last executing test programs:

3.531806221s ago: executing program 0 (id=4011):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@updsa={0xf8, 0x1a, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@empty, 0x0, 0x3c}, @in=@loopback, {}, {}, {0x0, 0x1ec}, 0x0, 0x0, 0xa, 0x2}, [@tfcpad={0x8, 0x16, 0x7}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000800)

3.530225776s ago: executing program 0 (id=4012):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x10, {{@in=@remote, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x60, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x7, 0x9, 0x8}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x32}, 0x0, @in=@multicast1}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x4d5, 0x32}, 0x0, @in=@broadcast, 0x800000, 0x3, 0x0, 0x4b}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x2, 0x0, 0x1, 0x0, 0xabf}]}]}, 0x17c}}, 0x20004040)

3.481584828s ago: executing program 0 (id=4013):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @empty}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0xcc01, 0x0, 0x4008090}, 0x30)

3.481335106s ago: executing program 0 (id=4014):
socket$rxrpc(0x21, 0x2, 0xa)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00'}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f280a76d2686dd4c0900a8", 0x0, 0xffff1102, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

421.061149ms ago: executing program 0 (id=4020):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000020000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bind$x25(r2, &(0x7f0000000180)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12)
sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0)

420.669756ms ago: executing program 0 (id=4021):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="75616fc0052d92987468a7712189921de203e91f046cd5fd081e014c30240000003e000701fefffffffcffffff017c0000040042"], 0x24}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x18)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xc9)
readv(r2, &(0x7f0000000600)=[{&(0x7f00000005c0)=""/32, 0x20}], 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="0100000000000000000000000000e33eb00b2678628a59b6d2960c000600010000000100000018"], 0x38}}, 0x0)
r3 = socket$inet6(0x10, 0x3, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003f64ecb21ed7d74b542e43ae9f57f61af1c5b6016941992307df92d7c26b05a7da0582d208fd1f57c41cee38c7023e71dc864ab49f7894dd5ee29721d0625ee50c8aeca9b5090d85ff1c5df40229f0981507171aec7dc97abd981893d51a27e8a1033fa344fa3c6c27705648a66a47e0a1bc8fcede095704453c77f6c5370191ab55c423aae05729e69c987cf5f9aa2fd88c9e2114f53b9f82157c197397e43647b083db79f1f2"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r6, 0xe4}, 0x18)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r8)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r8, 0x4010744d, &(0x7f0000000180))
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r10 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r10, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000340)="7d7a68e25d38566c61856d6817441a9caa9b23557af3d00f974cd91d1b33a9d6e17fd477051346d814913f8a3ef2e1a781a2bbfc8d55dca693d39139f04047784190d93b5301b4abe27c9242396d40a5c2b7789629214281c8e09a6c1f1e0db5d1e74e1f27a89b2c25c2316fcddc9ff2a71eceb3094ba465389e", 0x7a}, {&(0x7f0000000700)="ce2ede98d4bde4b9a7931c4e260090a647151bacb721146be7ff4494578b050dc8c56c1571aa57d0f79d3ce5cc42977a719f4a8c88be34", 0x37}, {&(0x7f0000000600)="5fec9dec1e9d48e2b3a02e29dcaadb6d242c08b8b6e2a34dd08e48e3d32aa2bf0bd42348d6bf39fd7dac80fedaaab8ff4258ecbc4e025305fab94303f773d083bb47da24c3341e27416f38e3251fe082c8f8602308cd2f7dc846c93e62a8d53d22fcabce47b5531463290c970dccfaa7da3e4ee56136f44b991100e3db7c750c3ccb3e01d6598d53d05ca7503d7430f3ff2b79ab629faa1dfb2d0899dd807d28174305bd600e50112aa4d0ec230a89b3078bb60a198e5a7169d91005cda3fc9870956d72773bd700", 0xc8}, {&(0x7f0000002dc0)="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", 0x27b}, {&(0x7f0000000cc0)="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", 0xe2c}], 0x5, 0x0, 0x0, 0x4001}], 0x1, 0x48800)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000007000000040000000100008f"], 0x0, 0x47, 0x0, 0x1, 0x100}, 0x28)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRES8=r7], 0x20}}, 0x0)
recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0)
sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

405.23979ms ago: executing program 2 (id=4022):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async)
r4 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xac}}, 0x20050800) (async)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @local}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}}], 0x2c) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (rerun: 32)
close(r6) (async, rerun: 64)
r7 = socket$unix(0x1, 0x1, 0x0) (rerun: 64)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xf, 0x0, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

