last executing test programs:

3.136237675s ago: executing program 0 (id=3061):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x30, 0x5e)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="6aef3155ea9a81bceae4bf0a7376f408602b878b4fb9244ec24172760717a9cb87246da562add99291e81d89cab63395c951dfe163426d8b562a37d46e4998ebd16cb0e1bee20b87476bef653b3b817f5d9e0498958e993e307a776c92d112f463aaf5e1891a", @ANYRESOCT=r0], 0x48)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x200000000000011, 0x2, 0xd)
bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* m'], 0x47)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r7 = openat$cgroup_devices(r6, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000180)={0x1})
splice(r4, 0x0, r7, 0x0, 0x47, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r9)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="010025bd7000fcdbdf25"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20004040)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"})
write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd)
ioctl(r1, 0x8b27, &(0x7f0000000040))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00}, 0x94)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r10, 0x29, 0x17, &(0x7f0000000400)=0x5, 0x4)

1.20277279s ago: executing program 0 (id=3082):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000010}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x66}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000084)
r2 = openat$cgroup(r0, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000180)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000001c0)='wg0\x00', 0x4)
r4 = accept4$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x800)
getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000380)={@local, <r5=>0x0}, &(0x7f00000003c0)=0x14)
sendmsg$inet(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="2ddade285cc48917439467280d0f9197b9bdc421160357c82aeb1f61f0e1df623614df220939ebeb7df18f23428a759d35a56d506ed35a47f21c1fc1c4f3321f8bda7900af468358aec2c7d1b302832eea64fa9d351303293f9af723363c691b83a0a9d62ccc78754441baa00262c1a6a6177505972f57813936a596c70d50ff963b765c709b846617bdc2c488ecf986ea43b7f756ea86908b7901d1f4a5e23224edd6a1a662b129c234edef34f052c3516264a9e2b1072f62e77b9b61abb2b1f2a67be9a11072334b807b3c785416e5059222492ea6ee8eb085395443abc792cf2e87a1a13bc508f639b3c9ceff76fb9af3063ba63c72ae", 0xf8}], 0x1, &(0x7f0000000400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc3}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @multicast2}}}, @ip_retopts={{0x40, 0x0, 0x7, {[@end, @cipso={0x86, 0x2c, 0x2, [{0x6, 0x5, "d3f43e"}, {0x6, 0xa, "0a70a87811668293"}, {0x2, 0x5, "03ca5f"}, {0x0, 0x12, "dbb491c74ed980f582898c22e58d88d7"}]}]}}}, @ip_retopts={{0x120, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x2d, 0x3, 0xc, [{@empty, 0x9}, {@broadcast, 0x41}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x328}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x44, 0x52, 0x1, 0xc, [{@remote, 0x10000}, {@multicast1, 0x7ff}, {@loopback, 0x8000}, {@remote}, {@multicast1, 0x80}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x4}, {@loopback, 0x6}, {@loopback, 0x7}]}, @timestamp_prespec={0x44, 0x34, 0xe9, 0x3, 0x1, [{@private=0xa010102, 0x8}, {@broadcast, 0xffffffff}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0x11}}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x80000001}, {@multicast1, 0x10001}]}, @timestamp_prespec={0x44, 0x3c, 0x92, 0x3, 0x3, [{@loopback, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@empty, 0xb}, {@rand_addr=0x64010102, 0x1}, {@rand_addr=0x64010101}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x800000}]}, @cipso={0x86, 0x34, 0x3, [{0x5, 0xd, "dae15c9c9f5b505624c778"}, {0xa, 0x2}, {0x5, 0xb, "cdd03a29eb7beee5be"}, {0x0, 0x10, "1aa738b84e05a0b167fbc3fb0a80"}, {0x1, 0x4, "a4c3"}]}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @broadcast, @empty}}}], 0x1e8}, 0x24004041)
sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x10, 0x3f2, 0x7881e0cc746a6512, 0xffffffff, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r6, 0x80047213, &(0x7f0000000740))
r7 = gettid()
r8 = syz_open_procfs$namespace(r7, &(0x7f0000000780)='ns/time_for_children\x00')
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000007c0))
ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000800))
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000840)=@req3={0x7, 0x3, 0x0, 0x8, 0x9, 0x6, 0xfff}, 0x1c)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000a80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4020000}, 0xc, &(0x7f0000000a40)={&(0x7f00000008c0)={0x154, r1, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80, 0x38}}}}, [@NL80211_ATTR_IE={0xfc, 0x2a, [@chsw_timing={0x68, 0x4, {0xfffe, 0x9}}, @dsss={0x3, 0x1, 0xb1}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @preq={0x82, 0x36, {{0x0, 0x1, 0x0, 0x0, 0x1}, 0xf, 0x7, 0x5, @device_a, 0x10000, @value=@broadcast, 0x4, 0x7, 0x2, [{{0x1}, @device_b, 0x1}, {{0x1}, @device_b, 0x8001}]}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x78}}, @cf={0x4, 0x6, {0xff, 0x22, 0x3, 0x8}}, @tim={0x5, 0x90, {0x0, 0x59, 0x9, "1aef077b6262ca6a0b2261146613e9d0d7ffa63270faaba83235295f35e4e8d7a4f622cb272c8de4e4a13799411b627032cf401dc9cbe429b52d6e96392432059ddb2dc0b9d542e8c0a61aa7d33a5adb6420f7a10a884aff9c6ed4724db01407dc10da27a3453ed159835b527a5d56c5adf33fabbd54b8fef6e9311adffb0b761e84efecfdb0b4790c053f225c"}}, @ibss={0x6, 0x2, 0x9a}, @mesh_id={0x72, 0x6}, @channel_switch={0x25, 0x3, {0x0, 0xb2, 0xdf}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="b2940a25ecde"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xf}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x154}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
bind$l2tp(r3, &(0x7f0000000ac0)={0x2, 0x0, @local, 0x3}, 0x10)
pwrite64(r4, &(0x7f0000000b00)="d3cc41d5954d5eed2144e56585065cca562e2f91a431026adcdf1cbec66635d30389291ce3039ce6769c3010d3d22319aa98327021a05b483118acfe8374c723cd6c2e917972eb2470ca4d16af101ebb8cbe378ce1b866a6729a945a76d7df79c8b86bce56e0e2ed0fcc776c4ddcee67732d77d02cde9490b7b614896f8d877bab6ffb28f05706d9b6920e7d6cfe5fd5fe66f9306a6825817e5989a0288e7be831cf4d142088e0f220f72ccfd702d239cd21d4d493551a5a7ce694a05e619abcd671979cd7", 0xc5, 0x82)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x34}, 0x1, 0x0, 0x0, 0xd5}, 0x80)
connect$rxrpc(r3, &(0x7f0000000d00)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @local}}, 0x24)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)=@ipv6_deladdr={0x5c, 0x15, 0x10, 0x70bd2a, 0x25dfdbfe, {0xa, 0x1f, 0x21, 0xc8, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_CACHEINFO={0x14, 0x6, {0x9, 0x3, 0x9, 0xffff}}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040012}, 0xc04)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x18, 0x1409, 0x10, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x240000c0}, 0x8001)
socket(0x18, 0x80000, 0x0)
bind$can_j1939(r8, &(0x7f0000000f80)={0x1d, r5, 0x3, {0x2, 0x1, 0x2}, 0x2}, 0x18)
r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000fc0)={r3}, 0x8)
connect$rxrpc(r10, &(0x7f0000001000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x1, @loopback, 0x6}}, 0x24)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001040))

1.136656319s ago: executing program 0 (id=3083):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0x17}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000040)=0xa70, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0xfffffffd, @mcast1}, 0x1c)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010324bd7002fddbdf256cd802aa72193190a7086901000000"], 0x14}}, 0x0)

1.078081087s ago: executing program 1 (id=3088):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x700, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}]}}}]}, 0x44}}, 0x0)

986.540449ms ago: executing program 1 (id=3089):
syz_emit_ethernet(0x5e, &(0x7f00000004c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0xfffffffffffffff5}, @dev={0xfe, 0x80, '\x00', 0x2f}}}}}}}, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000a00)=ANY=[@ANYBLOB="fa0f00000000000002004e22e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000700000002004e22ac1e010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac14141d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e240000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e200a01010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e207f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a807ba3719a734a75332b4c7f8b44cfa3e1030c5770ed60b9929bc570fc8c39a98ea0897aac15bcb412b0c2e40980c4061ab62698984ee124e3a0fc5a297abc863018c2ef9c4ef34e4c4241dc227a926c0754bd006bdf028d0b823e7d3105e07b59ca7b815e66e5659135672e99b16427d24e48753f4acefdc6d3fd535cb584aa41ba028fc5a259da575cdfda9c37cde6680c99d480528aa033e9ca03a86eab99e24fa14601c578cbf0c43f85"], 0x410)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x48)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

916.487747ms ago: executing program 1 (id=3090):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0xf173, 0x2, 0xffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)={0x1d0, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_IE_PROBE_RESP={0x1b1, 0x7f, [@perr={0x84, 0x108, {0x0, 0x10, [{{0x0, 0x1}, @device_b, 0x7fffffff, @value=@device_b, 0x2d}, {{}, @device_a, 0xf34, @void, 0x5}, {{}, @device_a, 0x5, @void, 0x39}, {{0x0, 0x1}, @device_b, 0x3, @value=@broadcast, 0x1a}, {{}, @device_a, 0xac, @void, 0x3}, {{}, @device_a, 0x3, @void, 0x1e}, {{0x0, 0x1}, @broadcast, 0x37, @value, 0x6}, {{0x0, 0x1}, @device_b, 0xffff8e14, @value=@device_b, 0x1a}, {{}, @device_a, 0x10, @void, 0x16}, {{0x0, 0x1}, @device_b, 0x4, @value=@broadcast, 0x21}, {{0x0, 0x1}, @broadcast, 0xa, @value, 0x42}, {{0x0, 0x1}, @device_b, 0xffff}, {{0x0, 0x1}, @broadcast, 0x6, @value=@device_b, 0x19}, {{}, @device_b, 0x7, @void, 0x2a}, {{}, @broadcast, 0x10000042, @void, 0x1}, {{0x0, 0x1}, @device_b, 0x7, @value=@broadcast, 0x1a}]}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xe7, 0x7, @device_a, 0xd3, @value=@broadcast, 0x3, 0xfffffffb, @broadcast, 0x80000000}}, @tim={0x5, 0x59, {0x1, 0x1b, 0x8, "18923f9544919c908e6b55e88583c23ceafa152516191c885d5dce55465eb83af267c0caa8188168d2a114e4daf847b9d7e34619440ae9f3d3d1782fa08f2cbff5b8e629014e47a5bf09a7284ce632d0012dbfc08044"}}, @prep={0x83, 0x1f, {{}, 0x5, 0xa, @device_a, 0x3ff, @void, 0x0, 0x8, @broadcast, 0xb16}}]}]]}, 0x1d0}}, 0x20000000)
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES16=r2], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@local, @in=@remote}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, {0x0, 0x0, 0x0, 0x400000000000}, {}, 0x200000, 0x0, 0x2, 0x7, 0x0, 0xaf}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x1c0}}]}, 0x13c}}, 0x0)

915.387225ms ago: executing program 1 (id=3091):
unshare(0x6a040000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x8054}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004040000000000000000000080000000fc7a35a9d413e3194e982eb315c0a6af9159b4a2b025a5da905a61f9c0bb5fa6de8d0722183d6947a7c5739a3f949a388cbf7f843fa5b59c2da659ad9f5ee317624bb57bf70a7192351cb29474ca134547a6f812cd87c1bf06f003986436cba922adc9a7c7cc5a09340f31ace9ca3931902f4be95d6fca15021f8ab03fa838592c51670d00"/168, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, 0x0, 0x0)
unshare(0x600)
write(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x1409, 0x1, 0x10}, 0x10}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f00000003c0)={0x0, @phonet={0x23, 0x81, 0x9e, 0x3}, @isdn={0x22, 0xc, 0x0, 0x1, 0x9}, @nfc={0x27, 0x0, 0x0, 0x2}, 0x68e7, 0x0, 0x0, 0x0, 0x400, &(0x7f00000002c0)='veth0_to_hsr\x00', 0x4, 0x0, 0x7ff})
sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r6, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048884)
getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0)
connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

483.712959ms ago: executing program 1 (id=3097):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x4c, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x71, 0x0, 0x1, 0x37}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)

483.361597ms ago: executing program 1 (id=3098):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$nci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="51d321fb"], 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x6a040000)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@cgroup, 0x14, 0x1, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0]}, 0x40)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$packet(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000041, 0x0, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES32], &(0x7f0000000040)='GPL\x00', 0x2, 0x96, &(0x7f00000007c0)=""/151}, 0x94)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
unshare(0x8000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, 0x3, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x3081d24caeef622c}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="70000000070601010000000000000000050000030900020073797a32000000000900020073797a3000000000080006401f00008005000100070000000900020073797a300000000005000100070000000900020073797a300000000008000640000000060900020073797a3200000000"], 0x70}, 0x1, 0x0, 0x0, 0x24008000}, 0x0)
r5 = accept(r2, 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[], 0x6c}}, 0x0)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf25020100800c00f6000000000000000000140001000100000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99eec9767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f0000"], 0x114}], 0x1}, 0x0)

406.642851ms ago: executing program 2 (id=3099):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbacf, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x88}], {0x95, 0x0, 0x500}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)

346.38465ms ago: executing program 2 (id=3100):
syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000200086dd4df4a33f00306700fe800000000000000000000000000000fe80e4df0000000000000000000000aa21000000680000000003000000000000001758090e541b64f22a8982d3f5aaacd21a0ca186608b74f100000000000000"], 0x0) (async)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000940)=[{&(0x7f0000000040)="1333", 0x2}, {&(0x7f00000007c0)="b4", 0x1}, {&(0x7f00000000c0)="008e777f9d", 0x5}], 0x3, 0x0) (async)
ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) (async)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x6) (async)
socket(0xa, 0x3, 0x3a) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000000c0007419d4e0140000000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a697000"], 0x50}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$key(0xf, 0x3, 0x2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0x20, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x443, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) (async)
syz_emit_ethernet(0x44e, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000340)={r6}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0) (async)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@newtfilter={0x4ac, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x480, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x10000000, 0x3, 0x6, 0xecac, {0x3, 0x2, 0xfff9, 0x9, 0x10}, {0x8e, 0x0, 0x100, 0xf4fb, 0x2, 0xab98}, 0xb5a, 0x4, 0x20000}}]}, @TCA_FW_CLASSID={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'geneve0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x3}, @TCA_FW_POLICE={0x414, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x40000000000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x3, 0x2, 0x2, 0xa757, 0xf0, 0x9c9, 0xffff0001, 0x79, 0x8215, 0x7, 0x4, 0x7, 0x7, 0x9, 0xff, 0x8, 0x7, 0x28, 0x7, 0x0, 0x10, 0x8000, 0xfffffff8, 0x2, 0x9, 0x868, 0x8, 0xea, 0xffff903d, 0x8, 0x9, 0x8, 0x0, 0x8, 0x17, 0x6, 0x3, 0x2, 0x3, 0x9, 0x1, 0x49, 0x60000000, 0x1, 0x3, 0x7fff, 0x2ba2aab2, 0xfffffffd, 0x4, 0x40, 0x6, 0x80000001, 0x0, 0xfffffff7, 0x10001, 0x8, 0x9, 0x934, 0x10000, 0x3, 0x1, 0xffffffff, 0xae, 0x5, 0xb9, 0x9, 0x200, 0xe0, 0x3, 0xfffffffd, 0x8, 0x10, 0x7fff, 0x3, 0x8000, 0x6, 0x3, 0x3, 0x20002000, 0x2, 0x10001, 0x3, 0xf7, 0xcfe4, 0xfffffffd, 0x764, 0x4d8, 0x1, 0x8, 0x46, 0x7f, 0xfff, 0x4, 0x4, 0x9, 0x0, 0x4, 0x0, 0x12, 0x2, 0x9, 0xe1, 0x2, 0x6, 0x0, 0x8001, 0x5, 0x200, 0xd7, 0x5, 0x81, 0x3ff, 0x4, 0x7, 0x0, 0xf, 0x9, 0x4, 0x10001, 0x200, 0xa0, 0x100000, 0x3, 0xfffffffc, 0x1, 0xfffffffe, 0x5, 0x9, 0x7, 0xa8c7, 0x6955cf68, 0x8, 0xffffffff, 0xd, 0x9, 0x9, 0x3, 0x3, 0x33, 0x5, 0x8000, 0x101, 0x3ff, 0x2, 0xa, 0xfffffbff, 0x6, 0x10, 0x2, 0xffff66db, 0xf, 0x1, 0x3, 0x6, 0x4, 0x1, 0x7f, 0x2, 0x3, 0x5, 0xcbd8, 0x5, 0x7, 0x80000001, 0x100, 0x0, 0x10, 0x800, 0xf, 0x3, 0x8, 0x8, 0x4, 0x10001, 0x80, 0x0, 0xb, 0x800, 0xaa, 0x100, 0x8, 0xffffffff, 0x3, 0xf, 0x10001, 0x0, 0x800, 0x8, 0x7, 0x7, 0xa26c, 0x2, 0x0, 0x47, 0x4, 0x81, 0xf, 0x8, 0x10, 0x80000001, 0x81, 0x7fffffff, 0x3, 0x2, 0x7e9a32bb, 0x1, 0x10, 0x5, 0x8, 0xffff0001, 0x7, 0x0, 0x3ff, 0x2, 0x4, 0x1, 0x10000, 0xd, 0x3, 0x80000000, 0x20000000, 0x8, 0x40, 0x7fff, 0x0, 0x2, 0x7, 0x3, 0x14, 0x0, 0x7, 0x8, 0x6, 0x3, 0x5, 0x3ff, 0x1, 0x1000, 0x9, 0x5, 0xc98, 0x13, 0x7, 0x0, 0xea, 0x140000, 0x4, 0x2, 0x3, 0xe, 0x3e, 0x0, 0x3, 0x91]}]}, @TCA_FW_ACT={0x4}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

256.217399ms ago: executing program 0 (id=3101):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e21, 0xffffffff, @remote, 0x6}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000002800)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x22}, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)='A(', 0x2}], 0x1}}], 0x1, 0xc010)
shutdown(r3, 0x1)
getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000003d000701fcffffff00000000047c0080240000000c000380"], 0x24}}, 0x8004)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r7 = socket(0x10, 0x803, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@setneightbl={0x14, 0x43, 0x1}, 0x14}}, 0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_int(r9, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0)
write$cgroup_int(r10, &(0x7f0000000200)=0x3f87, 0x12)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0xa, 0x9}, {}, {0xc, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_XOR={0x8, 0x7, 0x5}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18934}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x200008c2)

