last executing test programs:

655.856319ms ago: executing program 1 (id=1611):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x134, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x20}, [@IFLA_AF_SPEC={0x114, 0x1a, 0x0, 0x1, [@AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0x21}, {0x8, 0x18}, {0x8, 0x3}, {0x8, 0x9}, {0x8, 0xc}, {0x8, 0x12}, {0x8, 0x1f}]}}, @AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x38}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_BRIDGE={0x1}, @AF_MPLS={0x4}, @AF_INET6={0x2c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8, 0xd}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}]}]}, 0x134}}, 0x0)

575.306052ms ago: executing program 1 (id=1613):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
pipe(&(0x7f0000000600)={<r1=>0xffffffffffffffff})
close(r1)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
close(0x3)
pipe(&(0x7f0000000500)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
getsockname$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose}, [@null, @rose, @rose, @default, @remote, @null, @null, @rose]}, &(0x7f0000000080)=0x48)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000900000000000800097c86b722735035dc0067f6b13308000a000000000008000a000000000008000900975b9b5e04000b801c000b8008000900000009"], 0x184}}, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000010c0)=0xd, 0x3)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8, 0xffffffff}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x2, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x7, 0x8, 0x101, 0x14, 0xd}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r4)
sendmsg$NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r9, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f800800024000000b8608000340000047510800034000000003080001"], 0xdc}}, 0x0)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
sendmsg$nl_xfrm(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {}, 0x400000}}, 0xb8}}, 0x0)

456.019534ms ago: executing program 0 (id=1617):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}})
r1 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0xffffffff, 0x4)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

455.727622ms ago: executing program 0 (id=1618):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r0 = socket$kcm(0x2, 0xa, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4daa000000000000711027000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f00000003c0)={@val={0x0, 0x86dd}, @val={0x2, 0x3, 0x5, 0x9, 0xa, 0x40}, @mpls={[], @ipv6=@generic={0x8, 0x6, "3739ed", 0x28, 0x89, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], "59c0ac5a142dbdbec6b7f2b65327cfd00f8bd3acba38414fcc35f63d64902ea8bb580250f9fdb4ec"}}}}, 0x5e)

451.888608ms ago: executing program 1 (id=1620):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6gre0\x00', <r2=>0x0, 0x2, 0x0, 0xdb, 0x9, 0x51, @dev={0xfe, 0x80, '\x00', 0x2c}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5b6ce9267e951aa3, 0x10, 0x1, 0x9}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r3=>0x0})
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6821, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x8001}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r7=>0x0})
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r7, {0x1}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x9, 0x7f, 0x1, 0x200, 0x8, 0x0, 0x3, 0x8, [{0x6, 0x8, 0x1, 0x9}]}}]}}]}, 0x54}}, 0x24040084)
sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x19c, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x118, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10c, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\x15\xbe\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x764d3b57}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '{{\x84q!}#(}.$\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd5d}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x19c}, 0x1, 0x0, 0x0, 0x41}, 0x20000041)
r9 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={<r10=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000003c0)={'dummy0\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x4b, 0xe, "4372070000001000476fb2940acf"}})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r11=>0x0})
r12 = socket$nl_route(0x10, 0x3, 0x0)
recvfrom(r6, &(0x7f0000000280)=""/185, 0xb9, 0x40010000, &(0x7f0000000680)=@isdn={0x22, 0x4, 0x7, 0x8, 0x9d}, 0x80)
sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f0500000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x44}, 0x1, 0x0, 0x0, 0x308}, 0x0)

246.353091ms ago: executing program 0 (id=1621):
unshare(0x22020600)
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
writev(r0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94)

246.063056ms ago: executing program 2 (id=1622):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x3, 0x4, 0x7}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0xd, 0xc, &(0x7f0000002b80)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f0000002b40)='GPL\x00'}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x3, 0x4, 0x7}, 0x48) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0xd, 0xc, &(0x7f0000002b80)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f0000002b40)='GPL\x00'}, 0x94) (async)

242.40966ms ago: executing program 2 (id=1623):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newsa={0x220, 0x10, 0x1, 0x0, 0x24, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x0, 0x1a00, 0x0, 0x0, 0x0, 0x0, 0xd3}, {0x0, 0xb63, 0x0, 0xfffffffffffffffb}, {0x2}, 0x0, 0x0, 0xa, 0x2}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @migrate={0xe8, 0x11, [{@in6=@mcast1, @in=@multicast1, @in6=@mcast1, @in=@rand_addr=0x64010101, 0x33, 0x4, 0x0, 0x3505, 0xa, 0x2}, {@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@mcast1, @in=@multicast1, 0x6c, 0x4, 0x0, 0x3501, 0x2, 0x2}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x3c, 0x3, 0x0, 0x0, 0x2, 0x2}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x20008004}, 0x0)

194.607466ms ago: executing program 2 (id=1624):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) (async)
r1 = socket$packet(0x11, 0x3, 0x300) (async)
r2 = syz_init_net_socket$llc(0x1a, 0x3, 0x0)
accept4$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000080)=0x10, 0x80800)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000000c0)={'wpan4\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r4)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
close(r4)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd0, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x833}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff8}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdc0b}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xcffe}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x44000)
r7 = socket$inet6(0xa, 0x6, 0x5)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000300), &(0x7f0000000340)=0x4) (async)
ioctl$SIOCGSTAMP(r7, 0x8906, &(0x7f0000000380)) (async)
r8 = accept4$inet6(r7, 0x0, &(0x7f00000003c0), 0x800)
bind$inet6(r8, &(0x7f0000000400)={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c) (async)
ioctl$int_in(r2, 0x5452, &(0x7f0000000440)=0xe) (async)
getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000480), &(0x7f00000004c0)=0x4) (async)
sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000980)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000540)={0x3e4, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x18}}}}, [@acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}]}], @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_HE_OBSS_PD={0x70, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "203c70ff1c1ce0d8"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x7}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x5}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "1412ea514d610022"}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x10}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x9}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "db39ee25735883fd"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x1}]}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TX_RATES={0xac, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x7, 0x8}, {0x1, 0x7}, {0x2, 0xa}, {0x2, 0x2}, {0x0, 0x7}, {0x6, 0x5}, {0x1, 0x4}, {0x5, 0x2}, {0x7, 0x5}, {0x3, 0x1}, {0x0, 0x8}, {0x4, 0x8}, {0x3, 0x2}, {0x6, 0x3}, {0x2, 0x5}, {0x7, 0x6}, {0x0, 0x1}, {0x6, 0xa}, {0x5, 0x9}, {0x2, 0xa}, {0x0, 0x6}, {0x2, 0x8}, {0x1, 0x4}, {0x3, 0x8}, {0x2, 0x5}, {0x1, 0x1}, {0x5, 0x5}, {0x2, 0x5}, {0x7, 0x1}, {0x3, 0x1}, {0x1, 0x2}, {0x2, 0x2}, {0x3, 0xa}, {0x0, 0x9}, {0x2, 0x9}, {0x5, 0x8}, {0x5, 0x6}, {0x2, 0xa}, {0x4, 0x8}, {0x3, 0x7}, {0x6, 0x7}, {0x6, 0x2}, {0x1, 0x7}, {0x6, 0x9}, {0x1}, {0x0, 0x8}, {0x5, 0x9}, {0x5, 0xa}, {0x3, 0x9}, {0x2, 0x2}, {0x2, 0x6}, {0x1, 0x4}, {0x1, 0x5}, {0x4, 0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x0, 0x3}, {0x5, 0x8}, {0x0, 0x5}, {0x4, 0x7}, {0x4, 0x4}, {0x1, 0x3}, {0x7, 0x7}, {0x3, 0x5}, {0x7, 0xa}, {0x0, 0x6}, {0x1, 0x4}, {0x5, 0x4}, {0x2, 0x6}, {0x6, 0x9}, {0x5, 0x3}, {0x2, 0x5}, {0x6}, {0x3, 0x9}, {0x7, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc243, 0x5, 0x0, 0x9, 0xfff, 0x8, 0x3312, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x18a, 0xa4d1, 0x2f, 0x0, 0x81, 0x4, 0x6, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x14, 0xc03a, 0x9, 0x400, 0xbf, 0x2]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0x5, 0x9, 0x52, 0x1000, 0x7, 0x5]}}]}]}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async)
r9 = socket$netlink(0x10, 0x3, 0x2)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000009c0)={0xe1, 0x9, 0x4, 0x8, 0x5, 0x6}) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000a00)={<r10=>r9, 0x5, 0x7, 0xb}) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_GET(r11, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r10}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xc0}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) (async)
ioctl$FS_IOC_GETFSLABEL(r11, 0x81009431, &(0x7f0000000b80))
setsockopt$EBT_SO_SET_COUNTERS(r10, 0x0, 0x81, &(0x7f0000000d40)={'nat\x00', 0x0, 0x0, 0x0, [0x5, 0x5, 0x9, 0xf2e7, 0x8, 0x8000], 0x3, &(0x7f0000000c80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8)
socket$inet_tcp(0x2, 0x1, 0x0)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e40), r9)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r10, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x504092c4}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x44, r12, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x1e5b3e0cf5406a83)

193.84689ms ago: executing program 1 (id=1625):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) (async)
pipe(&(0x7f0000002740))

125.273871ms ago: executing program 1 (id=1626):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="030000000000000002004e2064010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000b4ff9652a8000000000000000000000000000001"], 0x190)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f00000100000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000200000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="380100001a"], 0x138}, 0x1, 0x0, 0x0, 0x48881}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = gettid()
syz_open_procfs$namespace(r4, &(0x7f0000000040)='ns/cgroup\x00')
r5 = gettid()
syz_open_procfs$namespace(r5, &(0x7f0000000040)='ns/cgroup\x00')
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x10ec, 0x40, 0x2, 0x0, 0x0, {0x8}, [@generic="8100c17659efc25e1da7245c734844e527d994c65f7a52e2a207ee08aa7e40d0940e2514af10689583bedff37150cacdbf0f9cadaafebba31c60373b464d98951bcc4931fc88329eb6b6dd6d5184733ffc4bba512e79c8c967e9248c5e31b3bf213384e62524a9802669c4ffb0c707cbe77dcc61997e0ef6cdddf04bb00fc64933dc95bddde11c591980483e4ea90358637667620ed01b66ad3d5ebd05193ed90058b4855d0bed3e076ed32abdd25b63eb4e0e5cd1b8c5b889d565049868", @nested={0x17, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}, @generic="e9dc31", @typed={0x8, 0xd4, 0x0, 0x0, @u32=0x401}]}, @generic="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"]}, 0x10ec}, 0x1, 0x0, 0x0, 0x4044890}, 0x40)

125.093159ms ago: executing program 0 (id=1627):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
gettid()
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002cbd5400fedbdf255300000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x9000000, 0x20004000}, 0x50)

54.936878ms ago: executing program 2 (id=1628):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000020601000600000600000000000000000e0003006269746d61703a6970000000050004"], 0x48}}, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, 0x0, 0x22)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x0, 0x2}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x80de02bd3ca0bfdb}, 0x14}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000002c0)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, r4, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd10}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffd}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004)
r6 = socket$kcm(0x29, 0x4, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000200), 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)

54.518746ms ago: executing program 0 (id=1629):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe)
listen(0xffffffffffffffff, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)

52.048752ms ago: executing program 1 (id=1630):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001400)={0x3c, 0x0, 0x8, 0x3, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x2dbe, 0x4)
sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x20000, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x27, 0x0, "8a7ecb4d6b3f0cafbcf35cabb63f9e9d198114683021053c2f3bda25afeda865b263ae05982942263fef7decbccfcf7e96961f74d44a9ab0ed3c3e8b01d58bb05c429eefcbc6b655605f8babcf818706"}, 0xd8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="40b5bf39974b4f000000ecb897146582f97f010425bd700000006f090d8192caec851416e6ec31652419b5bad490caabf6a03d5493ac4495bb35583f3ef4a32099b706e46d0eec04d56e2f84faefbcd64202b2f4362114d700"/100, @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128009000100626f6e640000000010000280080007000e00000004000880"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040))
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001400)={0x3c, 0x0, 0x8, 0x3, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async)
socket$igmp6(0xa, 0x3, 0x2) (async)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x2dbe, 0x4) (async)
sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) (async)
recvmmsg(r1, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x20000, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) (async)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x27, 0x0, "8a7ecb4d6b3f0cafbcf35cabb63f9e9d198114683021053c2f3bda25afeda865b263ae05982942263fef7decbccfcf7e96961f74d44a9ab0ed3c3e8b01d58bb05c429eefcbc6b655605f8babcf818706"}, 0xd8) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="40b5bf39974b4f000000ecb897146582f97f010425bd700000006f090d8192caec851416e6ec31652419b5bad490caabf6a03d5493ac4495bb35583f3ef4a32099b706e46d0eec04d56e2f84faefbcd64202b2f4362114d700"/100, @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128009000100626f6e640000000010000280080007000e00000004000880"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)) (async)