351.436548ms ago: executing program 1 (id=4023):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000020000010000000900010073797a30000000002c000000030a05000000000000000000010000000900030073797a31000000000900010073797a300000000084000000060a010400000000000000000100000008000b40000000000900010073797a30000000005c00048040000180080001006e6174003400028008000540eb0000090800014000000001080002"], 0xf8}, 0x1, 0x0, 0x0, 0x814}, 0x0) (async)
sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f00000008c0)={0x175c, 0x1, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [{{0x254, 0x1, {{0x3, 0x3}, 0x2, 0x6, 0x6, 0x0, 0xd, 'syz1\x00', "f388ac978b6dca618113e8508acd52232c83c49b525a4017477884a0388b52df", "67071c0ae5d67f52e3a7d9704fb6579fd909025c2437b7ce2bd52470b7aa0acf", [{0x4, 0xe, {0x2, 0x9}}, {0x0, 0x6, {0x2, 0x5}}, {0x101, 0x6, {0x3, 0x9}}, {0x4, 0x2, {0x3, 0x2}}, {0xfff, 0x401, {0x1, 0x10000}}, {0x9, 0xdcde, {0x3, 0x6e0}}, {0xeda, 0xe8, {0x2, 0x81}}, {0x2, 0x200, {0x0, 0xa}}, {0x562, 0x200, {0x3, 0x8}}, {0x0, 0x5, {0x1, 0x3}}, {0x0, 0x9, {0x0, 0xa7d}}, {0x0, 0x5, {0x0, 0x4}}, {0xfd95, 0x7, {0x1, 0x8}}, {0x2, 0xffff, {0x1, 0xff}}, {0x24ce, 0x99a, {0x1, 0x9}}, {0x2, 0xdb87, {0x1, 0x3}}, {0x3, 0xf, {0x0, 0x4}}, {0x52, 0x6, {0x1, 0xaac}}, {0x6, 0xfffe, {0x1, 0x5}}, {0x7, 0x6, {0x0, 0xdc}}, {0x9bd7, 0x5, {0x2, 0x73b}}, {0xc, 0x7fff, {0x3, 0x45}}, {0xe0c, 0x1, {0x0, 0x2}}, {0x8, 0x3, {0x3, 0x5}}, {0x9f6, 0x5, {0x1, 0x8}}, {0x80, 0x3ce, {0x1, 0x5}}, {0xb1, 0x5, {0x2, 0x2}}, {0xffff, 0x2, {0x0, 0x2}}, {0x6e, 0x9, {0x3, 0x81}}, {0xb9, 0x6, {0x2, 0x8}}, {0x200, 0x3, {0x3, 0x92}}, {0xc37, 0x6, {0x2, 0x5}}, {0xff, 0x3, {0x1, 0x35}}, {0x1, 0x1000, {0x0, 0xa1e}}, {0xc, 0x7, {0x1, 0x6eb7}}, {0xb160, 0x9, {0x2, 0x3}}, {0x0, 0x3, {0x5, 0x6}}, {0x9, 0xbf, {0x0, 0x2}}, {0xd, 0x9, {0x3, 0x2}}, {0x3, 0x7f, {0x0, 0x400}}]}}}, {{0x254, 0x1, {{0x3, 0x2}, 0x2, 0x7, 0x4, 0xfffc, 0x9, 'syz0\x00', "fe21586e7e797c2b6216467cafe83abd4f592d18e86e274a048cd630bc5acc37", "e545398b83600972233d1caa31277ee520c8393665829a03b3ec6b6e79f26a8e", [{0x2, 0x7f, {0x2, 0x1}}, {0x6, 0xd278, {0x2, 0x5}}, {0x4, 0x1000, {0x2, 0xff}}, {0x400, 0x3, {0x2, 0x8}}, {0x4, 0x1, {0x0, 0x1a6}}, {0x6, 0xf86}, {0x9, 0x100, {0x1, 0x3}}, {0x7ff, 0x45e6, {0x3, 0xb}}, {0x8, 0x5, {0x1, 0x2}}, {0x2, 0x1, {0x3, 0x4}}, {0xa, 0xfffc}, {0x8, 0x6, {0x2, 0x9}}, {0x53e, 0x101, {0x3, 0x7}}, {0x1, 0xce, {0x3, 0x7}}, {0x2, 0x4, {0x2, 0x4}}, {0x7, 0x782}, {0x9, 0xfe4e, {0x0, 0xd}}, {0x1, 0x282f, {0x0, 0x1}}, {0x4, 0x0, {0x2, 0x2}}, {0x7, 0x4, {0x3}}, {0x9, 0xf, {0x2, 0xb608}}, {0x0, 0x81, {0x1, 0x2}}, {0x7, 0x5, {0x0, 0x400}}, {0x8000, 0x1, {0x2, 0x3}}, {0xfffe, 0x200, {0x3, 0x1}}, {0x8, 0x2, {0x3, 0x3}}, {0x3, 0xfffa, {0x3, 0x80000001}}, {0x8, 0xff, {0x1, 0xd}}, {0x7, 0x6, {0x0, 0x101}}, {0x36, 0x0, {0x3, 0x2}}, {0x5f8, 0x6, {0x0, 0x3}}, {0x9, 0x1, {0x0, 0xfffffffd}}, {0x0, 0x2, {0x2, 0x4}}, {0x6, 0x0, {0x0, 0x3}}, {0x23c, 0xfffa, {0x2, 0x5}}, {0x800, 0xe000, {0x0, 0x4}}, {0x1ff, 0x1, {0x3, 0xcde5}}, {0x7f, 0x2965, {0x0, 0x8}}, {0x323, 0xdc, {0x0, 0x5}}, {0x385, 0x2, {0x3, 0xc94f}}]}}}, {{0x254, 0x1, {{0x2, 0x2}, 0xe, 0x3, 0x1b, 0xf, 0x28, 'syz0\x00', "acf83d69eb788a5ced7b5f4b8b49632002e8e113f35ecd78a5f31e9faa2798aa", "373d60b28b7f962a9e97385f5ab93e29575960e7e300732e895f79c1bb1beef4", [{0xffa1, 0x4, {0x1, 0x4fab}}, {0x2, 0x4, {0x2, 0x80}}, {0x7f, 0x8, {0x3, 0x96a}}, {0x5, 0xcf2c, {0x2, 0x6}}, {0x8, 0x1376, {0x1, 0xffff8000}}, {0x2, 0xfff, {0x1, 0xfffffff7}}, {0x2, 0x80, {0x2, 0xcb}}, {0x2, 0x6, {0x2, 0x1}}, {0x8, 0x2, {0x1, 0x600000}}, {0x81, 0xb7b4, {0x0, 0x5}}, {0x2, 0x5, {0x0, 0x9}}, {0x7, 0x7, {0x1, 0x8}}, {0x1, 0x0, {0x3, 0x7}}, {0x0, 0x9, {0x2, 0x8}}, {0x460d, 0x5, {0x0, 0x1}}, {0x100, 0x0, {0x0, 0x2}}, {0xb, 0x0, {0x2, 0x6}}, {0x0, 0x4, {0x1, 0x3ff}}, {0x8, 0x5, {0x0, 0x4556}}, {0x4, 0x7, {0x0, 0x3}}, {0x200, 0x50f}, {0xff, 0xe, {0x3, 0xa65e}}, {0x8, 0x3c, {0x0, 0x7}}, {0xfffc, 0x9, {0x0, 0x9a}}, {0x6, 0x8000, {0x0, 0x7}}, {0x5, 0x6, {0x2, 0x8}}, {0x8, 0x7, {0x2, 0x1}}, {0x3, 0x2, {0x1, 0x80}}, {0x3, 0x8, {0x1, 0x1c430c90}}, {0x200, 0x9, {0x3, 0x5}}, {0x8, 0x4, {0x3, 0x28000}}, {0x1, 0x4, {0x0, 0x9}}, {0xf3b, 0x8, {0x3, 0xfffffff9}}, {0x81, 0x4, {0x1, 0x60}}, {0x6, 0x70d, {0x2, 0x1000}}, {0x0, 0x40, {0x3, 0xffffffff}}, {0xfff1, 0x8, {0x0, 0x10000}}, {0x5, 0x401, {0x1, 0x7}}, {0x1ff, 0x9, {0x0, 0xfffffffd}}, {0x4, 0x0, {0x0, 0x9}}]}}}, {{0x254, 0x1, {{0x0, 0x401}, 0x0, 0x8, 0xa, 0x8e2, 0x12, 'syz1\x00', "a054ef62f5845027fe52ce500a4147081c973d5d2a4c95f58ef0b5ad8e45593d", "3686d2b1ada1a5e3f04a723715d9d87b7a91269489ce8da6fab9ce2935e22594", [{0x8, 0x3, {0x5, 0xcb8}}, {0x8c5, 0xbd6, {0x27942f8eef5b37ba, 0x8}}, {0x4ad0, 0x2, {0x2, 0x2}}, {0x87b, 0x4, {0x1, 0x80}}, {0x0, 0x6c, {0x0, 0x7}}, {0xc, 0x4, {0x3, 0x1}}, {0x1ff, 0x0, {0x0, 0x8000}}, {0x99, 0x3, {0x2, 0xffff9371}}, {0xa48, 0x6, {0x1, 0x8}}, {0x5, 0x2, {0x1, 0x3}}, {0xff7f, 0xd, {0x0, 0xe}}, {0x1, 0x2, {0x0, 0x3}}, {0x62, 0x7ff, {0x1, 0x2}}, {0x6, 0x2, {0x2, 0x5}}, {0xce96, 0xd52, {0x2, 0x8191}}, {0x2, 0x2, {0x1, 0xfffffffd}}, {0x8000, 0xfff0, {0x2, 0x7}}, {0xf, 0x8, {0x0, 0xffff}}, {0x2, 0x97, {0x3, 0x4}}, {0x9, 0xfffa, {0x2, 0x4}}, {0x200, 0x6, {0x1}}, {0x100, 0x41, {0x0, 0x3ff}}, {0x0, 0x8, {0x0, 0x1}}, {0x1, 0xff, {0x0, 0x10000}}, {0x0, 0xd}, {0x8, 0x1, {0x3, 0x1000}}, {0xb6, 0x7ff, {0x1, 0xd}}, {0x2, 0x200, {0x3, 0xfffffffd}}, {0x0, 0x9, {0x3, 0x9}}, {0x8, 0x834c}, {0x800, 0xff80, {0x3, 0x40}}, {0x0, 0xf, {0x1, 0x10000}}, {0x1, 0x2, {0x1, 0x5}}, {0xff, 0xb30b, {0x3}}, {0x9, 0x7, {0x1, 0xc}}, {0x6, 0x401, {0x3, 0x3ff}}, {0x7, 0x6, {0x1, 0x9}}, {0x4, 0x80, {0x2, 0x3}}, {0x8, 0x401, {0x1, 0x33b1}}, {0x4, 0x8000, {0x0, 0x401}}]}}}, {{0x254, 0x1, {{0x0, 0x10}, 0x8, 0xe3, 0x1, 0xfff, 0x24, 'syz0\x00', "41228d75a8723b8f06e482bbf4b3168383197a6c9250045b57582d2398f8347b", "46113b4c613da2c0a6bcaa465cce9935f55877fbaa0a4235085686e12411d5a0", [{0x7, 0xfffc, {0x1, 0x6}}, {0x400, 0xfffa, {0x2, 0x101}}, {0x717d, 0x4, {0x3, 0x9}}, {0x2, 0x0, {0x3, 0xfffffffc}}, {0xc, 0x4, {0x1, 0x7ff}}, {0x0, 0xfc63, {0x0, 0x1}}, {0x7fff, 0x98, {0x2, 0x8}}, {0x7fff, 0x3, {0x3, 0x81}}, {0x5, 0x9, {0x3, 0xfffffbff}}, {0x7, 0x9, {0x0, 0xab6}}, {0x2, 0x9, {0x2, 0xfffffeff}}, {0x3ff, 0x9, {0x1}}, {0x4, 0x8000, {0x3, 0x6}}, {0x2, 0x4, {0x1, 0x80}}, {0x7e4, 0x6c, {0x3, 0x100}}, {0x4, 0x7, {0x0, 0x7}}, {0x2, 0xd5b7, {0x2, 0x4}}, {0xc45d, 0x5, {0x0, 0x40}}, {0x5, 0x3, {0x3, 0x800}}, {0x6, 0x8, {0x3, 0xbfad}}, {0x10, 0x200, {0x2, 0x1ff}}, {0x9738, 0x0, {0x0, 0xfff}}, {0x7ff, 0x9, {0x1, 0x8}}, {0x5e9, 0xca34, {0x2, 0x5}}, {0x1, 0x2, {0x1, 0x1}}, {0x7f, 0xd0e5, {0x1, 0xd}}, {0x9, 0xe, {0x3, 0x6}}, {0x7, 0xc067, {0x2, 0x100}}, {0x730, 0x3}, {0x0, 0xc13e, {0x2, 0xfffffff9}}, {0x9, 0x2735, {0x0, 0x10000}}, {0xffff, 0x4, {0x1, 0x401}}, {0x401, 0xfffe, {0x3, 0x1ff}}, {0x3, 0x6, {0x2, 0x5}}, {0x3ff, 0x3, {0x1, 0xc}}, {0x4, 0x400, {0x0, 0x1}}, {0x5, 0xb51, {0x2, 0x534}}, {0x5, 0x46, {0x3, 0xa43}}, {0x3, 0xffff, {0x0, 0x3}}, {0x5, 0x9, {0x1, 0x401}}]}}}, {{0x254, 0x1, {{0x3, 0x6}, 0x2, 0x40, 0x7fff, 0x9, 0x13, 'syz1\x00', "a9a02882ab09262e37ac2a854a134a862368034156ed0dfdad966093ca9f986c", "fad78222639a3953b2abec98522e32e825b28cb713b9e445f3846929ad880efc", [{0x6, 0x5, {0x1, 0x6}}, {0x5, 0x8, {0x2, 0x200}}, {0x3f5, 0x6, {0x2, 0x8}}, {0x0, 0x46d1, {0x3, 0x22b}}, {0x6, 0x100, {0x0, 0x8}}, {0x7, 0x6, {0x0, 0x8}}, {0x7fff, 0x26, {0x2, 0x2}}, {0x2, 0xe6e, {0x2, 0x2}}, {0x8, 0x101, {0x1, 0x7}}, {0x8, 0x1, {0x3, 0x5}}, {0x10, 0xfffd, {0x1, 0x1}}, {0x6c26, 0x1b0b, {0x0, 0x6}}, {0xfff7, 0x4, {0x2, 0x7}}, {0x9, 0xffff, {0x3, 0x8}}, {0xc7, 0x4, {0x1, 0x5}}, {0x5, 0xdd, {0x3, 0x5}}, {0x8, 0xcc, {0x1, 0x400}}, {0x9, 0x7fff, {0x0, 0x5}}, {0x2, 0x8, {0x0, 0xe7d}}, {0x1, 0x5, {0x2, 0x100}}, {0xe, 0x2, {0x2, 0xc}}, {0x3, 0x0, {0x1, 0x7}}, {0xd, 0x7ff, {0x3, 0xc37}}, {0x1, 0x2, {0x3, 0x4}}, {0x0, 0xd6b6, {0x0, 0xb}}, {0x35cc, 0xab6, {0x0, 0x2f}}, {0x8, 0x7, {0x2, 0x6}}, {0x6, 0x7, {0x1, 0x1}}, {0x9151, 0x2f, {0x3, 0x4}}, {0x7, 0x6, {0x2, 0xb}}, {0x0, 0x6, {0x1, 0x7fff}}, {0x1, 0xffe0, {0x0, 0x5}}, {0x7, 0x8, {0x3, 0x2345}}, {0x80, 0xfffa, {0x0, 0x800}}, {0x800, 0x1, {0x3, 0xe5b00000}}, {0x3, 0x0, {0x1, 0x815a}}, {0x0, 0xfffd, {0x0, 0x5}}, {0x1, 0x7, {0x0, 0x7}}, {0x4, 0x6, {0x0, 0x7}}, {0x1000, 0x5, {0x3}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0x4, 0x0, 0x4, 0x2, 0x1, 'syz1\x00', "9237fddc2fa5a223d6587cf01d3cce3f474cc899d89046a18a7cc2b6416a9e61", "2f404a4642fdc84e868d40919436b35759e5d909dbe94cc5cbbd77bf5abfea6c", [{0x3, 0x30, {0x2, 0x9}}, {0xfff, 0x4, {0x0, 0x3ff}}, {0x5, 0x7, {0x1, 0x8}}, {0x3, 0x1ff, {0x0, 0x6}}, {0x8, 0xab}, {0x1, 0x0, {0x3, 0x2}}, {0x401, 0x6, {0x0, 0xfffffff3}}, {0x390, 0x1, {0x3, 0xffffffff}}, {0x5, 0x0, {0x3, 0xffffffff}}, {0xf, 0xff, {0x1, 0x5}}, {0x5, 0xd4ca, {0x1, 0x3}}, {0xbc1a, 0x5, {0x2, 0x81}}, {0x4, 0x400, {0x3, 0x4}}, {0x5, 0x9, {0x2, 0x97}}, {0x4, 0x4f, {0x3, 0x6}}, {0x0, 0x81, {0x2, 0x2e}}, {0x7, 0x6, {0x2, 0x7cfd}}, {0x3, 0xe, {0x2, 0x10}}, {0x9, 0x401, {0x0, 0x9}}, {0x4, 0x8001, {0x1}}, {0x9, 0x5, {0x3, 0x10000}}, {0x0, 0x8, {0x0, 0x6}}, {0x6, 0x1, {0x3, 0x772}}, {0xa, 0x7, {0x0, 0x2e2}}, {0xffff, 0x7, {0x1, 0x9}}, {0xf001, 0x4, {0x0, 0x80000001}}, {0x8001, 0x40, {0x3, 0x10000}}, {0x6, 0xb, {0x0, 0x8001}}, {0x3, 0x9e3, {0x2, 0xfd}}, {0xfffd, 0x8, {0x0, 0x25}}, {0xbf75, 0x2, {0x2, 0x5}}, {0x3, 0x8, {0x1, 0xfffffc01}}, {0x4, 0x8, {0x3, 0x401}}, {0x2, 0x1, {0x2, 0x7}}, {0xfffb, 0x8, {0x3, 0x9}}, {0x4ed, 0x800, {0x1}}, {0x9, 0x2, {0x2, 0x80000000}}, {0x8, 0x4, {0x0, 0x1}}, {0x66a, 0x100, {0x1, 0x1}}, {0x3, 0x400, {0x2, 0x401}}]}}}, {{0x254, 0x1, {{0x2, 0x6}, 0x7, 0x1, 0x2, 0x6, 0x22, 'syz0\x00', "e07b7a1d0a05408697f383643e6c9d928baa0f99eb04b855e77cc8c053912439", "b10b3f9df6383f28ebdb80d969174c6f522f6988f8072c551dfb9b0dfa8f7be4", [{0x5, 0x10, {0x3, 0x3}}, {0x8, 0x800, {0x0, 0xff}}, {0x2, 0x40, {0x2, 0x3}}, {0xd00, 0x1, {0x0, 0x3}}, {0x6, 0x7e24, {0x0, 0x2}}, {0x5, 0x7fff, {0x2, 0x80}}, {0x8000, 0x7, {0x1, 0x10000}}, {0xf13e, 0x6, {0x2, 0x3}}, {0x9, 0xfffd, {0x0, 0x800}}, {0x7, 0x1, {0x0, 0xfffff615}}, {0x393, 0x2, {0x3, 0x6}}, {0x61, 0x0, {0x2, 0x2}}, {0xe88, 0x5, {0x3, 0x3}}, {0xd0f, 0xab, {0x0, 0x5}}, {0x8, 0x8, {0x3, 0xd8a6}}, {0x4, 0x5, {0x3, 0x5}}, {0x2, 0x294, {0x2}}, {0x2, 0xfe01, {0x3, 0x6}}, {0xfff2, 0xa, {0x2}}, {0x10, 0x7, {0x0, 0x9}}, {0xb, 0x7, {0x0, 0x4}}, {0x0, 0x4, {0x2, 0x7e0c}}, {0x3d83, 0xfd34, {0x3}}, {0x480, 0x4, {0x0, 0x6}}, {0x7, 0xd, {0x3, 0x5}}, {0x0, 0x101, {0x2, 0x58ef}}, {0x9, 0x33, {0x2, 0x4}}, {0x0, 0x21c0, {0x3, 0x9}}, {0xff, 0xffb5, {0x1, 0x401}}, {0x3, 0x7, {0x2, 0x4}}, {0x3, 0xbd, {0x3, 0x2cbe}}, {0xb, 0x1, {0x0, 0x5}}, {0x3, 0x1647, {0x3, 0x5}}, {0x62c, 0x2d9, {0x3, 0x5}}, {0x9, 0x2, {0x3, 0x9}}, {0xb, 0xfff, {0x1, 0x3}}, {0x4, 0x1, {0x0, 0x4}}, {0xbb8e, 0x4, {0x2, 0x7}}, {0x3, 0xffff, {0x1, 0x4}}, {0xd, 0x6, {0x2, 0x10000}}]}}}, {{0x254, 0x1, {{0x0, 0x100}, 0x7, 0x0, 0x2, 0x5, 0x9, 'syz1\x00', "d9e7eec11929c3b5a436b66e8c459b5babdf810270f4b28553625fefce3289cd", "9d6d6618272d0dca22e5031b2551963497b544bc28ea97cae433758d14e5c78a", [{0xff80, 0x6, {0x3, 0x3}}, {0x0, 0x800, {0x3, 0x8}}, {0x1, 0x9, {0x3, 0x6}}, {0x7, 0xf9, {0x2}}, {0x7, 0x7, {0x0, 0x4}}, {0xff31, 0x3, {0x3, 0xbf49}}, {0x3, 0xe9ce, {0x2, 0x5}}, {0x7f, 0x1, {0x0, 0xb6}}, {0x7e15, 0x6, {0x1, 0x624}}, {0x2, 0x213, {0x0, 0x1}}, {0x0, 0x8, {0x3, 0x5}}, {0x6, 0x200, {0x0, 0x5}}, {0xc, 0x24, {0x3, 0x436}}, {0x493c, 0x2, {0x0, 0x5}}, {0x6, 0x8, {0x2, 0x3}}, {0x7, 0x2, {0x1, 0x6}}, {0x4, 0x4, {0x2, 0x2}}, {0x0, 0x81, {0x3, 0xd60}}, {0x1, 0x7, {0x2, 0x3f}}, {0x67e8, 0x7, {0x2, 0x3}}, {0x3, 0xc44c, {0x3, 0x2fe6ef86}}, {0xfd1b, 0x7f, {0x2, 0x1}}, {0x8, 0xfff7, {0x2, 0x83d}}, {0xd7, 0x9, {0x3, 0x3d}}, {0x9, 0x9ea3, {0x2, 0x10000}}, {0x3, 0x8, {0x1, 0x6}}, {0x65ad, 0x6, {0x0, 0x4}}, {0x9, 0x5, {0x0, 0x1}}, {0x7f, 0x6, {0x0, 0xb99}}, {0x4, 0x1, {0x0, 0x5}}, {0x7, 0x6, {0x0, 0x80000000}}, {0x8, 0x9, {0x0, 0xfe9}}, {0xb407, 0x1000, {0x2, 0x7}}, {0x0, 0x80, {0x1}}, {0x8, 0x8, {0x0, 0x9}}, {0x7f, 0x0, {0x0, 0x3}}, {0x4, 0xfffb, {0x2, 0x6000}}, {0x9, 0x4, {0x3, 0x1a}}, {0x25a, 0x7664, {0x1, 0x3}}, {0x10, 0x3, {0x3, 0x59}}]}}}, {{0x254, 0x1, {{0x7, 0xa}, 0x5, 0x2, 0x5, 0xffff, 0x20, 'syz1\x00', "536d2626b2615354571a28cc1e05e39bddc9cd7cf2046d5cd3ac068f6175f40b", "7171aa6620538370c10faef68940cad5484637d0ffc678651ba8ad7c04fd481c", [{0x5, 0x9, {0x3, 0xfd2}}, {0xfffc, 0x9, {0x3, 0xc}}, {0x8, 0xffff, {0x3, 0x7ff}}, {0x3, 0x8, {0x0, 0x8}}, {0x6, 0x4d04, {0x3, 0xe1}}, {0x9, 0x7, {0x1, 0xb}}, {0x4, 0x2, {0x2, 0x7fffffff}}, {0x5, 0x4, {0x1, 0x1ff}}, {0x2, 0x56d3, {0x1, 0x8}}, {0x9, 0x5, {0x2, 0x81}}, {0x1, 0x5b4f, {0x0, 0x1}}, {0x5fc, 0x54, {0x0, 0x2}}, {0x8000, 0x40, {0x3, 0x5}}, {0xfff9, 0x51, {0x0, 0x7}}, {0xfffa, 0x8, {0x3, 0x10}}, {0x4, 0x4}, {0x3, 0x35, {0x2, 0x3}}, {0x9, 0x80, {0x6604509bc178bc52, 0x80000000}}, {0xff, 0x82, {0x3, 0x3}}, {0x1, 0x9c3, {0x0, 0x10}}, {0x3, 0xfffc, {0x1, 0x80000000}}, {0xd472, 0x0, {0x3, 0x6}}, {0x9, 0x8000, {0x2}}, {0x3, 0x8001, {0x3, 0x100}}, {0xb, 0x6, {0x1, 0x1}}, {0x3, 0x0, {0x0, 0xa}}, {0x18, 0xe213, {0x1, 0x9}}, {0x3, 0x8, {0x0, 0x9}}, {0x4, 0x200, {0x0, 0x6}}, {0xe64, 0x5, {0x3, 0xd}}, {0x1000, 0x9, {0x0, 0x1}}, {0x9, 0x6885, {0x0, 0x88}}, {0x231, 0x4b, {0x0, 0x6}}, {0xfff, 0x8, {0x1, 0xa5ee}}, {0x1, 0x1, {0x0, 0x6}}, {0x5, 0x401, {0x2, 0x1}}, {0x5, 0x4, {0x0, 0x3ff}}, {0x7fff, 0x2, {0x0, 0x3}}, {0x5, 0x8}, {0x7, 0x9, {0x0, 0x11}}]}}}]}, 0x175c}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0xa, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x9, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x9, 0xffff5571, 0xffffcb85, 0x7, 0x24000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000)
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000500)={0xffffffffffffffff}, 0x4) (async)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x11, &(0x7f0000000380)=@raw=[@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x45}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], &(0x7f0000000440)='GPL\x00', 0x9, 0x1000, &(0x7f0000002040)=""/4096, 0x40f00, 0x38, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x3, 0x8, 0x6}, 0x10, 0x2536, r7, 0xa, &(0x7f0000000640)=[r0, r8, r9], &(0x7f0000000680)=[{0x5, 0x4, 0x4, 0x4}, {0x3, 0x2, 0xd, 0x5}, {0x3, 0x2, 0x6}, {0x0, 0x4, 0x9, 0x3}, {0x5, 0x3, 0x4, 0xa}, {0x3, 0x2, 0xe, 0x1}, {0x1, 0x5, 0x1, 0xb}, {0x3, 0x1, 0x5, 0x7}, {0x4, 0x6d0, 0xf}, {0x0, 0x4, 0x7}], 0x10, 0x8}, 0x94)