249.666675ms ago: executing program 2 (id=3102):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0xa, [{0xe, 0x9}, {0xc, 0x1}, {0x3, 0x4}]}]}}, &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0x1}, 0x28)
sendmmsg(0xffffffffffffffff, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=[{0x18, 0x6, 0x8, "bd"}, {0x30, 0x88, 0x800, "db1bf95719cd8a7ef75af6a72f5268326108ccb145f2b722030655"}], 0x48}}], 0x1, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc4}]}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async)
r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r3, &(0x7f0000001ec0)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x10) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x5, 0x4}, {0x1, 0x8}}}, 0x24}}, 0x0) (async)
sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x1, 0x84, 0x3, {0x0, 0x2710}, {0x77359400}, {0x2, 0x1, 0x1}, 0x1, @can={{0x1, 0x0, 0x1}, 0x2, 0x3, 0x0, 0x0, "a286a4ce4b24faf4"}}, 0x48}, 0x1, 0x0, 0x0, 0x404c001}, 0x81) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a300000000038000400140001000a0000007f000001000000000000000020"], 0x60}}, 0x0)
socket$packet(0x11, 0x2, 0x300) (async)
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0)
close(0x3)

93.408972ms ago: executing program 0 (id=3103):
r0 = socket$key(0xf, 0x3, 0x2) (async)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_PIM(r1, 0x0, 0xcf, &(0x7f0000000000), 0x4) (async)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x4, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x201, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0)

93.021973ms ago: executing program 2 (id=3104):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f00000000c0)=@raw=[@cb_func={0x18, 0xc, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$ax25(0x3, 0x2, 0x7)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0xf6, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r0}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000000000001400000005000c000027fa1700000018000180140002006e657464657673696d300000000000000500180000000000080011000700000005000c0001"], 0x4c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090200000300ffe5000d0000000000b702000000000000739af0ff00000000c509000000010000c3aaf0fff1000000bf8720000000000037080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111a90000000000851000000000000000009500a50500"/48], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r9}, 0x94)
sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d004100100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xc, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}})
r10 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r11, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

91.9927ms ago: executing program 0 (id=3105):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000028000480240001800b000100657874686472000014000280080004400000007b08000640000000011400"], 0x7c}}, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x4008af13, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_emit_ethernet(0x1296, &(0x7f0000001c00)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @tipc_packet={0x9, 0x6, "62ee9f", 0x125c, 0x6, 0x0, @mcast1, @local, {[@dstopts={0x2f, 0x2, '\x00', [@generic={0x9, 0x10, "b58f1813dc3000db1fa1730272746a7e"}]}, @dstopts={0x89, 0x222, '\x00', [@generic={0x1, 0xfd, "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"}, @ra={0x5, 0x2, 0x3}, @generic={0x49, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x26}, @enc_lim, @enc_lim={0x4, 0x1, 0x9}]}, @dstopts={0x2b, 0x10, '\x00', [@hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x6, [0x0, 0x5]}}, @pad1, @calipso={0x7, 0x20, {0x0, 0x6, 0x3, 0x0, [0x6, 0x1, 0x5]}}, @pad1, @jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x3}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @dstopts={0x2f, 0x0, '\x00', [@ra={0x5, 0x2, 0x80}]}], @name_distributor={{0x7c, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0xfffe, 0x0, 0x1, 0x7, 0x7, 0x4, 0x4e22, 0x4e20, 0x0, 0x3, 0x0, 0x0, 0x1}, [{0x6, 0x8, 0x4, 0xffff, 0x1, 0x7, 0x6, 0x3}, {0x9, 0x1, 0x97, 0x80000001, 0x80010001, 0x8, 0x9, 0x3b3}, {0x6, 0x200, 0x5, 0x34, 0x0, 0x1, 0x0, 0x9}]}}}}}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r5], 0x24}}, 0x0)
readv(r3, &(0x7f0000000340)=[{&(0x7f0000000040)=""/142, 0x8e}], 0x1)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r6 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r6, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/185, 0xb9}, 0x8}], 0x1, 0x2000000022, 0x0)
setsockopt$sock_int(r6, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@gettfilter={0x2c, 0x2e, 0x401, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff3}, {0x2, 0x2}, {0x6, 0xffe0}}, [{0x46, 0xb, 0xbb6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8890}, 0x1040)
r8 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r8, 0x891b, 0x0)
sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0)
syz_emit_ethernet(0x1af, &(0x7f0000000780)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa3986dd60010100017911fffe80001c0000000000000000000000bbfe8000000000000000000000000000aa00000e2201799078020300000000000030b00afe4e79dc1db6ecbf24b32e08c54a7cbee5809d8b542e7458ef7cbac933d79068a1492f809caa178afcd5c30f429764c3840100e00117dd6712781ba0385c1846e6c001eac6c71939e1d33a4b120e44584225740f0421a5ee1af2cfc8d7acf721d5c8ee35323d6a880e43b9ac00499eee5afa3d65886ff58ccb7a62defb784e566bbf8c2320c1e4650bd339def98e5bebcd23f3b6971a5b86b9187d965a6bd1da217d895f9cde8380c17f0151eee76191ff9251faf21096e7f79e74718978b3c81592a237b8494c679713da564a07dbb9cd022e7ba9438d16922b8134da00824deaac4b25f2627f342af31d3c806ed796b5ed9a221d226efd9dd635288b97e7c671be40e249ab529fd0ede4d3004bf799f5bdef53a2109f2b859537762c08842877a3a5d748b28e4ecff0f3a1754ca856aa638a387dd3380a1cd496f70c2cee0a94fb47a2fe3475ff1fabd7bc3400f05c148f4f7a5393ce2d9c431129fa1241cbd0345553"], 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0)

6.206375ms ago: executing program 2 (id=3106):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x0, r0}, 0x18)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000380))
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r2, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
setsockopt$packet_int(r1, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gretap0\x00', <r4=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b0368002e0064000200475400f6a13bb1000000086086dd6558", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r4}, 0x14)

0s ago: executing program 2 (id=3107):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000e6000000000000000000eeffffff000000000000000000"], 0x48)
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r1=>0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000021000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3, 0xffffffffffffffff, 0x500}, 0x57)
syz_emit_ethernet(0x42, &(0x7f0000004180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0806000186dd061000000180c2000002fe800000000000000000000000000044aaaaaaaaaa21ff010000000000000000000000000041"], 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000ffdbdf256b9a932e3effb440", @ANYRES32=0x0, @ANYBLOB="04000280"], 0x20}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002880)=@delchain={0x860, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0xfff3}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x824, 0x2, [@TCA_BPF_POLICE={0x820, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x10, 0x8001, 0x3, 0x4, 0x1, 0x1, 0xe6a3, 0x6, 0x401, 0x1, 0xfffffffb, 0xfffffffb, 0x80000000, 0xe5f, 0x3, 0x4, 0x0, 0x3, 0x80, 0x7, 0x2, 0x80, 0x0, 0x3, 0x7, 0xf, 0x392, 0x9, 0x3, 0x1, 0x7, 0xa031, 0x3, 0x2, 0x7ff, 0x1d99, 0xad, 0x4, 0xfffff001, 0x0, 0x0, 0x1ff, 0x1, 0x3ff, 0x7, 0x0, 0x2, 0x8, 0x2, 0x5, 0x8, 0x0, 0x0, 0x2, 0x6, 0x8, 0x5, 0x3, 0xfffffff8, 0x401, 0x7, 0x200, 0x4, 0x6, 0x1, 0x80, 0x800, 0x0, 0x3, 0x2, 0xffffffff, 0x200, 0x7a, 0x1, 0xb, 0x7, 0x4, 0x2, 0x9, 0x0, 0x5, 0x3, 0x0, 0xa9f, 0x7, 0x4, 0x6, 0x4, 0x5, 0xe16b, 0xf, 0x7f, 0x7fffffff, 0x9, 0x7, 0xde8a23, 0x9, 0x42fd, 0xa, 0x3, 0x3, 0x7, 0x5, 0x5, 0x3, 0x6, 0x1, 0xe, 0x407a, 0x6, 0x2, 0x7, 0x2, 0x401, 0x333, 0x71d, 0x80000001, 0x1, 0x97d, 0x7fffffff, 0x401, 0x7, 0x9, 0x1, 0x1ff, 0x4, 0x4, 0x7fffffff, 0x2, 0x7, 0x0, 0x7, 0x4, 0x4, 0x2, 0x3, 0x3, 0xc2c, 0xfffffffe, 0x1, 0x2, 0x8, 0x2, 0x30, 0x0, 0x5, 0x3, 0xb9, 0x40, 0xa0, 0x40, 0xfffffff9, 0x6, 0x41, 0x3fffc00, 0x4, 0x6, 0x73, 0x189c, 0x3, 0x34b, 0x0, 0x7, 0x0, 0x5, 0x2, 0xe, 0x401, 0xffffffff, 0x7fff, 0x1a, 0x3, 0x7, 0x8, 0x5fc, 0x7, 0x0, 0x8, 0x8, 0x5, 0x0, 0x5, 0x8, 0x2, 0xd, 0xdcf6, 0x2, 0x20000000, 0xe4, 0x28000, 0x2, 0xc, 0x8, 0x10001, 0x5b, 0xb, 0x90cd, 0x7fffffff, 0x4, 0x5e4, 0x26, 0x8, 0x101, 0xe1, 0x1, 0x2, 0x8, 0x5, 0x4, 0x8, 0x3, 0xb83, 0xb28, 0x9, 0xb2, 0xc12, 0x8, 0x9, 0xd, 0x3, 0x40, 0x101, 0x0, 0x61, 0x4, 0x4, 0x7, 0x7, 0xe, 0x5, 0x8, 0xffffc8fd, 0x4, 0xfffffffb, 0x2, 0x7, 0x6, 0x10001, 0x4, 0xd, 0x4, 0xfffffffd, 0x8, 0x800, 0x6, 0x7168, 0x1, 0xb, 0x2, 0x3ff, 0x40, 0x2, 0x0, 0x6, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xf, 0x6, 0x6e9, 0x7, 0x81, 0x7, 0x7ff, 0x80, 0x3, 0x8f, 0x1, 0x8, 0x5, 0x7fff, 0x8001, 0x3, 0x8, 0x84f, 0x4, 0x0, 0x12, 0xbc7d, 0x1000, 0x6, 0x1ff, 0xffff, 0x401, 0x4, 0x8, 0x4, 0x9, 0x38, 0x80000000, 0x7, 0x5, 0x3, 0x2, 0x6, 0x7, 0x7, 0x6, 0x80000001, 0x80000000, 0x0, 0x1, 0x4, 0x3, 0x9, 0x8, 0x5, 0x7, 0x2, 0x5, 0x100, 0x5, 0xda2, 0x5, 0x0, 0x951, 0x9, 0x5, 0x3, 0x7, 0x0, 0x80, 0x3, 0x80000000, 0x9, 0x3, 0xffff, 0x3f0, 0x9, 0x5, 0x9, 0xf4, 0x1, 0x987, 0x3, 0x7, 0x8001, 0x91, 0x7, 0x5, 0x7, 0x8, 0x4, 0x9, 0x800, 0x2038d97e, 0xd, 0x0, 0x2, 0x7, 0x3, 0x6, 0xb, 0x2, 0xc, 0x4, 0x7, 0x1ff, 0x8, 0xffff, 0x200, 0x5, 0x2d, 0x3ff, 0xa2b, 0x8, 0x9, 0x401, 0xed, 0x2, 0x5, 0xc9d, 0x8, 0x9, 0xffffffff, 0x1, 0x0, 0x1, 0x4, 0x4, 0x8ee6, 0x5, 0xc, 0x8, 0xa1, 0x20, 0xaf4, 0x2, 0x7, 0x7eb, 0x7, 0x8, 0xa, 0x4, 0x3ff, 0x6, 0xff, 0x8, 0x2c, 0x0, 0x0, 0x4, 0x1, 0x7, 0x0, 0xb, 0xff, 0x3ff, 0x10, 0x9b1, 0x8f17, 0x200, 0x9, 0x7d, 0xc, 0x5456, 0x50, 0x7, 0x7, 0x0, 0x7ff, 0x5c, 0x8001, 0x8000, 0xffffffff, 0x3f0, 0x5, 0x7, 0x9, 0xf, 0x2, 0x2, 0x6, 0x4, 0x16d8, 0xfff, 0x46, 0x5, 0x7, 0x8, 0xfffffffe, 0x8, 0x2, 0x2, 0x2, 0x10000, 0x1, 0x1, 0x9, 0x1, 0x4, 0x7, 0xe, 0xa981, 0x1, 0x0, 0x6, 0x7f, 0x0, 0x3, 0x3, 0x6, 0x8, 0x80, 0xd9e, 0x40, 0x4, 0x3136, 0x8, 0x7, 0x4, 0x9, 0x5, 0x7f, 0xffff4b11, 0x6, 0x0, 0x0, 0x9, 0x1, 0xb, 0x4, 0xffff, 0x4, 0x8000, 0x80000001, 0x0, 0x0, 0x8, 0x0, 0x8, 0xa, 0x0, 0x3, 0xd, 0x1, 0x6, 0x2, 0xfffffff9, 0x8, 0x7, 0x7, 0x101, 0x80000001, 0x3, 0x5, 0x7, 0x4, 0x4, 0x3, 0x8, 0xfffffff7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}]}]}}]}, 0x860}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r5 = socket(0x10, 0x803, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000a00)={0x0, 0xf0, "0fe87820e1e6b50e5bae947104fa201f5d01690916cf97fe23b0444ed686e83188e9576e1b05d834deae4dcf2be2a1f687a5cb3aad1f38ed0ae09bfc4dad6593d7b06c4e26fcdf3ff109296fdeb7d3b836e7c2938cbb720f0032ce78e7ca182287ff21d4e02923e20d0ea7207b7d233885cf8d53751f18a41480a2953702207cb29fb46cb0267a5d2f54ae2826ef4c491d8181be7450efbeb1a513226bafe56af2442eb835e7834c3a24ca5af546f444e384e36c3fad417c4393e9d96d6771e16cf639091fff84ea4a7c5e28047a9042f0545dbf37a45c5678d60306d4b474d00ca80efe5ec1d402274566aae1e543c9"}, &(0x7f0000000080)=0xf8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x6}, 0x8)
sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040003, &(0x7f0000003700)={0x77359400})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000000b010300000000000000000200000a080002400000000008000340000000000d000100727066696c74657200000000e1ee21e6f267540848b0f2b482e2723256c9f2f7d3801d81a51bff2d44722f6f9c"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r1, {0xfffd, 0x1}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc0118000000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r8, 0x1, 0x21, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r8, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r8, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x7, @empty, 0x1}, 0x1c)

kernel console output (not intermixed with test programs):

