'.
[  538.973145][T23392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4474'.
[  540.376757][T23445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4488'.
[  540.450997][T23457] netlink: 'syz.1.4491': attribute type 5 has an invalid length.
[  540.476900][T23454] block nbd1: server does not support multiple connections per device.
[  540.480586][T23454] block nbd1: shutting down sockets
[  540.579994][T23468] netlink: 'syz.2.4493': attribute type 1 has an invalid length.
[  540.765490][T23483] syzkaller1: entered promiscuous mode
[  540.770439][T23483] syzkaller1: entered allmulticast mode
[  540.776825][T23483] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4498'.
[  541.052072][T23496] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4501'.
[  541.067447][T23496] bond0: (slave rose0): Releasing backup interface
[  541.155445][T23499] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  541.159837][T23501] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4502'.
[  541.164534][T23499] tipc: Resetting bearer <eth:syzkaller0>
[  541.363011][T23517] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4507'.
[  541.396116][T23519] netlink: 'syz.0.4508': attribute type 1 has an invalid length.
[  541.432756][T23521] lo speed is unknown, defaulting to 1000
[  541.435684][T23521] wg1 speed is unknown, defaulting to 1000
[  541.500062][T23521] IPVS: set_ctl: invalid protocol: 225 127.0.0.1:21
[  541.502524][T23521] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004
[  541.667210][T23545] C: left promiscuous mode
[  541.680725][T23545] ..1: left allmulticast mode
[  541.682303][T23545] hsr_slave_0: left allmulticast mode
[  541.692304][T23545] geneve4: left promiscuous mode
[  542.424857][T23584] lo speed is unknown, defaulting to 1000
[  542.428706][T23584] wg1 speed is unknown, defaulting to 1000
[  542.732930][T23591] lo speed is unknown, defaulting to 1000
[  542.736497][T23591] wg1 speed is unknown, defaulting to 1000
[  542.861541][T23605] openvswitch: : Dropping previously announced user features
[  543.378449][T23631] lo speed is unknown, defaulting to 1000
[  543.382499][T23631] wg1 speed is unknown, defaulting to 1000
[  543.881893][T23644] __nla_validate_parse: 7 callbacks suppressed
[  543.881912][T23644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4542'.
[  543.901276][T23644] vxcan1 (unregistering): left allmulticast mode
[  544.165324][T23656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4546'.
[  544.209872][T23659] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4547'.
[  544.215804][T23651] netlink: 'syz.0.4544': attribute type 1 has an invalid length.
[  544.444898][T23676] lo speed is unknown, defaulting to 1000
[  544.448822][T23676] wg1 speed is unknown, defaulting to 1000
[  544.481992][T23679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4553'.
[  544.658332][T23686] netlink: 208 bytes leftover after parsing attributes in process `syz.2.4555'.
[  544.661396][T23686] netlink: 208 bytes leftover after parsing attributes in process `syz.2.4555'.
[  544.664240][T23687] netlink: 208 bytes leftover after parsing attributes in process `syz.2.4555'.
[  544.669087][T23687] netlink: 208 bytes leftover after parsing attributes in process `syz.2.4555'.
[  544.708132][T23686] netlink: 'syz.2.4555': attribute type 16 has an invalid length.
[  544.711258][T23686] netlink: 'syz.2.4555': attribute type 17 has an invalid length.
[  544.732734][T23687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4555'.
[  544.737113][T23686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4555'.
[  544.940362][T23704] lo speed is unknown, defaulting to 1000
[  544.944026][T23704] wg1 speed is unknown, defaulting to 1000
[  546.182385][T23762] dvmrp1: entered allmulticast mode
[  546.280854][T23769] lo speed is unknown, defaulting to 1000
[  546.869215][T23821] lo speed is unknown, defaulting to 1000
[  546.992042][T23831] lo speed is unknown, defaulting to 1000
[  547.144805][T23838] openvswitch: : Dropping previously announced user features
[  547.208129][T23840] netlink: 'syz.1.4594': attribute type 4 has an invalid length.
[  547.313421][T23842] netlink: 'syz.1.4595': attribute type 4 has an invalid length.
[  547.992443][T23863] netlink: 'syz.2.4602': attribute type 8 has an invalid length.
[  548.013479][T23863] syzkaller1: entered promiscuous mode
[  548.015714][T23863] syzkaller1: entered allmulticast mode
[  548.241854][T23867] 8021q: VLANs not supported on 61X
[  548.278141][T23869] bridge_slave_0: default FDB implementation only supports local addresses
[  548.459363][T23873] lo speed is unknown, defaulting to 1000
[  548.598771][T23880] lo speed is unknown, defaulting to 1000
[  548.672096][T23887] sit0: entered allmulticast mode
[  548.714823][T23887] sit0: left allmulticast mode
[  548.928449][T23912] netlink: 'syz.2.4615': attribute type 1 has an invalid length.
[  548.997000][T23917] netlink: 'syz.1.4614': attribute type 13 has an invalid length.