351.148701ms ago: executing program 2 (id=4024):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x30, r1, 0x201, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x300}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x10, 0x34, 0x1, 0x0, 0x25dfdbff}, 0x10}], 0x1}, 0x0)
r2 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0x85, &(0x7f0000000000), 0x90)
r3 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x22020600)
unshare(0x2a020400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1807000010000000000000000000000095000000000000005c156be59797c277aca64267d4d06444bfc56146b36be7ddcfccc719f1315e50ec970299cc5ea8772a89cdb17caca37ccfd785508d1fb3f7ce8abf1de9ba4c737baecc9bec152b762a3cdf1f39979a1335bdad78b7865a0aa0d5ae826ebee612551560798c0f261d9ef2343cf7fa5e675156ee2e6a49a45d1effcd8686762a5429d5ce8f23c9ffed94fb23a15e4d0cd7feff6bf093f08f5f9719a4a92b25bcd099c3ca040a69c478340fea305244944b63681582357033a83b786a5a60416d19f6c2f272d1671598e3c92717ee548ca5d026e8cb3f125884918d4339e0eda68d48a6a016fcf363f5e42dd8562f638009"], &(0x7f0000000040)='GPL\x00', 0x2, 0x92, &(0x7f0000000240)=""/146}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180), 0x3b)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe)
shutdown(r7, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={<r8=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000000040)={r8}, &(0x7f00000000c0)=0x8)
sendmsg$nl_route(r4, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@getroute={0x14, 0x1a, 0x822, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x824}, 0x8000)
mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x1010, r6, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="04000226", @ANYRES16=0x0, @ANYBLOB="00000000000000000004e800000008000317"], 0x1c}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@int={0x2, 0x0, 0x0, 0x1, 0x0, 0x67, 0x0, 0x1c, 0x1}]}, {0x0, [0x0]}}, 0x0, 0x2b, 0x0, 0x1, 0x502}, 0x28)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b28, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001800f3d202000000fddbdf250200000c001680080006000500"/40], 0x28}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)

291.223518ms ago: executing program 1 (id=4025):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={<r2=>0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xff, 0x4, 0x1, 0xc, 0x51, 0x5, 0x4}, &(0x7f0000000000)=0x9c)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={r2, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x27}}}, 0x1, 0x6}, &(0x7f0000000080)=0x90)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22528, 0x800}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x9}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}}, 0x800)

239.700276ms ago: executing program 2 (id=4026):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @empty}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x40000, 0x0, 0x4008090}, 0x30)

238.889977ms ago: executing program 1 (id=4027):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', <r6=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, 0x58, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x9e, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x2f, 0x6f, 0xe1, 0x3, 0xa, @mcast2, @local, 0x1, 0x1, 0x4, 0xe18}})
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c00000024ff010000000000000000000000000006000300006d00a971e4cd3d6a3cf24c10042e3a014500e8ee29901148d06b6d0e2fcd50ca6b0c9959c700693dfecb9badeebb0115619810cdf4f002e5a83eb5815ba61cbbf9a7933954580fc51570fdd355131667b5e37ab5b9c5730863ec35c8a35dd4a703989cb0327d6cf6"], 0x1c}}, 0x8004)
getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000c40)={0xa, 0x0, 0x0, @private1}, &(0x7f0000001200)=0x20)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'erspan0\x00', <r10=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', r10}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'ip6tnl0\x00', &(0x7f0000000600)={'ip6tnl0\x00', <r11=>0x0, 0x29, 0x8, 0x1, 0x5, 0x4, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x40, 0x6, 0x7}})
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000cc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000d00)=ANY=[@ANYBLOB="f0030000", @ANYRES8=r10, @ANYBLOB="000225bd7000fcdbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="4c01028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000600", @ANYRES32=r7, @ANYBLOB="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", @ANYRES8=r7, @ANYBLOB="3c00028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000800000008000100", @ANYRES32=r10, @ANYBLOB="f001028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r11, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000300000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400280000000800070000000000"], 0x3f0}, 0x1, 0x0, 0x0, 0x842}, 0x51)
r12 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r12, &(0x7f0000000c00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000007c0)={0x400, 0x13, 0x800, 0x70bd2d, 0x25dfdbfb, {0x18, 0x7, 0x18, 0xc, {0x4e23, 0x4e22, [0x3, 0x7, 0x9, 0x7], [0x7, 0x80, 0xe9, 0x352], 0x0, [0x8001, 0x3]}, 0x1, 0x40}, [@INET_DIAG_REQ_BYTECODE={0x9, 0x1, "59e5594c62"}, @INET_DIAG_REQ_BYTECODE={0xad, 0x1, "3679d6badeca1aeef1fe06e1177c85ded9943148c8585daef245a3fc6d8fe2a9074cee03497b2aadec3ac20738691c5cdf893841f1efef75afd8013789aec6a23ec8d55a45fdf827b5ebb6e320a2831d02b54f3e533bc8fccc8eb5cfa6b9c526f1e1e6e9fb38da160e90792b00a89a45ec914956d0e0e8b955bf3ca55764f6748a0934d09667be9d8cf1001d1af380d8b67cf32d2824dc1356d3061759455f29e0cc84c68e08ef67ea"}, @INET_DIAG_REQ_BYTECODE={0xe1, 0x1, "dc5de6c1708c593786c018ca1a01d28aa47219659602550c1e3a2e994a7377c3409f711b56f413363c07341e6efa7bef015f3a64e6dc87e8253f64a5a908382e008127d1a05fcbc02a6f035cd65c9f7aee4b82b26e230f65120b302e96230a52ac9674245f6b36cde920f0996d631c851467cd5fb8a52dc519e1bafba309dd0e071f7a01970a2ed6f974b4923ac97301302184c4d7fc7f35ef469e32bd9d0f31c3e41921dc126e07c901beecad3e1bdd4382ea04e45fab689fd3db1317e49c2b2994da709e6553b7f1fd05b178ca26d4007709b28e3d64cb3017ff7382"}, @INET_DIAG_REQ_BYTECODE={0xbd, 0x1, "c6a9d00627e7490f9759963b305abfc43e4697bdf5921dfce88352441168c147336ebf1387fac4bc2a23238fc513b691ab10b7971c96ff1f925ea7a17baf404e0de23ee6a1e1e23ef6ec2a96bf9d0ba694a209cff6ac601bbc9614f5fa70f5678600281b29568e60596d5f367c7ac731a38b9cb71e2072ec4c6dc730a171c7f80bf814e42f182f0d516ebb6fb3a1d5d98f4f2d28f27f4750669cb670ee2215a7c1143354c32d21bf64a82bde4fcd40731b938b59e01afab657"}, @INET_DIAG_REQ_BYTECODE={0xe7, 0x1, "5d98ca30e1d88151e78a12ef26b8673dbbd4ffa62c5cf8c7089f0329c3fab7d7b433cc3dbd595be576d780a6c745327582deba198f00a32bc00de9e2e782b38ab04ba37d2cd97a081836fd318c3a34a0ff140ca6c82ddcd2fff3b7fb1a59330f0f0391815fb9c220d2cb8e3c186b0249a8302ea79a2a968a3ee72acbbed4b1a5ffe77cf1a05171553cc4eac29d1506b9751ea34afd842dd3e25b11dfaa6e761afed4bcc6e5e34c7f663216dc731edb3d792e1509178314414aeba0083c13d96088a230e4d33ede383d064d3f52d5138a2d8f0e4e20036a47c957c4e67eb05313f12f84"}, @INET_DIAG_REQ_BYTECODE={0x6a, 0x1, "be6018a5724d5c7a8d9e9c1c790292c7696ce05adfd1f411137a5e4b83501d568cb3948d0f53d796cbbbda96f4e4b17f7ead1d42d24fdc611a3f3674167de860750220afd86184376cd8f902d63a15e019e15eb4ce65ad7719e8e8ef897558bdfad75ce417a4"}]}, 0x400}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
r13 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r13, 0x1, 0x7, &(0x7f0000000280), 0x4)
listen(r13, 0x1)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4)

238.707551ms ago: executing program 1 (id=4028):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x2001008, 0x0, 0xfffffffffffffe42, 0x0, 0x0, 0x0, 0x6, 0x9, 0x10000}, 0x50)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xa0000001})
epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x1fffc002)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000084}, 0x8000)