][ T1271] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   65.705077][ T6251] tipc: Resetting bearer <eth:syzkaller0>
[   65.707267][ T1271] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   65.724587][ T6247] tipc: Resetting bearer <eth:syzkaller0>
[   65.733511][ T6247] tipc: Disabling bearer <eth:syzkaller0>
[   65.836700][ T6266] netlink: 'syz.2.96': attribute type 1 has an invalid length.
[   65.870707][ T6266] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.889399][ T6266] bond1: (slave veth3): Enslaving as an active interface with a down link
[   65.907486][ T6266] 8021q: adding VLAN 0 to HW filter on device batadv1
[   65.909983][ T6266] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[   66.043630][ T6275] syzkaller0: entered promiscuous mode
[   66.045816][ T6275] syzkaller0: entered allmulticast mode
[   66.133674][ T6279] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   66.398636][ T6298] can: request_module (can-proto-3) failed.
[   66.670537][ T6315] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[   67.423984][ T6376] syzkaller0: entered promiscuous mode
[   67.426106][ T6376] syzkaller0: entered allmulticast mode
[   67.433500][ T6376] virt_wifi0: mtu less than device minimum
[   67.450666][ T6379] tipc: Started in network mode
[   67.452380][ T6379] tipc: Node identity , cluster identity 4711
[   67.455010][ T6379] tipc: Failed to obtain node identity
[   67.459107][ T6379] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   68.362912][ T6391] IPVS: length: 31 != 4168
[   68.394572][ T6393] __nla_validate_parse: 20 callbacks suppressed
[   68.394581][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.135'.
[   69.011535][ T6405] netlink: 'syz.1.139': attribute type 1 has an invalid length.
[   69.014131][ T6405] netlink: 'syz.1.139': attribute type 1 has an invalid length.
[   69.025911][ T6405] netlink: 'syz.1.139': attribute type 1 has an invalid length.
[   69.283756][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.149'.
[   69.285436][ T6439] netlink: 28 bytes leftover after parsing attributes in process `syz.2.148'.
[   69.371859][ T6444] wg1 speed is unknown, defaulting to 1000
[   69.402772][ T6446] netlink: 256 bytes leftover after parsing attributes in process `syz.1.151'.
[   69.463053][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.153'.
[   69.492664][ T6453] hsr_slave_0: left promiscuous mode
[   69.495232][ T6453] hsr_slave_1: left promiscuous mode
[   69.583688][ T6452] delete_channel: no stack
[   69.630806][ T6470] netlink: 36 bytes leftover after parsing attributes in process `syz.1.155'.
[   69.635442][ T6465] C: renamed from team_slave_0 (while UP)
[   69.642370][ T6465] netlink: 'syz.2.156': attribute type 3 has an invalid length.
[   69.645054][ T6465] netlink: 152 bytes leftover after parsing attributes in process `syz.2.156'.
[   69.650388][ T6465] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   69.724634][ T6474] netlink: 256 bytes leftover after parsing attributes in process `syz.1.158'.
[   69.788008][ T6478] syzkaller0: entered promiscuous mode
[   69.790377][ T6478] syzkaller0: entered allmulticast mode
[   69.799598][ T6481] syzkaller0: entered promiscuous mode
[   69.802085][ T6481] syzkaller0: entered allmulticast mode
[   69.807259][   T13] syzkaller0: tun_net_xmit 70
[   69.828534][ T6481] syzkaller0: tun_chr_ioctl cmd 1074025677
[   69.831132][ T6481] syzkaller0: Linktype set failed because interface is up
[   70.348792][ T6497] netlink: 256 bytes leftover after parsing attributes in process `syz.0.166'.
[   70.931847][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.934577][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.333885][ T6512] Bluetooth: MGMT ver 1.23
[   71.396603][ T6514] netlink: 'syz.1.173': attribute type 21 has an invalid length.
[   71.399673][ T6514] netlink: 132 bytes leftover after parsing attributes in process `syz.1.173'.
[   71.857576][ T6532] netlink: 'syz.1.179': attribute type 14 has an invalid length.
[   71.863836][ T6531] netlink: 'syz.1.179': attribute type 14 has an invalid length.
[   71.873919][ T6532] netlink: 'syz.1.179': attribute type 13 has an invalid length.
[   71.880138][ T6531] netlink: 'syz.1.179': attribute type 13 has an invalid length.
[   72.003397][   T56] block nbd0: Receive control failed (result -107)
[   72.048361][ T6534] nbd0: detected capacity change from 0 to 32
[   72.053127][ T5846] block nbd0: Dead connection, failed to find a fallback
[   72.074585][ T5846] block nbd0: shutting down sockets
[   72.081177][ T5846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   72.084397][ T5846] Buffer I/O error on dev nbd0, logical block 0, async page read
[   72.096208][ T5846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   72.099321][ T5846] Buffer I/O error on dev nbd0, logical block 0, async page read
[   72.102454][ T5846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   72.105433][ T5846] Buffer I/O error on dev nbd0, logical block 0, async page read
[   72.131711][ T5846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   72.134730][ T5846] Buffer I/O error on dev nbd0, logical block 0, async page read
[   72.148410][ T6537] team1: entered promiscuous mode
[   72.150252][ T5846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   72.153199][ T5846] Buffer I/O error on dev nbd0, logical block 0, async page read
[   72.153304][ T6537] team1: entered allmulticast mode
[   72.158529][ T5846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   72.161539][ T5846] Buffer I/O error on dev nbd0, logical block 0, async page read
[   72.166216][ T5846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   72.170368][ T5846] Buffer I/O error on dev nbd0, logical block 0, async page read
[   72.173671][ T5846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   72.177560][ T5846] Buffer I/O error on dev nbd0, logical block 0, async page read
[   72.182845][ T5846] ldm_validate_partition_table(): Disk read failed.
[   72.185741][ T5846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   72.191520][ T5846] Buffer I/O error on dev nbd0, logical block 0, async page read
[   72.194364][ T5846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   72.197913][ T5846] Buffer I/O error on dev nbd0, logical block 0, async page read
[   72.200932][ T5846] Dev nbd0: unable to read RDB block 0
[   72.208293][ T5846]  nbd0: unable to read partition table
[   72.227395][ T5846] ldm_validate_partition_table(): Disk read failed.
[   72.232589][ T5846] Dev nbd0: unable to read RDB block 0
[   72.238510][ T5846]  nbd0: unable to read partition table
[   72.678660][ T6497] Set syz1 is full, maxelem 65536 reached
[   72.805632][ T6557] wg1: entered promiscuous mode
[   72.808165][ T6557] wg1: entered allmulticast mode
[   72.889352][ T6563] wg1 speed is unknown, defaulting to 1000
[   73.046036][ T6575] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20001
[   73.059833][ T6575] sctp: [Deprecated]: syz.2.193 (pid 6575) Use of int in max_burst socket option.
[   73.059833][ T6575] Use struct sctp_assoc_value instead
[   73.313473][ T6597] netlink: 'syz.0.202': attribute type 1 has an invalid length.
[   73.318490][ T6595] bridge0: entered promiscuous mode
[   73.321920][ T6595] vlan2: entered promiscuous mode
[   73.324772][ T6595] bridge0: port 3(vlan2) entered blocking state
[   73.328308][ T6595] bridge0: port 3(vlan2) entered disabled state
[   73.331114][ T6595] vlan2: entered allmulticast mode
[   73.332935][ T6595] bridge0: entered allmulticast mode
[   73.336162][ T6595] vlan2: left allmulticast mode
[   73.337915][ T6595] bridge0: left allmulticast mode
[   73.403688][ T6597] 8021q: adding VLAN 0 to HW filter on device bond1
[   73.437711][ T6599] bond1: (slave geneve2): making interface the new active one
[   73.442245][ T6599] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   73.498619][ T6604] syzkaller0: entered promiscuous mode
[   73.501505][ T6604] syzkaller0: entered allmulticast mode
[   73.602262][ T6614] __nla_validate_parse: 14 callbacks suppressed
[   73.603018][ T6614] netlink: 24 bytes leftover after parsing attributes in process `syz.2.204'.
[   73.706255][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'.
[   73.906129][ T6646] sctp: [Deprecated]: syz.0.213 (pid 6646) Use of int in max_burst socket option.
[   73.906129][ T6646] Use struct sctp_assoc_value instead
[   74.045153][ T6659] wg1: entered promiscuous mode
[   74.053899][ T6659] wg1: entered allmulticast mode
[   74.060899][ T1271] wg1 speed is unknown, defaulting to 1000
[   74.132807][ T6665] netlink: 44 bytes leftover after parsing attributes in process `syz.2.219'.
[   74.175545][ T6669] netlink: 28 bytes leftover after parsing attributes in process `syz.0.221'.
[   74.182609][ T6672] netlink: 256 bytes leftover after parsing attributes in process `syz.2.222'.
[   74.231380][ T6675] netlink: 256 bytes leftover after parsing attributes in process `syz.2.223'.
[   74.242050][ T6675] netlink: 40 bytes leftover after parsing attributes in process `syz.2.223'.
[   74.450601][ T6690] netlink: 256 bytes leftover after parsing attributes in process `syz.0.229'.
[   74.519880][ T6695] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   74.605819][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'.
[   74.721049][ T6716] wg1 speed is unknown, defaulting to 1000
[   74.742383][ T6720] netlink: 'syz.1.241': attribute type 30 has an invalid length.
[   74.850309][ T6729] netlink: set zone limit has 4 unknown bytes
[   74.853105][ T6729] netlink: 'syz.1.243': attribute type 1 has an invalid length.
[   74.865825][ T6729] bond2: entered promiscuous mode
[   74.869992][ T6729] 8021q: adding VLAN 0 to HW filter on device bond2
[   74.884532][ T6729] 8021q: adding VLAN 0 to HW filter on device bond2
[   74.888120][ T6729] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address
[   74.891941][ T6729] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   74.895857][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'.
[   74.902228][ T6729] bond2: (slave wireguard0): making interface the new active one
[   74.904957][ T6729] wireguard0: entered promiscuous mode
[   74.908032][ T6729] bond2: (slave wireguard0): Enslaving as an active interface with an up link
[   74.918431][ T6729] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   74.921483][ T6729] IPv6: NLM_F_CREATE should be set when creating new route
[   74.924356][ T6729] IPv6: NLM_F_CREATE should be set when creating new route
[   74.930478][ T6729] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   74.940545][ T6729] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address
[   74.950925][ T6729] bond2: (slave wireguard1): Enslaving as a backup interface with an up link
[   75.029442][ T6740] openvswitch: netlink: Message has 4 unknown bytes.
[   75.595276][ T6806] Set syz1 is full, maxelem 65536 reached
[   75.700299][ T6807] syzkaller1: entered promiscuous mode
[   75.702654][ T6807] syzkaller1: entered allmulticast mode
[   75.959593][ T6828] xt_socket: unknown flags 0xfc
[   76.034722][ T6832] tipc: Started in network mode
[   76.040734][ T6832] tipc: Node identity caa499183704, cluster identity 4711
[   76.044699][ T6832] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.052328][ T6835] syzkaller0: entered promiscuous mode
[   76.054575][ T6835] syzkaller0: entered allmulticast mode
[   76.067648][ T6835] tipc: Resetting bearer <eth:syzkaller0>
[   76.072177][ T6831] tipc: Resetting bearer <eth:syzkaller0>
[   76.079602][ T6831] tipc: Disabling bearer <eth:syzkaller0>
[   77.104210][ T6868] netlink: 'syz.2.289': attribute type 11 has an invalid length.
[   77.135923][ T6868] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   77.139303][ T6868] openvswitch: netlink: Message has 1 unknown bytes.
[   77.195489][ T6874] Set syz1 is full, maxelem 65536 reached
[   77.361343][ T6891] netlink: 'syz.2.297': attribute type 1 has an invalid length.
[   77.421452][ T6897] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input4
[   78.151937][ T6968] netlink: 'syz.2.321': attribute type 26 has an invalid length.
[   78.158664][ T6968] netlink: 'syz.2.321': attribute type 26 has an invalid length.
[   78.231545][ T6976] netlink: 'syz.0.323': attribute type 1 has an invalid length.
[   78.331360][ T6994] wg1: entered promiscuous mode
[   78.469423][ T7001] team0 (unregistering): Port device team_slave_0 removed
[   78.473753][ T7001] team0 (unregistering): Port device team_slave_1 removed
[   78.538528][ T7011] netlink: 'syz.2.333': attribute type 1 has an invalid length.
[   78.624862][ T7032] wg1: entered allmulticast mode
[   78.710288][ T7041] __nla_validate_parse: 31 callbacks suppressed
[   78.710297][ T7041] netlink: 256 bytes leftover after parsing attributes in process `syz.0.342'.
[   78.717836][ T7041] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   78.767198][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.344'.
[   78.779857][ T7043] netlink: 'syz.2.343': attribute type 1 has an invalid length.
[   78.782488][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.343'.
[   78.864014][ T7062] netlink: 24 bytes leftover after parsing attributes in process `syz.0.350'.
[   78.912730][ T7062] netlink: 156 bytes leftover after parsing attributes in process `syz.0.350'.
[   78.925950][ T7067] netlink: 24 bytes leftover after parsing attributes in process `syz.0.350'.
[   79.033490][ T7071] netlink: 256 bytes leftover after parsing attributes in process `syz.2.352'.
[   79.037332][ T7071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.352'.
[   79.055413][ T7071] Set syz1 is full, maxelem 65536 reached
[   79.091196][ T7083] netlink: 'syz.0.355': attribute type 1 has an invalid length.
[   79.094333][ T7083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.355'.
[   79.151012][ T7088] netlink: 16 bytes leftover after parsing attributes in process `syz.1.356'.
[   79.253280][ T7102] netlink: 'syz.0.360': attribute type 2 has an invalid length.
[   79.507155][ T7127] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   79.512816][ T7127] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.517093][ T7127] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.569119][ T7141] team0: invalid flags given to default FDB implementation
[   79.737673][ T7159] NCSI netlink: No device for ifindex 813332851
[   79.972217][ T7174] validate_nla: 2 callbacks suppressed
[   79.972226][ T7174] netlink: 'syz.0.386': attribute type 1 has an invalid length.
[   80.363581][ T7201] netlink: 'syz.0.394': attribute type 1 has an invalid length.
[   80.383213][ T7199] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.414072][ T7199] syzkaller0: entered promiscuous mode
[   80.415900][ T7199] syzkaller0: entered allmulticast mode
[   80.426487][ T7199] tipc: Resetting bearer <eth:syzkaller0>
[   80.432147][ T7198] tipc: Resetting bearer <eth:syzkaller0>
[   81.173319][   T47] cfg80211: failed to load regulatory.db
[   81.252103][ T7198] tipc: Disabling bearer <eth:syzkaller0>
[   81.270818][ T7209] wg1 speed is unknown, defaulting to 1000
[   81.347930][ T7221] Set syz1 is full, maxelem 65536 reached
[   81.454912][ T7219] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   81.455082][ T5877] bond0: (slave bond_slave_0): interface is now down
[   81.472835][ T5877] bond0: (slave bond_slave_1): interface is now down
[   81.490092][ T5877] bond0: (slave bond_slave_0): interface is now down
[   81.492406][ T5877] bond0: (slave bond_slave_1): interface is now down
[   81.497213][ T7235] Set syz1 is full, maxelem 65536 reached
[   81.499641][ T5877] bond0: now running without any active interface!
[   81.511338][ T7236] netlink: 'syz.2.408': attribute type 9 has an invalid length.
[   81.555638][ T7243] netlink: 'syz.1.410': attribute type 16 has an invalid length.
[   81.748313][ T7257] netlink: 'syz.1.417': attribute type 1 has an invalid length.
[   81.859746][ T7278] Set syz1 is full, maxelem 65536 reached
[   81.941288][ T7281] netlink: 'syz.0.427': attribute type 1 has an invalid length.
[   81.969126][ T7293] netlink: 'syz.2.430': attribute type 4 has an invalid length.
[   81.977433][ T7293] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun!
[   81.980686][ T7293] netlink: 'syz.2.430': attribute type 1 has an invalid length.
[   82.043051][ T7302] tipc: New replicast peer: 255.255.255.255
[   82.046798][ T7302] tipc: Enabled bearer <udp:syz2>, priority 10
[   82.068658][ T7306] Set syz1 is full, maxelem 65536 reached
[   82.145567][ T7310] netlink: 'syz.1.439': attribute type 1 has an invalid length.
[   82.411477][ T7345] netlink: 'syz.1.446': attribute type 1 has an invalid length.
[   82.655520][ T7374] ip6gre1: entered allmulticast mode
[   82.764104][ T7388] syzkaller1: entered promiscuous mode
[   82.766017][ T7388] syzkaller1: entered allmulticast mode
[   83.029470][ T7413] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.057598][ T7415] openvswitch: netlink: Missing valid actions attribute.
[   83.063288][ T7415] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.091260][ T7413] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.148186][ T7413] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.167555][ T1271] tipc: Node number set to 2708120785
[   83.209870][ T7413] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.312461][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.316050][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.329655][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.347067][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.725817][ T7434] __nla_validate_parse: 66 callbacks suppressed
[   83.725827][ T7434] netlink: 32 bytes leftover after parsing attributes in process `syz.2.481'.
[   83.740573][ T7435] netlink: 32 bytes leftover after parsing attributes in process `syz.2.481'.
[   83.750403][ T7434] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.782402][ T7437] netlink: 256 bytes leftover after parsing attributes in process `syz.1.482'.
[   83.908171][ T7452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.489'.
[   83.921222][ T7454] Set syz1 is full, maxelem 65536 reached
[   83.957345][ T7459] netlink: 256 bytes leftover after parsing attributes in process `syz.2.492'.
[   84.037702][ T7472] netlink: 32 bytes leftover after parsing attributes in process `syz.0.496'.
[   84.100442][ T7481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.496'.
[   84.235968][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.242287][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.271351][ T7505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.271356][ T7519] netlink: 256 bytes leftover after parsing attributes in process `syz.0.502'.
[   84.439105][ T7578] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.469845][ T7578] syzkaller0: entered promiscuous mode
[   84.471959][ T7578] syzkaller0: entered allmulticast mode
[   85.074707][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.506'.
[   85.760430][ T7638] tipc: Resetting bearer <eth:syzkaller0>
[   85.789331][ T7576] tipc: Resetting bearer <eth:syzkaller0>
[   85.803053][ T7576] tipc: Disabling bearer <eth:syzkaller0>
[   85.870931][ T7727] validate_nla: 6 callbacks suppressed
[   85.870941][ T7727] netlink: 'syz.2.510': attribute type 21 has an invalid length.
[   85.875331][ T7727] netlink: 132 bytes leftover after parsing attributes in process `syz.2.510'.
[   85.954487][ T7735] netlink: 'syz.0.511': attribute type 1 has an invalid length.
[   86.201063][ T7747] netlink: 'syz.2.515': attribute type 1 has an invalid length.
[   86.204302][ T7747] netlink: 'syz.2.515': attribute type 7 has an invalid length.
[   86.230662][ T7744] wg1: left promiscuous mode
[   86.232271][ T7744] wg1: left allmulticast mode
[   86.255770][ T7744] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.264216][ T7744] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.329894][ T7744] ip6gre1: left allmulticast mode
[   86.340153][ T7747] : entered promiscuous mode
[   86.343944][ T5314] wg1 speed is unknown, defaulting to 1000
[   86.346130][ T5314] syz0: Port: 1 Link DOWN
[   86.349883][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.353170][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.357109][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.360576][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.864585][ T7773] Set syz1 is full, maxelem 65536 reached
[   86.868634][ T7773] netlink: 'syz.1.523': attribute type 13 has an invalid length.
[   86.871632][ T7773] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[   87.011750][ T7779] netlink: 'syz.2.526': attribute type 11 has an invalid length.
[   87.167546][ T7789] netlink: 'syz.2.530': attribute type 2 has an invalid length.
[   87.261891][ T7798] openvswitch: netlink: Missing valid actions attribute.
[   87.264578][ T7798] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   87.424060][ T7809] netlink: 'syz.2.538': attribute type 1 has an invalid length.
[   87.506321][ T7816] Set syz1 is full, maxelem 65536 reached
[   87.681398][ T7821] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[   88.040237][ T7862] netlink: 'syz.0.560': attribute type 4 has an invalid length.
[   88.143153][ T7874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.705673][ T7899] Set syz1 is full, maxelem 65536 reached
[   88.742768][ T7903] __nla_validate_parse: 9 callbacks suppressed
[   88.742778][ T7903] netlink: 256 bytes leftover after parsing attributes in process `syz.1.574'.
[   88.870416][ T7923] syzkaller1: entered promiscuous mode
[   88.878707][ T7923] syzkaller1: entered allmulticast mode
[   89.100492][ T7954] netlink: 44 bytes leftover after parsing attributes in process `syz.1.589'.
[   89.247829][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.595'.