5.8375ms ago: executing program 2 (id=1631):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x4b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x4b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0xc, r1}, 0x18)

3.9005ms ago: executing program 0 (id=1632):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0xf400, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0xa4, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x78, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x20537236}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'rose0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x372ed8ee}, @NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4695d0bb}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bridge\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x65a9457a}]}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0)

0s ago: executing program 2 (id=1633):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="280031a92de22be20000", @ANYRES16=r1, @ANYBLOB="000329bd7000fddbdf255900000008000300", @ANYRES32=r2, @ANYBLOB="0c009900ff07000004000000"], 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x40c0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r4=>0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000021000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r5, 0xffffffffffffffff, 0x500}, 0x57)
syz_emit_ethernet(0x56, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0xa, 0xf989, "f16d73c0e798"}]}}}}}}}}, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r7 = socket(0x10, 0x803, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x6}, 0x8)
sendto(0xffffffffffffffff, &(0x7f0000000a00)="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", 0x145, 0x2000, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r8, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)=ANY=[@ANYBLOB="34000000000b0103000200000a080002400100727066696c74656200"/52], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010)
sendmsg$nl_route_sched(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xa, 0x2}, {0x9, 0xc}, {0x9, 0xffff}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840)
close(0x3)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc0118000000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r10, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r10, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:46110' (ED25519) to the list of known hosts.
syzkaller login: [   56.656882][ T5828] cgroup: Unknown subsys name 'net'
[   56.752145][ T5828] cgroup: Unknown subsys name 'cpuset'
[   56.758473][ T5828] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.039911][ T5828] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.987066][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.994311][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.997641][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.006694][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.014701][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.017780][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.023836][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.033671][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.044787][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.052494][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.073664][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.081473][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.085517][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.096048][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.099893][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.343235][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   65.501051][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   65.526954][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.530878][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.535062][ T5850] bridge_slave_0: entered allmulticast mode
[   65.538966][ T5850] bridge_slave_0: entered promiscuous mode
[   65.575165][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.578371][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.581310][ T5850] bridge_slave_1: entered allmulticast mode
[   65.585920][ T5850] bridge_slave_1: entered promiscuous mode
[   65.646331][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   65.669037][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.702992][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.758806][ T5850] team0: Port device team_slave_0 added
[   65.776471][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.779493][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.782348][ T5845] bridge_slave_0: entered allmulticast mode
[   65.787998][ T5845] bridge_slave_0: entered promiscuous mode
[   65.800325][ T5850] team0: Port device team_slave_1 added
[   65.816531][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.819417][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.822449][ T5845] bridge_slave_1: entered allmulticast mode
[   65.827676][ T5845] bridge_slave_1: entered promiscuous mode
[   65.890685][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.893014][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.902306][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.918787][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.921275][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.925698][ T5854] bridge_slave_0: entered allmulticast mode
[   65.928974][ T5854] bridge_slave_0: entered promiscuous mode
[   65.934260][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.938295][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.940805][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.951182][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.955970][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.958758][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.961340][ T5854] bridge_slave_1: entered allmulticast mode
[   65.965111][ T5854] bridge_slave_1: entered promiscuous mode
[   65.979925][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.025453][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.031211][ T5845] team0: Port device team_slave_0 added
[   66.037673][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.042236][ T5845] team0: Port device team_slave_1 added
[   66.122665][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.125625][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.136037][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.146960][ T5850] hsr_slave_0: entered promiscuous mode
[   66.150154][ T5850] hsr_slave_1: entered promiscuous mode
[   66.155910][ T5854] team0: Port device team_slave_0 added
[   66.159302][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.162129][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.172830][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.185879][ T5854] team0: Port device team_slave_1 added
[   66.260173][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.262745][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.272896][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.278940][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.281780][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.290577][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.341863][ T5845] hsr_slave_0: entered promiscuous mode
[   66.345956][ T5845] hsr_slave_1: entered promiscuous mode
[   66.348876][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   66.351280][ T5845] Cannot create hsr debugfs directory
[   66.466806][ T5854] hsr_slave_0: entered promiscuous mode
[   66.469230][ T5854] hsr_slave_1: entered promiscuous mode
[   66.471480][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   66.473828][ T5854] Cannot create hsr debugfs directory
[   66.666570][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.675609][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.687035][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.708699][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.746241][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.761504][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.779596][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.794835][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.828702][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.835108][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.840782][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.856884][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.978660][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.014452][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   67.028256][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.041355][ T3619] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.044394][ T3619] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.065581][ T3619] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.068477][ T3619] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.095825][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   67.107473][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.131485][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.134512][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.138189][ T5848] Bluetooth: hci2: command tx timeout
[   67.139058][   T54] Bluetooth: hci1: command tx timeout
[   67.140746][ T5848] Bluetooth: hci0: command tx timeout
[   67.146331][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.149214][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.195064][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   67.228093][ T3619] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.231047][ T3619] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.252138][ T3619] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.255116][ T3619] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.442279][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.523316][ T5850] veth0_vlan: entered promiscuous mode
[   67.536615][ T5850] veth1_vlan: entered promiscuous mode
[   67.563342][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.592600][ T5850] veth0_macvtap: entered promiscuous mode
[   67.600102][ T5850] veth1_macvtap: entered promiscuous mode
[   67.628784][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.640581][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.661397][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.691286][ T5720] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.696011][ T5720] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.710083][ T5720] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.715581][ T5720] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.725845][ T5854] veth0_vlan: entered promiscuous mode
[   67.759004][ T5854] veth1_vlan: entered promiscuous mode
[   67.776542][ T5845] veth0_vlan: entered promiscuous mode
[   67.798978][ T5845] veth1_vlan: entered promiscuous mode
[   67.828588][ T5854] veth0_macvtap: entered promiscuous mode
[   67.866651][ T5854] veth1_macvtap: entered promiscuous mode
[   67.887311][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.888781][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.890417][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.912909][ T5845] veth0_macvtap: entered promiscuous mode
[   67.924839][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.940338][ T5845] veth1_macvtap: entered promiscuous mode
[   67.947257][ T5911] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.951547][ T5911] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.970641][ T5911] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.975166][ T5911] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.983245][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.987071][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.998845][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.018971][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.034803][ T5911] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.045089][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.075463][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.080050][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.092656][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.155761][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.158306][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.191977][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.198069][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.245235][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.247734][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.302817][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.307795][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.333178][ T5921] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.448647][ T5930] netlink: 'syz.0.6': attribute type 83 has an invalid length.
[   68.465714][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   68.510563][ T5933] team1: entered promiscuous mode
[   68.516557][ T5933] team1: entered allmulticast mode
[   68.518950][ T5933] Zero length message leads to an empty skb
[   68.735845][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'.
[   68.898668][ T5943] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10'.
[   68.916338][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'.
[   68.968320][ T5952] netlink: 'syz.2.15': attribute type 5 has an invalid length.
[   69.048442][ T5954] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   69.128932][ T5960] tipc: Started in network mode
[   69.131078][ T5960] tipc: Node identity e640f56b5f7c, cluster identity 4711
[   69.134894][ T5960] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.139662][ T5960] D: renamed from syzkaller0
[   69.143320][ T5960] tipc: Disabling bearer <eth:syzkaller0>
[   69.204115][ T5848] Bluetooth: hci0: command tx timeout
[   69.204210][ T5851] Bluetooth: hci1: command tx timeout
[   69.206300][ T5848] Bluetooth: hci2: command tx timeout
[   69.260939][ T5962] openvswitch: netlink: IP tunnel TTL not specified.