238.315984ms ago: executing program 2 (id=4029):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22}, 0x94)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000e3feffff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa101000000010007010000f8ffffffb702000005000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r0}, 0x18)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe0000b0000000000000a00000000c0fe07000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="14000500"], 0x3c}, 0x1, 0x11}, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x410010}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040029bd7000fddbdf250d000000080051c00100000008003200080000000500330002100000000000000000000006002800020000000500370000000000"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x400c020)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'ip_vti0\x00', 0x4000})

131.806932ms ago: executing program 2 (id=4030):
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4)
listen(r2, 0x7)
sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000380)={0x0, 0xffffffffffffffce, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x40}}, 0x50)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000000), 0x1)
getsockopt$sock_buf(r0, 0x1, 0x31, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=0x1000)
r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14, 0x80000)
r5 = accept$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14)
getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0xfffffffffffffef5)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)

130.479924ms ago: executing program 1 (id=4031):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000010900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000140000000110800034000000005080002400000000114000000110001"], 0xdc}}, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"94e9aa2e2d4bfdbb784e474a691b5107", 0x0, 0x0, {0x3, 0x800}, {0x4, 0x1}, 0x5, [0x9, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x200, 0x6, 0x5, 0x6, 0x800, 0x8e, 0xfff, 0x0, 0x1ff, 0xe2, 0x4]})
socket$can_bcm(0x1d, 0x2, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0xd2, &(0x7f0000000100)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0x9c, 0x3c, 0x0, @local, @mcast2, {[], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "abf9a9b08b40a1dc367c4dc078e27c26e9e42239289acc5aad0c6189fcc415e9", "4001d9e099f96e96b6fe33032ddc02272c1ea41f157a3dc5454ade0c416088f80a328a1a6dc9c6a843b8d6344cf5225f", "857c00661436f168db59cbbb93c5ba7cd13875e36fa3c3b8976b9dc0", {"7840a612fe1a814c065cd1094fa8ac89", "23a6cc482526163958fa4d52fc2d8623"}}}}}}}}, 0x0)

215.965µs ago: executing program 2 (id=4032):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f00000002c0)='\a', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}, 0xa}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
shutdown(r0, 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0)
listen(r0, 0x2)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002040)=ANY=[@ANYBLOB="38000000540001002abd7000ffffffff07000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="0a030300ff02000000000000000000000000000186dd"], 0x38}}, 0x4008cc0)
sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfb, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@broadcast, {0x0, 0x0, 0x0, 0x8, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x1, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x2000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080))
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000005440)=ANY=[@ANYBLOB="12000000050000000800"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r7, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r6}, 0x20)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f00000008c0)={0x14c, 0x14, 0x300, 0x70bd26, 0x25dfdbff, {0x2, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x93, 0x1, "eb1de2e84a850aaf2cf3420e15f9c91e8f343ed235d8b8f5bb0ecd7206c0409c894422d11d7558b2e5d31f9daf652f024956bfa9bb1377536240e3c34e126b18273f5924a1a8bdfc9989d935d7cf34df77be03a23f21124d22ef0ca57e2d5c348657c6ce28cea747f04e9dfb55d1a3aaad6e8749de728264df393226ee2dd98f9858f09f442491b66936b1a05fd96f"}, @INET_DIAG_REQ_BYTECODE={0x45, 0x1, "8201674367dd9d6e6b7419b732aec9fc838b50a4de0d55de4357151cdd93d4107a670e53a092609419e3086232cfe252fff37450f3b19ee8338cb1ae3cfbbd24da"}, @INET_DIAG_REQ_BYTECODE={0x5b, 0x1, "92e53b56d061094ea60a34365227ed575ddbfb39bf861534465184768699e71301c41e426f4d367362c2b0e8a62c2ca9deab752f59215975e03514ff081c49fb36ba98ceebd4fbd3e44a5ee97c079f4b575bc5c779cf68"}]}, 0x14c}}, 0x0)
recvmmsg(r6, &(0x7f0000005040)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000480)=""/46, 0x2e}], 0x1}, 0x7}], 0x2, 0x10000, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000140)={0x0, 0x8000, 0xfd, "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"}, 0x105)
socket$nl_route(0x10, 0x3, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='contention_end\x00', r9}, 0x18)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DAEMON(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r11, 0xb0b}, 0x14}}, 0x0)

0s ago: executing program 1 (id=4033):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001900dd8d000b00000000000002000000"], 0x1c}}, 0x8c0)

kernel console output (not intermixed with test programs):