[   89.251020][ T7977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.595'.
[   89.254855][ T7979] netlink: 'syz.1.596': attribute type 1 has an invalid length.
[   89.291315][ T7983] netlink: 28 bytes leftover after parsing attributes in process `syz.2.598'.
[   89.294220][ T7983] netlink: 28 bytes leftover after parsing attributes in process `syz.2.598'.
[   89.308616][ T7984] netlink: 28 bytes leftover after parsing attributes in process `syz.2.598'.
[   89.316548][ T7984] netlink: 28 bytes leftover after parsing attributes in process `syz.2.598'.
[   89.369995][ T7994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.600'.
[   90.234153][ T8001] netlink: 256 bytes leftover after parsing attributes in process `syz.1.601'.
[   90.287848][ T8004] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun!
[   90.692845][ T8037] : entered promiscuous mode
[   91.111285][ T8083] Set syz1 is full, maxelem 65536 reached
[  113.880060][ T8137] Set syz1 is full, maxelem 65536 reached
[  114.062130][ T8160] __nla_validate_parse: 3 callbacks suppressed
[  114.062142][ T8160] netlink: 48 bytes leftover after parsing attributes in process `syz.2.634'.
[  114.132988][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.638'.
[  114.139752][ T8170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.639'.
[  114.184183][ T8173] wg1 speed is unknown, defaulting to 1000
[  114.205116][ T8178] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20000
[  114.278876][ T8184] Set syz1 is full, maxelem 65536 reached
[  114.315021][ T8190] wg1: entered promiscuous mode
[  114.333854][ T8190] wg1: entered allmulticast mode
[  114.345269][ T1271] wg1 speed is unknown, defaulting to 1000
[  114.347580][ T8192] netlink: 200 bytes leftover after parsing attributes in process `syz.1.649'.
[  114.356454][ T1271] syz0: Port: 1 Link ACTIVE
[  114.437857][ T8207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.652'.
[  114.481390][ T8211] veth3: entered allmulticast mode
[  114.484610][ T8192] netlink: 16 bytes leftover after parsing attributes in process `syz.1.649'.
[  114.485248][ T8213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.654'.
[  114.495671][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.655'.
[  114.605871][ T8221] netlink: 64 bytes leftover after parsing attributes in process `syz.0.658'.
[  114.629104][ T8233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.661'.
[  115.577672][ T8258] "syz.2.671" (8258) uses obsolete ecb(arc4) skcipher
[  115.632416][ T8270] validate_nla: 2 callbacks suppressed
[  115.632427][ T8270] netlink: 'syz.1.674': attribute type 1 has an invalid length.
[  115.647194][ T8270] netlink: 'syz.1.674': attribute type 2 has an invalid length.
[  115.761306][ T8292] sctp: [Deprecated]: syz.2.681 (pid 8292) Use of int in max_burst socket option deprecated.
[  115.761306][ T8292] Use struct sctp_assoc_value instead
[  115.815513][ T8299] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  115.978884][ T8315] netlink: 'syz.1.690': attribute type 2 has an invalid length.
[  115.981606][ T8315] netlink: 'syz.1.690': attribute type 1 has an invalid length.
[  116.170178][ T8339] tipc: Started in network mode
[  116.173050][ T8339] tipc: Node identity c68a144c4708, cluster identity 4711
[  116.179032][ T8339] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.183842][ T8339] syzkaller0: entered promiscuous mode
[  116.186799][ T8339] syzkaller0: entered allmulticast mode
[  116.202093][ T8339] tipc: Resetting bearer <eth:syzkaller0>
[  116.226012][ T8338] tipc: Resetting bearer <eth:syzkaller0>
[  116.229543][ T8346] Set syz1 is full, maxelem 65536 reached
[  116.233483][ T8338] tipc: Disabling bearer <eth:syzkaller0>
[  116.545923][ T8369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  116.550627][   T10] IPVS: starting estimator thread 0...
[  116.646682][ T8374] IPVS: using max 82 ests per chain, 196800 per kthread
[  116.677707][ T8377] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.682715][ T8377] batadv_slave_0: entered promiscuous mode
[  117.143545][ T8418] netlink: 'syz.0.724': attribute type 6 has an invalid length.
[  117.214349][ T8422] syzkaller0: entered promiscuous mode
[  117.216729][ T8422] syzkaller0: entered allmulticast mode
[  117.224050][ T8422] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.024223][ T8421] tipc: Resetting bearer <eth:syzkaller0>
[  118.913081][ T8421] tipc: Disabling bearer <eth:syzkaller0>
[  119.118498][ T8499] __nla_validate_parse: 40 callbacks suppressed
[  119.118508][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.750'.
[  119.218930][ T8508] wg1 speed is unknown, defaulting to 1000
[  119.359106][ T8513] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  119.552233][ T8539] netlink: 'syz.2.763': attribute type 11 has an invalid length.
[  119.719812][ T8546] wg1 speed is unknown, defaulting to 1000
[  119.778754][ T8557] netlink: 24 bytes leftover after parsing attributes in process `syz.2.768'.
[  119.805929][ T8557] netlink: 'syz.2.768': attribute type 10 has an invalid length.
[  119.962796][ T8561] netlink: 'syz.0.769': attribute type 7 has an invalid length.
[  119.972988][ T8561] : entered promiscuous mode
[  120.042634][ T8567] netlink: 256 bytes leftover after parsing attributes in process `syz.1.773'.
[  120.053884][ T8565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.772'.
[  120.058784][ T8569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.770'.
[  120.090891][ T8571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.774'.
[  120.258925][ T8593] netlink: 264 bytes leftover after parsing attributes in process `syz.0.783'.
[  120.262258][ T8593] netlink: 56 bytes leftover after parsing attributes in process `syz.0.783'.
[  120.303860][ T8596] netlink: 256 bytes leftover after parsing attributes in process `syz.1.781'.
[  120.360257][ T8607] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  120.370614][ T8607] netlink: 'syz.0.787': attribute type 1 has an invalid length.
[  120.432982][ T8613] Set syz1 is full, maxelem 65536 reached
[  120.489022][ T8619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.793'.
[  120.648062][ T8642] netlink: 'syz.0.798': attribute type 2 has an invalid length.
[  120.741694][ T8652] netlink: 'syz.1.804': attribute type 27 has an invalid length.
[  120.753177][ T8652] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.835325][ T8662] netlink: 'syz.1.808': attribute type 1 has an invalid length.
[  120.860902][ T5314] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  120.863395][ T5314] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  120.884277][ T5314] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  120.911781][ T8671] tc_dump_action: action bad kind
[  120.935171][ T8675] tc_dump_action: action bad kind
[  121.075038][ T8683] netlink: 'syz.2.812': attribute type 7 has an invalid length.
[  121.090155][ T8683] vlan2: entered promiscuous mode
[  121.092462][ T8683] bridge0: port 3(vlan2) entered blocking state
[  121.094750][ T8683] bridge0: port 3(vlan2) entered disabled state
[  121.098375][ T8683] vlan2: entered allmulticast mode
[  121.100177][ T8683] bridge0: entered allmulticast mode
[  121.103262][ T8683] vlan2: left allmulticast mode
[  121.104919][ T8683] bridge0: left allmulticast mode
[  121.195815][ T8690] wg1 speed is unknown, defaulting to 1000
[  121.284330][ T8699] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb
[  121.481828][ T8717] netlink: 'syz.1.822': attribute type 1 has an invalid length.
[  121.501067][ T8717] 8021q: adding VLAN 0 to HW filter on device bond3
[  121.519857][ T8717] 8021q: adding VLAN 0 to HW filter on device bond3
[  121.523222][ T8717] bond3: (slave vcan1): The slave device specified does not support setting the MAC address
[  121.527638][ T8717] bond3: (slave vcan1): Error -95 calling set_mac_address
[  121.562831][ T8721] gretap1: entered promiscuous mode
[  121.567955][ T8721] bond3: (slave gretap1): making interface the new active one
[  121.570855][ T8721] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  121.584582][ T8717] macvlan2: entered promiscuous mode
[  121.592214][ T8717] macvlan2: entered allmulticast mode
[  121.599410][ T8717] bond3: entered promiscuous mode
[  121.603222][ T8717] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  121.608888][ T8717] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  121.614606][ T8717] bond3: left promiscuous mode
[  122.058606][ T3565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.061363][ T3565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.072886][ T8758] netlink: 'syz.1.837': attribute type 9 has an invalid length.
[  122.335719][ T8774] netlink: 'syz.1.843': attribute type 2 has an invalid length.
[  122.339768][ T8774] netlink: 'syz.1.843': attribute type 1 has an invalid length.
[  122.395748][ T8783] Set syz1 is full, maxelem 65536 reached
[  122.919120][ T8809] sctp: [Deprecated]: syz.2.855 (pid 8809) Use of int in maxseg socket option.
[  122.919120][ T8809] Use struct sctp_assoc_value instead
[  123.343770][ T8851] : left promiscuous mode
[  123.400179][ T8853] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  123.409780][ T8851] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  123.412524][ T8851] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  123.417927][ T5853] Bluetooth: hci0: command tx timeout
[  123.763013][ T8857] netlink: 'syz.2.874': attribute type 1 has an invalid length.
[  123.802653][ T8857] bond3: entered promiscuous mode
[  123.804831][ T8857] bond3: entered allmulticast mode
[  123.808335][ T8857] 8021q: adding VLAN 0 to HW filter on device bond3
[  124.175444][ T8880] __nla_validate_parse: 15 callbacks suppressed
[  124.175459][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.881'.
[  124.228539][ T8882] wg1 speed is unknown, defaulting to 1000
[  124.351049][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.883'.
[  124.380209][ T8892] netlink: 11 bytes leftover after parsing attributes in process `syz.1.884'.
[  124.957304][ T8906] wg1 speed is unknown, defaulting to 1000
[  125.245303][ T8930] netlink: 146780 bytes leftover after parsing attributes in process `syz.0.893'.
[  125.413018][ T8943] netlink: 428 bytes leftover after parsing attributes in process `syz.1.897'.
[  125.434126][ T8941] netlink: 64 bytes leftover after parsing attributes in process `syz.0.898'.
[  125.458753][ T8949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.901'.
[  125.510603][ T8946] netlink: 16 bytes leftover after parsing attributes in process `syz.2.900'.
[  125.516061][ T8941] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  125.619976][ T8963] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.625330][ T8963] syzkaller0: entered promiscuous mode
[  125.628773][ T8963] syzkaller0: entered allmulticast mode
[  125.668949][ T8963] tipc: Resetting bearer <eth:syzkaller0>
[  125.672459][ T8963] netlink: 'syz.0.907': attribute type 8 has an invalid length.
[  125.677855][ T8962] tipc: Resetting bearer <eth:syzkaller0>
[  125.696971][ T8962] tipc: Disabling bearer <eth:syzkaller0>
[  126.051246][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.919'.
[  126.182013][ T9004] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.189973][ T9004] syzkaller0: entered promiscuous mode
[  126.191968][ T9004] syzkaller0: entered allmulticast mode
[  126.195383][ T9006] netlink: 'syz.0.922': attribute type 3 has an invalid length.
[  126.195825][ T9004] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  126.211897][ T9004] tipc: Resetting bearer <eth:syzkaller0>
[  126.221301][ T9003] tipc: Resetting bearer <eth:syzkaller0>
[  126.230306][ T9003] tipc: Disabling bearer <eth:syzkaller0>
[  126.304139][ T9012] netlink: 'syz.2.925': attribute type 4 has an invalid length.
[  126.594047][ T9029] netlink: 16 bytes leftover after parsing attributes in process `syz.1.929'.
[  126.865147][ T9047] Set syz1 is full, maxelem 65536 reached
[  127.318746][ T9081] netlink: 'syz.2.946': attribute type 16 has an invalid length.
[  127.321753][ T9081] netlink: 'syz.2.946': attribute type 3 has an invalid length.
[  127.325927][ T9081] openvswitch: netlink: Port 622073004 exceeds max allowable 65535
[  127.377250][ T9088] macvtap1: entered allmulticast mode
[  127.379082][ T9088] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  127.382377][ T9088] batman_adv: batadv0: Adding interface: macvtap1
[  127.384615][ T9088] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.403395][ T9088] batman_adv: batadv0: Interface activated: macvtap1
[  127.445569][ T9092] wg1 speed is unknown, defaulting to 1000
[  127.819861][ T9135] netlink: 'syz.0.963': attribute type 10 has an invalid length.
[  127.826117][ T9135] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  127.918758][ T9141] wg1 speed is unknown, defaulting to 1000
[  128.683063][ T9155] netlink: 'syz.0.968': attribute type 30 has an invalid length.
[  128.915678][ T9165] netlink: 'syz.1.971': attribute type 1 has an invalid length.
[  129.145079][ T9190] Set syz1 is full, maxelem 65536 reached
[  129.209935][ T9194] __nla_validate_parse: 6 callbacks suppressed
[  129.209949][ T9194] netlink: 32 bytes leftover after parsing attributes in process `syz.1.979'.
[  129.330139][ T9199] syzkaller0: entered promiscuous mode
[  129.332233][ T9199] syzkaller0: entered allmulticast mode
[  129.977922][ T9220] netlink: 28 bytes leftover after parsing attributes in process `syz.1.990'.
[  129.983900][ T9222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.990'.
[  130.068371][ T9228] netlink: 'syz.1.992': attribute type 1 has an invalid length.
[  130.070895][ T9228] netlink: 224 bytes leftover after parsing attributes in process `syz.1.992'.
[  130.080361][ T9228] atomic_op ffff88803d731998 conn xmit_atomic 0000000000000000
[  130.543080][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.994'.
[  130.547872][ T9235] tipc: Enabled bearer <eth:vlan0>, priority 18
[  130.701870][ T9241] netlink: 16 bytes leftover after parsing attributes in process `syz.2.996'.
[  130.705129][ T9241] tc_dump_action: action bad kind
[  130.708540][ T9242] netlink: 16 bytes leftover after parsing attributes in process `syz.2.996'.
[  130.714542][ T9242] tc_dump_action: action bad kind
[  130.761212][ T9244] wg1 speed is unknown, defaulting to 1000
[  130.880324][ T9253] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.883302][ T9253] batadv_slave_1: entered promiscuous mode
[  130.890139][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.999'.
[  131.118554][ T9276] wg1 speed is unknown, defaulting to 1000
[  131.183009][ T9281] 8021q: VLANs not supported on ipvlan0
[  131.274346][ T9288] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  131.368124][ T9301] netlink: 'syz.2.1016': attribute type 3 has an invalid length.
[  131.370755][ T9301] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1016'.
[  131.374829][ T9301] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  131.410843][ T9304] wg1 speed is unknown, defaulting to 1000
[  131.433106][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1017'.
[  131.450311][ T9305] macsec1: entered promiscuous mode
[  131.452046][ T9305] hsr0: entered promiscuous mode
[  131.455056][ T9305] hsr0: left promiscuous mode
[  131.536662][   T47] tipc: Node number set to 4255160600
[  131.669151][ T9343] wg1 speed is unknown, defaulting to 1000
[  131.702360][ T9345] wg1 speed is unknown, defaulting to 1000
[  131.881029][ T9366] syzkaller1: entered promiscuous mode
[  131.883049][ T9366] syzkaller1: entered allmulticast mode
[  131.898579][ T9359] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  132.082791][ T9379] wg1 speed is unknown, defaulting to 1000
[  132.101300][ T9380] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.300110][ T9392] netlink: 'syz.2.1041': attribute type 26 has an invalid length.
[  132.369048][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.371270][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.513674][ T9411] batman_adv: batadv0: Adding interface: ip6gretap1
[  132.516604][ T9411] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  132.528011][ T9411] batman_adv: batadv0: Interface activated: ip6gretap1
[  132.701596][ T9429] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001
[  132.790850][   T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.793559][   T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.823080][ T9439] IPVS: Error joining to the multicast group
[  132.823138][ T9437] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  132.832385][ T9437] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.862585][ T9446] openvswitch: netlink: IP tunnel dst address not specified
[  132.969560][ T9457] tipc: Resetting bearer <eth:vlan0>
[  132.971717][ T9457] vlan0: entered promiscuous mode
[  133.030930][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  133.175129][ T9490] netlink: 'syz.1.1075': attribute type 1 has an invalid length.
[  133.185947][ T9490] bridge3: entered promiscuous mode
[  133.190033][ T9490] macsec1: entered promiscuous mode
[  133.192433][ T9490] macsec1: entered allmulticast mode
[  133.194730][ T9490] bridge3: entered allmulticast mode
[  133.201255][ T9490] bridge3: port 1(macsec1) entered blocking state
[  133.204226][ T9490] bridge3: port 1(macsec1) entered disabled state
[  133.210094][ T9490] bridge3: left allmulticast mode
[  133.212497][ T9490] bridge3: left promiscuous mode
[  133.597148][ T9518] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  134.047130][ T9547] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  134.252155][ T9557] netlink: 'syz.1.1096': attribute type 5 has an invalid length.
[  134.425773][ T9568] __nla_validate_parse: 20 callbacks suppressed
[  134.425788][ T9568] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1100'.
[  134.435033][ T9568] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1100'.
[  134.450643][ T9568] xt_limit: Overflow, try lower: 271964/0
[  134.602920][ T9571] netlink: 'syz.2.1101': attribute type 1 has an invalid length.
[  134.649403][ T9571] bond4: (slave gretap1): making interface the new active one
[  134.653274][ T9571] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  134.852827][ T9580] netlink: 'syz.0.1103': attribute type 10 has an invalid length.
[  134.857751][ T9580] batman_adv: batadv0: Removing interface: batadv_slave_0
[  134.865595][ T9580] bond0: (slave batadv_slave_0): Enslaving as an active interface with a down link
[  134.872370][ T9580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1103'.
[  135.051863][ T9589] veth1_to_team: entered allmulticast mode
[  135.220794][ T9593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1107'.
[  135.224690][ T9593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1107'.
[  135.265471][ T9596] netlink: 'syz.0.1109': attribute type 1 has an invalid length.
[  135.269117][ T9598] netlink: 'syz.0.1109': attribute type 1 has an invalid length.
[  135.306098][ T9597] veth5: entered promiscuous mode
[  135.335112][ T9596] bond2: (slave veth3): Enslaving as an active interface with a down link
[  135.398335][ T9606] netlink: 'syz.1.1112': attribute type 10 has an invalid length.
[  135.401640][ T9606] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  135.495322][ T9614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1115'.
[  135.621938][ T9623] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  135.624833][ T9623] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  135.730214][ T9634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1122'.
[  135.769274][ T9637] netlink: 'syz.0.1121': attribute type 1 has an invalid length.
[  135.820553][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1121'.
[  135.833323][ T9637] bond3: entered promiscuous mode
[  135.843774][ T9637] 8021q: adding VLAN 0 to HW filter on device bond3
[  136.382767][ T9701] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.385316][ T9701] ip_vti0: entered promiscuous mode
[  136.389793][ T9701] ip_vti0: entered allmulticast mode
[  136.394676][ T9700] tipc: Resetting bearer <eth:syzkaller0>
[  136.398576][  T791] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  136.409954][ T9700] tipc: Disabling bearer <eth:syzkaller0>
[  136.422968][ T9707] wg1: left promiscuous mode
[  136.431521][ T9707] bond3: left promiscuous mode
[  136.435154][ T9707] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  136.456570][  T791] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  136.459541][ T9707] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1140'.
[  136.591104][ T9724] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  136.689060][ T9729] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1148'.
[  136.814033][ T9746] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  136.820906][ T9746] bridge_slave_0: default FDB implementation only supports local addresses
[  136.848321][ T9748] validate_nla: 1 callbacks suppressed
[  136.848331][ T9748] netlink: 'syz.0.1155': attribute type 2 has an invalid length.
[  136.852651][ T9748] netlink: 'syz.0.1155': attribute type 8 has an invalid length.
[  136.926715][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  137.103170][ T9758] syzkaller1: entered promiscuous mode
[  137.105053][ T9758] syzkaller1: entered allmulticast mode
[  137.210924][ T9764] netlink: 'syz.1.1161': attribute type 8 has an invalid length.
[  137.246544][  T791] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  137.291234][ T9771] wg1 speed is unknown, defaulting to 1000
[  137.432048][ T5877] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  137.677809][ T9788] batman_adv: batadv0: Adding interface: ip6gretap2
[  137.680488][ T9788] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.691948][ T9788] batman_adv: batadv0: Interface activated: ip6gretap2