[   69.369020][ T5968] netlink: 108 bytes leftover after parsing attributes in process `syz.2.22'.
[   69.576093][ T5977] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.584644][ T5977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25'.
[   69.592753][ T5977] netlink: 24 bytes leftover after parsing attributes in process `syz.2.25'.
[   69.776662][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31'.
[   69.779751][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'.
[   69.783819][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'.
[   70.235604][ T6013] bond0: entered promiscuous mode
[   70.241776][ T6013] bond_slave_0: entered promiscuous mode
[   70.249121][ T6013] bond_slave_1: entered promiscuous mode
[   70.493126][ T6030] syz.1.44 uses obsolete (PF_INET,SOCK_PACKET)
[   70.689789][ T6035] warning: `syz.1.45' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   71.207655][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.210595][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.283971][   T54] Bluetooth: hci2: command tx timeout
[   71.284059][ T5848] Bluetooth: hci0: command tx timeout
[   71.286571][   T54] Bluetooth: hci1: command tx timeout
[   71.431278][ T6078] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   71.760928][ T6096] netlink: 'syz.1.70': attribute type 2 has an invalid length.
[   71.800107][ T6099] team0: No ports can be present during mode change
[   72.201200][ T6128] macvlan2: entered promiscuous mode
[   72.216788][ T6128] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   72.518234][ T6149] tipc: Invalid UDP bearer configuration
[   72.518282][ T6149] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   72.599824][ T6153] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20002
[   73.048563][ T6161] netlink: 'syz.2.93': attribute type 10 has an invalid length.
[   73.055407][ T6161] syz_tun: entered promiscuous mode
[   73.065507][ T6161] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   73.071179][ T6182] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   73.159869][ T6183] openvswitch: netlink: Missing key (keys=44, expected=200000)
[   73.365084][   T54] Bluetooth: hci0: command tx timeout
[   73.365124][ T5235] Bluetooth: hci2: command 0x0419 tx timeout
[   73.367365][   T54] Bluetooth: hci1: command tx timeout
[   73.884542][ T6182] delete_channel: no stack
[   73.884616][ T6201] netlink: 'syz.1.104': attribute type 1 has an invalid length.
[   73.884642][ T6201] __nla_validate_parse: 36 callbacks suppressed
[   73.884651][ T6201] netlink: 184 bytes leftover after parsing attributes in process `syz.1.104'.
[   74.188707][ T6239] netlink: 'syz.0.112': attribute type 1 has an invalid length.
[   74.676961][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.123'.
[   74.680778][ T6285] bridge_slave_1: left allmulticast mode
[   74.683282][ T6285] bridge_slave_1: left promiscuous mode
[   74.693067][ T6285] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.707748][ T6285] bridge_slave_0: left allmulticast mode
[   74.711982][ T6285] bridge_slave_0: left promiscuous mode
[   74.715286][ T6285] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.191619][ T6311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.133'.
[   75.237325][ T6317] nftables ruleset with unbound set
[   75.411234][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.140'.
[   75.415037][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.140'.
[   75.418570][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.140'.
[   75.448251][   T54] Bluetooth: hci2: command 0x0419 tx timeout
[   75.541485][ T6337] netlink: 'syz.1.143': attribute type 3 has an invalid length.
[   75.544735][ T6337] netlink: 'syz.1.143': attribute type 1 has an invalid length.
[   75.548445][ T6337] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.143'.
[   76.282200][ T6380] tipc: Started in network mode
[   76.285213][ T6380] tipc: Node identity , cluster identity 4711
[   76.287586][ T6380] tipc: Failed to obtain node identity
[   76.290183][ T6380] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   76.295471][ T6389] netlink: 24 bytes leftover after parsing attributes in process `syz.0.161'.
[   76.299491][ T6382] tipc: Started in network mode
[   76.301487][ T6382] tipc: Node identity , cluster identity 4711
[   76.304734][ T6382] tipc: Failed to obtain node identity
[   76.306913][ T6382] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   76.313358][ T6380] netlink: 'syz.1.160': attribute type 2 has an invalid length.
[   76.317141][ T6380] netlink: 119 bytes leftover after parsing attributes in process `syz.1.160'.
[   76.449808][ T6393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.165'.
[   77.558557][ T6419] syzkaller1: entered promiscuous mode
[   77.560561][ T6419] syzkaller1: entered allmulticast mode
[   77.789827][ T6435] Driver unsupported XDP return value 0 on prog  (id 32) dev N/A, expect packet loss!
[   78.835477][ T6469] !: renamed from dummy0 (while UP)
[   79.069942][ T6486] netlink: 'syz.2.193': attribute type 4 has an invalid length.
[   79.076910][ T6490] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.239154][ T6504] __nla_validate_parse: 4 callbacks suppressed
[   79.239167][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'.
[   79.248268][ T6504] netlink: 32 bytes leftover after parsing attributes in process `syz.1.200'.
[   79.470714][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.206'.
[   79.473778][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.206'.
[   79.531518][ T6528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.208'.
[   79.789947][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.212'.
[   79.815452][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.212'.
[   79.832681][ T6549] ip6tnl1: entered promiscuous mode
[   79.835548][ T6549] ip6tnl1: entered allmulticast mode
[   80.095876][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'.
[   80.109339][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'.
[   80.177274][ T6580] netlink: 40 bytes leftover after parsing attributes in process `syz.1.226'.
[   80.722706][ T6634] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma?
[   80.921476][ T6648] netlink: 'syz.0.250': attribute type 1 has an invalid length.
[   80.925818][ T6648] netlink: 'syz.0.250': attribute type 1 has an invalid length.
[   80.968238][ T6648] bond1: (slave gretap2): making interface the new active one
[   80.972254][ T6648] bond1: (slave gretap2): Enslaving as an active interface with an up link
[   80.980555][ T6648] netlink: 'syz.0.250': attribute type 1 has an invalid length.
[   81.056843][ T6654] veth3: entered promiscuous mode
[   81.711904][ T6678] netlink: 'syz.2.262': attribute type 1 has an invalid length.
[   82.093742][ T6702] netlink: 'syz.0.271': attribute type 12 has an invalid length.
[   82.541217][ T6730] syzkaller1: entered promiscuous mode
[   82.544275][ T6730] syzkaller1: entered allmulticast mode
[   82.552626][ T6728] tipc: Started in network mode
[   82.556705][ T6728] tipc: Node identity 0ae88b788892, cluster identity 4711
[   82.560315][ T6728] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.565713][ T6728] syzkaller0: entered promiscuous mode
[   82.568078][ T6728] syzkaller0: entered allmulticast mode
[   82.612775][ T6727] tipc: Resetting bearer <eth:syzkaller0>
[   82.628482][ T6727] tipc: Disabling bearer <eth:syzkaller0>
[   82.768869][ T6734] netlink: 'syz.1.282': attribute type 1 has an invalid length.
[   83.132305][ T6752] netlink: 'syz.1.288': attribute type 11 has an invalid length.
[   83.228473][ T6756] netlink: 'syz.0.289': attribute type 7 has an invalid length.
[   84.370196][ T6796] __nla_validate_parse: 32 callbacks suppressed
[   84.370208][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.304'.
[   84.400766][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.303'.
[   84.487089][ T6808] netlink: 'syz.0.306': attribute type 6 has an invalid length.
[   84.490071][ T6808] netlink: 176 bytes leftover after parsing attributes in process `syz.0.306'.
[   84.514351][ T6812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.306'.
[   84.517845][ T6812] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   84.531256][ T6810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.306'.
[   84.536269][ T6810] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   84.543792][ T6808] IPv6: Can't replace route, no match found
[   84.641278][ T6820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.660618][ T6819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.710571][ T6828] netlink: 24 bytes leftover after parsing attributes in process `syz.0.310'.
[   84.843906][ T6830] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.867848][ T6835] openvswitch: netlink: Key 6 has unexpected len 8 expected 2
[   84.872803][ T6830] netlink: 32 bytes leftover after parsing attributes in process `syz.2.312'.
[   84.906000][ T6829] tipc: Disabling bearer <eth:syzkaller0>
[   84.944950][ T6838] netlink: 'syz.1.315': attribute type 1 has an invalid length.
[   84.993333][ T6838] 8021q: adding VLAN 0 to HW filter on device bond2
[   85.008966][ T6842] ipvlan2: entered allmulticast mode
[   85.012304][ T6842] bond2: entered allmulticast mode
[   85.017533][ T6841] syzkaller1: entered promiscuous mode
[   85.019613][ T6841] syzkaller1: entered allmulticast mode
[   85.040638][ T6838] bond2: (slave gretap1): making interface the new active one
[   85.044905][ T6838] gretap1: entered allmulticast mode
[   85.048310][ T6838] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   85.121057][ T6838] syz.1.315 (6838) used greatest stack depth: 19848 bytes left
[   85.352948][ T6862] xt_socket: unknown flags 0x50
[   85.672515][ T6886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.329'.
[   85.714637][ T6888] netlink: 'syz.2.331': attribute type 30 has an invalid length.
[   85.830712][ T6895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.333'.
[   86.090343][ T6916] netlink: 'syz.0.339': attribute type 1 has an invalid length.
[   86.290108][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'.
[   86.565648][   T10] cfg80211: failed to load regulatory.db
[   86.636239][ T6928] netlink: 'syz.0.346': attribute type 3 has an invalid length.
[   86.639431][ T5912] IPVS: starting estimator thread 0...
[   86.718339][ T6928] netlink: 'syz.0.346': attribute type 1 has an invalid length.
[   86.727073][ T6934] IPVS: using max 51 ests per chain, 122400 per kthread
[   86.992933][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[   87.854611][ T7029] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   88.718699][ T7100] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[   89.097256][ T7121] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.107992][ T7121] tipc: Failed to remove unknown binding: 66,1,1/0:273179317/273179319
[   89.116821][ T7121] tipc: Failed to remove unknown binding: 66,1,1/0:273179317/273179319
[   89.120321][ T7121] tipc: Failed to remove unknown binding: 66,1,1/0:273179317/273179319
[   89.168637][ T7128] bond0: (slave bond_slave_0): Releasing backup interface
[   89.176970][ T7128] bond0: (slave bond_slave_1): Releasing backup interface
[   89.186937][ T7128] team0: Port device team_slave_0 removed
[   89.193356][ T7128] team0: Port device team_slave_1 removed
[   89.198899][ T7128] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.205132][ T7128] batman_adv: batadv0: Removing interface: batadv_slave_0
[   89.208663][ T7128] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.211031][ T7128] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.220687][ T7128] bond1: (slave gretap2): Releasing backup interface
[   89.235860][ T7131] netlink: 'syz.0.397': attribute type 2 has an invalid length.
[   89.277288][ T7128] team0: Failed to send options change via netlink (err -105)
[   89.280713][ T7128] team0: Mode changed to "activebackup"
[   89.459041][ T7143] netlink: 'syz.0.402': attribute type 1 has an invalid length.
[   89.486787][ T7143] 8021q: adding VLAN 0 to HW filter on device bond2
[   89.490095][ T7142] mac80211_hwsim hwsim2 ;: renamed from wlan0 (while UP)
[   89.552399][ T7153] IPVS: length: 202 != 24
[   89.596999][ T7153] netlink: 'syz.1.407': attribute type 1 has an invalid length.
[   89.659450][ T7162] __nla_validate_parse: 20 callbacks suppressed
[   89.659461][ T7162] netlink: 20 bytes leftover after parsing attributes in process `syz.1.410'.
[   90.089712][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.414'.
[   90.093552][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.414'.
[   90.099250][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.414'.
[   90.104819][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.414'.
[   90.108434][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.414'.
[   90.185941][ T7181] netlink: 'syz.2.415': attribute type 10 has an invalid length.
[   90.194047][ T7181] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.200049][ T7181] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   90.412667][ T7194] netlink: 'syz.2.420': attribute type 5 has an invalid length.
[   90.476281][ T7198] netlink: 'syz.2.422': attribute type 2 has an invalid length.
[   90.479163][ T7198] netlink: 51 bytes leftover after parsing attributes in process `syz.2.422'.
[   90.484935][ T7198] IPv6: NLM_F_REPLACE set, but no existing node found!
[   90.520759][ T7201] netlink: 'syz.0.423': attribute type 4 has an invalid length.
[   90.647815][   T10] IPVS: starting estimator thread 0...
[   90.676285][ T7215] netlink: 32 bytes leftover after parsing attributes in process `syz.2.430'.
[   90.708723][ T7217] netlink: 'syz.0.431': attribute type 3 has an invalid length.
[   90.741863][ T7222] netlink: 'syz.2.434': attribute type 5 has an invalid length.
[   90.747716][ T7223] netlink: 48 bytes leftover after parsing attributes in process `syz.0.433'.
[   90.752137][ T7223] netlink: 'syz.0.433': attribute type 1 has an invalid length.
[   90.759150][ T7213] IPVS: using max 64 ests per chain, 153600 per kthread
[   90.786881][ T7223] 8021q: adding VLAN 0 to HW filter on device bond3