 2 family 0 port 6081 - 0
[   73.937348][ T5897] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.944019][ T5897] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.947265][ T5897] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.992876][ T8443] sctp: [Deprecated]: syz.2.870 (pid 8443) Use of struct sctp_assoc_value in delayed_ack socket option.
[   73.992876][ T8443] Use struct sctp_sack_info instead
[   74.027759][ T8446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.871'.
[   74.031895][ T8446] netlink: 'syz.1.871': attribute type 1 has an invalid length.
[   74.034529][ T8446] netlink: 'syz.1.871': attribute type 2 has an invalid length.
[   74.046748][ T8446] netlink: 80 bytes leftover after parsing attributes in process `syz.1.871'.
[   74.059645][ T8430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.866'.
[   74.271065][ T8480] netlink: 212364 bytes leftover after parsing attributes in process `syz.2.880'.
[   74.274850][ T8480] openvswitch: netlink: Message has 5 unknown bytes.
[   74.756958][ T8510] netlink: 2 bytes leftover after parsing attributes in process `syz.2.890'.
[   74.803055][ T8519] netlink: 48 bytes leftover after parsing attributes in process `syz.2.893'.
[   74.806293][ T8519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.893'.
[   74.930024][ T8519] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   74.997757][ T8551] 8021q: VLANs not supported on xfrm0
[   75.123778][ T8571] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.304599][ T8604] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   75.637122][ T8635] geneve2: entered promiscuous mode
[   75.640048][ T5876] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.643614][ T5876] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.648724][ T5876] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.653208][ T5876] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.700917][ T8642] delete_channel: no stack
[   75.731310][ T8646] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   75.735497][ T8646] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[   75.739824][ T8646] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[   75.939607][ T5846] Bluetooth: hci2: command 0x0419 tx timeout
[   76.136101][ T8680] pimreg: entered allmulticast mode
[   76.200738][ T8679] pimreg: left allmulticast mode
[   76.647021][ T8753] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   76.653178][ T8753] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   76.657668][ T8753] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   77.099190][ T8820] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 3, id = 0
[   77.151941][ T8824] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[   78.003914][ T8870] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   78.008730][ T8870] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   78.014280][ T8870] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   78.023128][   T54] Bluetooth: hci2: command 0x0419 tx timeout
[   78.098351][ T8881] sctp: [Deprecated]: syz.0.1005 (pid 8881) Use of int in max_burst socket option deprecated.
[   78.098351][ T8881] Use struct sctp_assoc_value instead
[   78.135365][ T8883] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.316433][ T8903] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   78.319334][ T8903] IPv6: NLM_F_CREATE should be set when creating new route
[   78.675026][ T8945] validate_nla: 1 callbacks suppressed
[   78.675036][ T8945] netlink: 'syz.1.1028': attribute type 21 has an invalid length.
[   78.685077][ T8943] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.688437][ T8943] syzkaller0: entered promiscuous mode
[   78.690786][ T8943] syzkaller0: entered allmulticast mode
[   78.695705][ T8943] tipc: Resetting bearer <eth:syzkaller0>
[   78.710004][ T8942] tipc: Resetting bearer <eth:syzkaller0>
[   78.713955][ T8942] tipc: Disabling bearer <eth:syzkaller0>
[   78.797223][ T8953] __nla_validate_parse: 33 callbacks suppressed
[   78.797240][ T8953] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1031'.
[   78.863668][ T8961] netlink: 728 bytes leftover after parsing attributes in process `syz.2.1033'.
[   79.173048][ T9001] netlink: 'syz.0.1045': attribute type 1 has an invalid length.
[   79.204619][ T9009] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   79.287713][ T5843] IPVS: starting estimator thread 0...
[   79.379535][ T9019] IPVS: using max 131 ests per chain, 314400 per kthread
[   79.603538][ T9038] bridge_slave_0: left promiscuous mode
[   79.605995][ T9038] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.610505][ T9038] bridge_slave_1: left allmulticast mode
[   79.612860][ T9038] bridge_slave_1: left promiscuous mode
[   79.615245][ T9038] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.620368][ T9038] bond0: (slave bond_slave_0): Releasing backup interface
[   79.624381][ T9038] bond0: (slave bond_slave_1): Releasing backup interface
[   79.628947][ T9038] team0: Port device team_slave_0 removed
[   79.633541][ T9038] team0: Port device team_slave_1 removed
[   79.636252][ T9038] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.639900][ T9038] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.644578][ T9038] bond0: (slave macvlan3): Releasing backup interface
[   79.661252][ T9038] team0: Mode changed to "activebackup"
[   79.992143][ T9074] netlink: 'syz.2.1071': attribute type 1 has an invalid length.
[   79.994986][ T9074] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1071'.
[   80.012453][ T9076] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   80.016942][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1072'.
[   80.020904][ T9076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1072'.
[   80.074043][ T9084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1074'.
[   80.123789][ T9092] netlink: 'syz.1.1076': attribute type 1 has an invalid length.
[   80.179863][ T9099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1080'.
[   80.179985][ T9102] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1081'.
[   80.212039][ T9104] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1082'.
[   80.287856][ T9113] netem: change failed
[   80.466070][ T9148] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.472454][ T9148] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   80.476191][ T9147] tipc: Disabling bearer <eth:syzkaller0>
[   80.513614][ T9162] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1100'.
[   80.788308][ T9192] bond0: Device is already in use.
[   81.229765][ T1841] cfg80211: failed to load regulatory.db
[   81.424141][ T9209] netlink: 'syz.2.1113': attribute type 39 has an invalid length.
[   81.428563][ T9209] gretap0: entered promiscuous mode
[   81.432933][ T9209] gretap0: left promiscuous mode
[   81.625568][ T9227] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[   81.629822][ T9227] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[   81.700617][ T9228] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   81.834136][ T9232] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.837023][ T9232] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.926831][ T9232] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.936563][ T9232] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.941405][ T9232] batadv_slave_1: left promiscuous mode
[   82.015433][ T9232] geneve2: left promiscuous mode
[   82.052914][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.057396][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.060737][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.063509][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.392310][ T9242] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   82.396360][ T9242] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   82.401026][ T9242] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   82.545867][ T9248] team0: Device sit2 is of different type
[   82.639059][ T9262] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.701794][ T9275] netlink: 'syz.2.1138': attribute type 12 has an invalid length.
[   82.768153][ T9288] pim6reg1: entered promiscuous mode
[   82.774214][ T9288] pim6reg1: entered allmulticast mode
[   82.996975][ T9325] netlink: 'syz.0.1154': attribute type 2 has an invalid length.
[   83.253689][ T9357] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   83.271485][ T9357] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   83.304746][ T9364] IPVS: set_ctl: invalid protocol: 60 172.30.1.2:20004
[   83.438998][ T9372] 8021q: adding VLAN 0 to HW filter on device bond4
[   83.442741][ T9372] team0: Port device bond4 added
[   83.464735][ T9372] netlink: 'syz.2.1171': attribute type 1 has an invalid length.
[   83.468019][ T9372] netlink: 'syz.2.1171': attribute type 2 has an invalid length.
[   83.827532][ T9421] batadv_slave_1: entered promiscuous mode
[   83.880732][ T9430] __nla_validate_parse: 31 callbacks suppressed
[   83.880743][ T9430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1190'.
[   83.907918][ T9433] sctp: [Deprecated]: syz.1.1191 (pid 9433) Use of int in max_burst socket option deprecated.
[   83.907918][ T9433] Use struct sctp_assoc_value instead
[   83.975478][ T9440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1192'.
[   83.996948][ T9440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1192'.
[   84.005917][ T9440] vlan0: entered promiscuous mode
[   84.008053][ T9440] macvtap0: entered promiscuous mode
[   84.137100][ T9454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1197'.
[   84.297037][ T9468] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1199'.
[   84.380520][ T9470] netlink: 'syz.1.1200': attribute type 13 has an invalid length.
[   84.383294][ T9470] netlink: 'syz.1.1200': attribute type 17 has an invalid length.
[   84.395091][ T9470] gretap0: refused to change device tx_queue_len
[   84.397831][ T9470] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   84.407379][ T9470] syz.1.1200 (9470) used greatest stack depth: 20048 bytes left
[   84.480239][ T9420] batadv_slave_1: left promiscuous mode
[   84.511567][ T9479] bond0: Device is already in use.
[   84.535881][ T9481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1205'.
[   84.612307][ T9496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1209'.
[   84.615366][ T9496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1209'.
[   84.621213][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   84.623988][ T9496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1209'.
[   84.626311][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   84.628540][ T9496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1209'.
[   84.631033][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   84.637317][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   84.677959][ T9503] delete_channel: no stack
[   84.832196][ T9547] netlink: 'syz.1.1225': attribute type 2 has an invalid length.
[   84.847471][ T9548] nbd: must specify a device to reconfigure
[   84.913824][ T9559] openvswitch: netlink: IPv4 tun info is not correct
[   85.235802][ T9595] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.238540][ T9595] syzkaller0: entered promiscuous mode
[   85.244520][ T9595] syzkaller0: entered allmulticast mode
[   85.257259][ T9595] tipc: Resetting bearer <eth:syzkaller0>
[   85.262603][ T9594] tipc: Resetting bearer <eth:syzkaller0>
[   85.266261][ T9594] tipc: Disabling bearer <eth:syzkaller0>
[   85.355525][ T9605] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   85.400676][ T9611] netlink: 'syz.1.1248': attribute type 2 has an invalid length.
[   85.417573][ T9611] : entered promiscuous mode
[   85.776078][ T9648] netlink: 'syz.2.1260': attribute type 1 has an invalid length.
[   86.221585][ T9664] bond0: Device is already in use.
[   86.333500][ T9675] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.480265][ T9682] veth5: entered promiscuous mode
[   86.524087][ T9683] erspan0: entered allmulticast mode
[   86.609312][ T9647] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[   86.702458][ T9702] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   86.707318][ T9702] IPv6: NLM_F_CREATE should be set when creating new route
[   86.870559][ T9731] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   86.992975][ T9742] batadv_slave_0: entered promiscuous mode
[   87.727242][ T9750] bond0: Device is already in use.
[   87.891718][ T9764] netlink: 'syz.1.1299': attribute type 21 has an invalid length.
[   87.895282][ T9764] netlink: 'syz.1.1299': attribute type 4 has an invalid length.
[   88.469260][ T9801] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.632521][ T9808] xt_limit: Overflow, try lower: 271964/0
[   88.988638][ T9819] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   88.994878][ T9819] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   88.999317][ T9819] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   89.062899][ T9821] __nla_validate_parse: 25 callbacks suppressed
[   89.062910][ T9821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1316'.
[   89.068197][ T9821] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[   89.503571][ T9846] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1323'.
[   89.508230][ T9846] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1323'.
[   89.512471][ T9846] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1323'.
[   89.515903][ T9846] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1323'.
[   89.518974][ T9846] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1323'.
[   89.522362][ T9846] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1323'.
[   89.525540][ T9846] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1323'.
[   89.528595][ T9846] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1323'.
[   89.575922][ T9854] netlink: 'syz.1.1325': attribute type 11 has an invalid length.
[   89.660102][ T9866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1330'.
[   89.666681][ T9868] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   89.669678][ T9868] IPv6: NLM_F_CREATE should be set when creating new route
[   90.216496][ T9925] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[   90.868177][ T9962] netlink: 'syz.1.1365': attribute type 23 has an invalid length.
[   90.877786][ T9960] netlink: 'syz.1.1365': attribute type 23 has an invalid length.
[   90.910344][ T9966] rdma_op ffff88811283a9f0 conn xmit_rdma 0000000000000000
[   90.967439][ T9969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   92.192742][T10027] netlink: 'syz.1.1386': attribute type 1 has an invalid length.
[   92.201416][T10027] 8021q: adding VLAN 0 to HW filter on device bond1
[   92.445516][T10042] ip6gre3: entered allmulticast mode
[   92.691239][T10055] netlink: 'syz.2.1393': attribute type 1 has an invalid length.
[   92.702543][T10055] bond5: entered promiscuous mode
[   92.705313][T10055] 8021q: adding VLAN 0 to HW filter on device bond5
[   93.147175][T10105] netlink: 'syz.0.1412': attribute type 1 has an invalid length.
[   93.167513][T10105] bond2: (slave ip6gretap2): Enslaving as a backup interface with an up link
[   93.311424][T10135] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.400730][T10135] syzkaller0: entered promiscuous mode
[   93.402951][T10135] syzkaller0: entered allmulticast mode
[   93.408001][T10135] tipc: Resetting bearer <eth:syzkaller0>
[   93.413443][T10133] tipc: Resetting bearer <eth:syzkaller0>
[   93.417473][T10133] tipc: Disabling bearer <eth:syzkaller0>
[   93.545449][T10180] netlink: 'syz.0.1427': attribute type 21 has an invalid length.
[   93.772846][T10198] netlink: 'syz.2.1432': attribute type 2 has an invalid length.
[   93.774609][T10196] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   93.784027][T10196] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   94.037754][T10213] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   94.048146][T10213] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   94.061475][T10213] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   94.070350][T10213] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   94.078162][T10123] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[   94.087773][T10213] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   94.106051][T10213] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   94.633075][T10225] netlink: 'syz.1.1441': attribute type 2 has an invalid length.
[   94.877529][T10238] __nla_validate_parse: 23 callbacks suppressed
[   94.877543][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1445'.
[   94.890726][T10238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1445'.
[   94.900658][T10238] netlink: 'syz.2.1445': attribute type 19 has an invalid length.
[   94.907361][T10238] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1445'.
[   94.912284][T10243] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1449'.
[   95.001919][T10271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1454'.
[   95.076869][T10280] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.083735][T10280] syzkaller0: entered promiscuous mode
[   95.086173][T10280] syzkaller0: entered allmulticast mode
[   95.099125][T10280] tipc: Resetting bearer <eth:syzkaller0>
[   95.105989][T10280] tipc: Disabling bearer <eth:syzkaller0>
[   95.271220][T10293] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1463'.
[   95.332147][T10295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1464'.
[   95.336807][T10295] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.340460][T10295] syzkaller0: entered promiscuous mode
[   95.342394][T10295] syzkaller0: entered allmulticast mode
[   95.351611][T10294] tipc: Resetting bearer <eth:syzkaller0>
[   95.357377][T10294] tipc: Disabling bearer <eth:syzkaller0>
[   95.402758][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1465'.
[   95.406181][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1465'.
[   95.409543][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1465'.
[   95.411890][T10297] netlink: 'syz.1.1465': attribute type 13 has an invalid length.
[   95.434768][T10301] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.438337][T10301] syzkaller0: MTU too low for tipc bearer
[   95.441179][T10301] tipc: Disabling bearer <eth:syzkaller0>
[   95.524618][T10308] syzkaller1: entered allmulticast mode
[   95.580878][T10309] syzkaller1: left allmulticast mode
[   96.068212][T10346] validate_nla: 1 callbacks suppressed
[   96.068234][T10346] netlink: 'syz.0.1482': attribute type 4 has an invalid length.
[   96.495318][T10388] lo: entered allmulticast mode
[   96.587559][T10387] lo: left allmulticast mode
[   96.622558][T10393] xfrm1: entered promiscuous mode
[   96.624311][T10393] xfrm1: entered allmulticast mode
[   96.723976][T10398] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[   96.728156][T10398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   97.200936][T10423] netlink: 'syz.2.1500': attribute type 1 has an invalid length.
[   97.461399][T10452] bridge18: port 1(veth9) entered blocking state
[   97.464938][T10452] bridge18: port 1(veth9) entered disabled state
[   97.467454][T10452] veth9: entered allmulticast mode
[   97.470939][T10452] veth9: entered promiscuous mode
[   97.474993][T10452] bridge18: port 2(veth0_to_bond) entered blocking state
[   97.477353][T10452] bridge18: port 2(veth0_to_bond) entered disabled state
[   97.480670][T10452] veth0_to_bond: entered allmulticast mode