[  137.742000][ T9795] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20000
[  137.883204][ T9800] netlink: 'syz.0.1173': attribute type 2 has an invalid length.
[  138.042055][ T9815] netlink: 'syz.0.1178': attribute type 4 has an invalid length.
[  138.362913][ T9835] 8021q: VLANs not supported on ip_vti0
[  138.447067][ T5911] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  138.450265][ T5911] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  138.691944][ T9844] syzkaller0: entered promiscuous mode
[  138.694353][ T9844] syzkaller0: entered allmulticast mode
[  139.500199][  T791] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  139.655393][ T9852] __nla_validate_parse: 11 callbacks suppressed
[  139.655403][ T9852] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1188'.
[  139.750090][ T9866] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1194'.
[  139.889717][ T9883] netlink: 'syz.1.1201': attribute type 23 has an invalid length.
[  139.958265][ T9889] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  139.966186][ T9889] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1204'.
[  139.973529][ T9889] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1204'.
[  140.602715][ T9947] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.608258][ T9949] tipc: Resetting bearer <eth:syzkaller0>
[  140.619930][ T9946] tipc: Disabling bearer <eth:syzkaller0>
[  140.758678][ T9960] IPv6: NLM_F_CREATE should be specified when creating new route
[  140.909750][ T9974] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.013593][ T9987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1230'.
[  141.042715][ T9987] veth5: entered promiscuous mode
[  141.045375][ T9991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1231'.
[  141.095831][ T9994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1232'.
[  141.180671][T10010] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  141.190619][T10012] netlink: 'syz.0.1237': attribute type 1 has an invalid length.
[  141.194185][T10012] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1237'.
[  141.200606][T10010] Bluetooth: hci0: Opcode 0x080f failed: -22
[  141.241877][T10016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1239'.
[  141.251615][T10016] IPVS: Error joining to the multicast group
[  141.418494][T10023] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1241'.
[  141.639396][T10042] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  141.642464][T10042] sctp: [Deprecated]: syz.1.1246 (pid 10042) Use of int in maxseg socket option.
[  141.642464][T10042] Use struct sctp_assoc_value instead
[  141.803278][T10055] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.922110][T10069] netlink: 'syz.2.1256': attribute type 1 has an invalid length.
[  142.053697][T10087] netlink: 'syz.1.1262': attribute type 1 has an invalid length.
[  142.057599][T10088] delete_channel: no stack
[  142.092238][T10091] wg1 speed is unknown, defaulting to 1000
[  142.126573][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  142.321666][T10124] veth0_to_bridge: entered promiscuous mode
[  142.334398][T10128] netlink: 'syz.0.1276': attribute type 1 has an invalid length.
[  142.360855][T10126] veth0_to_bridge: left promiscuous mode
[  142.424402][T10128] bond4: (slave gretap1): making interface the new active one
[  142.428288][T10128] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  142.432381][T10133] 8021q: adding VLAN 0 to HW filter on device bond4
[  143.039897][T10174] wg1 speed is unknown, defaulting to 1000
[  143.260746][ T5853] Bluetooth: hci0: command tx timeout
[  143.309741][T10200] bridge5: port 1(bond5) entered blocking state
[  143.312296][T10200] bridge5: port 1(bond5) entered disabled state
[  143.314910][T10200] bond5: entered allmulticast mode
[  143.321154][T10200] bond5: entered promiscuous mode
[  143.345676][T10207] netlink: 'syz.2.1300': attribute type 15 has an invalid length.
[  143.483561][T10221] netlink: 'syz.1.1306': attribute type 1 has an invalid length.
[  143.503999][T10221] 8021q: adding VLAN 0 to HW filter on device bond6
[  143.529651][T10221] bond6: (slave geneve2): making interface the new active one
[  143.533951][T10221] bond6: (slave geneve2): Enslaving as an active interface with an up link
[  143.569011][T10221] syz.1.1306 (10221) used greatest stack depth: 18576 bytes left
[  143.923398][T10266] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  144.070651][T10294] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  144.113899][T10304] netlink: 'syz.2.1333': attribute type 16 has an invalid length.
[  144.117591][T10304] netlink: 'syz.2.1333': attribute type 3 has an invalid length.
[  144.225185][T10314] wg1 speed is unknown, defaulting to 1000
[  144.362966][T10318] wg1 speed is unknown, defaulting to 1000
[  144.434300][T10314] macsec0: entered promiscuous mode
[  144.436038][T10314] syzkaller0: entered promiscuous mode
[  144.439998][T10314] syzkaller0: left promiscuous mode
[  144.716248][T10320] __nla_validate_parse: 27 callbacks suppressed
[  144.716258][T10320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1338'.
[  144.774217][T10327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1339'.
[  145.110599][T10338] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1343'.
[  145.176494][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  145.194875][T10340] bond_slave_0: entered promiscuous mode
[  145.197186][T10340] bond_slave_1: entered promiscuous mode
[  145.199860][T10340] vlan2: entered promiscuous mode
[  145.202107][T10340] bond0: entered promiscuous mode
[  145.202502][T10318] delete_channel: no stack
[  145.809132][T10372] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1356'.
[  145.812980][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1356'.
[  145.816878][T10372] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1356'.
[  146.011288][T10398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1365'.
[  146.017121][T10398] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1365'.
[  146.141707][T10404] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1369'.
[  146.169325][T10409] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  146.173380][T10409] syzkaller0: entered promiscuous mode
[  146.175360][T10409] syzkaller0: entered allmulticast mode
[  146.218865][T10415] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1371'.
[  146.275084][T10417] sctp: [Deprecated]: syz.2.1372 (pid 10417) Use of int in max_burst socket option deprecated.
[  146.275084][T10417] Use struct sctp_assoc_value instead
[  146.316852][T10419] wg1 speed is unknown, defaulting to 1000
[  146.435709][T10429] netlink: 'syz.2.1376': attribute type 42 has an invalid length.
[  146.465886][T10430] openvswitch: netlink: IP tunnel TTL not specified.
[  146.617162][T10419] ip6gretap0: entered promiscuous mode
[  146.619831][T10419] macsec1: entered promiscuous mode
[  146.625390][T10419] ip6gretap0: left promiscuous mode
[  146.733408][T10454] netlink: 'syz.0.1379': attribute type 1 has an invalid length.
[  147.241361][T10492] wg1 speed is unknown, defaulting to 1000
[  147.291672][T10492] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  147.628126][T10514] block nbd1: server does not support multiple connections per device.
[  147.632714][T10514] block nbd1: shutting down sockets
[  147.762964][T10524] netlink: 'syz.1.1398': attribute type 1 has an invalid length.
[  147.766809][T10524] netlink: 'syz.1.1398': attribute type 1 has an invalid length.
[  147.770095][T10524] netlink: 'syz.1.1398': attribute type 1 has an invalid length.
[  147.773429][T10524] netlink: 'syz.1.1398': attribute type 1 has an invalid length.
[  147.777390][T10524] netlink: 'syz.1.1398': attribute type 1 has an invalid length.
[  147.780807][T10524] netlink: 'syz.1.1398': attribute type 1 has an invalid length.
[  147.784285][T10524] netlink: 'syz.1.1398': attribute type 1 has an invalid length.
[  147.790849][T10524] netlink: 'syz.1.1398': attribute type 1 has an invalid length.
[  147.795412][T10524] netlink: 'syz.1.1398': attribute type 1 has an invalid length.
[  147.799546][T10524] netlink: 'syz.1.1398': attribute type 1 has an invalid length.
[  148.264016][T10566] openvswitch: netlink: Tunnel attr 14 has unexpected len 4 expected 0
[  148.309555][T10568] IPVS: set_ctl: invalid protocol: 137 172.20.20.40:20001
[  148.361862][T10574] sctp: [Deprecated]: syz.0.1417 (pid 10574) Use of struct sctp_assoc_value in delayed_ack socket option.
[  148.361862][T10574] Use struct sctp_sack_info instead
[  148.683480][T10589] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  148.687381][T10589] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  148.695141][T10589] syzkaller0: entered promiscuous mode
[  148.697583][T10589] syzkaller0: entered allmulticast mode
[  149.654445][T10591] tipc: Resetting bearer <eth:syzkaller0>
[  149.657244][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  149.666943][T10599] tc_dump_action: action bad kind
[  149.687898][T10588] tipc: Resetting bearer <eth:syzkaller0>
[  149.708002][T10588] tipc: Disabling bearer <eth:syzkaller0>
[  149.826482][T10619] __nla_validate_parse: 18 callbacks suppressed
[  149.826514][T10619] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1432'.
[  149.858328][T10622] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1433'.
[  149.883608][T10626] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1435'.
[  149.984182][T10636] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1438'.
[  150.048746][T10645] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1441'.
[  150.051902][T10645] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1441'.
[  150.114124][T10657] bridge0: port 3(erspan0) entered blocking state
[  150.122929][T10657] bridge0: port 3(erspan0) entered disabled state
[  150.125567][T10657] erspan0: entered allmulticast mode
[  150.132240][T10657] erspan0: entered promiscuous mode
[  150.135053][T10657] bridge0: port 3(erspan0) entered blocking state
[  150.137392][T10657] bridge0: port 3(erspan0) entered forwarding state
[  150.172595][T10663] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1446'.
[  150.196841][T10667] erspan0: left allmulticast mode
[  150.199087][T10667] erspan0: left promiscuous mode
[  150.201871][T10667] bridge0: port 3(erspan0) entered disabled state
[  150.534892][T10696] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  150.639293][T10700] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1457'.
[  150.784684][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1464'.
[  151.230708][T10725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1467'.
[  151.532592][T10731] wg1 speed is unknown, defaulting to 1000
[  151.830636][T10738] veth5: entered promiscuous mode
[  153.504376][T10840] validate_nla: 29 callbacks suppressed
[  153.504386][T10840] netlink: 'syz.0.1505': attribute type 1 has an invalid length.
[  153.574725][T10847] sctp: [Deprecated]: syz.1.1506 (pid 10847) Use of int in max_burst socket option.
[  153.574725][T10847] Use struct sctp_assoc_value instead
[  153.911349][T10872] netlink: 'syz.1.1515': attribute type 1 has an invalid length.
[  153.914331][T10872] netlink: 'syz.1.1515': attribute type 1 has an invalid length.
[  154.187894][T10892] 8021q: VLANs not supported on ip6tnl0
[  154.619808][T10915] wg1 speed is unknown, defaulting to 1000
[  154.780606][T10920] veth1_to_bond: entered allmulticast mode
[  154.804562][T10919] bond0: (slave bond_slave_1): Releasing backup interface
[  154.822805][T10919] veth1_to_bond (unregistering): left allmulticast mode
[  154.995339][T10928] __nla_validate_parse: 16 callbacks suppressed
[  154.995349][T10928] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1532'.
[  155.001417][T10928] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1532'.
[  155.078059][T10932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1534'.
[  155.081932][T10932] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1534'.
[  155.089962][T10932] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  155.121810][T10934] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1535'.
[  155.185439][T10940] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.188886][T10943] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1539'.
[  155.192399][T10943] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1539'.
[  155.195418][T10943] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1539'.
[  155.199959][T10944] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1539'.
[  155.203287][T10944] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1539'.
[  155.719851][T10980] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  156.062559][T10998] netlink: 'syz.1.1560': attribute type 12 has an invalid length.
[  156.065978][T10998] netlink: 'syz.1.1560': attribute type 12 has an invalid length.
[  156.189225][T11010] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  156.415808][T11019] wg1 speed is unknown, defaulting to 1000
[  157.201285][T11044] syz.2.1571 uses old SIOCAX25GETINFO
[  158.250485][T11064] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  158.262571][T11064] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  158.449477][T11070] netlink: 'syz.2.1579': attribute type 10 has an invalid length.
[  158.451993][T11070] dummy0: entered promiscuous mode
[  158.453982][T11070] dummy0: entered allmulticast mode
[  158.456105][T11070] bridge0: port 3(dummy0) entered blocking state
[  158.460465][T11070] bridge0: port 3(dummy0) entered disabled state
[  158.464550][T11070] bridge0: port 3(dummy0) entered blocking state
[  158.467226][T11070] bridge0: port 3(dummy0) entered forwarding state
[  159.117578][T11114] netlink: 'syz.2.1593': attribute type 2 has an invalid length.
[  159.122193][T11113] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.128786][T11113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  159.301810][T11124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  159.852636][T11126] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  160.368694][T11138] __nla_validate_parse: 10 callbacks suppressed
[  160.368705][T11138] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1603'.
[  160.526556][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  160.963000][T11148] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  160.972087][T11148] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.031447][T11148] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.091459][T11148] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.143527][T11148] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.205914][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  161.215323][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  161.223803][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  161.232379][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  161.353270][T11158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1611'.
[  161.358453][T11158] @: renamed from veth0_vlan (while UP)
[  161.380958][T11158] wg1 speed is unknown, defaulting to 1000
[  161.775277][T11170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.130837][T11172] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1615'.
[  163.035104][T11181] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  163.038775][T11181] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  163.093358][T11183] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  163.125112][T11187] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1620'.
[  163.133319][T11188] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1620'.
[  163.188793][T11193] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  163.368513][T11215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  163.504228][T11225] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1633'.
[  163.726550][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  163.779128][T11246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1639'.
[  163.822338][T11246] syzkaller0: entered promiscuous mode
[  163.824864][T11246] syzkaller0: entered allmulticast mode
[  164.169702][T11272] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.184423][T11272] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1648'.
[  164.318661][T11286] netlink: 'syz.0.1650': attribute type 1 has an invalid length.
[  164.321206][T11286] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1650'.
[  165.042928][T11280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  165.090168][T11295] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1655'.
[  165.513333][T11321] __nla_validate_parse: 2 callbacks suppressed
[  165.513345][T11321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1665'.
[  165.589605][T11325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1667'.
[  165.663835][T11332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1670'.
[  165.677743][T11332] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1670'.
[  165.681612][T11332] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1670'.
[  165.685739][T11332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1670'.
[  165.845652][T11337] netlink: 'syz.0.1672': attribute type 1 has an invalid length.
[  165.895733][T11348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1673'.
[  165.903324][T11348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1673'.
[  165.917567][T11348] syzkaller0: entered promiscuous mode
[  165.919489][T11348] syzkaller0: entered allmulticast mode
[  166.026258][T11357] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1678'.
[  166.030411][T11357] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1678'.
[  167.114719][T11419] veth1: entered promiscuous mode
[  167.124803][T11419] netlink: 'syz.2.1698': attribute type 1 has an invalid length.
[  167.129467][T11419] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  167.620646][T11450] netlink: 'syz.1.1708': attribute type 2 has an invalid length.
[  167.625994][T11450] k*]: entered promiscuous mode
[  167.634500][T11450] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  167.741701][T11461] netlink: 'syz.0.1712': attribute type 3 has an invalid length.
[  168.050826][T11497] netlink: 'syz.1.1724': attribute type 15 has an invalid length.
[  168.085128][T11497] syzkaller0: entered promiscuous mode
[  168.087109][T11497] syzkaller0: entered allmulticast mode
[  169.025768][T11503] syzkaller1: entered promiscuous mode
[  169.029332][T11503] syzkaller1: entered allmulticast mode
[  169.154250][T11523] netlink: 'syz.1.1729': attribute type 1 has an invalid length.
[  169.406735][   T89] wlan0: Trigger new scan to find an IBSS to join
[  169.495745][T11562] netlink: 'syz.0.1741': attribute type 9 has an invalid length.
[  169.800820][T11578] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  169.805299][T11578] syzkaller0: entered promiscuous mode
[  169.808507][T11578] syzkaller0: entered allmulticast mode
[  170.352836][T11598] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  170.363069][T11598] tipc: Resetting bearer <eth:syzkaller0>
[  170.368307][T11597] tipc: Disabling bearer <eth:syzkaller0>
[  170.571994][T11608] __nla_validate_parse: 24 callbacks suppressed
[  170.572010][T11608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1752'.
[  170.592999][T11576] tipc: Resetting bearer <eth:syzkaller0>
[  170.615723][T11576] tipc: Disabling bearer <eth:syzkaller0>
[  170.733401][T11616] wg1 speed is unknown, defaulting to 1000
[  170.745432][T11623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1755'.
[  170.791954][T11626] wg1 speed is unknown, defaulting to 1000
[  170.879521][T11634] sctp: [Deprecated]: syz.1.1756 (pid 11634) Use of struct sctp_assoc_value in delayed_ack socket option.
[  170.879521][T11634] Use struct sctp_sack_info instead
[  171.261631][T11650] netlink: 'syz.0.1764': attribute type 21 has an invalid length.
[  171.264267][T11650] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1764'.
[  171.269540][T11650] netlink: 'syz.0.1764': attribute type 4 has an invalid length.
[  171.272080][T11650] netlink: 'syz.0.1764': attribute type 3 has an invalid length.
[  171.274708][T11650] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1764'.
[  171.310855][T11656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1765'.
[  171.379103][T11665] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  171.382031][T11665] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  171.602726][T11679] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1772'.
[  172.229249][T11690] bond7: entered promiscuous mode
[  172.231995][T11690] 8021q: adding VLAN 0 to HW filter on device bond7
[  172.291784][T11697] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  172.295175][T11697] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  172.361376][T11700] netlink: 'syz.0.1779': attribute type 2 has an invalid length.
[  172.398410][T11701] vxlan0: entered promiscuous mode
[  172.400608][T11701] vxlan0: entered allmulticast mode
[  172.403931][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  172.407738][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  172.411211][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  172.414687][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  172.449369][   T53] wlan0: Trigger new scan to find an IBSS to join
[  172.456965][T11715] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1784'.
[  172.578161][T11725] bpq0: entered promiscuous mode
[  172.669429][T11736] wg1 speed is unknown, defaulting to 1000
[  172.877575][T11752] syzkaller0: entered promiscuous mode
[  172.879907][T11752] syzkaller0: entered allmulticast mode
[  172.947240][T11758] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1799'.
[  172.952580][T11758] sctp: [Deprecated]: syz.0.1799 (pid 11758) Use of struct sctp_assoc_value in delayed_ack socket option.