[   90.804044][ T7223] 8021q: adding VLAN 0 to HW filter on device bond3
[   90.807307][ T7223] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   90.824419][ T7223] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   90.861009][ T7232] bond3: (slave bridge1): Enslaving as an active interface with a down link
[   91.045300][ T7254] netlink: 'syz.2.443': attribute type 1 has an invalid length.
[   91.049004][ T7254] netlink: 'syz.2.443': attribute type 2 has an invalid length.
[   91.061093][ T7254] netlink: 3572 bytes leftover after parsing attributes in process `syz.2.443'.
[   91.247954][ T7274] openvswitch: netlink: Flow key attr not present in new flow.
[   91.260691][ T7274] IPVS: set_ctl: invalid protocol: 20482 224.0.0.1:19621
[   91.498828][ T7289] ip6tnl2: entered promiscuous mode
[   91.500999][ T7289] ip6tnl2: entered allmulticast mode
[   91.505012][ T7289] team0: Device ip6tnl2 is of different type
[   92.778598][ T7342] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   92.781190][ T7342] team0: Device ipvlan2 is already an upper device of the team interface
[   94.100697][ T7431] syzkaller0: entered promiscuous mode
[   94.106645][ T7431] syzkaller0: entered allmulticast mode
[   94.292580][ T7447] veth1_macvtap: left promiscuous mode
[   94.323631][ T5851] Bluetooth: hci2: command 0x0419 tx timeout
[   94.473865][ T5877] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[   94.481966][ T5877] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[   94.487355][ T7465] tipc: Started in network mode
[   94.489551][ T7465] tipc: Node identity c25fa285f353, cluster identity 4711
[   94.492276][ T7465] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.495661][ T7465] syzkaller0: entered promiscuous mode
[   94.497636][ T7465] syzkaller0: entered allmulticast mode
[   94.569403][ T7465] tipc: Resetting bearer <eth:syzkaller0>
[   94.576072][ T7464] tipc: Resetting bearer <eth:syzkaller0>
[   94.599742][ T7464] tipc: Disabling bearer <eth:syzkaller0>
[   94.699450][ T7481] __nla_validate_parse: 27 callbacks suppressed
[   94.699469][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.526'.
[   94.705888][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.526'.
[   94.709966][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.526'.
[   94.737397][ T7484] openvswitch: netlink: Flow actions attr not present in new flow.
[   94.764026][ T7488] validate_nla: 8 callbacks suppressed
[   94.764070][ T7488] netlink: 'syz.1.528': attribute type 3 has an invalid length.
[   94.795879][ T7488] syz_tun: entered allmulticast mode
[   94.822159][ T7485] syz_tun: left allmulticast mode
[   94.823720][ T7493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.530'.
[   94.964157][ T7509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.536'.
[   94.967472][ T7509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.536'.
[   94.970335][ T7509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.536'.
[   94.993778][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.538'.
[   95.132916][ T7531] delete_channel: no stack
[   95.186070][ T7536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.547'.
[   95.188933][ T7536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.547'.
[   95.281602][ T7546] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[   95.286802][ T7545] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[   95.345581][ T7545] netlink: 'syz.0.550': attribute type 12 has an invalid length.
[   95.582821][ T7564] bond1: entered promiscuous mode
[   95.585677][ T7564] 8021q: adding VLAN 0 to HW filter on device bond1
[   95.683012][ T7564] bond1 (unregistering): Released all slaves
[   95.703021][ T7557] delete_channel: no stack
[   96.092162][ T7599] macsec1: entered promiscuous mode
[   96.097505][ T7599] macsec1: entered allmulticast mode
[   96.202413][ T7609] xt_socket: unknown flags 0xd0
[   96.210053][ T7609] netlink: 'syz.0.573': attribute type 1 has an invalid length.
[   96.213038][ T7609] netlink: 'syz.0.573': attribute type 4 has an invalid length.
[   97.383354][ T7851] netlink: 'syz.0.590': attribute type 5 has an invalid length.
[   98.907602][ T7919] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   99.025142][ T7916] macsec1: left promiscuous mode
[   99.042134][ T7925] netlink: 'syz.2.611': attribute type 11 has an invalid length.
[   99.112337][ T7927] netlink: 'syz.0.612': attribute type 5 has an invalid length.
[   99.331209][ T7938] ieee802154 phy0 wpan0: encryption failed: -22
[   99.628677][ T7941] nftables ruleset with unbound chain
[   99.874005][ T7971] __nla_validate_parse: 27 callbacks suppressed
[   99.874022][ T7971] netlink: 324 bytes leftover after parsing attributes in process `syz.1.625'.
[   99.883144][ T7973] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.907004][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.626'.
[   99.923251][ T7973] netlink: 'syz.0.626': attribute type 5 has an invalid length.
[   99.943856][ T7973] netlink: 20 bytes leftover after parsing attributes in process `syz.0.626'.
[   99.970774][ T7973] geneve2: entered promiscuous mode
[   99.972928][ T7973] geneve2: entered allmulticast mode
[   99.992098][ T5877] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  100.016260][ T5877] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  100.019875][ T5877] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  100.034993][ T5877] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  100.355147][ T8007] netlink: 36 bytes leftover after parsing attributes in process `syz.1.638'.
[  100.359440][ T8007] netlink: 'syz.1.638': attribute type 3 has an invalid length.
[  100.416691][ T8009] netlink: 40 bytes leftover after parsing attributes in process `syz.2.640'.
[  100.430064][ T8010] team0: Device gtp0 is of different type
[  100.462398][ T8014] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20000
[  100.492246][ T8010] team0: Device gtp0 is of different type
[  100.563991][ T8010] team0: Device gtp0 is of different type
[  100.640249][ T8010] team0: Device gtp0 is of different type
[  100.674377][ T8028] netlink: 52 bytes leftover after parsing attributes in process `syz.0.647'.
[  100.719031][ T8010] team0: Device gtp0 is of different type
[  100.722849][ T8030] netlink: 76 bytes leftover after parsing attributes in process `syz.0.648'.
[  100.828374][ T8010] team0: Device gtp0 is of different type
[  100.902955][ T8010] team0: Device gtp0 is of different type
[  100.956401][ T8010] team0: Device gtp0 is of different type
[  101.010552][ T8010] team0: Device gtp0 is of different type
[  101.060510][ T8053] netlink: 'syz.0.650': attribute type 27 has an invalid length.
[  101.076997][ T8010] team0: Device gtp0 is of different type
[  101.171772][ T8060] 8021q: adding VLAN 0 to HW filter on device bond4
[  101.187824][ T8010] team0: Device gtp0 is of different type
[  101.232072][ T8065] netlink: 'syz.1.656': attribute type 4 has an invalid length.
[  101.236941][ T8065] netlink: 17 bytes leftover after parsing attributes in process `syz.1.656'.
[  101.419707][ T8075] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  101.448098][ T8076] bridge_slave_0: left allmulticast mode
[  101.450512][ T8076] bridge_slave_0: left promiscuous mode
[  101.453204][ T8076] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.470140][ T8076] bridge_slave_1: left allmulticast mode
[  101.473342][ T8076] bridge_slave_1: left promiscuous mode
[  101.478639][ T8076] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.483147][ T8078] netlink: 28 bytes leftover after parsing attributes in process `syz.2.662'.
[  101.491146][ T8076] bond0: (slave bond_slave_0): Releasing backup interface
[  101.498426][ T8076] bond_slave_0: left promiscuous mode
[  101.505369][ T8076] bond0: (slave bond_slave_1): Releasing backup interface
[  101.509015][ T8076] bond_slave_1: left promiscuous mode
[  101.519560][ T8076] team0: Port device team_slave_0 removed
[  101.529870][ T8076] team0: Port device team_slave_1 removed
[  101.533070][ T8076] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.536851][ T8076] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.541386][ T8076] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.545434][ T8076] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.559348][ T8076] bond2: (slave gretap1): Releasing active interface
[  101.562276][ T8076] gretap1: left allmulticast mode
[  101.791125][ T8099] netlink: 'syz.2.667': attribute type 3 has an invalid length.
[  101.939744][ T8111] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.942917][ T8111] syzkaller0: entered promiscuous mode
[  101.945445][ T8111] syzkaller0: entered allmulticast mode
[  102.032907][ T8108] tipc: Resetting bearer <eth:syzkaller0>
[  102.053662][ T8108] tipc: Disabling bearer <eth:syzkaller0>
[  102.240852][ T8129] netlink: 'syz.1.678': attribute type 16 has an invalid length.
[  102.244296][ T8129] netlink: 'syz.1.678': attribute type 3 has an invalid length.
[  102.247331][ T8129] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.678'.
[  102.292946][ T8134] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  102.980335][ T8203] netlink: 'syz.0.702': attribute type 23 has an invalid length.
[  103.049819][ T8208] netlink: 'syz.0.703': attribute type 3 has an invalid length.
[  103.239400][ T8218] vlan0: entered promiscuous mode
[  103.850111][ T8272] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.857333][ T8272] syzkaller0: entered promiscuous mode
[  103.859537][ T8272] syzkaller0: entered allmulticast mode
[  103.886249][ T8277] netlink: 'syz.2.720': attribute type 4 has an invalid length.
[  103.985717][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  104.050858][ T8281] tipc: Resetting bearer <eth:syzkaller0>
[  104.053589][ T8281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  104.075832][ T8271] tipc: Resetting bearer <eth:syzkaller0>
[  104.097610][ T8271] tipc: Disabling bearer <eth:syzkaller0>
[  104.635016][ T8306] team0: Device ipvlan1 failed to register rx_handler
[  104.788261][ T8306] syz.1.733 (8306) used greatest stack depth: 18744 bytes left
[  104.866831][ T8329] syzkaller0: entered promiscuous mode
[  104.868928][ T8329] syzkaller0: entered allmulticast mode
[  104.958062][ T8340] __nla_validate_parse: 14 callbacks suppressed
[  104.958076][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.743'.
[  105.038085][ T8342] netlink: 16 bytes leftover after parsing attributes in process `syz.2.741'.
[  106.106443][ T8353] validate_nla: 4 callbacks suppressed
[  106.106458][ T8353] netlink: 'syz.2.748': attribute type 1 has an invalid length.
[  106.111058][ T8353] netlink: 'syz.2.748': attribute type 1 has an invalid length.
[  106.273259][ T8367] netlink: 'syz.0.753': attribute type 7 has an invalid length.
[  106.277737][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.753'.
[  106.338967][ T8367] 8021q: adding VLAN 0 to HW filter on device bond4
[  106.354719][ T8367] bridge4: port 1(bond4) entered blocking state
[  106.357371][ T8367] bridge4: port 1(bond4) entered disabled state
[  106.360077][ T8367] bond4: entered allmulticast mode
[  106.376862][ T8372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.755'.
[  106.382924][ T8367] bridge4: port 1(bond4) entered blocking state
[  106.385876][ T8367] bridge4: port 1(bond4) entered forwarding state
[  106.425038][ T8375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'.
[  106.428662][ T8375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.756'.
[  106.534172][ T8388] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.760'.
[  106.661476][ T8398] netlink: 'syz.2.765': attribute type 1 has an invalid length.
[  106.706110][ T8398] 8021q: adding VLAN 0 to HW filter on device bond1
[  106.725758][ T8398] bond1: (slave veth3): Enslaving as an active interface with a down link
[  106.732758][ T8404] netlink: 32 bytes leftover after parsing attributes in process `syz.0.767'.
[  106.734992][ T8398] 8021q: adding VLAN 0 to HW filter on device batadv1
[  106.738986][ T8398] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  106.979450][ T6231] bridge4: port 1(bond4) entered disabled state
[  107.269350][ T8442] openvswitch: netlink: Duplicate or invalid key (type 0).
[  107.272377][ T8442] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.290462][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.780'.
[  107.458860][ T8449] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.783'.
[  107.471996][ T8451] netlink: 'syz.0.784': attribute type 3 has an invalid length.
[  108.612657][ T8524] tap0: tun_chr_ioctl cmd 3223385353
[  108.616805][ T8524] tap0: tun_chr_ioctl cmd 1074025677
[  108.621313][ T8524] tap0: linktype set to 270
[  108.868248][ T8547] syzkaller1: entered promiscuous mode
[  108.870375][ T8547] syzkaller1: entered allmulticast mode
[  109.334440][ T8594] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  109.346687][ T8594] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  109.780692][ T8624] netlink: 'syz.0.815': attribute type 1 has an invalid length.
[  109.797374][ T8624] netlink: 'syz.0.815': attribute type 1 has an invalid length.
[  109.816172][ T8624] netlink: 'syz.0.815': attribute type 1 has an invalid length.
[  109.834315][ T8624] netlink: 'syz.0.815': attribute type 1 has an invalid length.
[  109.897408][ T8631] vlan3: entered allmulticast mode
[  109.901139][ T8631] dummy0: entered allmulticast mode
[  124.156432][ T8647] netlink: 'syz.0.821': attribute type 2 has an invalid length.
[  124.164570][ T8648] openvswitch: netlink: IP tunnel dst address not specified
[  124.172232][ T8653] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  124.315374][ T8668] __nla_validate_parse: 1 callbacks suppressed
[  124.315391][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.827'.
[  124.316889][ T8670] netlink: 'syz.0.828': attribute type 1 has an invalid length.
[  124.317444][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.827'.
[  124.351945][ T8670] 8021q: adding VLAN 0 to HW filter on device bond9
[  124.397288][ T8673] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.432911][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.830'.