[  549.000111][T23917] netlink: 'syz.1.4614': attribute type 17 has an invalid length.
[  549.001010][T23912] 8021q: adding VLAN 0 to HW filter on device bond25
[  549.028659][T23917] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  549.069444][T23913] veth21: entered promiscuous mode
[  549.076757][T23913] bond25: (slave veth21): Enslaving as an active interface with an up link
[  549.135161][T23922] __nla_validate_parse: 16 callbacks suppressed
[  549.135178][T23922] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4618'.
[  549.233969][T23931] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4621'.
[  549.394274][T23939] netlink: 'syz.1.4619': attribute type 13 has an invalid length.
[  549.658676][T23949] netlink: 'syz.0.4625': attribute type 1 has an invalid length.
[  549.707393][T23932] Set syz1 is full, maxelem 6117 reached
[  549.715545][T23951] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4626'.
[  549.775381][T23955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4627'.
[  549.841823][T23957] netlink: 'syz.0.4629': attribute type 1 has an invalid length.
[  549.844901][T23957] netlink: 208 bytes leftover after parsing attributes in process `syz.0.4629'.
[  549.917923][T23962] sctp: [Deprecated]: syz.0.4631 (pid 23962) Use of struct sctp_assoc_value in delayed_ack socket option.
[  549.917923][T23962] Use struct sctp_sack_info instead
[  549.963544][T23968] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4632'.
[  550.132493][T23983] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4635'.
[  550.167471][T23985] netlink: 'syz.0.4637': attribute type 10 has an invalid length.
[  550.247401][T23998] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4640'.
[  550.312438][T23998] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  550.317729][T23998] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  550.320836][T23998] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  550.429402][T24014] bridge9: entered promiscuous mode
[  550.431833][T24014] bridge9: entered allmulticast mode
[  550.535393][T24022] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  550.666506][T24033] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4650'.
[  550.793669][T24036] lo speed is unknown, defaulting to 1000
[  550.939403][T24042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4654'.
[  551.578665][T24053] lo speed is unknown, defaulting to 1000
[  551.643069][T24058] lo speed is unknown, defaulting to 1000
[  551.937712][T24077] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  551.943747][T24073] lo speed is unknown, defaulting to 1000
[  551.943787][T24077] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  552.047318][T24081] bond26: entered promiscuous mode
[  552.049888][T24081] 8021q: adding VLAN 0 to HW filter on device bond26
[  552.083327][T24086] 8021q: adding VLAN 0 to HW filter on device bond26
[  552.085981][T24086] bond26: (slave wireguard1): The slave device specified does not support setting the MAC address
[  552.092302][T24086] bond26: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  552.104760][T24086] bond26: (slave wireguard1): making interface the new active one
[  552.110631][T24086] wireguard1: entered promiscuous mode
[  552.114294][T24086] bond26: (slave wireguard1): Enslaving as an active interface with an up link
[  552.334354][T24096] 8021q: adding VLAN 0 to HW filter on device bond27
[  553.042621][T24152] validate_nla: 2 callbacks suppressed
[  553.042636][T24152] netlink: 'syz.2.4683': attribute type 10 has an invalid length.
[  553.115103][T24154] 8021q: VLANs not supported on sit0
[  553.405564][T24162] openvswitch: netlink: IP tunnel dst address not specified
[  553.461725][T24166] netlink: 'syz.1.4687': attribute type 1 has an invalid length.
[  553.510887][T24168] netlink: 'syz.1.4688': attribute type 4 has an invalid length.
[  553.519314][T17472] lo speed is unknown, defaulting to 1000
[  553.522434][T17472] syz2: Port: 1 Link DOWN
[  553.693124][T24178] wg1 speed is unknown, defaulting to 1000
[  553.695175][T24178] wg1 speed is unknown, defaulting to 1000
[  553.697907][T24178] wg1 speed is unknown, defaulting to 1000
[  553.708120][T24178] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  553.726183][T24178] wg1 speed is unknown, defaulting to 1000
[  553.729594][T24178] wg1 speed is unknown, defaulting to 1000
[  553.732786][T24178] wg1 speed is unknown, defaulting to 1000
[  553.752006][T24178] lo speed is unknown, defaulting to 1000
[  553.755822][T24178] wg1 speed is unknown, defaulting to 1000
[  553.964240][T24189] lo speed is unknown, defaulting to 1000
[  553.998718][T24189] wg1 speed is unknown, defaulting to 1000
[  554.063288][T24197] dvmrp1: left allmulticast mode
[  554.128787][T24199] 8021q: adding VLAN 0 to HW filter on device bond0
[  554.135071][T24199] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  554.463428][T24210] lo speed is unknown, defaulting to 1000
[  554.488820][T24210] wg1 speed is unknown, defaulting to 1000
[  555.172272][T24251] __nla_validate_parse: 14 callbacks suppressed
[  555.172287][T24251] netlink: 277 bytes leftover after parsing attributes in process `syz.1.4707'.