[   97.483352][T10452] veth0_to_bond: entered promiscuous mode
[   97.490341][T10452] vlan2: entered allmulticast mode
[   97.492331][T10452] veth1: entered allmulticast mode
[   97.494248][T10452] bridge18: port 3(vlan2) entered blocking state
[   97.496722][T10452] bridge18: port 3(vlan2) entered disabled state
[   97.499445][T10452] vlan2: entered promiscuous mode
[   97.501125][T10452] veth1: entered promiscuous mode
[   98.007639][T10496] pim6reg1: entered promiscuous mode
[   98.012116][T10496] pim6reg1: entered allmulticast mode
[   98.124891][T10513] netlink: 'syz.2.1534': attribute type 1 has an invalid length.
[   98.128720][T10515] netlink: 'syz.2.1534': attribute type 1 has an invalid length.
[   98.212620][T10446] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[   98.500580][T10568] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.507014][T10569] syzkaller0: entered promiscuous mode
[   98.509039][T10569] syzkaller0: entered allmulticast mode
[   98.517493][T10569] tipc: Resetting bearer <eth:syzkaller0>
[   98.523754][T10569] tipc: Disabling bearer <eth:syzkaller0>
[   98.707354][T10597] tipc: Can't bind to reserved service type 2
[   99.226446][T10630] bridge0: port 3(macsec1) entered blocking state
[   99.231838][T10630] bridge0: port 3(macsec1) entered disabled state
[   99.234581][T10630] macsec1: entered allmulticast mode
[   99.241096][T10630] macsec1: left allmulticast mode
[   99.383012][T10647] netlink: 'syz.0.1580': attribute type 1 has an invalid length.
[   99.386297][T10647] NCSI netlink: No device for ifindex 813332851
[   99.427433][T10652] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.431486][T10652] syzkaller0: entered promiscuous mode
[   99.433465][T10652] syzkaller0: entered allmulticast mode
[   99.437172][T10650] tipc: Resetting bearer <eth:syzkaller0>
[   99.448109][T10650] tipc: Disabling bearer <eth:syzkaller0>
[   99.572921][T10670] ip6erspan0: entered promiscuous mode
[   99.641460][T10684] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   99.681080][T10692] netlink: 'syz.2.1596': attribute type 1 has an invalid length.
[   99.810953][T10721] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   99.855955][T10729] tun0: tun_chr_ioctl cmd 2147767520
[   99.988409][T10742] __nla_validate_parse: 34 callbacks suppressed
[   99.988419][T10742] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1612'.
[   99.994335][ T5882] IPVS: starting estimator thread 0...
[  100.016848][T10748] netlink: 'syz.1.1614': attribute type 4 has an invalid length.
[  100.079990][T10756] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1618'.
[  100.100205][T10743] IPVS: using max 65 ests per chain, 156000 per kthread
[  100.213572][T10768] syzkaller1: entered promiscuous mode
[  100.215759][T10768] syzkaller1: entered allmulticast mode
[  100.268111][T10776] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1626'.
[  100.398632][T10784] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1629'.
[  100.523317][T10789] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  100.526587][T10789] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  100.543069][T10791] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  100.552070][T10791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1632'.
[  100.574740][T10793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1633'.
[  100.655656][T10811] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1640'.
[  100.727006][T10818] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1641'.
[  100.762237][T10827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1643'.
[  100.936422][T10850] tipc: New replicast peer: 255.255.255.255
[  100.938600][T10850] tipc: Enabled bearer <udp:syz2>, priority 10
[  101.080685][T10855] netlink: 'syz.0.1651': attribute type 27 has an invalid length.
[  101.599331][T10899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1667'.
[  101.729130][T10915] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.847054][ T5897] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  101.850529][ T5897] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.857392][ T5897] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  101.860799][ T5897] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.863680][ T5897] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  101.866795][ T5897] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.870039][ T5897] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  101.873737][ T5897] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.897890][T10924] bridge_slave_1: default FDB implementation only supports local addresses
[  101.976635][T10929] IPv6: Can't replace route, no match found
[  102.038414][T10932] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  102.049858][   T10] tipc: Node number set to 2480402243
[  102.237737][T10953] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  102.322662][T10961] bond0: Device is already in use.
[  102.367463][T10966] netlink: 'syz.0.1692': attribute type 1 has an invalid length.
[  102.377541][T10966] 8021q: adding VLAN 0 to HW filter on device bond3
[  102.387334][T10966] 8021q: adding VLAN 0 to HW filter on device bond3
[  102.390845][T10966] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  102.395559][T10966] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  102.455567][T10966] bond3: (slave erspan0): making interface the new active one
[  102.458382][T10966] bond3: (slave erspan0): Enslaving as an active interface with an up link
[  102.565031][T10978] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.567704][T10978] syzkaller0: entered promiscuous mode
[  102.570248][T10978] syzkaller0: entered allmulticast mode
[  103.070037][T11000] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.319927][T11020] batadv2: entered promiscuous mode
[  103.397790][T10979] tipc: Resetting bearer <eth:syzkaller0>
[  103.405012][T10979] tipc: Disabling bearer <eth:syzkaller0>
[  103.497979][T11026] ip6gretap3: entered promiscuous mode
[  103.529646][T11028] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  104.196895][T11044] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  104.199784][T11044] IPv6: NLM_F_CREATE should be set when creating new route
[  104.577673][T11083] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  104.621957][T11038] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  105.397124][T11095] bridge: RTM_NEWNEIGH with invalid ether address
[  105.464488][T11102] mac80211_hwsim hwsim4 ": renamed from wlan0
[  105.522524][T11109] __nla_validate_parse: 19 callbacks suppressed
[  105.522539][T11109] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1739'.
[  105.878592][T11146] netlink: 'syz.1.1751': attribute type 1 has an invalid length.
[  105.883430][T11146] netlink: 'syz.1.1751': attribute type 1 has an invalid length.
[  105.886649][T11146] netlink: 'syz.1.1751': attribute type 1 has an invalid length.
[  105.890649][T11146] netlink: 'syz.1.1751': attribute type 1 has an invalid length.
[  105.893439][T11146] netlink: 'syz.1.1751': attribute type 1 has an invalid length.
[  105.896467][T11146] netlink: 'syz.1.1751': attribute type 1 has an invalid length.
[  105.899533][T11146] netlink: 'syz.1.1751': attribute type 1 has an invalid length.
[  105.902554][T11146] netlink: 'syz.1.1751': attribute type 1 has an invalid length.
[  106.051946][T11157] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  106.056940][T11157] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  106.062095][T11157] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  106.124114][T11159] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1756'.
[  106.252226][T11176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1762'.
[  106.257248][T11176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1762'.
[  106.278310][T11182] syzkaller0: entered promiscuous mode
[  106.280901][T11182] syzkaller0: entered allmulticast mode
[  106.464714][T11197] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1768'.
[  106.468620][T11197] batadv_slave_1: entered promiscuous mode
[  106.473806][T11197] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.886269][T11226] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1777'.
[  106.930410][T11226] validate_nla: 57 callbacks suppressed
[  106.930425][T11226] netlink: 'syz.2.1777': attribute type 13 has an invalid length.
[  106.935731][T11226] netlink: 'syz.2.1777': attribute type 17 has an invalid length.
[  106.938663][T11226] netlink: 'syz.2.1777': attribute type 27 has an invalid length.
[  107.108972][T11250] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  107.144632][T11254] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1786'.
[  107.152232][T11254] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1786'.
[  107.156249][T11254] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1786'.
[  107.206820][T11266] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  107.214673][T11266] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  107.219012][T11266] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  107.249968][T11273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1792'.
[  107.322066][T11280] netlink: 'syz.1.1795': attribute type 1 has an invalid length.
[  107.332196][T11280] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  107.365249][T11286] netlink: 'syz.1.1797': attribute type 7 has an invalid length.
[  107.369136][T11286] netlink: 'syz.1.1797': attribute type 8 has an invalid length.
[  107.632076][T11321] netlink: 'syz.2.1812': attribute type 1 has an invalid length.
[  107.737943][T11336] netlink: 'syz.1.1815': attribute type 7 has an invalid length.
[  108.067627][T11368] bridge22: entered allmulticast mode
[  108.105880][T11373] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  108.110768][T11373] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  108.114543][T11373] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  108.240975][T11382] IPVS: length: 163 != 8
[  108.680975][T11406] bond0: (slave rose0): Error: Device can not be enslaved while up
[  108.789900][T11418] smc: net device bond0 applied user defined pnetid SYZ2
[  108.793817][T11418] smc: removing net device bond0 with user defined pnetid SYZ2
[  108.796584][T11418] bond0 (unregistering): left promiscuous mode
[  108.798531][T11418] bond_slave_0: left promiscuous mode
[  108.802354][T11418] bond_slave_1: left promiscuous mode
[  108.804711][ T6896] smc: removing ib device syz2
[  108.806911][T11418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  108.813884][T11418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  108.817205][T11418] bond0 (unregistering): Released all slaves
[  109.045539][T11428] netlink: 'syz.0.1846': attribute type 10 has an invalid length.
[  109.051784][T11428] netlink: 'syz.0.1846': attribute type 1 has an invalid length.
[  109.115564][T11429] veth7: entered promiscuous mode
[  109.318668][T11443] bond0: entered promiscuous mode
[  109.321990][T11443] bond0: left promiscuous mode
[  109.543266][T11482] syzkaller1: entered promiscuous mode
[  109.545417][T11482] syzkaller1: entered allmulticast mode
[  109.547699][T11482] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  109.654845][T11497] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  110.074566][T11530] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  110.518728][T11580] team0: Port device dummy0 added
[  110.535464][T11585] __nla_validate_parse: 32 callbacks suppressed
[  110.535478][T11585] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1905'.
[  110.632020][T11590] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1907'.
[  110.684987][T11593] 8021q: VLANs not supported on rose0
[  110.691300][T11594] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1909'.
[  110.694890][T11594] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1909'.
[  110.698786][T11594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1909'.
[  111.140507][T11637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1922'.
[  111.203867][T11643] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1924'.
[  111.212635][T11643] : renamed from vlan1
[  111.215114][T11643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1924'.
[  111.251994][T11647] netlink: 1876 bytes leftover after parsing attributes in process `syz.0.1922'.
[  111.315618][T11655] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.318405][T11655] syzkaller0: entered promiscuous mode
[  111.325031][T11655] syzkaller0: entered allmulticast mode
[  111.346357][T11655] tipc: Resetting bearer <eth:syzkaller0>
[  111.349314][T11660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1929'.
[  111.359237][T11654] tipc: Resetting bearer <eth:syzkaller0>
[  111.363643][T11654] tipc: Disabling bearer <eth:syzkaller0>
[  111.583166][ T5843] IPVS: starting estimator thread 0...
[  111.623801][T11698] geneve3: entered promiscuous mode
[  111.625572][T11698] geneve3: entered allmulticast mode
[  111.638459][ T5897] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[  111.647571][ T5897] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[  111.651719][ T5897] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[  111.655302][ T5897] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[  111.691604][T11688] IPVS: using max 133 ests per chain, 319200 per kthread
[  111.765588][ T5876] IPVS: stop unused estimator thread 0...
[  111.795970][T11713] workqueue: Failed to create a rescuer kthread for wq "nfc8_nci_rx_wq": -EINTR
[  111.796621][T11712] workqueue: Failed to create a rescuer kthread for wq "nfc8_nci_cmd_wq": -EINTR
[  111.848200][T11747] dvmrp0: entered allmulticast mode
[  111.994721][T11762] validate_nla: 43 callbacks suppressed
[  111.994736][T11762] netlink: 'syz.2.1957': attribute type 1 has an invalid length.
[  112.016896][T11762] 8021q: adding VLAN 0 to HW filter on device bond9
[  112.034809][T11762] 8021q: adding VLAN 0 to HW filter on device bond9
[  112.037904][T11762] bond9: (slave vcan1): The slave device specified does not support setting the MAC address
[  112.042993][T11762] bond9: (slave vcan1): Error -95 calling set_mac_address
[  112.081774][T11768] gretap1: entered promiscuous mode
[  112.086563][T11768] bond9: (slave gretap1): making interface the new active one
[  112.106167][T11768] bond9: (slave gretap1): Enslaving as an active interface with an up link
[  112.124954][T11762] macvlan1: entered promiscuous mode
[  112.126793][T11762] macvlan1: entered allmulticast mode
[  112.132010][T11762] bond9: entered promiscuous mode
[  112.134881][T11762] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  112.138273][T11762] bond9: (slave macvlan1): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  112.144150][T11762] bond9: left promiscuous mode
[  112.294317][T11795] netlink: 'syz.0.1967': attribute type 25 has an invalid length.
[  112.298371][T11795] netlink: 'syz.0.1967': attribute type 4 has an invalid length.
[  112.305873][T11795] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  112.898424][T11798] netlink: 'syz.2.1968': attribute type 21 has an invalid length.
[  112.902712][T11798] netlink: 'syz.2.1968': attribute type 5 has an invalid length.
[  112.905610][T11798] netlink: 'syz.2.1968': attribute type 6 has an invalid length.
[  112.935399][T11802] syzkaller1: entered promiscuous mode
[  112.937915][T11802] syzkaller1: entered allmulticast mode
[  113.035854][T11809] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  113.175821][T11832] veth1_to_team: entered allmulticast mode
[  113.910086][T11863] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  113.915424][T11863] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  113.920547][T11863] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[  114.188292][T11887] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  114.191899][T11887] IPv6: NLM_F_CREATE should be set when creating new route
[  114.397025][T11898] sctp: [Deprecated]: syz.0.2005 (pid 11898) Use of struct sctp_assoc_value in delayed_ack socket option.
[  114.397025][T11898] Use struct sctp_sack_info instead
[  114.441395][T11915] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  114.958741][T11990] syzkaller0: entered promiscuous mode
[  114.961339][T11990] syzkaller0: entered allmulticast mode
[  114.979027][T11983] ipvlan1: mtu less than device minimum
[  115.973278][T12021] __nla_validate_parse: 82 callbacks suppressed
[  115.973289][T12021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2045'.
[  116.117447][T12039] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2049'.
[  116.123043][T12039] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2049'.
[  116.181587][T12047] netlink: 'syz.1.2052': attribute type 1 has an invalid length.
[  116.185145][T12047] netlink: 'syz.1.2052': attribute type 1 has an invalid length.
[  116.206292][T12049] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2050'.
[  116.982355][T12043] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  117.046117][T12056] netlink: 'syz.1.2055': attribute type 1 has an invalid length.
[  117.063692][T12056] 8021q: adding VLAN 0 to HW filter on device bond2
[  117.095683][T12063] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2057'.
[  117.195755][T12074] netlink: 'syz.2.2062': attribute type 26 has an invalid length.
[  117.224048][T12078] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2064'.
[  117.271890][T12084] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2063'.
[  117.275555][T12076] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2063'.
[  117.282090][T12084] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2063'.
[  117.308605][T12091] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2069'.
[  117.312833][T12091] sctp: [Deprecated]: syz.2.2069 (pid 12091) Use of int in max_burst socket option.
[  117.312833][T12091] Use struct sctp_assoc_value instead
[  117.351302][T12095] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  117.391584][T12095] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  117.432922][T12095] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  117.482534][T12095] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  117.542678][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  117.550363][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  117.561880][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  117.567750][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  117.694193][T12117] syzkaller0: entered promiscuous mode
[  117.696043][T12117] syzkaller0: entered allmulticast mode
[  117.759746][T12121] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  117.895903][T12136] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.246133][T12178] netlink: 'syz.1.2097': attribute type 21 has an invalid length.
[  118.253026][T12178] ipvlan2: entered promiscuous mode
[  118.256146][T12178] bridge0: port 1(ipvlan2) entered blocking state
[  118.258986][T12178] bridge0: port 1(ipvlan2) entered disabled state
[  118.265090][T12178] ipvlan2: entered allmulticast mode
[  118.267367][T12178] gretap0: entered allmulticast mode
[  118.279298][T12178] ipvlan2: left allmulticast mode
[  118.282803][T12178] gretap0: left allmulticast mode
[  118.325624][T12186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  118.328789][T12186] IPv6: NLM_F_CREATE should be set when creating new route
[  118.653552][T12214] netlink: 'syz.1.2113': attribute type 14 has an invalid length.