[  124.438737][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.830'.
[  124.453296][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.830'.
[  124.474719][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.830'.
[  124.478052][ T8673] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.478280][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.830'.
[  124.552343][ T8686] netlink: 'syz.0.833': attribute type 10 has an invalid length.
[  124.564378][ T8673] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.575028][ T8686] 8021q: adding VLAN 0 to HW filter on device team0
[  124.579524][ T8686] bond0: (slave team0): Enslaving as an active interface with an up link
[  124.587066][ T8686] netlink: 76 bytes leftover after parsing attributes in process `syz.0.833'.
[  124.641828][ T8673] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.658436][ T8690] ip6gre1: entered allmulticast mode
[  124.742097][ T8695] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.837'.
[  124.748420][ T5877] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.759958][ T5877] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.777323][ T5877] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.790811][ T5877] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.118524][ T8708] macsec1: left allmulticast mode
[  125.123079][ T8708] geneve2: left promiscuous mode
[  125.125482][ T8708] geneve2: left allmulticast mode
[  125.132910][ T8708] ip6gre1: left allmulticast mode
[  125.147900][ T5877] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.156314][ T5877] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[  125.162875][ T5877] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.173626][ T5877] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[  125.176599][ T5877] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.180064][ T5877] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[  125.180126][ T5877] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.188245][ T5877] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[  125.300548][ T8730] [SRW: renamed from lo (while UP)
[  125.416142][ T8743] openvswitch: netlink: Message has 8 unknown bytes.
[  125.423866][ T8743] openvswitch: netlink: Message has 8 unknown bytes.
[  125.426618][ T8743] openvswitch: netlink: Message has 8 unknown bytes.
[  125.436695][ T8743] openvswitch: netlink: Message has 8 unknown bytes.
[  125.545407][ T8755] netlink: 'syz.1.857': attribute type 2 has an invalid length.
[  125.672315][ T8766] IPVS: set_ctl: invalid protocol: 0 172.20.20.25:20000
[  125.754287][ T8768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.863'.
[  126.399558][ T8808] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  126.730543][ T8826] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.733064][ T8826] syzkaller0: entered promiscuous mode
[  126.736163][ T8826] syzkaller0: entered allmulticast mode
[  126.741718][ T8826] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  126.760552][ T8826] tipc: Resetting bearer <eth:syzkaller0>
[  126.765942][ T8824] tipc: Resetting bearer <eth:syzkaller0>
[  126.779292][ T8824] tipc: Disabling bearer <eth:syzkaller0>
[  126.998889][ T8840] netlink: 'syz.0.889': attribute type 5 has an invalid length.
[  127.304955][ T8868] Set syz0 is full, maxelem 0 reached
[  127.445928][ T8876] xt_HMARK: spi-set and port-set can't be combined
[  127.456786][ T8876] macsec2: entered promiscuous mode
[  127.458987][ T8876] dummy0: entered promiscuous mode
[  127.466003][ T8876] dummy0: left promiscuous mode
[  128.138777][ T8905] bond0: (slave team0): Releasing backup interface
[  128.146572][ T8905] bond3: (slave bridge1): Releasing active interface
[  128.150521][ T8905] bond4: left allmulticast mode
[  128.165015][ T8905] bridge4: port 1(bond4) entered disabled state
[  128.176273][ T8905] syz.0.914: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  128.179059][ T8909] netlink: 'syz.1.916': attribute type 5 has an invalid length.
[  128.182195][ T8905] CPU: 0 UID: 0 PID: 8905 Comm: syz.0.914 Not tainted syzkaller #0 PREEMPT(full) 
[  128.182212][ T8905] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  128.182222][ T8905] Call Trace:
[  128.182239][ T8905]  <TASK>
[  128.182246][ T8905]  dump_stack_lvl+0x189/0x250
[  128.182271][ T8905]  ? __pfx_dump_stack_lvl+0x10/0x10
[  128.182284][ T8905]  ? __pfx__printk+0x10/0x10
[  128.182301][ T8905]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  128.182323][ T8905]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  128.182339][ T8905]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  128.182354][ T8905]  warn_alloc+0x214/0x310
[  128.182373][ T8905]  ? stack_depot_save_flags+0x40/0x860
[  128.182391][ T8905]  ? __pfx_warn_alloc+0x10/0x10
[  128.182408][ T8905]  ? kasan_save_track+0x4f/0x80
[  128.182421][ T8905]  ? xskq_create+0x56/0x170
[  128.182435][ T8905]  ? xsk_init_queue+0xb0/0x110
[  128.182448][ T8905]  ? xsk_setsockopt+0x4dc/0x8d0
[  128.182460][ T8905]  ? do_sock_setsockopt+0x17c/0x1b0
[  128.182469][ T8905]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  128.182479][ T8905]  ? do_syscall_64+0xfa/0x3b0
[  128.182488][ T8905]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.182505][ T8905]  __vmalloc_node_range_noprof+0x125/0x12f0
[  128.182539][ T8905]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  128.182557][ T8905]  ? __kasan_kmalloc+0x93/0xb0
[  128.182573][ T8905]  vmalloc_user_noprof+0xad/0xf0
[  128.182587][ T8905]  ? xskq_create+0xbf/0x170
[  128.182602][ T8905]  xskq_create+0xbf/0x170
[  128.182617][ T8905]  xsk_init_queue+0xb0/0x110
[  128.182634][ T8905]  xsk_setsockopt+0x4dc/0x8d0
[  128.182650][ T8905]  ? __pfx_xsk_setsockopt+0x10/0x10
[  128.182663][ T8905]  ? __pfx_aa_sk_perm+0x10/0x10
[  128.182681][ T8905]  ? aa_sock_opt_perm+0xff/0x1b0
[  128.182692][ T8905]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  128.182704][ T8905]  ? __pfx_xsk_setsockopt+0x10/0x10
[  128.182719][ T8905]  do_sock_setsockopt+0x17c/0x1b0
[  128.182732][ T8905]  __x64_sys_setsockopt+0x13f/0x1b0
[  128.182746][ T8905]  do_syscall_64+0xfa/0x3b0
[  128.182755][ T8905]  ? lockdep_hardirqs_on+0x9c/0x150
[  128.182771][ T8905]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.182781][ T8905]  ? exc_page_fault+0x9f/0xf0
[  128.182798][ T8905]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.182808][ T8905] RIP: 0033:0x7f76e9f8ebe9
[  128.182820][ T8905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.182830][ T8905] RSP: 002b:00007f76eae8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  128.182842][ T8905] RAX: ffffffffffffffda RBX: 00007f76ea1c5fa0 RCX: 00007f76e9f8ebe9
[  128.182850][ T8905] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  128.182857][ T8905] RBP: 00007f76ea011e19 R08: 0000000000000004 R09: 0000000000000000
[  128.182863][ T8905] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  128.182870][ T8905] R13: 00007f76ea1c6038 R14: 00007f76ea1c5fa0 R15: 00007ffc93315188
[  128.182918][ T8905]  </TASK>
[  128.182925][ T8905] Mem-Info:
[  128.248730][ T8912] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  128.249581][ T8905] active_anon:5572 inactive_anon:0 isolated_anon:0
[  128.249581][ T8905]  active_file:1343 inactive_file:38248 isolated_file:0
[  128.249581][ T8905]  unevictable:1768 dirty:250 writeback:0
[  128.249581][ T8905]  slab_reclaimable:10140 slab_unreclaimable:54412
[  128.249581][ T8905]  mapped:18303 shmem:2444 pagetables:1113
[  128.249581][ T8905]  sec_pagetables:0 bounce:0
[  128.249581][ T8905]  kernel_misc_reclaimable:0
[  128.249581][ T8905]  free:295237 free_pcp:20184 free_cma:0
[  128.326681][ T8905] Node 0 active_anon:13224kB inactive_anon:0kB active_file:4468kB inactive_file:134844kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29152kB dirty:768kB writeback:0kB shmem:5020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6208kB pagetables:2340kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  128.338921][ T8905] Node 1 active_anon:9064kB inactive_anon:0kB active_file:904kB inactive_file:18148kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44060kB dirty:232kB writeback:0kB shmem:4756kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6592kB pagetables:2044kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  128.351028][ T8905] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  128.362244][ T8905] lowmem_reserve[]: 0 811 811 811 811
[  128.364536][ T8905] Node 0 DMA32 free:274276kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13224kB inactive_anon:0kB active_file:4468kB inactive_file:134844kB unevictable:3536kB writepending:768kB present:1556484kB managed:830928kB mlocked:0kB bounce:0kB free_pcp:51608kB local_pcp:34556kB free_cma:0kB
[  128.377135][ T8905] lowmem_reserve[]: 0 0 0 0 0
[  128.379024][ T8905] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  128.399450][ T8905] lowmem_reserve[]: 0 0 854 854 854
[  128.401763][ T8905] Node 1 Normal free:432696kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8996kB inactive_anon:0kB active_file:904kB inactive_file:18148kB unevictable:3536kB writepending:232kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:29160kB local_pcp:17588kB free_cma:0kB
[  128.424983][ T8905] lowmem_reserve[]: 0 0 0 0 0
[  128.427109][ T8905] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  128.432309][ T8905] Node 0 DMA32: 663*4kB (UME) 221*8kB (UME) 10*16kB (UME) 116*32kB (UME) 132*64kB (UE) 120*128kB (UME) 96*256kB (UME) 79*512kB (UME) 69*1024kB (UME) 4*2048kB (UME) 24*4096kB (M) = 274276kB
[  128.444042][ T8905] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  128.450543][ T8905] Node 1 Normal: 300*4kB (M) 699*8kB (UME) 741*16kB (UME) 736*32kB (UME) 287*64kB (UM) 135*128kB (UM) 84*256kB (UME) 45*512kB (UME) 19*1024kB (UM) 12*2048kB (UME) 65*4096kB (UM) = 432664kB
[  128.458017][ T8905] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  128.461646][ T8905] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  128.465596][ T8905] 42035 total pagecache pages
[  128.467495][ T8905] 0 pages in swap cache
[  128.469155][ T8905] Free swap  = 124996kB
[  128.470804][ T8905] Total swap = 124996kB
[  128.472466][ T8905] 786301 pages RAM
[  128.474085][ T8905] 0 pages HighMem/MovableOnly
[  128.475962][ T8905] 241337 pages reserved
[  128.477609][ T8905] 0 pages cma reserved
[  128.496772][ T8917] 8021q: VLANs not supported on ip_vti0
[  128.650161][ T8929] netlink: 'syz.0.924': attribute type 1 has an invalid length.
[  128.692490][ T8929] 8021q: adding VLAN 0 to HW filter on device bond10
[  128.700769][ T8923] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.706875][ T8923] syzkaller0: entered promiscuous mode
[  128.709188][ T8923] syzkaller0: entered allmulticast mode
[  128.715593][ T8929] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  128.737385][ T8929] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  128.773361][ T8923] tipc: Resetting bearer <eth:syzkaller0>
[  128.780815][ T8921] tipc: Resetting bearer <eth:syzkaller0>
[  128.799636][ T8936] netlink: 'syz.1.927': attribute type 2 has an invalid length.
[  128.806207][ T8921] tipc: Disabling bearer <eth:syzkaller0>
[  128.819227][ T8936] : entered promiscuous mode
[  128.905014][ T8938] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  129.066547][ T8955] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  129.069897][ T8955] team0: Device macvtap1 is already an upper device of the team interface
[  129.230991][ T8967] team0: Device gtp0 is of different type
[  129.396600][ T8982] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  129.568291][ T8998] netlink: 'syz.1.948': attribute type 4 has an invalid length.
[  129.573633][ T8997] netlink: 'syz.1.948': attribute type 4 has an invalid length.
[  129.577626][ T8997] netlink: 'syz.1.948': attribute type 4 has an invalid length.
[  129.609166][ T8995] __nla_validate_parse: 16 callbacks suppressed
[  129.609183][ T8995] netlink: 52 bytes leftover after parsing attributes in process `syz.0.949'.
[  129.958620][ T9028] netlink: 'syz.1.958': attribute type 5 has an invalid length.
[  130.007261][ T9034] netlink: 'syz.1.960': attribute type 1 has an invalid length.
[  130.046336][ T9034] bond5: (slave gretap2): making interface the new active one
[  130.050074][ T9034] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  130.106934][ T9037] netlink: 52 bytes leftover after parsing attributes in process `syz.1.961'.
[  130.213357][ T9047] syz.1.965 (9047) used greatest stack depth: 18264 bytes left
[  130.334767][ T9049] netlink: 60 bytes leftover after parsing attributes in process `syz.1.966'.
[  130.338690][ T9049] unsupported nlmsg_type 40
[  131.100882][ T9068] netlink: 'syz.0.974': attribute type 2 has an invalid length.
[  131.104232][ T9068] netlink: 16 bytes leftover after parsing attributes in process `syz.0.974'.
[  131.307452][ T9077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.978'.
[  131.607789][ T9090] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  131.610875][ T9090] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  132.261741][ T9112] netlink: 'syz.0.988': attribute type 2 has an invalid length.
[  132.278013][ T9112] : entered promiscuous mode
[  132.323218][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.989'.
[  132.428011][ T9122] netlink: 'syz.0.991': attribute type 1 has an invalid length.
[  132.445918][ T9122] 8021q: adding VLAN 0 to HW filter on device bond11
[  132.488236][ T9122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.991'.
[  132.620871][ T9131] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  132.647825][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.650667][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.670854][ T9134] netlink: 60 bytes leftover after parsing attributes in process `syz.0.996'.
[  132.758545][ T9142] team0: entered promiscuous mode
[  132.760042][ T9144] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1000'.
[  132.760714][ T9142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.999'.
[  132.768820][ T9144] batadv1: entered promiscuous mode
[  132.771163][ T9144] batadv1: entered allmulticast mode