[  555.183590][T24251] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  555.495212][T24279] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4717'.
[  555.585599][T24284] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4718'.
[  555.603366][T24279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4717'.
[  555.675376][T24292] lo speed is unknown, defaulting to 1000
[  555.679114][T24292] wg1 speed is unknown, defaulting to 1000
[  555.691741][T24293] netlink: 'syz.1.4719': attribute type 13 has an invalid length.
[  555.699476][T24293] netlink: 'syz.1.4719': attribute type 17 has an invalid length.
[  555.734683][T24293] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  555.742161][ T5912] lo speed is unknown, defaulting to 1000
[  555.744772][ T5912] syz2: Port: 1 Link ACTIVE
[  556.275417][T24322] team0: Mode changed to "loadbalance"
[  556.290115][T24322] netlink: 'syz.1.4728': attribute type 10 has an invalid length.
[  556.294696][T24322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4728'.
[  556.309489][T24326] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4730'.
[  556.345945][T24334] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  556.621981][T24340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4733'.
[  556.632707][T24340] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  556.635111][T24340] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  556.638444][T24340] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  556.682586][T24350] lo speed is unknown, defaulting to 1000
[  556.688531][T24350] wg1 speed is unknown, defaulting to 1000
[  556.754211][T24346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4735'.
[  556.912427][T24369] netlink: 'syz.0.4741': attribute type 1 has an invalid length.
[  556.923334][T24371] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4739'.
[  556.961090][T24369] 8021q: adding VLAN 0 to HW filter on device bond29
[  556.985657][T24372] 8021q: adding VLAN 0 to HW filter on device bond29
[  556.990716][T24372] bond29: (slave vxcan1): The slave device specified does not support setting the MAC address
[  556.995779][T24372] bond29: (slave vxcan1): Error -95 calling set_mac_address
[  557.007559][T24373] netlink: 'syz.2.4740': attribute type 16 has an invalid length.
[  557.010062][T24373] netlink: 'syz.2.4740': attribute type 17 has an invalid length.
[  557.019394][T24373] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  557.035448][T24369] veth19: entered promiscuous mode
[  557.193770][T24375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4742'.
[  557.433570][T24386] netlink: 'syz.0.4745': attribute type 7 has an invalid length.
[  557.845487][T24413] syzkaller1: entered promiscuous mode
[  557.848994][T24413] syzkaller1: entered allmulticast mode
[  558.325132][T24463] lo speed is unknown, defaulting to 1000
[  558.332145][T24463] wg1 speed is unknown, defaulting to 1000
[  558.460213][T24473] lo speed is unknown, defaulting to 1000
[  558.464947][T24473] wg1 speed is unknown, defaulting to 1000
[  559.024628][T24483] bridge_slave_0: default FDB implementation only supports local addresses
[  559.388570][T24495] lo speed is unknown, defaulting to 1000
[  559.392678][T24495] wg1 speed is unknown, defaulting to 1000
[  559.840804][T24515] lo speed is unknown, defaulting to 1000
[  559.845803][T24515] wg1 speed is unknown, defaulting to 1000
[  559.907254][T24520] validate_nla: 2 callbacks suppressed
[  559.907277][T24520] netlink: 'syz.1.4779': attribute type 12 has an invalid length.
[  560.183701][T24539] __nla_validate_parse: 14 callbacks suppressed
[  560.183721][T24539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4782'.
[  560.229454][T24534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4780'.
[  560.287102][T24547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4786'.
[  560.301033][T24548] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  560.355385][T24550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4787'.
[  560.465946][T24558] lo speed is unknown, defaulting to 1000
[  560.471467][T24558] wg1 speed is unknown, defaulting to 1000
[  560.798840][T24564] siw: device registration error -23
[  560.820604][T24564] lo speed is unknown, defaulting to 1000
[  560.825083][T24564] wg1 speed is unknown, defaulting to 1000
[  560.852478][T24576] bridge10: entered allmulticast mode
[  561.002992][T24579] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4793'.
[  561.143883][T24588] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4795'.
[  561.260098][T24601] lo speed is unknown, defaulting to 1000
[  561.265294][T24601] wg1 speed is unknown, defaulting to 1000
[  561.702070][T24613] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  561.702996][T24614] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  561.749971][T24616] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4803'.
[  561.889678][T24622] netlink: 'syz.1.4805': attribute type 58 has an invalid length.
[  561.892840][T24622] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4805'.
[  562.061644][T24628] openvswitch: netlink: IP tunnel TTL not specified.
[  562.069119][T24628] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  562.072403][T24626] lo speed is unknown, defaulting to 1000
[  562.078268][T24626] wg1 speed is unknown, defaulting to 1000
[  562.125730][T24636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4807'.
[  562.352768][T24647] netlink: 'syz.1.4812': attribute type 10 has an invalid length.