[  118.667424][T12214] netlink: 'syz.1.2113': attribute type 14 has an invalid length.
[  119.188932][T12301] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  119.196187][T12304] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  119.233118][T12309] erspan0: left allmulticast mode
[  119.236174][T12309] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.239763][T12309] syzkaller0: entered promiscuous mode
[  119.241660][T12309] syzkaller0: entered allmulticast mode
[  119.248013][T12309] tipc: Resetting bearer <eth:syzkaller0>
[  119.253460][T12308] tipc: Resetting bearer <eth:syzkaller0>
[  119.260011][T12308] tipc: Disabling bearer <eth:syzkaller0>
[  119.556073][T12340] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  119.691311][T12358] syzkaller0: entered promiscuous mode
[  119.695886][T12358] syzkaller0: entered allmulticast mode
[  119.786180][T12373] netlink: 'syz.2.2163': attribute type 1 has an invalid length.
[  120.002602][T12387] netlink: 'syz.2.2168': attribute type 1 has an invalid length.
[  120.010808][T12387] 8021q: adding VLAN 0 to HW filter on device bond10
[  120.031651][T12387] 8021q: adding VLAN 0 to HW filter on device bond10
[  120.034332][T12387] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address
[  120.038871][T12387] bond10: (slave vxcan3): Error -95 calling set_mac_address
[  120.353518][T12448] bridge: RTM_NEWNEIGH with invalid ether address
[  120.515122][T12475] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  120.517983][T12475] team0: Device macvtap1 is already an upper device of the team interface
[  120.964367][T12546] workqueue: Failed to create a rescuer kthread for wq "nbd63-recv": -EINTR
[  120.965603][T12546] block (null): Could not allocate knbd recv work queue.
[  120.973123][T12546] nbd: failed to add new device
[  120.983502][T12552] __nla_validate_parse: 33 callbacks suppressed
[  120.983516][T12552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2213'.
[  121.033096][T12558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2216'.
[  121.046598][T12559] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2214'.
[  121.071437][T12561] netlink: 'syz.0.2217': attribute type 1 has an invalid length.
[  121.074152][T12561] netlink: 'syz.0.2217': attribute type 6 has an invalid length.
[  121.076792][T12561] netlink: 'syz.0.2217': attribute type 3 has an invalid length.
[  121.096469][T12564] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2218'.
[  121.153333][T12571] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2220'.
[  121.200386][T12578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2223'.
[  121.204475][T12578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2223'.
[  121.261730][T12591] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2226'.
[  121.265974][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2226'.
[  121.822941][T12554] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  121.865794][T12634] veth1_to_team: left allmulticast mode
[  121.872109][T12634] batadv_slave_1: left promiscuous mode
[  121.875139][T12634] team1: left promiscuous mode
[  121.876778][T12634] team1: left allmulticast mode
[  121.878772][T12634] geneve2: left promiscuous mode
[  121.881112][T12634] ip6gre3: left allmulticast mode
[  121.883203][T12634] bond5: left promiscuous mode
[  121.884997][T12634] xfrm1: left promiscuous mode
[  121.886618][T12634] xfrm1: left allmulticast mode
[  121.890429][T12634] geneve3: left promiscuous mode
[  121.892199][T12634] geneve3: left allmulticast mode
[  121.895608][T12634] gretap1: left promiscuous mode
[  121.898311][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  121.902716][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  121.908574][T12638] syzkaller0: entered promiscuous mode
[  121.912448][T12638] syzkaller0: entered allmulticast mode
[  121.915703][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  121.920415][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  122.034555][T12652] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2249'.
[  122.092541][T12659] validate_nla: 4 callbacks suppressed
[  122.092556][T12659] netlink: 'syz.2.2252': attribute type 4 has an invalid length.
[  122.361674][T12690] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.364600][T12690] syzkaller0: entered promiscuous mode
[  122.366579][T12690] syzkaller0: entered allmulticast mode
[  122.371280][T12689] tipc: Resetting bearer <eth:syzkaller0>
[  122.375093][T12689] tipc: Disabling bearer <eth:syzkaller0>
[  122.456512][T12695] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  122.624544][T12712] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  122.628566][T12712] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  122.632177][T12712] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[  122.805292][T12725] netlink: 'syz.2.2277': attribute type 1 has an invalid length.
[  122.816357][T12725] 8021q: adding VLAN 0 to HW filter on device bond11
[  122.824668][T12725] bond11: (slave gretap2): making interface the new active one
[  122.827674][T12725] bond11: (slave gretap2): Enslaving as an active interface with an up link
[  122.841114][T12648] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  122.858659][T12732] syz.2.2280 uses old SIOCAX25GETINFO
[  123.704374][T12750] netlink: 'syz.2.2286': attribute type 12 has an invalid length.
[  123.707346][T12750] netlink: 'syz.2.2286': attribute type 12 has an invalid length.
[  123.711880][T12751] netlink: 'syz.2.2286': attribute type 12 has an invalid length.
[  124.000488][T12770] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.003074][T12747] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  124.009765][T12769] tipc: Resetting bearer <eth:syzkaller0>
[  124.046046][T12769] tipc: Disabling bearer <eth:syzkaller0>
[  124.066514][T12774] openvswitch: netlink: Geneve opt len 11 is not a multiple of 4.
[  124.232867][   T56] block nbd0: Receive control failed (result -32)
[  124.314028][T12802] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.316770][T12802] syzkaller0: entered promiscuous mode
[  124.318650][T12802] syzkaller0: entered allmulticast mode
[  124.323052][T12801] tipc: Resetting bearer <eth:syzkaller0>
[  124.327408][T12801] tipc: Disabling bearer <eth:syzkaller0>
[  124.460116][T12811] nbd1: detected capacity change from 0 to 127
[  124.463643][   T55] block nbd1: Receive control failed (result -104)
[  124.463652][T11744] block nbd1: Send control failed (result -32)
[  124.463668][T11744] block nbd1: Request send failed, requeueing
[  124.472146][   T25] block nbd1: Dead connection, failed to find a fallback
[  124.475317][T11744] block nbd1: Dead connection, failed to find a fallback
[  124.680899][T12856] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  124.857104][T12886] delete_channel: no stack
[  124.862734][T12890] @: renamed from veth0_vlan
[  124.974488][T12914] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  124.980195][T12914] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  124.984469][T12914] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[  124.987703][T12894] netlink: 'syz.1.2335': attribute type 13 has an invalid length.
[  124.992146][T12894] netlink: 'syz.1.2335': attribute type 17 has an invalid length.
[  125.024291][T12894] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.027826][T12894] 8021q: adding VLAN 0 to HW filter on device team0
[  125.097064][T12894] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  125.163691][T12929] netlink: 'syz.1.2347': attribute type 10 has an invalid length.
[  125.175397][T12929] 8021q: adding VLAN 0 to HW filter on device batadv0
[  125.181039][T12929] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  125.193570][T12929] netlink: 'syz.1.2347': attribute type 10 has an invalid length.
[  125.198061][T12929] batadv0: entered promiscuous mode
[  125.200448][T12929] batadv0: entered allmulticast mode
[  125.205767][T12929] bond0: (slave batadv0): Releasing backup interface
[  125.213084][T12929] bridge0: port 1(batadv0) entered blocking state
[  125.215275][T12929] bridge0: port 1(batadv0) entered disabled state
[  125.260001][ T5857] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  125.263429][ T5857] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  125.270836][T12948] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  125.350759][T12966] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  125.354915][T12966] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  125.358694][T12966] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  125.655720][T13016] veth0_to_bridge: entered promiscuous mode
[  125.661431][T13015] veth0_to_bridge: left promiscuous mode
[  125.753910][T13040] syzkaller0: entered promiscuous mode
[  125.755986][T13040] syzkaller0: entered allmulticast mode
[  125.775659][T13044] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  125.780219][T13044] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  125.783885][T13044] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[  125.861716][T13049] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.867025][T13049] syzkaller0: entered promiscuous mode
[  125.869299][T13049] syzkaller0: entered allmulticast mode
[  125.925408][T13049] tipc: Resetting bearer <eth:syzkaller0>
[  125.933337][T13048] tipc: Resetting bearer <eth:syzkaller0>
[  125.936420][T13048] tipc: Disabling bearer <eth:syzkaller0>
[  131.779587][   T25] block nbd1: shutting down sockets
[  131.781885][   T25] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  131.785668][   T25] Buffer I/O error on dev nbd1, logical block 1, async page read
[  131.789086][T11744] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  131.793193][T11744] Buffer I/O error on dev nbd1, logical block 2, async page read
[  131.796527][T11744] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  131.800463][T11744] Buffer I/O error on dev nbd1, logical block 3, async page read
[  141.037088][T13092] __nla_validate_parse: 35 callbacks suppressed
[  141.037098][T13092] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2408'.
[  141.047187][T13092] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2408'.
[  141.050393][T13092] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2408'.
[  141.129490][T13100] netlink: 'syz.0.2410': attribute type 4 has an invalid length.
[  141.243589][T13106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2411'.
[  141.332777][T13113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2416'.
[  141.336521][T13113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2416'.
[  141.508750][T13154] netlink: 'syz.2.2429': attribute type 3 has an invalid length.
[  141.614092][T13161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2432'.
[  141.653195][T13170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2434'.
[  141.771404][T13184] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  141.776755][T13184] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  141.781295][T13184] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[  141.956509][   T33] audit: type=1804 audit(1756124170.093:4): pid=13205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2446" name="/newroot/877/cgroup.controllers" dev="tmpfs" ino=4484 res=1 errno=0
[  141.968310][   T33] audit: type=1800 audit(1756124170.103:5): pid=13205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2446" name="cgroup.controllers" dev="tmpfs" ino=4484 res=0 errno=0
[  142.054682][T13217] netlink: 'syz.2.2451': attribute type 10 has an invalid length.
[  142.058492][T13217] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2451'.
[  142.064070][T13217] batadv_slave_1: entered promiscuous mode
[  142.067342][T13217] batman_adv: batadv0: Interface activated: batadv_slave_1
[  142.071761][T13217] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  142.075284][T13217] batman_adv: batadv0: Removing interface: batadv_slave_1
[  142.091763][T13226] Bluetooth: MGMT ver 1.23
[  142.201929][T13237] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2456'.
[  142.204770][T13237] netlink: 'syz.1.2456': attribute type 7 has an invalid length.
[  142.207342][T13237] netlink: 'syz.1.2456': attribute type 8 has an invalid length.
[  142.520684][T13285] delete_channel: no stack
[  143.386034][T13316] netlink: 'syz.2.2483': attribute type 4 has an invalid length.
[  143.466750][T13323] syzkaller1: entered promiscuous mode
[  143.468788][T13323] syzkaller1: entered allmulticast mode
[  143.670961][T13349] netlink: 'syz.0.2492': attribute type 4 has an invalid length.
[  144.110608][T13392] netlink: 'syz.1.2509': attribute type 16 has an invalid length.
[  144.829846][T13436] netlink: 'syz.2.2522': attribute type 7 has an invalid length.
[  144.960881][T13446] openvswitch: netlink: Flow actions attr not present in new flow.
[  145.171429][T13462] netlink: 'syz.1.2530': attribute type 12 has an invalid length.
[  145.322735][T13479] syzkaller1: entered promiscuous mode
[  145.325279][T13479] syzkaller1: entered allmulticast mode
[  145.407479][T13482] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  145.412192][T13482] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  145.417143][T13482] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  145.565695][T13493] openvswitch: netlink: Flow key attr not present in new flow.
[  145.928291][T13531] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  146.075573][T13552] openvswitch: netlink: IPv4 tun info is not correct
[  146.140000][T13561] __nla_validate_parse: 19 callbacks suppressed
[  146.140010][T13561] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2563'.
[  146.409321][T13588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2572'.
[  146.492314][T13503] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  146.596135][T13597] netlink: 'syz.1.2575': attribute type 1 has an invalid length.
[  146.601663][T13597] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2575'.
[  146.604892][T13597] netlink: 'syz.1.2575': attribute type 1 has an invalid length.
[  146.608803][T13599] netlink: 'syz.1.2575': attribute type 1 has an invalid length.
[  146.613163][T13599] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2575'.
[  146.616564][T13599] netlink: 'syz.1.2575': attribute type 1 has an invalid length.
[  146.643454][T13601] netlink: 'syz.1.2576': attribute type 1 has an invalid length.
[  146.646969][T13601] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2576'.
[  146.757972][T13609] 8021q: adding VLAN 0 to HW filter on device bond3
[  146.764091][T13609] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  146.767154][T13609] bond3: (slave macvlan5): Enslaving as a backup interface with a down link
[  146.773389][T13609] bridge0: port 1(batadv0) entered disabled state
[  146.776295][T13609] veth0_to_bond: left allmulticast mode
[  146.778298][T13609] veth0_to_bond: left promiscuous mode
[  146.780853][T13609] bridge18: port 2(veth0_to_bond) entered disabled state
[  146.786661][T13609] veth9: left allmulticast mode
[  146.788654][T13609] veth9: left promiscuous mode
[  146.790699][T13609] bridge18: port 1(veth9) entered disabled state
[  146.794514][T13609] vlan2: left promiscuous mode
[  146.796367][T13609] veth1: left promiscuous mode
[  146.798179][T13609] bridge18: port 3(vlan2) entered disabled state
[  146.804425][T13609] bond3: (slave macvlan5): Releasing backup interface
[  146.845853][T13616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2580'.
[  146.933957][T13623] syzkaller0: entered promiscuous mode
[  146.936027][T13623] syzkaller0: entered allmulticast mode
[  147.144400][T13639] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2588'.
[  147.252078][T13649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2592'.
[  147.257523][T13659] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  147.263480][T13659] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  147.268123][T13659] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[  147.370530][T13666] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.381354][T13666] syzkaller0: entered promiscuous mode
[  147.383376][T13666] syzkaller0: entered allmulticast mode
[  147.410775][T13666] tipc: Resetting bearer <eth:syzkaller0>
[  147.413399][T13672] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  147.418933][T13665] tipc: Resetting bearer <eth:syzkaller0>
[  147.425117][T13665] tipc: Disabling bearer <eth:syzkaller0>
[  147.428594][T13672] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  147.491818][T13682] bond0: Device is already in use.
[  147.716547][T13700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2609'.
[  147.729247][T13700] sit2: entered promiscuous mode
[  147.836231][T13709] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2610'.
[  147.839328][T13709] NCSI netlink: No device for ifindex 0
[  148.984053][T13780] netlink: 'syz.1.2639': attribute type 4 has an invalid length.
[  149.018726][T13782] openvswitch: netlink: Flow key attr not present in new flow.
[  149.142003][T13792] IPVS: length: 148 != 24
[  149.145069][T13792] IPVS: length: 148 != 24
[  149.147014][T13792] IPVS: length: 148 != 24
[  149.150341][T13792] IPVS: length: 148 != 24
[  149.160282][T13792] IPVS: length: 148 != 24
[  149.170072][T13792] IPVS: length: 148 != 24
[  149.171961][T13792] IPVS: length: 148 != 24
[  149.173773][T13792] IPVS: length: 148 != 24
[  149.184625][T13792] IPVS: length: 148 != 24
[  149.186626][T13792] IPVS: length: 148 != 24
[  149.188523][T13792] IPVS: length: 148 != 24
[  149.191230][T13792] IPVS: length: 148 != 24
[  149.193478][T13792] IPVS: length: 148 != 24
[  149.195401][T13792] IPVS: length: 148 != 24
[  149.197439][T13792] IPVS: length: 148 != 24
[  149.201056][T13792] IPVS: length: 148 != 24
[  149.203072][T13792] IPVS: length: 148 != 24
[  149.205060][T13792] IPVS: length: 148 != 24
[  149.207120][T13792] IPVS: length: 148 != 24
[  149.209145][T13792] IPVS: length: 148 != 24
[  149.212519][T13792] IPVS: length: 148 != 24
[  149.214779][T13792] IPVS: length: 148 != 24
[  149.216787][T13792] IPVS: length: 148 != 24
[  149.219167][T13792] IPVS: length: 148 != 24
[  149.222129][T13792] IPVS: length: 148 != 24
[  149.224388][T13792] IPVS: length: 148 != 24
[  149.226784][T13792] IPVS: length: 148 != 24
[  149.228930][T13792] IPVS: length: 148 != 24
[  149.231559][T13792] IPVS: length: 148 != 24
[  149.234169][T13792] IPVS: length: 148 != 24
[  149.239932][T13792] IPVS: length: 148 != 24
[  149.242204][T13792] IPVS: length: 148 != 24
[  149.249692][T13792] IPVS: length: 148 != 24
[  149.481633][T13840] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.484167][T13840] syzkaller0: entered promiscuous mode
[  149.486018][T13840] syzkaller0: entered allmulticast mode
[  149.491313][T13840] tipc: Resetting bearer <eth:syzkaller0>
[  149.494256][T13838] tipc: Resetting bearer <eth:syzkaller0>
[  149.496928][T13838] tipc: Disabling bearer <eth:syzkaller0>
[  149.581480][T13858] bond0 (unregistering): Released all slaves
[  149.611962][T13858] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.616791][T13858] syzkaller0: entered promiscuous mode
[  149.618679][T13858] syzkaller0: entered allmulticast mode
[  149.624130][T13858] tipc: Resetting bearer <eth:syzkaller0>
[  149.632984][T13857] tipc: Resetting bearer <eth:syzkaller0>
[  149.636183][T13857] tipc: Disabling bearer <eth:syzkaller0>
[  149.715782][T13866] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.729053][T13866] syzkaller0: entered promiscuous mode