[  132.864002][ T9142] team0 (unregistering): left promiscuous mode
[  133.151320][ T9162] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  133.157345][ T9163] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  133.507345][ T9184] 8021q: adding VLAN 0 to HW filter on device bond12
[  133.525431][ T9187] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  133.536922][ T9183] openvswitch: netlink: Flow key attr not present in new flow.
[  133.708749][ T9201] netlink: 'syz.1.1021': attribute type 21 has an invalid length.
[  133.798699][ T9214] ip6gretap1: entered promiscuous mode
[  133.918058][ T9223] netlink: 'syz.2.1026': attribute type 4 has an invalid length.
[  134.798936][ T9281] xt_HMARK: spi-set and port-set can't be combined
[  134.805864][ T9281] __nla_validate_parse: 20 callbacks suppressed
[  134.805878][ T9281] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1050'.
[  134.972166][ T9285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1051'.
[  134.998270][ T9285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1051'.
[  135.014700][ T9285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1051'.
[  135.019312][ T9285] netlink: 'syz.0.1051': attribute type 1 has an invalid length.
[  135.062068][ T9287] netlink: 'syz.2.1052': attribute type 1 has an invalid length.
[  135.084525][ T9287] 8021q: adding VLAN 0 to HW filter on device bond2
[  135.110110][ T9287] 8021q: adding VLAN 0 to HW filter on device bond2
[  135.112456][ T9290] netlink: 'syz.0.1053': attribute type 5 has an invalid length.
[  135.113078][ T9287] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  135.121319][ T9287] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  135.159738][ T9291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1052'.
[  135.424242][ T9305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1059'.
[  135.633351][ T9325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1060'.
[  135.637025][ T9325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1060'.
[  135.762199][ T9330] netlink: 'syz.0.1063': attribute type 5 has an invalid length.
[  135.933361][ T9349] [SRW: renamed from lo
[  135.996022][ T9349] ip6tnl1: entered promiscuous mode
[  135.998190][ T9349] ip6tnl1: entered allmulticast mode
[  136.010523][ T9349] trusted_key: syz.0.1070 sent an empty control message without MSG_MORE.
[  136.035498][ T9355] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1073'.
[  136.039143][ T9355] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1073'.
[  136.402138][ T9399] netlink: 'syz.1.1087': attribute type 1 has an invalid length.
[  136.505048][ T9411] netlink: 'syz.0.1090': attribute type 11 has an invalid length.
[  137.140333][ T9449] chnl_net:caif_netlink_parms(): no params data found
[  137.403064][ T9467] vti0: entered promiscuous mode
[  137.406873][ T9467] vti0: entered allmulticast mode
[  137.471729][ T9473] netlink: 'syz.2.1114': attribute type 5 has an invalid length.
[  137.599445][ T9485] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  137.868500][ T9504] bond0: invalid ARP target 0.0.0.0 specified for addition
[  137.871393][ T9504] bond0: option arp_ip_target: invalid value (0)
[  137.902991][ T9506] netlink: 'syz.2.1126': attribute type 10 has an invalid length.
[  137.913679][ T9507] netlink: 'syz.2.1126': attribute type 10 has an invalid length.
[  137.938006][ T9506] 8021q: adding VLAN 0 to HW filter on device team0
[  137.947033][ T9506] bond0: (slave team0): Enslaving as an active interface with an up link
[  138.008375][ T9519] netlink: 'syz.0.1128': attribute type 10 has an invalid length.
[  138.319065][ T9540] ip6tnl1: left promiscuous mode
[  138.320737][ T9540] ip6tnl1: left allmulticast mode
[  138.428894][ T9554] netlink: 'syz.0.1141': attribute type 1 has an invalid length.
[  138.437850][ T9555] ieee802154 phy0 wpan0: encryption failed: -22
[  138.451242][ T9554] 8021q: adding VLAN 0 to HW filter on device bond13
[  138.473216][ T9554] bond13: (slave geneve3): making interface the new active one
[  138.477841][ T9554] bond13: (slave geneve3): Enslaving as an active interface with an up link
[  138.487976][ T5877] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.505677][ T5877] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.511962][ T5877] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.515569][ T5877] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.723658][ T5851] Bluetooth: hci2: command 0x0419 tx timeout
[  138.810714][ T9585] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  139.616310][ T9569] syz.2.1146: vmalloc error: size 3522560, failed to allocated page array size 6880, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  139.622895][ T9569] CPU: 1 UID: 0 PID: 9569 Comm: syz.2.1146 Not tainted syzkaller #0 PREEMPT(full) 
[  139.622913][ T9569] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  139.622921][ T9569] Call Trace:
[  139.622927][ T9569]  <TASK>
[  139.622934][ T9569]  dump_stack_lvl+0x189/0x250
[  139.622959][ T9569]  ? __pfx_dump_stack_lvl+0x10/0x10
[  139.622973][ T9569]  ? __pfx__printk+0x10/0x10
[  139.622991][ T9569]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  139.623008][ T9569]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  139.623024][ T9569]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  139.623040][ T9569]  warn_alloc+0x214/0x310
[  139.623078][ T9569]  ? __pfx_warn_alloc+0x10/0x10
[  139.623102][ T9569]  ? __get_vm_area_node+0x28f/0x300
[  139.623119][ T9569]  ? ip_set_sockfn_get+0x13a/0xc30
[  139.623139][ T9569]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  139.623174][ T9569]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  139.623190][ T9569]  ? ip_set_sockfn_get+0x13a/0xc30
[  139.623206][ T9569]  ? __get_vm_area_node+0x28f/0x300
[  139.623222][ T9569]  ? ip_set_sockfn_get+0x13a/0xc30
[  139.623237][ T9569]  __vmalloc_node_range_noprof+0x56a/0x12f0
[  139.623255][ T9569]  ? ip_set_sockfn_get+0x13a/0xc30
[  139.623290][ T9569]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  139.623311][ T9569]  ? ip_set_sockfn_get+0x13a/0xc30
[  139.623327][ T9569]  vmalloc_noprof+0xb2/0xf0
[  139.623344][ T9569]  ? ip_set_sockfn_get+0x13a/0xc30
[  139.623360][ T9569]  ip_set_sockfn_get+0x13a/0xc30
[  139.623380][ T9569]  nf_getsockopt+0x26e/0x290
[  139.623426][ T9569]  ip_getsockopt+0x1c4/0x220
[  139.623449][ T9569]  ? __pfx_ip_getsockopt+0x10/0x10
[  139.623469][ T9569]  ? sock_common_getsockopt+0x2d/0xb0
[  139.623486][ T9569]  ? raw_getsockopt+0xce/0x200
[  139.623498][ T9569]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  139.623515][ T9569]  do_sock_getsockopt+0x372/0x450
[  139.623531][ T9569]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  139.623544][ T9569]  ? write_ibpb+0x30/0x40
[  139.623557][ T9569]  ? __fget_files+0x3a0/0x420
[  139.623576][ T9569]  ? __fget_files+0x2a/0x420
[  139.623597][ T9569]  __x64_sys_getsockopt+0x1a5/0x250
[  139.623610][ T9569]  ? write_ibpb+0x30/0x40
[  139.623621][ T9569]  ? write_ibpb+0x30/0x40
[  139.623634][ T9569]  do_syscall_64+0xfa/0x3b0
[  139.623645][ T9569]  ? lockdep_hardirqs_on+0x9c/0x150
[  139.623663][ T9569]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.623676][ T9569]  ? exc_page_fault+0x9f/0xf0
[  139.623694][ T9569]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.623707][ T9569] RIP: 0033:0x7f36add8ebe9
[  139.623721][ T9569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  139.623731][ T9569] RSP: 002b:00007f36aec07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  139.623777][ T9569] RAX: ffffffffffffffda RBX: 00007f36adfc5fa0 RCX: 00007f36add8ebe9
[  139.623787][ T9569] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000008
[  139.623793][ T9569] RBP: 00007f36ade11e19 R08: 0000200000000040 R09: 0000000000000000
[  139.623800][ T9569] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  139.623806][ T9569] R13: 00007f36adfc6038 R14: 00007f36adfc5fa0 R15: 00007ffd36dff838
[  139.623826][ T9569]  </TASK>
[  139.736039][ T9626] syzkaller0: entered promiscuous mode
[  139.749667][ T9569] Mem-Info:
[  139.750935][ T9569] active_anon:5342 inactive_anon:0 isolated_anon:0
[  139.750935][ T9569]  active_file:1409 inactive_file:38254 isolated_file:0
[  139.750935][ T9569]  unevictable:1768 dirty:171 writeback:0
[  139.750935][ T9569]  slab_reclaimable:10034 slab_unreclaimable:58042
[  139.750935][ T9569]  mapped:18263 shmem:2452 pagetables:1051
[  139.750935][ T9569]  sec_pagetables:0 bounce:0
[  139.750935][ T9569]  kernel_misc_reclaimable:0
[  139.750935][ T9569]  free:236092 free_pcp:17075 free_cma:0
[  139.766554][ T9626] syzkaller0: entered allmulticast mode
[  139.784492][ T9569] Node 0 active_anon:12716kB inactive_anon:0kB active_file:4600kB inactive_file:134852kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29272kB dirty:496kB writeback:0kB shmem:5028kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6304kB pagetables:2504kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  139.798085][ T9569] Node 1 active_anon:8584kB inactive_anon:0kB active_file:1036kB inactive_file:18164kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43780kB dirty:188kB writeback:0kB shmem:4780kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6628kB pagetables:1836kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  139.810368][ T9569] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  139.821148][ T9569] lowmem_reserve[]: 0 811 811 811 811
[  139.823051][ T9569] Node 0 DMA32 free:241072kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12784kB inactive_anon:0kB active_file:4600kB inactive_file:134852kB unevictable:3536kB writepending:496kB present:1556484kB managed:830928kB mlocked:0kB bounce:0kB free_pcp:41364kB local_pcp:15932kB free_cma:0kB
[  139.834513][ T9569] lowmem_reserve[]: 0 0 0 0 0
[  139.837308][ T9569] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  139.850292][ T9569] lowmem_reserve[]: 0 0 854 854 854
[  139.853163][ T9569] Node 1 Normal free:229116kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8584kB inactive_anon:0kB active_file:1036kB inactive_file:18164kB unevictable:3536kB writepending:188kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:27600kB local_pcp:5544kB free_cma:0kB
[  139.866653][ T9569] lowmem_reserve[]: 0 0 0 0 0
[  139.868499][ T9569] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  139.873262][ T9569] Node 0 DMA32: 250*4kB (ME) 27*8kB (ME) 27*16kB (UME) 2*32kB (ME) 8*64kB (ME) 2*128kB (M) 68*256kB (UME) 78*512kB (UME) 69*1024kB (UME) 4*2048kB (UME) 25*4096kB (M) = 241072kB
[  139.882120][ T9569] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  139.896830][ T9569] Node 1 Normal: 1*4kB (U) 75*8kB (ME) 149*16kB (UME) 57*32kB (UME) 30*64kB (ME) 13*128kB (M) 14*256kB (UM) 8*512kB (ME) 4*1024kB (M) 6*2048kB (UME) 48*4096kB (M) = 229068kB
[  139.902801][ T9569] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  139.906986][ T9569] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  139.917310][ T9569] 42115 total pagecache pages
[  139.920963][ T9569] 0 pages in swap cache
[  139.922739][ T9569] Free swap  = 124996kB
[  139.931823][ T9569] Total swap = 124996kB
[  139.933830][ T9569] 786301 pages RAM
[  139.935333][ T9569] 0 pages HighMem/MovableOnly
[  139.937142][ T9569] 241337 pages reserved
[  139.938830][ T9569] 0 pages cma reserved
[  141.155638][ T9637] tipc: Enabling of bearer <et:g> rejected, media not registered
[  141.231912][ T9644] pimreg: entered allmulticast mode
[  141.294535][ T9649] sctp: [Deprecated]: syz.2.1169 (pid 9649) Use of int in max_burst socket option.
[  141.294535][ T9649] Use struct sctp_assoc_value instead
[  141.304071][ T9650] validate_nla: 6 callbacks suppressed
[  141.304084][ T9650] netlink: 'syz.1.1168': attribute type 10 has an invalid length.
[  141.312659][ T9650] __nla_validate_parse: 19 callbacks suppressed
[  141.312673][ T9650] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1168'.
[  141.319806][ T9650] !: entered promiscuous mode
[  141.321834][ T9650] !: entered allmulticast mode
[  141.330040][ T9650] bridge0: port 1(0!) entered blocking state
[  141.332770][ T9650] bridge0: port 1(0!) entered disabled state
[  141.350546][ T9650] netlink: 'syz.1.1168': attribute type 32 has an invalid length.
[  141.490166][ T9664] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1174'.
[  141.510273][ T9666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1175'.
[  141.600793][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1178'.
[  141.607059][ T9675] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1179'.
[  141.700947][ T9674] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1179'.
[  141.801185][ T9688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1181'.
[  141.811481][ T9688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1181'.
[  141.939869][ T9691] syzkaller1: entered promiscuous mode
[  141.942291][ T9691] syzkaller1: entered allmulticast mode
[  142.065478][ T9702] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1183'.
[  142.168463][    T9] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  142.175348][    T9] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  143.661271][ T9736] tun0: tun_chr_ioctl cmd 1074812118
[  143.765456][ T9753] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  143.992398][ T9774] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1200'.
[  144.224757][ T9791] netlink: 'syz.0.1207': attribute type 83 has an invalid length.
[  144.339880][ T9796] syzkaller1: entered promiscuous mode
[  144.342416][ T9796] syzkaller1: entered allmulticast mode
[  144.416984][ T9798] xfrm1: entered allmulticast mode
[  144.655978][ T9822] bond6: entered promiscuous mode
[  144.658237][ T9822] 8021q: adding VLAN 0 to HW filter on device bond6
[  144.740226][ T9822] bond6 (unregistering): Released all slaves
[  144.811063][ T9834] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  145.000276][ T9846] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  145.005721][ T9846] team0: Device macvtap1 is already an upper device of the team interface
[  145.114253][ T9868] syzkaller1: entered promiscuous mode
[  145.116627][ T9868] syzkaller1: entered allmulticast mode