[  562.436855][T24658] lo speed is unknown, defaulting to 1000
[  562.442222][T24658] wg1 speed is unknown, defaulting to 1000
[  562.591958][T24663] lo speed is unknown, defaulting to 1000
[  562.594898][T24665] lo speed is unknown, defaulting to 1000
[  562.601814][T24663] wg1 speed is unknown, defaulting to 1000
[  562.610333][T24665] wg1 speed is unknown, defaulting to 1000
[  562.633749][T24669] IPVS: Scheduler module ip_vs_sip not found
[  562.636131][T24673] IPVS: length: 141 != 8
[  562.762956][T24683] netlink: 'syz.1.4820': attribute type 13 has an invalid length.
[  562.766096][T24683] netlink: 'syz.1.4820': attribute type 17 has an invalid length.
[  562.846977][T24683] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  562.973763][T24683] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4820'.
[  563.017215][T24692] syzkaller1: entered promiscuous mode
[  563.028317][T24692] syzkaller1: entered allmulticast mode
[  563.190067][T24692] lo speed is unknown, defaulting to 1000
[  563.194580][T24692] wg1 speed is unknown, defaulting to 1000
[  563.252840][T24703] lo speed is unknown, defaulting to 1000
[  563.257497][T24703] wg1 speed is unknown, defaulting to 1000
[  563.435102][T24712] tap0: tun_chr_ioctl cmd 2147767507
[  563.590208][ T8934] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  563.593587][ T8934] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  563.604322][ T8934] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  563.609811][ T8934] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  563.729171][T24732] bond0: Device is already in use.
[  563.825997][T24737] lo speed is unknown, defaulting to 1000
[  563.831232][T24737] wg1 speed is unknown, defaulting to 1000
[  563.850507][T24740] IPVS: set_ctl: invalid protocol: 29 172.30.0.1:21
[  564.081220][T24748] lo speed is unknown, defaulting to 1000
[  564.089702][T24748] wg1 speed is unknown, defaulting to 1000
[  564.193867][T24757] Unsupported ieee802154 address type: 0
[  564.331049][T24757] lo speed is unknown, defaulting to 1000
[  564.353472][T24757] wg1 speed is unknown, defaulting to 1000
[  564.540052][T24779] vlan0: entered promiscuous mode
[  564.541762][T24779] geneve1: entered promiscuous mode
[  564.543885][T24779] vlan0: entered allmulticast mode
[  564.545467][T24779] geneve1: entered allmulticast mode
[  564.646226][T24784] lo speed is unknown, defaulting to 1000
[  564.715217][T24784] wg1 speed is unknown, defaulting to 1000
[  564.991187][T24807] syzkaller1: entered promiscuous mode
[  564.996566][T24807] syzkaller1: entered allmulticast mode
[  565.195710][T24822] __nla_validate_parse: 10 callbacks suppressed
[  565.195729][T24822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4858'.
[  565.204634][T24822] netlink: 'syz.1.4858': attribute type 1 has an invalid length.
[  565.292793][T24817] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4856'.
[  565.300950][T24826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4859'.
[  565.333125][T24826] netlink: 'syz.1.4859': attribute type 2 has an invalid length.
[  565.339303][T24826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4859'.
[  565.474564][T24830] openvswitch: : Dropping previously announced user features
[  565.773435][T24838] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  565.897144][T24846] openvswitch: : Dropping previously announced user features
[  566.011750][T24851] lo speed is unknown, defaulting to 1000
[  566.039019][T24851] wg1 speed is unknown, defaulting to 1000
[  566.315265][T24879] openvswitch: : Dropping previously announced user features
[  566.325038][T24881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4876'.
[  566.357608][T24883] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  566.360480][T24883] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  566.458965][T24888] lo speed is unknown, defaulting to 1000
[  566.465756][T24888] wg1 speed is unknown, defaulting to 1000
[  566.501804][T24890] mac80211_hwsim hwsim15 syzkaller0: left promiscuous mode
[  566.504688][T24890] mac80211_hwsim hwsim15 syzkaller0: left allmulticast mode
[  566.635113][T24895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4881'.
[  566.892524][T24903] lo speed is unknown, defaulting to 1000
[  566.897576][T24903] wg1 speed is unknown, defaulting to 1000
[  566.998516][T24925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4885'.
[  567.004014][T24925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4885'.
[  567.015442][T24923] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode
[  567.018942][T24923] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode
[  567.066047][T24928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4889'.
[  567.123757][T24934] bridge: RTM_NEWNEIGH with invalid ether address
[  567.222136][T24941] xfrm0: entered promiscuous mode
[  567.223974][T24941] xfrm0: entered allmulticast mode
[  567.253896][T24945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4895'.
[  567.477059][T24959] lo speed is unknown, defaulting to 1000
[  567.480471][T24959] wg1 speed is unknown, defaulting to 1000
[  567.637187][   T47] page_pool_release_retry() stalled pool shutdown: id 152, 3329 inflight 180 sec
[  567.720994][T24977] netlink: 'syz.0.4904': attribute type 1 has an invalid length.