[  172.952580][T11758] Use struct sctp_sack_info instead
[  172.959696][T11758] sctp: [Deprecated]: syz.0.1799 (pid 11758) Use of struct sctp_assoc_value in delayed_ack socket option.
[  172.959696][T11758] Use struct sctp_sack_info instead
[  173.189653][T11772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1804'.
[  173.199571][T11772] bond0: (slave rose0): Error: Device can not be enslaved while up
[  173.417779][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.422580][T11777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1805'.
[  174.020018][T11772] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  174.167601][T11807] openvswitch: netlink: Message has 5 unknown bytes.
[  174.291060][T11818] netlink: 'syz.1.1817': attribute type 4 has an invalid length.
[  174.345426][T11819] netlink: 'syz.1.1817': attribute type 4 has an invalid length.
[  174.428349][T11829] netlink: 'syz.0.1815': attribute type 10 has an invalid length.
[  174.792130][T11829] 8021q: adding VLAN 0 to HW filter on device batadv0
[  174.850745][T11829] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  174.856807][T11834] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  174.859268][T11839] syzkaller0: entered promiscuous mode
[  174.861568][T11839] syzkaller0: entered allmulticast mode
[  174.874986][T11824] syzkaller0: mtu less than device minimum
[  174.887100][T11827] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.903731][T11823] tipc: Resetting bearer <eth:syzkaller0>
[  174.924582][T11823] tipc: Disabling bearer <eth:syzkaller0>
[  174.958818][T11848] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  175.007722][T11855] netlink: 'syz.0.1822': attribute type 32 has an invalid length.
[  175.012680][T11855] netlink: 'syz.0.1822': attribute type 1 has an invalid length.
[  175.020903][T11855] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  175.088057][T11861] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  175.091816][T11861] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  175.128972][T11866] openvswitch: netlink: IPv4 tunnel dst address is zero
[  175.647592][T11920] __nla_validate_parse: 9 callbacks suppressed
[  175.647601][T11920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1841'.
[  175.655153][T11920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1841'.
[  175.658436][T11920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1841'.
[  175.830132][T11930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1843'.
[  175.972774][T11941] netlink: 'syz.2.1848': attribute type 10 has an invalid length.
[  175.982462][T11941] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  175.988208][T11941] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  176.510140][T11955] netlink: 'syz.0.1853': attribute type 2 has an invalid length.
[  176.803004][T11967] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1858'.
[  176.936210][T11984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1863'.
[  176.939868][T11986] IPv6: Can't replace route, no match found
[  176.953271][   T33] audit: type=1804 audit(1756439302.162:3): pid=11986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1864" name="/newroot/654/cgroup.controllers" dev="tmpfs" ino=3332 res=1 errno=0
[  176.964219][   T33] audit: type=1800 audit(1756439302.162:4): pid=11986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1864" name="cgroup.controllers" dev="tmpfs" ino=3332 res=0 errno=0
[  177.000741][T11993] netlink: 'syz.1.1866': attribute type 3 has an invalid length.
[  177.054159][T11998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1868'.
[  177.205059][ T5853] Bluetooth: hci2: link tx timeout
[  177.208535][ T5853] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.229370][T12009] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1872'.
[  177.306055][T12014] wg1 speed is unknown, defaulting to 1000
[  177.401436][T12014] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  177.495090][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1876'.
[  177.500418][T12027] ip6tnl3: entered promiscuous mode
[  177.742933][T12042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1882'.
[  177.769038][T12039] wg1 speed is unknown, defaulting to 1000
[  177.954830][T12063] syz_tun: entered promiscuous mode
[  177.957535][T12063] syz_tun: entered allmulticast mode
[  177.972304][ T1271] IPVS: starting estimator thread 0...
[  178.035141][T12073] netlink: 'syz.2.1891': attribute type 1 has an invalid length.
[  178.038888][T12071] syzkaller0: create flow: hash 500863626 index 1
[  178.042496][T12073] netlink: 'syz.2.1891': attribute type 1 has an invalid length.
[  178.073014][T12065] syzkaller0: delete flow: hash 500863626 index 1
[  178.076871][T12066] IPVS: using max 82 ests per chain, 196800 per kthread
[  179.047195][T12085] netlink: 'syz.1.1893': attribute type 1 has an invalid length.
[  179.248027][ T5848] Bluetooth: hci2: command 0x0406 tx timeout
[  179.900945][T12174] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.528242][ T5853] Bluetooth: hci1: command 0x0406 tx timeout
[  180.672423][T12199] __nla_validate_parse: 8 callbacks suppressed
[  180.672434][T12199] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1933'.
[  180.876650][T12203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1934'.
[  181.058034][T12211] syzkaller0: entered promiscuous mode
[  181.059986][T12211] syzkaller0: entered allmulticast mode
[  181.895024][T12227] raw_sendmsg: syz.0.1938 forgot to set AF_INET. Fix it!
[  182.026303][T12236] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1941'.
[  182.046318][T12236] netlink: 'syz.0.1941': attribute type 1 has an invalid length.
[  182.055445][T12239] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1941'.
[  182.102692][T12238] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  182.210145][T12251] 8021q: adding VLAN 0 to HW filter on device bond9
[  182.243878][T12257] netlink: 'syz.2.1946': attribute type 1 has an invalid length.
[  182.247030][   T33] audit: type=1800 audit(1756439307.462:5): pid=12246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1942" name="memory.events" dev="tmpfs" ino=3441 res=0 errno=0
[  182.271767][T12257] bond8: entered promiscuous mode
[  182.273438][T12257] bond8: entered allmulticast mode
[  182.280053][T12257] 8021q: adding VLAN 0 to HW filter on device bond8
[  182.289604][T12259] bridge6: entered promiscuous mode
[  182.291665][T12259] bridge6: entered allmulticast mode
[  182.293761][T12259] bond8: (slave bridge6): Enslaving as a backup interface with an up link
[  182.302598][T12251] bond0: (slave batadv0): Releasing backup interface
[  182.318542][T12251] bridge_slave_0: left allmulticast mode
[  182.320744][T12251] bridge_slave_0: left promiscuous mode
[  182.322928][T12251] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.327569][T12251] bridge_slave_1: left allmulticast mode
[  182.329615][T12251] bridge_slave_1: left promiscuous mode
[  182.331543][T12251] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.339364][T12251] bond0: (slave bond_slave_0): Releasing backup interface
[  182.343112][T12251] bond0: (slave bond_slave_1): Releasing backup interface
[  182.347926][T12251] team0: Port device team_slave_0 removed
[  182.350839][T12251] team0: Port device team_slave_1 removed
[  182.353465][T12251] bond0: (slave batadv_slave_0): Releasing backup interface
[  182.359407][T12251] batman_adv: batadv0: Removing interface: batadv_slave_1
[  182.362850][T12251] bond1: (slave geneve2): Releasing active interface
[  182.366131][T12251] batman_adv: batadv0: Interface deactivated: macvtap1
[  182.369477][T12251] batman_adv: batadv0: Removing interface: macvtap1
[  182.372431][T12251] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  182.374732][T12251] batman_adv: batadv0: Removing interface: ip6gretap1
[  182.378060][ T5911] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  182.384939][T12251] bond2: (slave veth3): Releasing active interface
[  182.391124][T12251] bond4: (slave gretap1): Releasing backup interface
[  182.436986][   T10] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  182.448829][T12257] bridge0: port 3(dummy0) entered disabled state
[  182.451325][T12257] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.455367][T12257] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.486876][   T13] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  182.548971][T12257] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  182.561298][T12273] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  182.696664][   T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  182.704584][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  182.712434][   T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  182.719171][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  182.724816][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  182.729093][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  182.732038][   T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  182.734856][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  182.818974][T12285] syzkaller1: entered promiscuous mode
[  182.821550][T12285] syzkaller1: entered allmulticast mode
[  183.274906][T12293] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.313231][T12293] veth1: left promiscuous mode
[  183.319774][T12293] wg1: left promiscuous mode
[  183.322424][T12293] wg1: left allmulticast mode
[  183.327078][   T10] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  183.351721][T12293] batadv_slave_0: left promiscuous mode
[  183.409611][T12293] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  183.432518][T12293] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  183.441192][T12293] team1: left promiscuous mode
[  183.442932][T12293] team1: left allmulticast mode
[  183.448919][T12293] bond2: left promiscuous mode
[  183.450640][T12293] wireguard0: left promiscuous mode
[  183.459580][T12293] veth3: left allmulticast mode
[  183.462209][T12293] gretap1: left promiscuous mode
[  183.468640][T12293] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  183.485380][ T5911] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  183.489672][ T5911] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  183.495200][ T5911] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  183.499424][ T5911] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  184.301128][T12305] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1961'.
[  184.305027][T12305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1961'.
[  184.311157][T12305] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1961'.
[  184.314890][T12305] netlink: 'syz.0.1961': attribute type 3 has an invalid length.
[  184.320295][T12305] netlink: 'syz.0.1961': attribute type 2 has an invalid length.
[  184.323672][T12305] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1961'.
[  185.110997][T12321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1966'.
[  185.257170][T12328] wg1 speed is unknown, defaulting to 1000
[  185.298173][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1971'.
[  185.378580][T12333] syzkaller0: entered promiscuous mode
[  185.380839][T12333] syzkaller0: entered allmulticast mode
[  185.467422][T12344] netlink: 'syz.0.1973': attribute type 1 has an invalid length.
[  185.554710][T12344] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  185.690317][T12358] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  185.753955][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1978'.
[  185.814193][   T33] audit: type=1800 audit(1756439311.012:6): pid=12368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1979" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=3237 res=0 errno=0
[  185.850497][T12372] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1980'.
[  185.938578][T12379] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1984'.
[  186.554738][T12404] wg1: entered promiscuous mode
[  186.562897][T12404] wg1: entered allmulticast mode
[  186.714129][T12429] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  186.752126][T12431] netlink: 'syz.2.2001': attribute type 1 has an invalid length.
[  186.813644][T12437] netlink: 'syz.2.2002': attribute type 3 has an invalid length.
[  187.126178][T12469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2011'.
[  187.864028][T12484] sctp: [Deprecated]: syz.0.2016 (pid 12484) Use of int in max_burst socket option deprecated.
[  187.864028][T12484] Use struct sctp_assoc_value instead
[  188.268330][T12480] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  188.273171][T12480] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  188.407777][T12512] tap0: tun_chr_ioctl cmd 1074025681
[  189.199851][T12560] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2043'.
[  189.202876][T12562] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.891473][T12614] netlink: 576 bytes leftover after parsing attributes in process `syz.2.2055'.
[  189.895113][T12614] netlink: 15 bytes leftover after parsing attributes in process `syz.2.2055'.
[  190.023938][T12629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2058'.
[  190.288251][T12645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2064'.
[  190.295449][T12645] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  190.334432][T12650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2065'.
[  190.616544][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  190.713689][T12663] wg1 speed is unknown, defaulting to 1000
[  191.001709][T12675] __nla_validate_parse: 2 callbacks suppressed
[  191.001719][T12675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2075'.
[  191.030954][T12677] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2076'.
[  191.246515][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  191.502544][T12709] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  191.559471][T12714] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2087'.
[  191.757636][T12722] 8021q: adding VLAN 0 to HW filter on device bond0
[  192.093947][T12736] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  192.302426][T12751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2101'.
[  192.309130][T12752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2101'.
[  192.349593][T12756] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2102'.
[  192.834868][T12779] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2110'.
[  192.848009][T12781] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2110'.
[  192.990153][T12787] ip_vti0: left promiscuous mode
[  192.992111][T12787] ip_vti0: left allmulticast mode
[  192.994148][T12787] syz_tun: left promiscuous mode
[  192.995938][T12787] syz_tun: left allmulticast mode
[  192.999980][T12787] veth1: left promiscuous mode
[  193.002401][T12787] wg1: left promiscuous mode
[  193.004371][T12787] wg1: left allmulticast mode
[  193.011491][T12787] vlan0: left promiscuous mode
[  193.014850][T12787] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  193.019959][T12787] bond3: left promiscuous mode
[  193.022050][T12787] bond3: left allmulticast mode
[  193.025035][T12787] vlan2: left promiscuous mode
[  193.028330][T12787] bond0: left promiscuous mode
[  193.030307][T12787] bond_slave_0: left promiscuous mode
[  193.032452][T12787] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  193.035663][T12787] vxlan0: left promiscuous mode
[  193.037587][T12787] vxlan0: left allmulticast mode
[  193.039490][T12787] ip6tnl3: left promiscuous mode
[  193.042247][T12787] bond8: left promiscuous mode
[  193.044384][T12787] bridge6: left promiscuous mode
[  193.046793][T12787] bond8: left allmulticast mode
[  193.048964][T12787] bridge6: left allmulticast mode
[  193.192249][T12801] _Z`Ԁ@: entered promiscuous mode
[  193.810690][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  193.813068][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  201.886528][   T10] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 60 sec
[  213.670928][T12812] openvswitch: netlink: Message has 4 unknown bytes.
[  213.713833][T12818] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2121'.
[  213.766312][T12817] wg1 speed is unknown, defaulting to 1000
[  213.779309][T12821] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  213.803056][T12819] tipc: Resetting bearer <eth:syzkaller0>
[  214.682191][T12828] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2127'.
[  214.788828][T12819] tipc: Disabling bearer <eth:syzkaller0>
[  214.883870][T12830] wg1 speed is unknown, defaulting to 1000
[  215.034892][T12838] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  215.039264][T12838] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  215.053412][T12838] syzkaller0: entered promiscuous mode
[  215.055297][T12838] syzkaller0: entered allmulticast mode
[  215.901907][T12849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2133'.
[  216.045278][T12840] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2131'.
[  216.051909][T12843] tipc: Resetting bearer <eth:syzkaller0>
[  216.063780][T12837] tipc: Resetting bearer <eth:syzkaller0>
[  216.076174][T12837] tipc: Disabling bearer <eth:syzkaller0>
[  216.287735][T12863] wg1 speed is unknown, defaulting to 1000
[  216.583340][T12877] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  216.587543][T12877] syzkaller0: entered promiscuous mode
[  216.589498][T12877] syzkaller0: entered allmulticast mode
[  216.603424][T12877] tipc: Resetting bearer <eth:syzkaller0>
[  216.608529][T12877] netlink: set zone limit has 4 unknown bytes
[  216.611610][T12876] tipc: Resetting bearer <eth:syzkaller0>
[  216.621778][T12876] tipc: Disabling bearer <eth:syzkaller0>
[  217.190288][T12889] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2145'.
[  217.194341][T12889] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2145'.
[  217.256235][T12897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2147'.
[  217.637868][T12915] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2154'.
[  218.370076][T12938] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2160'.
[  218.374339][T12938] nbd: illegal input index 65508
[  218.455101][T12952] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2163'.
[  218.547198][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  218.745959][T12968] __nla_validate_parse: 1 callbacks suppressed
[  218.746000][T12968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2167'.
[  218.752875][T12968] veth1: entered promiscuous mode
[  218.755359][T12968] netlink: 'syz.2.2167': attribute type 8 has an invalid length.
[  218.758861][T12968] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  219.448490][T12980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2171'.
[  219.524063][T12985] wg1 speed is unknown, defaulting to 1000
[  220.717718][T13009] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2180'.
[  221.037387][T13014] wg1 speed is unknown, defaulting to 1000
[  221.135881][T13020] openvswitch: netlink: IP tunnel dst address not specified
[  221.214256][T13027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2186'.
[  221.311445][T13034] netlink: 'syz.2.2188': attribute type 5 has an invalid length.
[  221.330151][T13034] bond0: entered promiscuous mode
[  221.332429][T13034] bond_slave_0: entered promiscuous mode
[  221.338212][T13034] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  221.342497][T13034] bond0: left promiscuous mode
[  221.344160][T13034] bond_slave_0: left promiscuous mode
[  221.346177][T13034] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  221.551317][T13049] netlink: 'syz.2.2194': attribute type 2 has an invalid length.
[  221.554034][T13049] netlink: 'syz.2.2194': attribute type 1 has an invalid length.
[  221.666674][T13053] wg1 speed is unknown, defaulting to 1000
[  221.838195][T13064] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2199'.
[  221.843838][T13064] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2199'.
[  221.999801][T13073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2203'.
[  222.439248][T13089] netlink: 'syz.1.2209': attribute type 1 has an invalid length.
[  222.441962][T13089] nbd: error processing sock list
[  222.458616][T13089] block nbd1: shutting down sockets
[  222.569648][T13097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2213'.
[  222.682965][T13106] v: renamed from ip6_vti0
[  222.721350][T13109] wg1 speed is unknown, defaulting to 1000
[  222.881928][T13124] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  222.885062][T13126] netlink: 'syz.1.2218': attribute type 4 has an invalid length.
[  223.054132][T13137] netlink: 'syz.0.2223': attribute type 8 has an invalid length.
[  223.089715][T13141] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4.
[  223.162333][T13146] wg1 speed is unknown, defaulting to 1000
[  223.254994][T13147] netlink: 'syz.2.2226': attribute type 1 has an invalid length.
[  223.258955][T13147] netlink: 'syz.2.2226': attribute type 1 has an invalid length.
[  223.262764][T13147] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2226'.
[  223.268511][T13145] netlink: 'syz.2.2226': attribute type 1 has an invalid length.
[  223.271876][T13145] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2226'.
[  223.398085][T13160] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.540308][T13166] wg1 speed is unknown, defaulting to 1000
[  223.824502][T13182] __nla_validate_parse: 3 callbacks suppressed
[  223.824512][T13182] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2237'.
[  223.938445][T13205] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2243'.
[  223.947488][T13203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2242'.
[  223.950468][T13203] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2242'.
[  224.043966][T13210] geneve3: entered promiscuous mode