[  145.139664][ T9867] netlink: 'syz.2.1232': attribute type 15 has an invalid length.
[  145.155273][ T9868] netlink: 'syz.2.1232': attribute type 15 has an invalid length.
[  145.494743][ T9896] syzkaller1: entered promiscuous mode
[  145.500512][ T9896] syzkaller1: entered allmulticast mode
[  145.830812][ T9926] openvswitch: netlink: IP tunnel dst address not specified
[  145.959340][ T9945] syzkaller0: entered promiscuous mode
[  145.961204][ T9945] syzkaller0: entered allmulticast mode
[  145.965445][ T9944] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.983683][ T9946] tipc: Resetting bearer <eth:syzkaller0>
[  145.988934][ T9942] tipc: Resetting bearer <eth:syzkaller0>
[  145.997513][ T9942] tipc: Disabling bearer <eth:syzkaller0>
[  146.169190][ T9953] sctp: [Deprecated]: syz.2.1260 (pid 9953) Use of int in max_burst socket option.
[  146.169190][ T9953] Use struct sctp_assoc_value instead
[  146.186913][ T9954] sctp: [Deprecated]: syz.2.1260 (pid 9954) Use of int in max_burst socket option.
[  146.186913][ T9954] Use struct sctp_assoc_value instead
[  146.336691][ T9965] pim6reg1: entered promiscuous mode
[  146.339484][ T9965] pim6reg1: entered allmulticast mode
[  146.376655][ T9965] netlink: 'syz.2.1264': attribute type 4 has an invalid length.
[  146.379595][ T9965] __nla_validate_parse: 47 callbacks suppressed
[  146.379607][ T9965] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1264'.
[  146.398433][ T9965] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1264'.
[  146.430831][ T9969] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1266'.
[  146.436868][ T9969] nbd: must specify at least one socket
[  146.521745][ T9975] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1268'.
[  146.570760][ T9978] can: request_module (can-proto-0) failed.
[  146.574512][ T9978] openvswitch: netlink: IP tunnel dst address not specified
[  147.125384][ T9995] vlan2: entered promiscuous mode
[  147.130395][ T9995] vlan2: entered allmulticast mode
[  147.138330][ T9995] hsr_slave_1: entered allmulticast mode
[  147.695460][T10018] Bluetooth: MGMT ver 1.23
[  147.722175][T10020] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1284'.
[  147.937986][T10041] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1294'.
[  148.021877][T10047] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  148.026434][T10046] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  148.161207][T10068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1303'.
[  148.177122][T10065] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  148.179945][T10065] syzkaller0: entered promiscuous mode
[  148.181775][T10065] syzkaller0: entered allmulticast mode
[  148.181958][T10068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1303'.
[  148.208607][T10065] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1302'.
[  148.212686][T10064] tipc: Resetting bearer <eth:syzkaller0>
[  148.225663][T10073] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  148.239739][T10064] tipc: Disabling bearer <eth:syzkaller0>
[  148.260992][T10075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1306'.
[  148.369933][T10083] netlink: 'syz.2.1309': attribute type 32 has an invalid length.
[  148.704629][T10119] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  148.736163][T10123] Bluetooth: MGMT ver 1.23
[  148.982762][T10135] ip6erspan0: entered allmulticast mode
[  149.059691][T10141] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  149.157864][T10157] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  149.294362][T10164] netlink: 'syz.0.1336': attribute type 1 has an invalid length.
[  149.391803][T10179] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.466610][T10188] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  149.525900][T10194] netlink: 'syz.0.1344': attribute type 9 has an invalid length.
[  149.529115][T10194] netlink: 'syz.0.1344': attribute type 6 has an invalid length.
[  149.532205][T10194] netlink: 'syz.0.1344': attribute type 7 has an invalid length.
[  149.535057][T10194] netlink: 'syz.0.1344': attribute type 8 has an invalid length.
[  149.763586][   T54] Bluetooth: hci0: command tx timeout
[  149.780713][T10209] atomic_op ffff88801d684198 conn xmit_atomic 0000000000000000
[  149.846608][T10210] netlink: 'syz.1.1352': attribute type 1 has an invalid length.
[  149.864137][T10210] 8021q: adding VLAN 0 to HW filter on device bond6
[  150.630109][   T54] Bluetooth: hci2: link tx timeout
[  150.632622][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  151.065807][T10270] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.069543][T10272] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.177650][T10282] tap0: tun_chr_ioctl cmd 1074025677
[  151.179831][T10282] tap0: linktype set to 270
[  151.375661][T10300] netlink: 'syz.2.1383': attribute type 5 has an invalid length.
[  151.411910][T10305] __nla_validate_parse: 15 callbacks suppressed
[  151.411924][T10305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1386'.
[  151.422200][T10305] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.434049][T10305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1386'.
[  151.437308][T10305] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  151.498979][T10318] netlink: 'syz.2.1391': attribute type 27 has an invalid length.
[  151.567867][T10324] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1393'.
[  151.573098][T10324] bond13: (slave geneve3): Releasing active interface
[  151.586796][ T5911] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.590801][ T5911] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.595549][ T5911] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.599465][ T5911] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.664335][T10322] syzkaller1: entered promiscuous mode
[  151.666694][T10322] syzkaller1: entered allmulticast mode
[  151.689677][T10324] vlan0: entered promiscuous mode
[  151.692835][T10324] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  152.474278][T10342] netlink: 'syz.2.1397': attribute type 13 has an invalid length.
[  152.494904][T10344] ip6tnl3: entered promiscuous mode
[  152.643129][   T33] audit: type=1800 audit(1756991498.311:2): pid=10351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1399" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2532 res=0 errno=0
[  152.665850][   T54] Bluetooth: hci2: command 0x0419 tx timeout
[  152.670757][T10355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1401'.
[  152.675128][T10355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1401'.
[  152.678492][T10355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1401'.
[  152.682792][T10355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1401'.
[  152.687545][T10355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1401'.
[  152.781319][T10363] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.1404'.
[  152.987109][T10383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1412'.
[  153.329901][T10405] netlink: 'syz.1.1419': attribute type 1 has an invalid length.
[  153.566305][T10420] syzkaller0: entered promiscuous mode
[  153.568270][T10420] syzkaller0: entered allmulticast mode
[  155.035175][T10462] netlink: 'syz.2.1437': attribute type 5 has an invalid length.
[  155.218639][T10473] netlink: 'syz.2.1441': attribute type 5 has an invalid length.
[  155.228391][T10473] geneve2: entered promiscuous mode
[  155.231424][T10473] geneve2: entered allmulticast mode
[  155.236513][   T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  155.239754][   T13] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  155.242315][   T13] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  155.248238][   T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  155.508588][T10484] 8021q: adding VLAN 0 to HW filter on device bond7
[  155.521138][T10484] bond7: (slave macvlan3): Enslaving as a backup interface with a down link
[  155.526945][T10484] netlink: 'syz.1.1446': attribute type 1 has an invalid length.
[  156.345593][T10541] netlink: 'syz.1.1467': attribute type 1 has an invalid length.
[  156.354931][T10541] netlink: 'syz.1.1467': attribute type 2 has an invalid length.
[  156.419853][T10546] __nla_validate_parse: 25 callbacks suppressed
[  156.419871][T10546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1468'.
[  156.428124][T10546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1468'.
[  156.433890][T10546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1468'.
[  156.448250][T10546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1468'.
[  156.451685][T10546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1468'.
[  156.465754][T10548] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1470'.
[  156.730650][T10569] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1476'.
[  156.816758][T10574] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1477'.
[  156.822960][T10574] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1477'.
[  157.142706][T10591] netlink: 'syz.1.1483': attribute type 5 has an invalid length.
[  157.183369][T10593] tipc: Failed to remove unknown binding: 66,1,1/0:3543087819/3543087821
[  157.187737][T10593] tipc: Failed to remove unknown binding: 66,1,1/0:3543087819/3543087821
[  157.195396][T10593] tipc: Failed to remove unknown binding: 66,1,1/0:3543087819/3543087821
[  157.270306][T10597] dvmrp0: entered allmulticast mode
[  157.281418][T10599] netlink: 'syz.2.1487': attribute type 1 has an invalid length.
[  157.380267][T10608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1490'.
[  157.386776][T10608] openvswitch: netlink: Flow actions attr not present in new flow.
[  157.506672][T10616] netlink: 'syz.2.1494': attribute type 11 has an invalid length.
[  157.509342][T10616] netlink: 'syz.2.1494': attribute type 11 has an invalid length.
[  157.998358][T10661] netlink: 'syz.2.1510': attribute type 5 has an invalid length.
[  158.873149][T10688] netlink: 'syz.0.1518': attribute type 5 has an invalid length.
[  159.037264][T10700] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  159.042977][T10700] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.047245][T10700] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.074020][T10695] nbd0: detected capacity change from 0 to 63
[  159.082647][T10701] block nbd0: NBD_DISCONNECT
[  159.085237][T10701] block nbd0: Disconnected due to user request.
[  159.088183][T10701] block nbd0: shutting down sockets
[  159.890402][T10724] netlink: 'syz.1.1529': attribute type 1 has an invalid length.
[  160.093657][T10733] netlink: 'syz.1.1533': attribute type 5 has an invalid length.
[  160.895862][T10775] batadv_slave_1: entered promiscuous mode
[  160.908471][T10778] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  160.911568][T10778] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  161.022717][T10774] batadv_slave_1: left promiscuous mode
[  161.305940][T10812] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.310408][T10812] syzkaller0: entered promiscuous mode
[  161.312630][T10812] syzkaller0: entered allmulticast mode
[  161.341062][T10812] tipc: Resetting bearer <eth:syzkaller0>
[  161.347955][T10811] tipc: Resetting bearer <eth:syzkaller0>
[  161.358704][T10811] tipc: Disabling bearer <eth:syzkaller0>
[  161.395291][T10816] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.398158][T10816] syzkaller0: entered promiscuous mode
[  161.400274][T10816] syzkaller0: entered allmulticast mode
[  161.434124][T10818] __nla_validate_parse: 25 callbacks suppressed
[  161.434137][T10818] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1566'.
[  161.510959][T10828] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1570'.
[  161.516072][T10828] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1570'.
[  161.519691][T10828] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1570'.
[  161.523352][T10828] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1570'.
[  161.529097][T10828] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1570'.
[  161.532906][T10828] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1570'.
[  161.538951][T10828] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1570'.
[  161.542134][T10828] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1570'.
[  161.546515][T10828] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1570'.
[  161.798743][T10845] netdevsim netdevsim1: Direct firmware load for  failed with error -2
[  161.801917][T10845] netdevsim netdevsim1: Falling back to sysfs fallback for: 
[  161.853272][T10846] netdevsim netdevsim1: Direct firmware load for  failed with error -2
[  161.857218][T10846] netdevsim netdevsim1: Falling back to sysfs fallback for: 
[  161.923164][T10851] netlink: 'syz.1.1577': attribute type 2 has an invalid length.
[  162.521563][ T5847] tipc: Node number set to 2189069176
[  163.052486][T10943] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  163.063646][T10943] netlink: 'syz.0.1610': attribute type 21 has an invalid length.
[  163.066753][T10943] netlink: 'syz.0.1610': attribute type 4 has an invalid length.
[  163.069702][T10943] netlink: 'syz.0.1610': attribute type 5 has an invalid length.
[  163.089480][T10943] tipc: Resetting bearer <eth:syzkaller0>
[  163.164828][T10955] netlink: 'syz.0.1616': attribute type 5 has an invalid length.
[  163.310852][T10969] macsec2: entered promiscuous mode
[  163.312944][T10969] bridge0: entered promiscuous mode
[  163.334378][T10969] bridge0: port 3(macsec2) entered blocking state
[  163.337872][T10969] bridge0: port 3(macsec2) entered disabled state
[  163.340857][T10969] macsec2: entered allmulticast mode
[  163.343166][T10969] bridge0: entered allmulticast mode
[  163.350443][T10969] macsec2: left allmulticast mode
[  163.352609][T10969] bridge0: left allmulticast mode
[  163.363046][T10969] bridge0: left promiscuous mode
[  163.386494][T10977] macvtap1: entered allmulticast mode
[  163.388321][T10977] bridge0: entered allmulticast mode
[  163.390617][T10977] bridge0: port 2(macvtap1) entered blocking state
[  163.392756][T10977] bridge0: port 2(macvtap1) entered disabled state