[  567.760433][T24975] lo speed is unknown, defaulting to 1000
[  567.802392][T24975] wg1 speed is unknown, defaulting to 1000
[  568.080798][T24992] netlink: 'syz.0.4909': attribute type 10 has an invalid length.
[  568.209760][T25001] openvswitch: : Dropping previously announced user features
[  568.310465][T25005] netlink: 'syz.2.4912': attribute type 10 has an invalid length.
[  568.392237][T25014] netlink: 'syz.2.4915': attribute type 4 has an invalid length.
[  568.614602][T25034] lo speed is unknown, defaulting to 1000
[  568.618801][T25034] wg1 speed is unknown, defaulting to 1000
[  568.698849][T25034] netlink: 'syz.2.4921': attribute type 12 has an invalid length.
[  568.783918][T25043] lo speed is unknown, defaulting to 1000
[  568.790548][T25043] wg1 speed is unknown, defaulting to 1000
[  569.150956][T25071] netlink: 'syz.0.4928': attribute type 5 has an invalid length.
[  569.316902][T25083] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  569.355613][T25081] lo speed is unknown, defaulting to 1000
[  569.359116][T25074] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  569.419258][T25081] wg1 speed is unknown, defaulting to 1000
[  569.631378][T25103] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20002
[  569.659016][T25112] syzkaller1: entered promiscuous mode
[  569.661330][T25112] syzkaller1: entered allmulticast mode
[  569.930889][T25125] netlink: 'syz.2.4939': attribute type 8 has an invalid length.
[  569.959703][T25125] bond0: entered promiscuous mode
[  569.963438][T25125] bond0: left promiscuous mode
[  569.984740][T25131] netlink: 'syz.2.4939': attribute type 8 has an invalid length.
[  569.994102][T25131] bond0: entered promiscuous mode
[  569.999686][T25131] bond0: left promiscuous mode
[  570.025793][T25128] lo speed is unknown, defaulting to 1000
[  570.031138][T25128] wg1 speed is unknown, defaulting to 1000
[  570.043713][T25132] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  570.052231][T25132] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  570.204598][T25139] xfrm0: left promiscuous mode
[  570.214531][T25144] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  570.223705][T25139] veth15: left promiscuous mode
[  570.228733][T25139] bond21: left promiscuous mode
[  570.230506][T25139] veth18: left promiscuous mode
[  570.232731][T25139] bond22: left promiscuous mode
[  570.234560][T25139] wireguard0: left promiscuous mode
[  570.237959][T25139] veth21: left promiscuous mode
[  570.240888][T25139] bond26: left promiscuous mode
[  570.243054][T25139] wireguard1: left promiscuous mode
[  570.287689][T25142] lo speed is unknown, defaulting to 1000
[  570.291760][T25139] __nla_validate_parse: 12 callbacks suppressed
[  570.291779][T25139] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4941'.
[  570.303721][T25142] wg1 speed is unknown, defaulting to 1000
[  570.372730][T25149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4943'.
[  570.396714][T25149] 8021q: adding VLAN 0 to HW filter on device bond28
[  570.402629][T25149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4943'.
[  570.502591][T25152] netlink: 'syz.2.4944': attribute type 1 has an invalid length.
[  570.505357][T25152] netlink: 'syz.2.4944': attribute type 1 has an invalid length.
[  570.592284][T25152] netlink: 'syz.2.4944': attribute type 1 has an invalid length.
[  570.614709][T25152] 8021q: adding VLAN 0 to HW filter on device bond29
[  570.639364][T25152] vlan1: entered allmulticast mode
[  570.641488][T25152] veth1: entered allmulticast mode
[  570.644788][T25152] bond29: (slave vlan1): Opening slave failed
[  570.804026][T25166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4947'.