[  224.199533][T13215] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  224.211556][T13215] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2246'.
[  224.215651][T13215] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2246'.
[  224.273722][T13215] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2246'.
[  224.351603][T13219] hsr0 speed is unknown, defaulting to 1000
[  224.352756][T13220] validate_nla: 1 callbacks suppressed
[  224.352767][T13220] netlink: 'syz.0.2247': attribute type 8 has an invalid length.
[  224.371919][T13219] hsr0 speed is unknown, defaulting to 1000
[  224.375422][T13219] hsr0 speed is unknown, defaulting to 1000
[  224.400184][T13219] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  224.452358][T13219] hsr0 speed is unknown, defaulting to 1000
[  224.458541][T13219] hsr0 speed is unknown, defaulting to 1000
[  224.462691][T13219] hsr0 speed is unknown, defaulting to 1000
[  224.467266][T13219] hsr0 speed is unknown, defaulting to 1000
[  224.930619][T13245] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2254'.
[  225.175792][T13261] netlink: 'syz.1.2260': attribute type 1 has an invalid length.
[  225.191095][T13261] 8021q: adding VLAN 0 to HW filter on device bond7
[  225.367720][T13271] netlink: 328 bytes leftover after parsing attributes in process `syz.0.2262'.
[  225.905289][T13280] netem: incorrect gi model size
[  225.910288][T13280] netem: change failed
[  225.917560][T13285] wg1 speed is unknown, defaulting to 1000
[  225.920269][T13285] hsr0 speed is unknown, defaulting to 1000
[  226.071812][T13305] sctp: [Deprecated]: syz.0.2271 (pid 13305) Use of int in max_burst socket option.
[  226.071812][T13305] Use struct sctp_assoc_value instead
[  226.705681][T13324] netlink: 'syz.0.2278': attribute type 10 has an invalid length.
[  226.722017][T13324] bond0: (slave batadv_slave_0): Enslaving as an active interface with a down link
[  226.735186][T13327] netlink: 'syz.1.2279': attribute type 2 has an invalid length.
[  226.910975][T13339] 8021q: adding VLAN 0 to HW filter on device bond10
[  226.914102][T13339] bond0: (slave bond10): Enslaving as an active interface with a down link
[  227.182098][T13356] pimreg: entered allmulticast mode
[  227.289886][T13368] wg1 speed is unknown, defaulting to 1000
[  227.292580][T13368] hsr0 speed is unknown, defaulting to 1000
[  227.320859][T13373] netlink: 'syz.0.2296': attribute type 1 has an invalid length.
[  227.481759][T13388] veth1: mtu greater than device maximum
[  227.558594][T13393] netlink: 'syz.2.2303': attribute type 41 has an invalid length.
[  227.649727][T13410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2306'.
[  227.851682][T13437] netlink: 'syz.2.2315': attribute type 1 has an invalid length.
[  227.967970][T13454] netlink: 'syz.0.2319': attribute type 9 has an invalid length.
[  227.970603][T13454] netlink: 'syz.0.2319': attribute type 6 has an invalid length.
[  228.495702][T13465] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  228.788265][T13482] netlink: 'syz.0.2330': attribute type 1 has an invalid length.
[  228.792115][T13482] team0: Cannot enslave team device to itself
[  229.103219][T13497] __nla_validate_parse: 4 callbacks suppressed
[  229.103235][T13497] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2336'.
[  229.284448][T13520] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2346'.
[  229.401126][T13532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2352'.
[  229.544277][T13546] syzkaller1: entered promiscuous mode
[  229.546182][T13546] syzkaller1: entered allmulticast mode
[  230.007575][T13557] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2360'.
[  230.165146][T13569] wg1 speed is unknown, defaulting to 1000
[  230.174420][T13569] hsr0 speed is unknown, defaulting to 1000
[  230.218141][T13576] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2366'.
[  230.401024][T13581] atomic_op ffff888118ff2198 conn xmit_atomic 0000000000000000
[  230.699242][T13613] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2377'.
[  230.702459][T13613] netlink: 3716 bytes leftover after parsing attributes in process `syz.2.2377'.
[  230.738738][T13620] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  230.749179][T13619] validate_nla: 2 callbacks suppressed
[  230.749190][T13619] netlink: 'syz.0.2380': attribute type 74 has an invalid length.
[  230.773528][T13625] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  230.780643][T13625] tipc: Resetting bearer <eth:syzkaller0>
[  230.796254][T13627] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  230.800454][   T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.803316][   T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.862057][T13621] tipc: Disabling bearer <eth:syzkaller0>
[  230.866632][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2383'.
[  231.085012][T13643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2387'.
[  231.182324][T13650] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2390'.
[  231.232797][T13656] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  231.313533][T13666] openvswitch: netlink: Actions may not be safe on all matching packets
[  231.342203][T13667] ieee802154 phy0 wpan0: encryption failed: -22
[  231.616317][T13689] netlink: 'syz.2.2404': attribute type 4 has an invalid length.
[  231.669055][T13693] netlink: 'syz.0.2406': attribute type 11 has an invalid length.
[  231.675925][T13693] netlink: 'syz.0.2406': attribute type 11 has an invalid length.
[  232.462041][T13722] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  232.465537][T13722] syzkaller0: entered promiscuous mode
[  232.468900][T13722] syzkaller0: entered allmulticast mode
[  232.483978][T13723] tipc: Resetting bearer <eth:syzkaller0>
[  232.501432][T13723] tipc: Disabling bearer <eth:syzkaller0>
[  232.675186][T13742] netlink: 'syz.2.2422': attribute type 12 has an invalid length.
[  233.075049][T13774] wg1 speed is unknown, defaulting to 1000
[  233.078900][T13774] hsr0 speed is unknown, defaulting to 1000
[  233.788408][T13821] sctp: [Deprecated]: syz.2.2432 (pid 13821) Use of int in max_burst socket option.
[  233.788408][T13821] Use struct sctp_assoc_value instead
[  234.120088][T13851] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  234.174336][T13859] netlink: 'syz.0.2446': attribute type 13 has an invalid length.
[  235.883939][T13882] __nla_validate_parse: 8 callbacks suppressed
[  235.883949][T13882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2452'.
[  235.890613][T13882] netlink: 'syz.0.2452': attribute type 5 has an invalid length.
[  235.893927][T13882] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2452'.
[  235.903302][T13882] geneve3: entered promiscuous mode
[  235.905508][T13882] geneve3: entered allmulticast mode
[  235.908875][ T5911] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  235.914877][ T5911] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  235.923036][ T5911] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  235.926914][ T5911] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  236.007138][T13892] netlink: 'syz.2.2456': attribute type 1 has an invalid length.
[  236.021295][T13892] 8021q: adding VLAN 0 to HW filter on device bond10
[  236.033446][T13892] bond10: (slave geneve2): making interface the new active one
[  236.036593][T13892] bond10: (slave geneve2): Enslaving as an active interface with an up link
[  236.039812][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  236.044965][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  236.051276][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  236.061141][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  236.099069][T13903] openvswitch: netlink: IPv6 tunnel dst address is zero
[  236.099545][T13905] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2460'.
[  236.101818][T13904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2460'.
[  236.181988][T13912] netlink: 'syz.0.2463': attribute type 10 has an invalid length.
[  236.188235][T13912] 8021q: adding VLAN 0 to HW filter on device team0
[  236.194417][T13912] bond0: (slave team0): Enslaving as an active interface with a down link
[  236.286111][T13930] nbd: nbd0 already in use
[  236.293254][T13930] bridge0: port 1(batadv1) entered blocking state
[  236.295487][T13930] bridge0: port 1(batadv1) entered disabled state
[  236.298067][T13930] batadv1: entered allmulticast mode
[  236.302356][T13930] batadv1: entered promiscuous mode
[  236.308203][T13930] block nbd0: NBD_DISCONNECT
[  236.310057][T13930] block nbd0: Send disconnect failed -107
[  236.332617][T13930] netlink: 'syz.0.2468': attribute type 30 has an invalid length.
[  236.363046][T13933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2469'.
[  236.414202][T13939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2472'.
[  236.446980][T13941] wg1 speed is unknown, defaulting to 1000
[  236.449542][T13941] hsr0 speed is unknown, defaulting to 1000
[  236.564380][T13955] wg1 speed is unknown, defaulting to 1000
[  236.568368][T13955] hsr0 speed is unknown, defaulting to 1000
[  236.711798][T13965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2476'.
[  236.806596][ T5911] batman_adv: batadv1: IGMP Querier appeared
[  236.809958][ T5911] batman_adv: batadv1: MLD Querier appeared
[  236.881231][T13970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2478'.
[  237.229154][T13983] wg1 speed is unknown, defaulting to 1000
[  237.232732][T13983] hsr0 speed is unknown, defaulting to 1000
[  237.765774][T14022] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2492'.
[  237.795320][T14027] netlink: 179596 bytes leftover after parsing attributes in process `syz.0.2494'.
[  237.803085][T14027] openvswitch: netlink: Message has 5 unknown bytes.
[  237.814509][T14030] netlink: 'syz.2.2495': attribute type 9 has an invalid length.
[  237.817266][T14030] netlink: 'syz.2.2495': attribute type 7 has an invalid length.
[  237.819898][T14030] netlink: 'syz.2.2495': attribute type 8 has an invalid length.
[  237.932065][T14035] bond13: (slave geneve4): Enslaving as an active interface with an up link
[  237.941635][   T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  237.945133][   T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  237.952358][   T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  237.955961][   T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  238.103408][T14054] netlink: 'syz.0.2503': attribute type 1 has an invalid length.
[  238.190473][T14060] wg1 speed is unknown, defaulting to 1000
[  238.194679][T14060] hsr0 speed is unknown, defaulting to 1000
[  239.191631][T14073] netlink: 'syz.2.2509': attribute type 8 has an invalid length.
[  239.223538][T14074] delete_channel: no stack
[  239.374829][T14083] IPv6: NLM_F_CREATE should be specified when creating new route
[  239.391578][   T12] bond0: (slave bond_slave_0): interface is now down
[  239.394075][   T12] bond0: (slave bond_slave_1): interface is now down
[  239.399067][T14087] bond0: entered promiscuous mode
[  239.408252][T14087] bond_slave_0: entered promiscuous mode
[  239.412019][T14087] bond_slave_1: entered promiscuous mode
[  239.418757][T14087] bond0: entered allmulticast mode
[  239.426471][   T12] bond0: (slave bond_slave_0): interface is now down
[  239.429233][T14087] bond_slave_0: entered allmulticast mode
[  239.432194][   T12] bond0: (slave bond_slave_1): interface is now down
[  239.439383][T14087] bond_slave_1: entered allmulticast mode
[  239.458395][   T12] bond0: (slave bond_slave_0): interface is now down
[  239.464152][   T12] bond0: (slave bond_slave_1): interface is now down
[  239.474241][T14090] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  239.482654][   T12] bond0: now running without any active interface!
[  239.631944][T14102] syzkaller0: entered promiscuous mode
[  239.634206][T14102] syzkaller0: entered allmulticast mode
[  240.150503][T14122] netlink: 'syz.1.2524': attribute type 1 has an invalid length.
[  240.172396][T14122] bond8: (slave vti0): The slave device specified does not support setting the MAC address
[  240.176781][T14122] bond8: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  240.184155][T14122] bond8: (slave vti0): making interface the new active one
[  240.190330][T14122] bond8: (slave vti0): Enslaving as an active interface with an up link
[  240.244333][T14129] syzkaller1: entered promiscuous mode
[  240.246852][T14129] syzkaller1: entered allmulticast mode
[  240.357614][T14131] NCSI netlink: No device for ifindex 0
[  240.818488][T14137] 8021q: adding VLAN 0 to HW filter on device bond14
[  240.828610][T14137] bond14: entered promiscuous mode
[  240.953297][T14151] __nla_validate_parse: 13 callbacks suppressed
[  240.953310][T14151] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2534'.
[  241.143168][T14174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2541'.
[  241.248517][T14180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2542'.
[  241.649550][T14182] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2543'.
[  241.652698][T14182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2543'.
[  241.916254][T14203] validate_nla: 5 callbacks suppressed
[  241.916266][T14203] netlink: 'syz.2.2550': attribute type 1 has an invalid length.
[  241.924349][T14203] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2550'.
[  242.052030][T14206] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2551'.
[  242.136146][T14220] wg1 speed is unknown, defaulting to 1000
[  242.140991][T14220] hsr0 speed is unknown, defaulting to 1000
[  242.391060][T14226] bond0: entered promiscuous mode
[  242.393312][T14226] bond_slave_0: entered promiscuous mode
[  242.396016][T14226] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  242.401143][T14226] batadv0: entered promiscuous mode
[  242.404348][T14226] debugfs: 'hsr0' already exists in 'hsr'
[  242.407300][T14226] Cannot create hsr debugfs directory
[  242.409448][T14226] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  242.412552][T14226] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  242.417495][T14226] 8021q: adding VLAN 0 to HW filter on device hsr0
[  242.446309][T14228] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2556'.
[  242.448444][T14229] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2556'.
[  242.454749][T14228] sctp: [Deprecated]: syz.2.2556 (pid 14228) Use of struct sctp_assoc_value in delayed_ack socket option.
[  242.454749][T14228] Use struct sctp_sack_info instead
[  242.780985][T14244] netlink: 'syz.0.2562': attribute type 2 has an invalid length.
[  242.783575][T14244] netlink: 'syz.0.2562': attribute type 2 has an invalid length.
[  242.846601][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  243.009332][T14270] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  243.036124][T14270] tipc: Disabling bearer <eth:syzkaller0>
[  243.098848][T14281] netlink: 'syz.1.2574': attribute type 1 has an invalid length.
[  243.112391][T14281] 8021q: adding VLAN 0 to HW filter on device bond9
[  243.126497][T14281] bond9: (slave veth7): Enslaving as an active interface with a down link
[  243.143974][T14282] bond9: (slave veth9): Enslaving as an active interface with a down link
[  243.535410][T14324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  243.642814][T14331] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2589'.
[  243.669040][T14331] veth11: entered promiscuous mode
[  245.006575][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  245.473006][T14412] netlink: 'syz.0.2615': attribute type 83 has an invalid length.
[  245.507363][ T5911] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  245.513070][ T5911] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  245.525854][ T5911] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  245.531455][ T5911] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  245.603127][T14418] wg1 speed is unknown, defaulting to 1000
[  245.605733][T14418] hsr0 speed is unknown, defaulting to 1000
[  245.692087][T14428] netlink: 'syz.0.2624': attribute type 1 has an invalid length.
[  246.334660][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.338161][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.491046][T14457] __nla_validate_parse: 11 callbacks suppressed
[  246.491057][T14457] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2634'.
[  246.588582][T14462] tipc: New replicast peer: 255.255.255.255
[  246.591448][T14462] tipc: Enabled bearer <udp:syz2>, priority 10
[  246.815417][T14467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2639'.
[  247.019465][T14480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2641'.
[  247.191139][T14488] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2646'.
[  247.396486][T14507] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2653'.
[  247.439178][T14509] netlink: 732 bytes leftover after parsing attributes in process `syz.0.2654'.
[  247.448774][T14509] netlink: 732 bytes leftover after parsing attributes in process `syz.0.2654'.
[  247.497634][T14514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2655'.
[  247.504993][T14514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2655'.
[  247.533716][T14516] vlan4: entered promiscuous mode
[  247.535869][T14516] bridge0: entered promiscuous mode
[  247.706449][  T791] tipc: Node number set to 2172785740
[  247.732166][T14526] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2662'.
[  247.794158][T14530] netlink: 'syz.1.2663': attribute type 21 has an invalid length.
[  248.615993][T14575] netlink: 'syz.2.2677': attribute type 11 has an invalid length.
[  248.680207][T14582] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  248.740546][T14590] netlink: 'syz.2.2680': attribute type 2 has an invalid length.
[  248.791234][T14601] netlink: 'syz.0.2684': attribute type 1 has an invalid length.
[  248.815348][T14603] netlink: 'syz.2.2686': attribute type 4 has an invalid length.
[  248.981404][T14614] openvswitch: netlink: Actions may not be safe on all matching packets
[  249.016773][T14619] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  249.020304][T14617] syzkaller0: entered promiscuous mode
[  249.022639][T14617] syzkaller0: entered allmulticast mode
[  249.062081][T14619] tipc: Resetting bearer <eth:syzkaller0>
[  249.092808][T14619] tipc: Disabling bearer <eth:syzkaller0>
[  249.826616][T14667] ip6gretap3: entered allmulticast mode
[  250.126474][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  250.496021][T14689] netlink: 'syz.0.2717': attribute type 29 has an invalid length.
[  250.499470][T14689] netlink: 'syz.0.2717': attribute type 29 has an invalid length.
[  250.503552][T14689] xt_limit: Overflow, try lower: 271964/0
[  251.096269][T14742] delete_channel: no stack
[  251.298458][T14753] bond0 (unregistering): left promiscuous mode
[  251.300676][T14753] bond_slave_0: left promiscuous mode
[  251.302645][T14753] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  251.305903][T14753] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  251.311240][T14753] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  251.315504][T14753] bond0 (unregistering): Released all slaves
[  251.788782][T14777] __nla_validate_parse: 86 callbacks suppressed
[  251.788799][T14777] netlink: 201916 bytes leftover after parsing attributes in process `syz.1.2746'.
[  251.864185][T14779] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2747'.
[  252.227139][T14806] wg1 speed is unknown, defaulting to 1000
[  252.230021][T14806] hsr0 speed is unknown, defaulting to 1000
[  252.270259][T14806] wg1 speed is unknown, defaulting to 1000
[  252.273150][T14806] hsr0 speed is unknown, defaulting to 1000
[  252.342756][T14806] netlink: 'syz.1.2756': attribute type 1 has an invalid length.
[  252.380472][T14815] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  252.521664][T14825] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2762'.
[  252.525067][T14825] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2762'.
[  252.528988][T14825] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2762'.
[  252.532460][T14825] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2762'.
[  252.535808][T14825] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2762'.
[  252.539517][T14825] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2762'.
[  252.542687][T14825] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2762'.
[  252.545807][T14825] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2762'.
[  252.550454][T14825] bond0: left promiscuous mode
[  252.553220][T14825] bond_slave_0: left promiscuous mode
[  252.555476][T14825] bond_slave_1: left promiscuous mode
[  252.640221][T14830] wg1 speed is unknown, defaulting to 1000
[  252.643181][T14830] hsr0 speed is unknown, defaulting to 1000
[  253.218594][T14856] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  253.229981][T14856] syzkaller0: entered promiscuous mode
[  253.232063][T14856] syzkaller0: entered allmulticast mode
[  253.241876][T14856] tipc: Resetting bearer <eth:syzkaller0>
[  253.360603][T14867] siw: device registration error -23
[  253.576084][T14888] netlink: 'syz.1.2782': attribute type 1 has an invalid length.
[  254.230903][T14893] "syz.0.2786" (14893) uses obsolete ecb(arc4) skcipher
[  254.235999][T14893] "syz.0.2786" (14893) uses obsolete ecb(arc4) skcipher
[  254.473069][T14917] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20002
[  254.523438][T14922] netlink: 'syz.1.2797': attribute type 4 has an invalid length.
[  254.545102][T14924] syzkaller1: entered promiscuous mode
[  254.548912][T14924] syzkaller1: entered allmulticast mode
[  254.794837][T14938] netlink: 'syz.1.2803': attribute type 1 has an invalid length.
[  254.806610][T14938] netlink: 'syz.1.2803': attribute type 10 has an invalid length.