[  163.399723][T10977] bridge0: left allmulticast mode
[  163.655216][T11003] openvswitch: netlink: IPv4 tun info is not correct
[  163.789126][T11015] ==================================================================
[  163.792330][T11015] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  163.795330][T11015] Read of size 1 at addr ffff8881127ad9b0 by task syz.2.1633/11015
[  163.799209][T11015] 
[  163.800604][T11015] CPU: 1 UID: 0 PID: 11015 Comm: syz.2.1633 Not tainted syzkaller #0 PREEMPT(full) 
[  163.800622][T11015] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  163.800633][T11015] Call Trace:
[  163.800642][T11015]  <TASK>
[  163.800650][T11015]  dump_stack_lvl+0x189/0x250
[  163.800674][T11015]  ? __kasan_check_byte+0x12/0x40
[  163.800698][T11015]  ? __pfx_dump_stack_lvl+0x10/0x10
[  163.800715][T11015]  ? lock_release+0x4b/0x3e0
[  163.800739][T11015]  ? __virt_addr_valid+0x4a5/0x5c0
[  163.800759][T11015]  print_report+0xca/0x240
[  163.800772][T11015]  ? xfrm_state_find+0x2cf2/0x5400
[  163.800786][T11015]  kasan_report+0x118/0x150
[  163.800807][T11015]  ? xfrm_state_find+0x2cf2/0x5400
[  163.800824][T11015]  xfrm_state_find+0x2cf2/0x5400
[  163.800837][T11015]  ? check_noncircular+0xe0/0x160
[  163.800853][T11015]  ? validate_chain+0x897/0x2140
[  163.800870][T11015]  ? xfrm_state_find+0x1da/0x5400
[  163.800886][T11015]  ? __pfx_xfrm_state_find+0x10/0x10
[  163.800907][T11015]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  163.800936][T11015]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  163.800956][T11015]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  163.800975][T11015]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  163.800995][T11015]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  163.801034][T11015]  ? xfrm_expand_policies+0x41f/0x6a0
[  163.801053][T11015]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  163.801074][T11015]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  163.801094][T11015]  ? __lock_acquire+0xab9/0xd20
[  163.801117][T11015]  xfrm_lookup_route+0x3c/0x1c0
[  163.801135][T11015]  __ip4_datagram_connect+0x9a5/0x1270
[  163.801159][T11015]  udp_connect+0x33/0x1f0
[  163.801173][T11015]  __sys_connect+0x316/0x440
[  163.801196][T11015]  ? __pfx___sys_connect+0x10/0x10
[  163.801221][T11015]  ? rcu_is_watching+0x15/0xb0
[  163.801239][T11015]  __x64_sys_connect+0x7a/0x90
[  163.801260][T11015]  do_syscall_64+0xfa/0x3b0
[  163.801273][T11015]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.801292][T11015]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.801306][T11015]  ? exc_page_fault+0x9f/0xf0
[  163.801325][T11015]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.801339][T11015] RIP: 0033:0x7f36add8ebe9
[  163.801386][T11015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  163.801400][T11015] RSP: 002b:00007f36aec07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  163.801416][T11015] RAX: ffffffffffffffda RBX: 00007f36adfc5fa0 RCX: 00007f36add8ebe9
[  163.801426][T11015] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 000000000000000a
[  163.801435][T11015] RBP: 00007f36ade11e19 R08: 0000000000000000 R09: 0000000000000000
[  163.801445][T11015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  163.801453][T11015] R13: 00007f36adfc6038 R14: 00007f36adfc5fa0 R15: 00007ffd36dff838
[  163.801471][T11015]  </TASK>
[  163.801476][T11015] 
[  163.910794][T11015] Allocated by task 10379:
[  163.912510][T11015]  kasan_save_track+0x3e/0x80
[  163.914479][T11015]  __kasan_slab_alloc+0x6c/0x80
[  163.916385][T11015]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  163.918495][T11015]  xfrm_state_alloc+0x24/0x2f0
[  163.920410][T11015]  __find_acq_core+0x8a7/0x1c00
[  163.922277][T11015]  xfrm_find_acq+0x78/0xa0
[  163.924021][T11015]  xfrm_alloc_userspi+0x6b3/0xc90
[  163.925986][T11015]  xfrm_user_rcv_msg+0x7a3/0xab0
[  163.927939][T11015]  netlink_rcv_skb+0x208/0x470
[  163.929794][T11015]  xfrm_netlink_rcv+0x79/0x90
[  163.931647][T11015]  netlink_unicast+0x82f/0x9e0
[  163.933560][T11015]  netlink_sendmsg+0x805/0xb30
[  163.935437][T11015]  __sock_sendmsg+0x21c/0x270
[  163.937232][T11015]  ____sys_sendmsg+0x505/0x830
[  163.939048][T11015]  ___sys_sendmsg+0x21f/0x2a0
[  163.940858][T11015]  __x64_sys_sendmsg+0x19b/0x260
[  163.942821][T11015]  do_syscall_64+0xfa/0x3b0
[  163.944639][T11015]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.946948][T11015] 
[  163.947910][T11015] Freed by task 24:
[  163.949377][T11015]  kasan_save_track+0x3e/0x80
[  163.951206][T11015]  kasan_save_free_info+0x46/0x50
[  163.953160][T11015]  __kasan_slab_free+0x5b/0x80
[  163.955010][T11015]  kmem_cache_free+0x18f/0x400
[  163.956914][T11015]  xfrm_state_gc_task+0x52d/0x6b0
[  163.958929][T11015]  process_scheduled_works+0xae1/0x17b0
[  163.961068][T11015]  worker_thread+0x8a0/0xda0
[  163.962840][T11015]  kthread+0x711/0x8a0
[  163.964397][T11015]  ret_from_fork+0x3fc/0x770
[  163.966142][T11015]  ret_from_fork_asm+0x1a/0x30
[  163.967973][T11015] 
[  163.968918][T11015] The buggy address belongs to the object at ffff8881127ad680
[  163.968918][T11015]  which belongs to the cache xfrm_state of size 928
[  163.974059][T11015] The buggy address is located 816 bytes inside of
[  163.974059][T11015]  freed 928-byte region [ffff8881127ad680, ffff8881127ada20)
[  163.979305][T11015] 
[  163.980260][T11015] The buggy address belongs to the physical page:
[  163.982646][T11015] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8881127aed00 pfn:0x1127ac
[  163.986537][T11015] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  163.989848][T11015] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  163.992725][T11015] page_type: f5(slab)
[  163.994233][T11015] raw: 057ff00000000040 ffff8881053d4b40 ffffea0000e8b900 0000000000000004
[  163.997542][T11015] raw: ffff8881127aed00 00000000000e000d 00000000f5000000 0000000000000000
[  164.000838][T11015] head: 057ff00000000040 ffff8881053d4b40 ffffea0000e8b900 0000000000000004
[  164.004064][T11015] head: ffff8881127aed00 00000000000e000d 00000000f5000000 0000000000000000
[  164.007318][T11015] head: 057ff00000000002 ffffea000449eb01 00000000ffffffff 00000000ffffffff
[  164.010644][T11015] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  164.013936][T11015] page dumped because: kasan: bad access detected
[  164.016357][T11015] page_owner tracks the page as allocated
[  164.018473][T11015] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6228, tgid 6226 (syz.2.111), ts 74160388896, free_ts 67690088221
[  164.025402][T11015]  post_alloc_hook+0x240/0x2a0
[  164.027239][T11015]  get_page_from_freelist+0x21e4/0x22c0
[  164.029355][T11015]  __alloc_frozen_pages_noprof+0x181/0x370
[  164.031569][T11015]  alloc_pages_mpol+0x232/0x4a0
[  164.033407][T11015]  allocate_slab+0x8a/0x370
[  164.035145][T11015]  ___slab_alloc+0xbeb/0x1410
[  164.036933][T11015]  kmem_cache_alloc_noprof+0x283/0x3c0
[  164.039081][T11015]  xfrm_state_alloc+0x24/0x2f0
[  164.040994][T11015]  pfkey_add+0x6e4/0x2e00
[  164.042653][T11015]  pfkey_sendmsg+0xbfe/0x1090
[  164.044441][T11015]  __sock_sendmsg+0x21c/0x270
[  164.046211][T11015]  ____sys_sendmsg+0x505/0x830
[  164.048110][T11015]  ___sys_sendmsg+0x21f/0x2a0
[  164.049980][T11015]  __x64_sys_sendmsg+0x19b/0x260
[  164.051975][T11015]  do_syscall_64+0xfa/0x3b0
[  164.053754][T11015]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.056009][T11015] page last free pid 5850 tgid 5850 stack trace:
[  164.058420][T11015]  __free_frozen_pages+0xbc4/0xd30
[  164.060390][T11015]  __put_partials+0x156/0x1a0
[  164.062223][T11015]  put_cpu_partial+0x17c/0x250
[  164.064058][T11015]  __slab_free+0x2d5/0x3c0
[  164.065800][T11015]  qlist_free_all+0x97/0x140
[  164.067632][T11015]  kasan_quarantine_reduce+0x148/0x160
[  164.069775][T11015]  __kasan_slab_alloc+0x22/0x80
[  164.071652][T11015]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  164.073926][T11015]  __alloc_skb+0x112/0x2d0
[  164.075621][T11015]  netlink_sendmsg+0x5c6/0xb30
[  164.077527][T11015]  __sock_sendmsg+0x21c/0x270
[  164.079310][T11015]  __sys_sendto+0x3bd/0x520
[  164.081092][T11015]  __x64_sys_sendto+0xde/0x100
[  164.082931][T11015]  do_syscall_64+0xfa/0x3b0
[  164.084676][T11015]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.086943][T11015] 
[  164.087901][T11015] Memory state around the buggy address:
[  164.089969][T11015]  ffff8881127ad880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  164.093098][T11015]  ffff8881127ad900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  164.096202][T11015] >ffff8881127ad980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  164.099221][T11015]                                      ^
[  164.101349][T11015]  ffff8881127ada00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  164.104536][T11015]  ffff8881127ada80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  164.107755][T11015] ==================================================================
[  164.139873][T11015] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  164.142666][T11015] CPU: 1 UID: 0 PID: 11015 Comm: syz.2.1633 Not tainted syzkaller #0 PREEMPT(full) 
[  164.146154][T11015] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  164.150082][T11015] Call Trace:
[  164.151416][T11015]  <TASK>
[  164.152602][T11015]  dump_stack_lvl+0x99/0x250
[  164.154411][T11015]  ? __asan_memcpy+0x40/0x70
[  164.156173][T11015]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.158180][T11015]  ? __pfx__printk+0x10/0x10
[  164.159967][T11015]  vpanic+0x281/0x750
[  164.161529][T11015]  ? preempt_schedule+0xae/0xc0
[  164.163419][T11015]  ? __pfx_vpanic+0x10/0x10
[  164.165226][T11015]  ? preempt_schedule_common+0x83/0xd0
[  164.167414][T11015]  ? preempt_schedule+0xae/0xc0
[  164.169331][T11015]  ? __pfx_preempt_schedule+0x10/0x10
[  164.171550][T11015]  panic+0xb9/0xc0
[  164.173030][T11015]  ? __pfx_panic+0x10/0x10
[  164.174784][T11015]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  164.177053][T11015]  ? xfrm_state_find+0x2cf2/0x5400
[  164.179115][T11015]  check_panic_on_warn+0x89/0xb0
[  164.181178][T11015]  ? xfrm_state_find+0x2cf2/0x5400
[  164.183190][T11015]  end_report+0x78/0x160
[  164.184837][T11015]  kasan_report+0x129/0x150
[  164.186654][T11015]  ? xfrm_state_find+0x2cf2/0x5400
[  164.188688][T11015]  xfrm_state_find+0x2cf2/0x5400
[  164.190619][T11015]  ? check_noncircular+0xe0/0x160
[  164.192565][T11015]  ? validate_chain+0x897/0x2140
[  164.194498][T11015]  ? xfrm_state_find+0x1da/0x5400
[  164.196485][T11015]  ? __pfx_xfrm_state_find+0x10/0x10
[  164.198515][T11015]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  164.200924][T11015]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  164.203185][T11015]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  164.205750][T11015]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  164.208043][T11015]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  164.210394][T11015]  ? xfrm_expand_policies+0x41f/0x6a0
[  164.212540][T11015]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  164.214688][T11015]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  164.217009][T11015]  ? __lock_acquire+0xab9/0xd20
[  164.218919][T11015]  xfrm_lookup_route+0x3c/0x1c0
[  164.220841][T11015]  __ip4_datagram_connect+0x9a5/0x1270
[  164.222967][T11015]  udp_connect+0x33/0x1f0
[  164.224710][T11015]  __sys_connect+0x316/0x440
[  164.226590][T11015]  ? __pfx___sys_connect+0x10/0x10
[  164.228598][T11015]  ? rcu_is_watching+0x15/0xb0
[  164.230465][T11015]  __x64_sys_connect+0x7a/0x90
[  164.232334][T11015]  do_syscall_64+0xfa/0x3b0
[  164.234081][T11015]  ? lockdep_hardirqs_on+0x9c/0x150
[  164.236176][T11015]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.238540][T11015]  ? exc_page_fault+0x9f/0xf0
[  164.240391][T11015]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.242691][T11015] RIP: 0033:0x7f36add8ebe9
[  164.244441][T11015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  164.251741][T11015] RSP: 002b:00007f36aec07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  164.254841][T11015] RAX: ffffffffffffffda RBX: 00007f36adfc5fa0 RCX: 00007f36add8ebe9
[  164.257822][T11015] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 000000000000000a
[  164.260851][T11015] RBP: 00007f36ade11e19 R08: 0000000000000000 R09: 0000000000000000
[  164.263978][T11015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.267049][T11015] R13: 00007f36adfc6038 R14: 00007f36adfc5fa0 R15: 00007ffd36dff838
[  164.270158][T11015]  </TASK>
[  164.272064][T11015] Kernel Offset: disabled
[  164.273811][T11015] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:11:49  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff3363600 RBX=0000000000036fdc RCX=ffff888022a05640 RDX=0000000000000000
RSI=0000000000036fdc RDI=0000000400000000 RBP=ffffc9000432f630 RSP=ffffc9000432f310
R8 =ffffea0000dbf707 R9 =1ffffd40001b7ee0 R10=dffffc0000000000 R11=fffff940001b7ee1
R12=dffffc0000000000 R13=ffff888028135c90 R14=0000000000036fdc R15=0000000000000001
RIP=ffffffff822e5ea0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555562ee9500 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc28acf56c0 CR3=00000000296ec000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fc28a012e53
XMM06=0000000000000000 00007fc28a012e4d XMM07=0000000000000000 00007fc28a012e61
XMM08=0000000000000000 00007fc28a012ee7 XMM09=0000000000000000 00007fc28a012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=00000000000003f9
RSI=000000000000151a RDI=000000000000151b RBP=00000000000003f9 RSP=ffffc90006d36e10
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff854f38c0
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f393c RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f36aec076c0 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c386929 CR3=00000000424f6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 000000000000ff00 XMM05=00007f36adf97478 00007f36adf974c0
XMM06=00007f36adf974b8 00007f36adf974b0 XMM07=00007f36adf974a8 00007f36adf974a0
XMM08=0000000000000000 00007f36ade12ee7 XMM09=0000000000000000 00007f36ade12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