[  570.820714][T25168] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  570.823564][T25168] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  570.916138][T25170] ==================================================================
[  570.919431][T25170] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x666/0xca0
[  570.922653][T25170] Write of size 8 at addr ffff88810a091b28 by task syz.2.4950/25170
[  570.926715][T25170] 
[  570.928199][T25170] CPU: 1 UID: 0 PID: 25170 Comm: syz.2.4950 Not tainted syzkaller #0 PREEMPT(full) 
[  570.928219][T25170] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  570.928230][T25170] Call Trace:
[  570.928238][T25170]  <TASK>
[  570.928249][T25170]  dump_stack_lvl+0x189/0x250
[  570.928272][T25170]  ? __kasan_check_byte+0x12/0x40
[  570.928295][T25170]  ? __pfx_dump_stack_lvl+0x10/0x10
[  570.928308][T25170]  ? lock_release+0x4b/0x3e0
[  570.928325][T25170]  ? __virt_addr_valid+0x4a5/0x5c0
[  570.928342][T25170]  print_report+0xca/0x240
[  570.928353][T25170]  ? __xfrm_state_delete+0x666/0xca0
[  570.928369][T25170]  kasan_report+0x118/0x150
[  570.928387][T25170]  ? __xfrm_state_delete+0x666/0xca0
[  570.928402][T25170]  __xfrm_state_delete+0x666/0xca0
[  570.928423][T25170]  xfrm_state_flush+0x45f/0x770
[  570.928440][T25170]  pfkey_flush+0x13f/0x340
[  570.928456][T25170]  ? __pfx_pfkey_flush+0x10/0x10
[  570.928471][T25170]  ? kmem_cache_free+0x18f/0x400
[  570.928500][T25170]  pfkey_sendmsg+0xbfe/0x1090
[  570.928519][T25170]  ? trace_sched_exit_tp+0x36/0x110
[  570.928535][T25170]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  570.928557][T25170]  ? aa_sock_msg_perm+0xf1/0x1d0
[  570.928570][T25170]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  570.928586][T25170]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  570.928604][T25170]  __sock_sendmsg+0x21c/0x270
[  570.928618][T25170]  ____sys_sendmsg+0x505/0x830
[  570.928639][T25170]  ? __pfx_____sys_sendmsg+0x10/0x10
[  570.928660][T25170]  ? import_iovec+0x74/0xa0
[  570.928680][T25170]  ___sys_sendmsg+0x21f/0x2a0
[  570.928699][T25170]  ? __pfx____sys_sendmsg+0x10/0x10
[  570.928731][T25170]  ? __fget_files+0x2a/0x420
[  570.928743][T25170]  ? __fget_files+0x3a0/0x420
[  570.928758][T25170]  __x64_sys_sendmsg+0x19b/0x260
[  570.928777][T25170]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  570.928799][T25170]  ? rcu_is_watching+0x15/0xb0
[  570.928815][T25170]  ? do_syscall_64+0xbe/0x3b0
[  570.928833][T25170]  do_syscall_64+0xfa/0x3b0
[  570.928848][T25170]  ? lockdep_hardirqs_on+0x9c/0x150
[  570.928895][T25170]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  570.928910][T25170]  ? exc_page_fault+0x9f/0xf0
[  570.928924][T25170]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  570.928939][T25170] RIP: 0033:0x7f9b9378ec29
[  570.928955][T25170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  570.928968][T25170] RSP: 002b:00007f9b94556038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  570.928985][T25170] RAX: ffffffffffffffda RBX: 00007f9b939d5fa0 RCX: 00007f9b9378ec29
[  570.928995][T25170] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a
[  570.929005][T25170] RBP: 00007f9b93811e41 R08: 0000000000000000 R09: 0000000000000000
[  570.929013][T25170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  570.929023][T25170] R13: 00007f9b939d6038 R14: 00007f9b939d5fa0 R15: 00007fff11621dd8
[  570.929043][T25170]  </TASK>
[  570.929048][T25170] 
[  571.041429][T25170] Allocated by task 23116:
[  571.043198][T25170]  kasan_save_track+0x3e/0x80
[  571.045052][T25170]  __kasan_slab_alloc+0x6c/0x80
[  571.047024][T25170]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  571.049143][T25170]  xfrm_state_alloc+0x24/0x2f0
[  571.051170][T25170]  __find_acq_core+0x8a7/0x1c00
[  571.053110][T25170]  xfrm_find_acq+0x78/0xa0
[  571.054903][T25170]  xfrm_alloc_userspi+0x6b3/0xc90
[  571.056911][T25170]  xfrm_user_rcv_msg+0x7a3/0xab0
[  571.058872][T25170]  netlink_rcv_skb+0x208/0x470
[  571.060784][T25170]  xfrm_netlink_rcv+0x79/0x90
[  571.062616][T25170]  netlink_unicast+0x82f/0x9e0
[  571.064384][T25170]  netlink_sendmsg+0x805/0xb30
[  571.066225][T25170]  __sock_sendmsg+0x21c/0x270
[  571.068026][T25170]  ____sys_sendmsg+0x505/0x830
[  571.069884][T25170]  ___sys_sendmsg+0x21f/0x2a0
[  571.071667][T25170]  __x64_sys_sendmsg+0x19b/0x260
[  571.073621][T25170]  do_syscall_64+0xfa/0x3b0
[  571.075424][T25170]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  571.077766][T25170] 
[  571.078761][T25170] Freed by task 17472:
[  571.080356][T25170]  kasan_save_track+0x3e/0x80
[  571.082219][T25170]  kasan_save_free_info+0x46/0x50