[  254.809866][T14938] dummy0: entered promiscuous mode
[  254.812053][T14938] dummy0: entered allmulticast mode
[  254.815733][T14938] bridge0: port 3(dummy0) entered blocking state
[  254.820845][T14938] bridge0: port 3(dummy0) entered disabled state
[  254.998901][T14952] openvswitch: netlink: Flow actions attr not present in new flow.
[  255.260360][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.265035][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  255.970737][T15009] bond0: invalid ARP target 0.0.0.0 specified for addition
[  255.973999][T15009] bond0: option arp_ip_target: invalid value (0)
[  255.978857][T15009] bond0: Removing last arp target with arp_interval on
[  257.999550][T15041] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  258.095284][T15053] __nla_validate_parse: 37 callbacks suppressed
[  258.095294][T15053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2843'.
[  258.112645][T15055] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2844'.
[  258.133425][T15059] netlink: 'syz.1.2846': attribute type 1 has an invalid length.
[  258.136066][T15059] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2846'.
[  258.184547][T15062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  258.416130][T15081] netlink: 'syz.0.2854': attribute type 1 has an invalid length.
[  258.421165][T15081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2854'.
[  258.424728][T15081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2854'.
[  258.450530][T15086] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2855'.
[  258.655307][T15102] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2861'.
[  258.664528][T15102] netlink: 'syz.0.2861': attribute type 15 has an invalid length.
[  258.777723][T15112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2864'.
[  258.781532][T15112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2864'.
[  258.785429][T15112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2864'.
[  259.055578][T15132] netlink: 'syz.0.2872': attribute type 1 has an invalid length.
[  259.553453][T15155] netlink: 'syz.0.2880': attribute type 5 has an invalid length.
[  259.627093][T15164] hsr_slave_0: left promiscuous mode
[  259.630832][T15164] hsr_slave_1: left promiscuous mode
[  259.812770][T15180] vlan2: entered promiscuous mode
[  259.814992][T15180] macvtap0: entered promiscuous mode
[  262.056878][T15231] wg1 speed is unknown, defaulting to 1000
[  262.885490][T15317] netlink: 'syz.2.2929': attribute type 10 has an invalid length.
[  263.162287][T15339] __nla_validate_parse: 49 callbacks suppressed
[  263.162303][T15339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2939'.
[  263.220902][T15346] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2941'.
[  263.342543][T15354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2944'.
[  263.370976][T15357] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.2945'.
[  263.374941][T15357] openvswitch: netlink: Flow key attr not present in new flow.
[  263.383490][T15357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2945'.
[  263.410798][T15356] delete_channel: no stack
[  263.532711][T15368] netlink: 'syz.2.2949': attribute type 1 has an invalid length.
[  263.558318][T15368] 8021q: adding VLAN 0 to HW filter on device bond0
[  263.570731][T15368] bond0: (slave gretap2): making interface the new active one
[  263.575695][T15368] bond0: (slave gretap2): Enslaving as an active interface with an up link
[  263.620592][T15375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2950'.
[  263.624580][T15375] netlink: 'syz.2.2950': attribute type 29 has an invalid length.
[  263.628190][T15375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2950'.
[  263.843311][T15395] netlink: 'syz.2.2954': attribute type 4 has an invalid length.
[  263.846083][T15395] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2954'.
[  263.907130][T15397] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  264.183028][T15409] netlink: 'syz.1.2960': attribute type 13 has an invalid length.
[  264.186312][T15409] netlink: 'syz.1.2960': attribute type 17 has an invalid length.
[  264.263592][T15409] bridge0: port 3(dummy0) entered blocking state
[  264.265893][T15409] bridge0: port 3(dummy0) entered forwarding state
[  264.274661][T15409] bond0: left allmulticast mode
[  264.277011][T15409] bond_slave_0: left allmulticast mode
[  264.279384][T15409] bond_slave_1: left allmulticast mode
[  264.290880][T15409] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  264.341607][T15411] wg1 speed is unknown, defaulting to 1000
[  264.410211][T15416] netlink: 'syz.0.2961': attribute type 2 has an invalid length.
[  264.414038][T15416] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2961'.
[  264.418305][T15416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2961'.
[  265.581629][T15450] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  265.816438][ T5853] Bluetooth: hci2: command 0x0406 tx timeout
[  266.543250][T15521] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  267.102107][T15552] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  267.281467][T15569] veth0_to_bridge: entered promiscuous mode
[  267.284810][T15569] veth0_to_bridge: left promiscuous mode
[  267.328649][T15576] netlink: 'syz.2.3019': attribute type 5 has an invalid length.
[  267.370069][T15581] netlink: 'syz.2.3021': attribute type 46 has an invalid length.
[  267.460713][T15585] wg1 speed is unknown, defaulting to 1000
[  267.551590][T15585] netlink: 'syz.1.3023': attribute type 12 has an invalid length.
[  268.038633][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  268.041778][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  268.055087][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  268.059003][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  268.674472][T15624] netlink: 'syz.0.3033': attribute type 10 has an invalid length.
[  268.748615][T15628] __nla_validate_parse: 19 callbacks suppressed
[  268.748626][T15628] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3038'.
[  269.007882][T15649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3045'.
[  269.048303][T15652] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3046'.
[  269.124607][T15662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3050'.
[  269.129190][T15662] batadv1: left allmulticast mode
[  269.131431][T15662] batadv1: left promiscuous mode
[  269.133928][T15662] bridge0: port 1(batadv1) entered disabled state
[  269.374018][T15672] nftables ruleset with unbound chain
[  269.413082][T15674] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3055'.
[  269.803242][T15693] syzkaller0: entered promiscuous mode
[  269.805333][T15693] syzkaller0: entered allmulticast mode
[  269.850301][T15698] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3063'.
[  269.911106][T15702] netlink: 'syz.1.3065': attribute type 1 has an invalid length.
[  269.950142][T15707] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3067'.
[  269.953162][T15707] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3067'.
[  270.004933][T15710] veth1_to_bond: entered allmulticast mode
[  270.008411][T15710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3068'.
[  270.050001][T15710] bond0: (slave bond_slave_1): Releasing backup interface
[  270.074623][T15710] veth1_to_bond (unregistering): left allmulticast mode
[  270.114820][T15714] netlink: 'syz.2.3069': attribute type 10 has an invalid length.
[  270.121504][T15714] team0: Port device hsr_slave_0 added
[  270.411712][T15745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3077'.
[  271.964967][T15787] wg1 speed is unknown, defaulting to 1000
[  272.379143][T15807] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  272.500420][T15809] wg1 speed is unknown, defaulting to 1000
[  272.608829][T15809] netlink: 'syz.1.3098': attribute type 1 has an invalid length.
[  272.781585][T15837] netlink: 'syz.2.3104': attribute type 1 has an invalid length.
[  272.914488][T15844] ==================================================================
[  272.917955][T15844] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  272.920789][T15844] Read of size 1 at addr ffff88811b0b6730 by task syz.2.3107/15844
[  272.923868][T15844] 
[  272.925008][T15844] CPU: 0 UID: 0 PID: 15844 Comm: syz.2.3107 Not tainted syzkaller #0 PREEMPT(full) 
[  272.925018][T15844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  272.925023][T15844] Call Trace:
[  272.925027][T15844]  <TASK>
[  272.925031][T15844]  dump_stack_lvl+0x189/0x250
[  272.925043][T15844]  ? __kasan_check_byte+0x12/0x40
[  272.925054][T15844]  ? __pfx_dump_stack_lvl+0x10/0x10
[  272.925062][T15844]  ? lock_release+0x4b/0x3e0
[  272.925081][T15844]  ? __virt_addr_valid+0x4a5/0x5c0
[  272.925091][T15844]  print_report+0xca/0x240
[  272.925099][T15844]  ? xfrm_state_find+0x2cf2/0x5400
[  272.925106][T15844]  kasan_report+0x118/0x150
[  272.925116][T15844]  ? xfrm_state_find+0x2cf2/0x5400
[  272.925123][T15844]  xfrm_state_find+0x2cf2/0x5400
[  272.925129][T15844]  ? __lock_acquire+0xab9/0xd20
[  272.925143][T15844]  ? xfrm_state_find+0x1da/0x5400
[  272.925150][T15844]  ? __pfx_xfrm_state_find+0x10/0x10
[  272.925160][T15844]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  272.925172][T15844]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  272.925182][T15844]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  272.925191][T15844]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  272.925201][T15844]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  272.925216][T15844]  ? xfrm_expand_policies+0x41f/0x6a0
[  272.925225][T15844]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  272.925234][T15844]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  272.925243][T15844]  ? __lock_acquire+0xab9/0xd20
[  272.925253][T15844]  xfrm_lookup_route+0x3c/0x1c0
[  272.925260][T15844]  __ip4_datagram_connect+0x9a5/0x1270
[  272.925271][T15844]  udp_connect+0x33/0x1f0
[  272.925282][T15844]  __sys_connect+0x316/0x440
[  272.925292][T15844]  ? __pfx___sys_connect+0x10/0x10
[  272.925304][T15844]  __x64_sys_connect+0x7a/0x90
[  272.925313][T15844]  do_syscall_64+0xfa/0x3b0
[  272.925323][T15844]  ? lockdep_hardirqs_on+0x9c/0x150
[  272.925332][T15844]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.925338][T15844]  ? exc_page_fault+0x9f/0xf0
[  272.925346][T15844]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.925353][T15844] RIP: 0033:0x7fb0ef38ebe9
[  272.925360][T15844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  272.925366][T15844] RSP: 002b:00007fb0f0121038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  272.925374][T15844] RAX: ffffffffffffffda RBX: 00007fb0ef5b5fa0 RCX: 00007fb0ef38ebe9
[  272.925379][T15844] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000008
[  272.925383][T15844] RBP: 00007fb0ef411e19 R08: 0000000000000000 R09: 0000000000000000
[  272.925387][T15844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  272.925391][T15844] R13: 00007fb0ef5b6038 R14: 00007fb0ef5b5fa0 R15: 00007ffd617b1bc8
[  272.925399][T15844]  </TASK>
[  272.925401][T15844] 
[  273.026670][T15844] Allocated by task 13655:
[  273.028111][T15844]  kasan_save_track+0x3e/0x80
[  273.029662][T15844]  __kasan_slab_alloc+0x6c/0x80
[  273.031264][T15844]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  273.033001][T15844]  xfrm_state_alloc+0x24/0x2f0
[  273.034638][T15844]  __find_acq_core+0x8a7/0x1c00
[  273.036288][T15844]  xfrm_find_acq+0x78/0xa0
[  273.038033][T15844]  xfrm_alloc_userspi+0x6b3/0xc90
[  273.040055][T15844]  xfrm_user_rcv_msg+0x7a3/0xab0
[  273.042176][T15844]  netlink_rcv_skb+0x208/0x470
[  273.043744][T15844]  xfrm_netlink_rcv+0x79/0x90
[  273.045289][T15844]  netlink_unicast+0x82f/0x9e0
[  273.047065][T15844]  netlink_sendmsg+0x805/0xb30
[  273.048765][T15844]  __sock_sendmsg+0x21c/0x270
[  273.050361][T15844]  ____sys_sendmsg+0x505/0x830
[  273.051958][T15844]  ___sys_sendmsg+0x21f/0x2a0
[  273.053516][T15844]  __x64_sys_sendmsg+0x19b/0x260
[  273.055211][T15844]  do_syscall_64+0xfa/0x3b0
[  273.056761][T15844]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.058795][T15844] 
[  273.059640][T15844] Freed by task 791:
[  273.060977][T15844]  kasan_save_track+0x3e/0x80
[  273.062575][T15844]  kasan_save_free_info+0x46/0x50
[  273.064347][T15844]  __kasan_slab_free+0x5b/0x80
[  273.066122][T15844]  kmem_cache_free+0x18f/0x400
[  273.067819][T15844]  xfrm_state_gc_task+0x52d/0x6b0
[  273.069461][T15844]  process_scheduled_works+0xae1/0x17b0
[  273.071352][T15844]  worker_thread+0x8a0/0xda0
[  273.072928][T15844]  kthread+0x711/0x8a0
[  273.074322][T15844]  ret_from_fork+0x3fc/0x770
[  273.075914][T15844]  ret_from_fork_asm+0x1a/0x30
[  273.077512][T15844] 
[  273.078374][T15844] The buggy address belongs to the object at ffff88811b0b6400
[  273.078374][T15844]  which belongs to the cache xfrm_state of size 928
[  273.083027][T15844] The buggy address is located 816 bytes inside of
[  273.083027][T15844]  freed 928-byte region [ffff88811b0b6400, ffff88811b0b67a0)
[  273.087438][T15844] 
[  273.088269][T15844] The buggy address belongs to the physical page:
[  273.090811][T15844] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88811b0b6400 pfn:0x11b0b4
[  273.094376][T15844] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  273.097116][T15844] ksm flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  273.099720][T15844] page_type: f5(slab)
[  273.101020][T15844] raw: 057ff00000000040 ffff888104e63280 ffffea00046e2500 0000000000000003
[  273.103847][T15844] raw: ffff88811b0b6400 00000000000e0006 00000000f5000000 0000000000000000
[  273.106693][T15844] head: 057ff00000000040 ffff888104e63280 ffffea00046e2500 0000000000000003
[  273.109660][T15844] head: ffff88811b0b6400 00000000000e0006 00000000f5000000 0000000000000000
[  273.112401][T15844] head: 057ff00000000002 ffffea00046c2d01 00000000ffffffff 00000000ffffffff
[  273.115429][T15844] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  273.118972][T15844] page dumped because: kasan: bad access detected
[  273.121509][T15844] page_owner tracks the page as allocated
[  273.123947][T15844] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8016, tgid 8003 (syz.1.604), ts 90720118218, free_ts 69532270122
[  273.131619][T15844]  post_alloc_hook+0x240/0x2a0
[  273.133296][T15844]  get_page_from_freelist+0x21e4/0x22c0
[  273.135079][T15844]  __alloc_frozen_pages_noprof+0x181/0x370
[  273.136934][T15844]  alloc_pages_mpol+0x232/0x4a0
[  273.138576][T15844]  allocate_slab+0x8a/0x370
[  273.140041][T15844]  ___slab_alloc+0xbeb/0x1410
[  273.141592][T15844]  kmem_cache_alloc_noprof+0x283/0x3c0
[  273.143328][T15844]  xfrm_state_alloc+0x24/0x2f0
[  273.144828][T15844]  xfrm_state_find+0x37d4/0x5400
[  273.146602][T15844]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  273.149122][T15844]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  273.151358][T15844]  xfrm_lookup_route+0x3c/0x1c0
[  273.153433][T15844]  udp_sendmsg+0x142e/0x2170
[  273.155407][T15844]  __sock_sendmsg+0x19c/0x270
[  273.157346][T15844]  ____sys_sendmsg+0x52d/0x830
[  273.159346][T15844]  ___sys_sendmsg+0x21f/0x2a0
[  273.161329][T15844] page last free pid 5851 tgid 5851 stack trace:
[  273.163874][T15844]  __free_frozen_pages+0xbc4/0xd30
[  273.165965][T15844]  __put_partials+0x156/0x1a0
[  273.167883][T15844]  put_cpu_partial+0x17c/0x250
[  273.169864][T15844]  __slab_free+0x2d5/0x3c0
[  273.171640][T15844]  qlist_free_all+0x97/0x140
[  273.173534][T15844]  kasan_quarantine_reduce+0x148/0x160
[  273.175769][T15844]  __kasan_slab_alloc+0x22/0x80
[  273.177780][T15844]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  273.180181][T15844]  getname_flags+0xb8/0x540
[  273.181889][T15844]  __x64_sys_unlink+0x3a/0x50
[  273.183499][T15844]  do_syscall_64+0xfa/0x3b0
[  273.184973][T15844]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.186825][T15844] 
[  273.187596][T15844] Memory state around the buggy address:
[  273.189483][T15844]  ffff88811b0b6600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  273.192115][T15844]  ffff88811b0b6680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  273.194676][T15844] >ffff88811b0b6700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  273.197466][T15844]                                      ^
[  273.199579][T15844]  ffff88811b0b6780: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  273.202161][T15844]  ffff88811b0b6800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  273.204810][T15844] ==================================================================
[  273.211993][T15844] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  273.214914][T15844] CPU: 0 UID: 0 PID: 15844 Comm: syz.2.3107 Not tainted syzkaller #0 PREEMPT(full) 
[  273.218272][T15844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  273.221989][T15844] Call Trace:
[  273.223099][T15844]  <TASK>
[  273.224092][T15844]  dump_stack_lvl+0x99/0x250
[  273.225849][T15844]  ? __asan_memcpy+0x40/0x70
[  273.227497][T15844]  ? __pfx_dump_stack_lvl+0x10/0x10
[  273.229503][T15844]  ? __pfx__printk+0x10/0x10
[  273.231091][T15844]  vpanic+0x281/0x750
[  273.232393][T15844]  ? preempt_schedule+0xae/0xc0
[  273.233974][T15844]  ? __pfx_vpanic+0x10/0x10
[  273.235433][T15844]  ? preempt_schedule_common+0x83/0xd0
[  273.237199][T15844]  ? preempt_schedule+0xae/0xc0
[  273.238798][T15844]  ? __pfx_preempt_schedule+0x10/0x10
[  273.240608][T15844]  panic+0xb9/0xc0
[  273.242145][T15844]  ? __pfx_panic+0x10/0x10
[  273.243894][T15844]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  273.246167][T15844]  ? xfrm_state_find+0x2cf2/0x5400
[  273.248177][T15844]  check_panic_on_warn+0x89/0xb0
[  273.250101][T15844]  ? xfrm_state_find+0x2cf2/0x5400
[  273.252078][T15844]  end_report+0x78/0x160
[  273.253741][T15844]  kasan_report+0x129/0x150
[  273.255533][T15844]  ? xfrm_state_find+0x2cf2/0x5400
[  273.257459][T15844]  xfrm_state_find+0x2cf2/0x5400
[  273.259305][T15844]  ? __lock_acquire+0xab9/0xd20
[  273.261156][T15844]  ? xfrm_state_find+0x1da/0x5400
[  273.262967][T15844]  ? __pfx_xfrm_state_find+0x10/0x10
[  273.265116][T15844]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  273.267648][T15844]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  273.269954][T15844]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  273.272734][T15844]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  273.275232][T15844]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  273.277715][T15844]  ? xfrm_expand_policies+0x41f/0x6a0
[  273.279982][T15844]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  273.282221][T15844]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  273.284648][T15844]  ? __lock_acquire+0xab9/0xd20
[  273.286676][T15844]  xfrm_lookup_route+0x3c/0x1c0
[  273.288733][T15844]  __ip4_datagram_connect+0x9a5/0x1270
[  273.291051][T15844]  udp_connect+0x33/0x1f0
[  273.292925][T15844]  __sys_connect+0x316/0x440
[  273.294826][T15844]  ? __pfx___sys_connect+0x10/0x10
[  273.296986][T15844]  __x64_sys_connect+0x7a/0x90
[  273.299017][T15844]  do_syscall_64+0xfa/0x3b0
[  273.300920][T15844]  ? lockdep_hardirqs_on+0x9c/0x150
[  273.303037][T15844]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.305608][T15844]  ? exc_page_fault+0x9f/0xf0
[  273.307631][T15844]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.310112][T15844] RIP: 0033:0x7fb0ef38ebe9
[  273.311981][T15844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  273.319613][T15844] RSP: 002b:00007fb0f0121038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  273.322453][T15844] RAX: ffffffffffffffda RBX: 00007fb0ef5b5fa0 RCX: 00007fb0ef38ebe9
[  273.325339][T15844] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000008
[  273.328394][T15844] RBP: 00007fb0ef411e19 R08: 0000000000000000 R09: 0000000000000000
[  273.331584][T15844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  273.334645][T15844] R13: 00007fb0ef5b6038 R14: 00007fb0ef5b5fa0 R15: 00007ffd617b1bc8
[  273.337468][T15844]  </TASK>
[  273.339538][T15844] Kernel Offset: disabled
[  273.341297][T15844] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:49:58  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000012c7 RDI=00000000000012c8 RBP=00000000000003f8 RSP=ffffc90002ddee10
R8 =ffff888021bb8237 R9 =1ffff11004377046 R10=dffffc0000000000 R11=ffffffff854f3380
R12=dffffc0000000000 R13=ffffffff99afa90c R14=ffffffff99def420 R15=0000000000000000
RIP=ffffffff854f33fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb0f01216c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2989701440 CR3=0000000118d70000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fb0ef587498 00007fb0ef587470 XMM03=00007fb0ef5874a8 00007fb0ef5874a0
XMM04=00007fb0f00ed100 00007fb0ef587460 XMM05=00007fb0ef587478 00007fb0ef5874c0
XMM06=00007fb0ef5874b8 00007fb0ef5874b0 XMM07=00007fb0ef5874a8 00007fb0ef5874a0
XMM08=0000000000000000 00007fb0ef412ee7 XMM09=0000000000000000 00007fb0ef412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=24e0b32f4ee08800 RBX=ffffffff819683c8 RCX=24e0b32f4ee08800 RDX=0000000000000001
RSI=ffffffff8d9b6cc2 RDI=ffffffff8be33680 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37930 R13=0000000000000001 R14=0000000000000001 R15=1ffff11020007000
RIP=ffffffff8b7973f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c366914 CR3=00000000297b0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=6873616800010009 8001003c00000700
XMM02=0000000040070008 8002002c00000000 XMM03=1200000040010008 1600000040030008
XMM04=0000000040040008 0000000040020008 XMM05=307a797300010009 0000000040050008
XMM06=0000000040030008 800200140074616e XMM07=0001000880010020 0000000040040008
XMM08=0000000040020008 1200000040010008 XMM09=0000000000000000 00007fdf76c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