[  571.084212][T25170]  __kasan_slab_free+0x5b/0x80
[  571.086151][T25170]  kmem_cache_free+0x18f/0x400
[  571.088051][T25170]  xfrm_state_gc_task+0x52d/0x6b0
[  571.090069][T25170]  process_scheduled_works+0xae1/0x17b0
[  571.092263][T25170]  worker_thread+0x8a0/0xda0
[  571.094070][T25170]  kthread+0x711/0x8a0
[  571.095684][T25170]  ret_from_fork+0x439/0x7d0
[  571.097483][T25170]  ret_from_fork_asm+0x1a/0x30
[  571.099348][T25170] 
[  571.100302][T25170] The buggy address belongs to the object at ffff88810a091b00
[  571.100302][T25170]  which belongs to the cache xfrm_state of size 928
[  571.105582][T25170] The buggy address is located 40 bytes inside of
[  571.105582][T25170]  freed 928-byte region [ffff88810a091b00, ffff88810a091ea0)
[  571.110866][T25170] 
[  571.111826][T25170] The buggy address belongs to the physical page:
[  571.114339][T25170] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10a090
[  571.117799][T25170] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  571.121112][T25170] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  571.124118][T25170] page_type: f5(slab)
[  571.125736][T25170] raw: 057ff00000000040 ffff88801af77640 ffffea00045d7900 0000000000000002
[  571.129068][T25170] raw: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  571.132391][T25170] head: 057ff00000000040 ffff88801af77640 ffffea00045d7900 0000000000000002
[  571.135765][T25170] head: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  571.139161][T25170] head: 057ff00000000002 ffffea0004282401 00000000ffffffff 00000000ffffffff
[  571.142554][T25170] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  571.145754][T25170] page dumped because: kasan: bad access detected
[  571.148192][T25170] page_owner tracks the page as allocated
[  571.150434][T25170] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 15000, tgid 14999 (syz.1.2290), ts 330768060273, free_ts 330610367701
[  571.157832][T25170]  post_alloc_hook+0x240/0x2a0
[  571.159780][T25170]  get_page_from_freelist+0x21e4/0x22c0
[  571.161954][T25170]  __alloc_frozen_pages_noprof+0x181/0x370
[  571.164244][T25170]  alloc_pages_mpol+0x232/0x4a0
[  571.166161][T25170]  allocate_slab+0x8a/0x370
[  571.167916][T25170]  ___slab_alloc+0xbeb/0x1420
[  571.169772][T25170]  kmem_cache_alloc_noprof+0x283/0x3c0
[  571.171884][T25170]  xfrm_state_alloc+0x24/0x2f0
[  571.173736][T25170]  pfkey_add+0x6e4/0x2e00
[  571.175429][T25170]  pfkey_sendmsg+0xbfe/0x1090
[  571.177329][T25170]  __sock_sendmsg+0x21c/0x270
[  571.179035][T25170]  ____sys_sendmsg+0x505/0x830
[  571.180655][T25170]  ___sys_sendmsg+0x21f/0x2a0
[  571.182139][T25170]  __x64_sys_sendmsg+0x19b/0x260
[  571.183727][T25170]  do_syscall_64+0xfa/0x3b0
[  571.185538][T25170]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  571.187894][T25170] page last free pid 5858 tgid 5858 stack trace:
[  571.190444][T25170]  __free_frozen_pages+0xbc4/0xd30
[  571.192501][T25170]  free_large_kmalloc+0x13a/0x1f0
[  571.194444][T25170]  ops_undo_list+0x856/0x990
[  571.196293][T25170]  cleanup_net+0x4c5/0x800
[  571.198020][T25170]  process_scheduled_works+0xae1/0x17b0
[  571.200176][T25170]  worker_thread+0x8a0/0xda0
[  571.201995][T25170]  kthread+0x711/0x8a0
[  571.203623][T25170]  ret_from_fork+0x439/0x7d0
[  571.205499][T25170]  ret_from_fork_asm+0x1a/0x30
[  571.207428][T25170] 
[  571.208407][T25170] Memory state around the buggy address:
[  571.210625][T25170]  ffff88810a091a00: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  571.213776][T25170]  ffff88810a091a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  571.216925][T25170] >ffff88810a091b00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  571.220029][T25170]                                   ^
[  571.222240][T25170]  ffff88810a091b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  571.225508][T25170]  ffff88810a091c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  571.228609][T25170] ==================================================================
[  571.232090][T25170] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  571.234924][T25170] CPU: 1 UID: 0 PID: 25170 Comm: syz.2.4950 Not tainted syzkaller #0 PREEMPT(full) 
[  571.238574][T25170] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  571.242519][T25170] Call Trace:
[  571.243863][T25170]  <TASK>
[  571.245037][T25170]  dump_stack_lvl+0x99/0x250
[  571.246887][T25170]  ? __asan_memcpy+0x40/0x70
[  571.248720][T25170]  ? __pfx_dump_stack_lvl+0x10/0x10
[  571.250810][T25170]  ? __pfx__printk+0x10/0x10
[  571.252676][T25170]  vpanic+0x281/0x750
[  571.254239][T25170]  ? __pfx_vpanic+0x10/0x10
[  571.256018][T25170]  ? irqentry_exit+0x74/0x90
[  571.257785][T25170]  panic+0xb9/0xc0
[  571.259272][T25170]  ? __pfx_panic+0x10/0x10
[  571.261061][T25170]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  571.263324][T25170]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  571.265670][T25170]  ? __xfrm_state_delete+0x666/0xca0
[  571.267764][T25170]  check_panic_on_warn+0x89/0xb0
[  571.269686][T25170]  ? __xfrm_state_delete+0x666/0xca0
[  571.271814][T25170]  end_report+0x78/0x160
[  571.273501][T25170]  kasan_report+0x129/0x150
[  571.275308][T25170]  ? __xfrm_state_delete+0x666/0xca0
[  571.277431][T25170]  __xfrm_state_delete+0x666/0xca0
[  571.279460][T25170]  xfrm_state_flush+0x45f/0x770
[  571.281408][T25170]  pfkey_flush+0x13f/0x340
[  571.283223][T25170]  ? __pfx_pfkey_flush+0x10/0x10
[  571.285213][T25170]  ? kmem_cache_free+0x18f/0x400
[  571.287209][T25170]  pfkey_sendmsg+0xbfe/0x1090
[  571.289091][T25170]  ? trace_sched_exit_tp+0x36/0x110
[  571.291199][T25170]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  571.293252][T25170]  ? aa_sock_msg_perm+0xf1/0x1d0
[  571.295215][T25170]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  571.297291][T25170]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  571.299346][T25170]  __sock_sendmsg+0x21c/0x270
[  571.301230][T25170]  ____sys_sendmsg+0x505/0x830
[  571.303147][T25170]  ? __pfx_____sys_sendmsg+0x10/0x10
[  571.305205][T25170]  ? import_iovec+0x74/0xa0
[  571.307023][T25170]  ___sys_sendmsg+0x21f/0x2a0
[  571.308935][T25170]  ? __pfx____sys_sendmsg+0x10/0x10
[  571.310978][T25170]  ? __fget_files+0x2a/0x420
[  571.312785][T25170]  ? __fget_files+0x3a0/0x420
[  571.314646][T25170]  __x64_sys_sendmsg+0x19b/0x260
[  571.316627][T25170]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  571.318827][T25170]  ? rcu_is_watching+0x15/0xb0
[  571.320759][T25170]  ? do_syscall_64+0xbe/0x3b0
[  571.322635][T25170]  do_syscall_64+0xfa/0x3b0
[  571.324468][T25170]  ? lockdep_hardirqs_on+0x9c/0x150
[  571.326548][T25170]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  571.328945][T25170]  ? exc_page_fault+0x9f/0xf0
[  571.330821][T25170]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  571.333229][T25170] RIP: 0033:0x7f9b9378ec29
[  571.335011][T25170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  571.342387][T25170] RSP: 002b:00007f9b94556038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  571.345611][T25170] RAX: ffffffffffffffda RBX: 00007f9b939d5fa0 RCX: 00007f9b9378ec29
[  571.348713][T25170] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a
[  571.351824][T25170] RBP: 00007f9b93811e41 R08: 0000000000000000 R09: 0000000000000000
[  571.354908][T25170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  571.357979][T25170] R13: 00007f9b939d6038 R14: 00007f9b939d5fa0 R15: 00007fff11621dd8
[  571.361103][T25170]  </TASK>
[  571.362997][T25170] Kernel Offset: disabled
[  571.364701][T25170] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:32:00  Registers:
info registers vcpu 0

CPU#0
RAX=40b09b545b71ab00 RBX=ffffffff819683f8 RCX=40b09b545b71ab00 RDX=0000000000000001
RSI=ffffffff8d9ba1ca RDI=ffffffff8be33f00 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38f30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7b03f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000005000 CR3=000000011f176000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=679b60ea792a057c 35417e30a81c2455
XMM02=316d198df63a20dd 36870201b9761c88 XMM03=6432ec475218c109 578528c36e0d9d64
XMM04=547d7c705f69ca7a b6d9077f40633b7c XMM05=1b5e07bb301d0eb9 4c7ca730a17aef20
XMM06=834cc96a352017b8 3bfd2a4e8e852b71 XMM07=492fb188fe8c0864 32ec475218c10957
XMM08=0000000000000000 00007f88fb012f0f XMM09=0000000000000000 00007f88fb012fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000035 RBX=0000000000000035 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000014b2 RDI=00000000000014b3 RBP=00000000000003f8 RSP=ffffc90007e66eb0
R8 =ffff888108060237 R9 =1ffff1102100c046 R10=dffffc0000000000 R11=ffffffff854fac30
R12=dffffc0000000000 R13=ffffffff99b028d2 R14=ffffffff99df7480 R15=0000000000000000
RIP=ffffffff854facac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f9b945566c0 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2b3860 CR3=000000012671e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f9b9450d100 00007f9b939a7460 XMM05=00007f9b939a7478 00007f9b939a74c0
XMM06=00007f9b939a74b8 00007f9b939a74b0 XMM07=00007f9b939a74a8 00007f9b939a74a0
XMM08=0000000000000000 00007f9b93812f0f XMM09=0000000000000000 00007f9b93812fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