[  149.732468][T13866] syzkaller0: entered allmulticast mode
[  149.737792][T13866] tipc: Resetting bearer <eth:syzkaller0>
[  149.741276][T13865] tipc: Resetting bearer <eth:syzkaller0>
[  149.762618][T13865] tipc: Disabling bearer <eth:syzkaller0>
[  149.863837][T13882] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  149.954346][T13896] openvswitch: netlink: Tunnel attr 14 has unexpected len 4 expected 0
[  150.012826][T13899] netlink: 'syz.0.2687': attribute type 1 has an invalid length.
[  150.015759][T13899] netlink: 'syz.0.2687': attribute type 2 has an invalid length.
[  150.020785][T13900] netlink: 'syz.1.2686': attribute type 1 has an invalid length.
[  150.043910][T13900] 8021q: adding VLAN 0 to HW filter on device bond4
[  150.047254][T13900] bond0: (slave bond4): making interface the new active one
[  150.051641][T13900] bond0: (slave bond4): Enslaving as an active interface with an up link
[  150.054172][T13908] netlink: 'syz.0.2689': attribute type 10 has an invalid length.
[  150.059062][T13900] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  150.063891][T13900] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  150.773090][T13988] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  150.999098][T14008] bond12: (slave bridge41): making interface the new active one
[  151.003475][T14008] bond12: (slave bridge41): Enslaving as an active interface with an up link
[  151.074278][T14027] batadv2: entered promiscuous mode
[  151.076459][T14027] batadv2: entered allmulticast mode
[  151.211589][T14027] __nla_validate_parse: 27 callbacks suppressed
[  151.211606][T14027] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2727'.
[  151.277911][T14043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2734'.
[  151.360360][T14053] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2738'.
[  151.385412][T14060] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2740'.
[  151.493088][T14075] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2746'.
[  151.496321][T14075] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2746'.
[  151.516085][T14077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2747'.
[  151.519950][T14077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2747'.
[  151.528713][T14080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2748'.
[  151.586441][T14084] pim6reg1: entered allmulticast mode
[  151.723303][T14096] bridge42: entered promiscuous mode
[  151.725304][T14096] bridge42: entered allmulticast mode
[  151.755045][T14102] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2758'.
[  151.835324][T14118] netlink: get zone limit has 8 unknown bytes
[  151.900575][T14123] syzkaller1: entered promiscuous mode
[  151.903096][T14123] syzkaller1: entered allmulticast mode
[  152.027760][T14133] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  152.034234][T14133] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  152.038986][T14133] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[  152.155051][T14149] validate_nla: 4 callbacks suppressed
[  152.155066][T14149] netlink: 'syz.2.2777': attribute type 12 has an invalid length.
[  152.210000][T14160] delete_channel: no stack
[  152.221919][T14162] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  152.227857][T14162] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  152.233515][T14162] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[  152.242861][T14164] unknown channel width for channel at 909000KHz?
[  152.245714][T14164] unknown channel width for channel at 909000KHz?
[  152.248562][T14164] unknown channel width for channel at 909000KHz?
[  152.525608][T14203] netlink: 'syz.0.2799': attribute type 3 has an invalid length.
[  152.577608][T14214] netlink: 'syz.2.2802': attribute type 21 has an invalid length.
[  152.649084][T14214] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.653145][T14214] syzkaller0: entered promiscuous mode
[  152.655480][T14214] syzkaller0: entered allmulticast mode
[  152.662354][T14214] tipc: Resetting bearer <eth:syzkaller0>
[  152.665586][T14210] tipc: Resetting bearer <eth:syzkaller0>
[  152.668995][T14210] tipc: Disabling bearer <eth:syzkaller0>
[  152.984897][T14263] openvswitch: netlink: Message has 4 unknown bytes.
[  152.987631][T14263] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  153.184913][T14297] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  153.189083][T14297] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  153.196640][T14297] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[  153.355209][T14318] netlink: 'syz.1.2841': attribute type 62 has an invalid length.
[  153.401183][T14323] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  153.404160][T14323] IPv6: NLM_F_CREATE should be set when creating new route
[  153.536439][T14339] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  153.548210][T14339] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  153.703113][T14359] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  153.708353][T14359] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  153.713258][T14359] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[  153.834376][T14363] netlink: 'syz.2.2859': attribute type 1 has an invalid length.
[  153.837617][T14363] netlink: 'syz.2.2859': attribute type 4 has an invalid length.
[  153.888807][T14367] netlink: 'syz.2.2861': attribute type 10 has an invalid length.
[  153.986885][T14372] sctp: [Deprecated]: syz.2.2863 (pid 14372) Use of int in max_burst socket option.
[  153.986885][T14372] Use struct sctp_assoc_value instead
[  154.001849][T14372] netlink: 'syz.2.2863': attribute type 1 has an invalid length.
[  154.208595][T14383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  154.212499][T14383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  154.216601][T14383] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  154.221485][T14383] bond0 (unregistering): Released all slaves
[  154.443774][T14405] netlink: 'syz.0.2874': attribute type 1 has an invalid length.
[  154.447142][T14405] netlink: 'syz.0.2874': attribute type 1 has an invalid length.
[  154.470885][T14410] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.476868][T14410] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  154.481072][T14410] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  154.486276][T14410] tipc: Resetting bearer <eth:syzkaller0>
[  154.593149][T14426] IPv6: Can't replace route, no match found
[  154.682858][T14435] 8021q: adding VLAN 0 to HW filter on device team0
[  154.694589][T14435] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  154.820769][   T25] block nbd1: Possible stuck request ffff888022b38000: control (read@0,1024B). Runtime 30 seconds
[  155.025852][T14464] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  155.364088][T14491] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.368120][T14491] syzkaller0: entered promiscuous mode
[  155.370232][T14491] syzkaller0: entered allmulticast mode
[  155.380961][T14491] tipc: Resetting bearer <eth:syzkaller0>
[  155.384411][T14490] tipc: Resetting bearer <eth:syzkaller0>
[  155.393014][T14490] tipc: Disabling bearer <eth:syzkaller0>
[  155.447789][T14499] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  155.599546][ T1841] tipc: Node number set to 1932056729
[  155.676126][T14521] geneve4: entered promiscuous mode
[  155.681817][T14527] pimreg: entered allmulticast mode
[  156.625712][T14555] __nla_validate_parse: 39 callbacks suppressed
[  156.625727][T14555] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2918'.
[  156.728755][T14564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2922'.
[  156.773457][T14572] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2924'.
[  156.817236][T14580] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  156.906693][T14589] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.2930'.
[  157.550250][T14611] lo speed is unknown, defaulting to 1000
[  157.552779][T14611] lo speed is unknown, defaulting to 1000
[  157.554963][T14611] lo speed is unknown, defaulting to 1000
[  157.561282][T14611] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  157.570057][T14611] lo speed is unknown, defaulting to 1000
[  157.572546][T14611] lo speed is unknown, defaulting to 1000
[  157.575009][T14611] lo speed is unknown, defaulting to 1000
[  157.696171][T14620] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.2941'.
[  157.753026][T14624] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  157.775150][T14624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2943'.
[  157.827398][T14633] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2946'.
[  157.853580][T14638] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.2948'.
[  157.920695][T14643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2950'.
[  158.034944][T14659] validate_nla: 7 callbacks suppressed
[  158.034955][T14659] netlink: 'syz.2.2958': attribute type 46 has an invalid length.
[  158.039860][T14659] netlink: 'syz.2.2958': attribute type 46 has an invalid length.
[  158.042777][T14659] netlink: 'syz.2.2958': attribute type 46 has an invalid length.
[  158.043143][T14660] netlink: 'syz.2.2958': attribute type 30 has an invalid length.
[  158.045647][T14659] netlink: 'syz.2.2958': attribute type 46 has an invalid length.
[  158.052160][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  158.056044][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  158.063111][T14660] netlink: 'syz.2.2958': attribute type 30 has an invalid length.
[  158.063357][T14659] netlink: 'syz.2.2958': attribute type 46 has an invalid length.
[  158.072732][T14659] netlink: 'syz.2.2958': attribute type 46 has an invalid length.
[  158.075475][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  158.079639][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  158.083808][T14660] netlink: 'syz.2.2958': attribute type 30 has an invalid length.
[  158.086708][T14659] netlink: 'syz.2.2958': attribute type 46 has an invalid length.
[  158.090780][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  158.095395][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  158.102519][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  158.107204][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  158.111399][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  158.114426][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  158.124660][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  158.129489][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  158.133362][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  158.138201][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  158.143108][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  158.146175][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  158.152220][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  158.155226][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  158.161508][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  158.164747][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  158.169786][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  158.173096][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  158.181255][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  158.184740][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  158.190586][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  158.193773][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  158.197408][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  158.201363][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  158.204794][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  158.207868][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  158.213189][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  158.217113][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  158.222959][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  158.227322][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  158.231930][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  158.235463][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  158.239990][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  158.243367][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  158.246708][T14671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2962'.
[  158.250238][T14671] (unnamed net_device) (uninitialized): option coupled_control: invalid value (18)
[  158.253645][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  158.256646][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  158.268676][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  158.272833][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  158.277719][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  158.281424][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  158.285059][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  158.288245][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  158.293962][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  158.297118][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  158.301448][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  158.305335][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  158.310027][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  158.314145][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  158.319089][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  158.322829][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  158.327081][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  158.330686][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  158.334903][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  158.338590][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  158.348172][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  158.352574][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  158.357115][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  158.363239][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  158.367361][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  158.370846][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  158.374529][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  158.377710][T14660] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  158.836547][T14693] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.167008][T14760] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.170260][T14760] syzkaller0: entered promiscuous mode
[  160.172231][T14760] syzkaller0: entered allmulticast mode
[  160.177799][T14760] tipc: Resetting bearer <eth:syzkaller0>
[  160.181063][T14759] tipc: Resetting bearer <eth:syzkaller0>
[  160.185406][T14759] tipc: Disabling bearer <eth:syzkaller0>
[  175.612307][T14778] __nla_validate_parse: 8 callbacks suppressed
[  175.612317][T14778] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3002'.
[  175.617697][T14778] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3002'.
[  175.680724][T14788] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3006'.
[  175.698358][T14795] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  175.780593][T14805] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  175.828750][T14814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3014'.
[  175.834161][T14814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3014'.
[  175.930795][T14835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3019'.
[  184.900841][   T25] block nbd1: Possible stuck request ffff888022b38000: control (read@0,1024B). Runtime 60 seconds
[  186.193219][ T5291] udevd[5291]: worker [11744] /devices/virtual/block/nbd1 is taking a long time
[  190.546909][T14841] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3022'.
[  190.624900][T14857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3026'.
[  190.638806][ T5876] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  190.642746][ T5876] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  190.665040][ T5876] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  190.668338][ T5876] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  190.831543][T14886] sctp: [Deprecated]: syz.2.3035 (pid 14886) Use of struct sctp_assoc_value in delayed_ack socket option.
[  190.831543][T14886] Use struct sctp_sack_info instead
[  190.901296][T14898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3040'.
[  190.969323][T14908] lo speed is unknown, defaulting to 1000
[  190.996368][T14913] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  191.000615][T14914] validate_nla: 58 callbacks suppressed
[  191.000623][T14914] netlink: 'syz.0.3045': attribute type 1 has an invalid length.
[  191.007919][T14914] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  191.198805][T14947] lo speed is unknown, defaulting to 1000
[  191.358939][T14966] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3066'.
[  191.418380][T14988] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  191.421262][T14988] tipc: Enabled bearer <udp:syz2>, priority 10
[  191.423854][T14989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3075'.
[  191.442850][T14989] netlink: 'syz.0.3075': attribute type 10 has an invalid length.
[  191.549601][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  191.552030][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  191.593177][T15021] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3087'.
[  191.624074][T15028] netlink: 'syz.2.3089': attribute type 12 has an invalid length.
[  191.728972][T15046] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  191.772852][T15046] netlink: 'syz.1.3097': attribute type 3 has an invalid length.
[  191.776887][T15046] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3097'.
[  191.781590][T15046] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3097'.
[  191.785185][T15046] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3097'.
[  191.819592][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  191.822007][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  191.974362][T15080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3107'.
[  192.056359][    C0] vcan0: j1939_tp_txtimer: 0xffff88810fa20800: tx aborted with unknown reason: -2
[  192.060156][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88810fa22400: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250)
[  192.066149][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88810fa20800: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250)
[  192.349600][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  192.352463][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  192.510593][T15160] lo speed is unknown, defaulting to 1000
[  192.598566][T15173] netlink: 'syz.1.3130': attribute type 10 has an invalid length.
[  192.623718][T15175] team0: Device gtp0 is of different type
[  192.677937][T15178] team0: Device gtp0 is of different type
[  192.834432][T15185] sctp: [Deprecated]: syz.0.3136 (pid 15185) Use of struct sctp_assoc_value in delayed_ack socket option.
[  192.834432][T15185] Use struct sctp_sack_info instead
[  192.852703][T15185] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  193.379496][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  193.381998][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  193.387702][T15222] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  193.397347][T15222] syzkaller0: entered promiscuous mode
[  193.404004][T15222] syzkaller0: entered allmulticast mode
[  193.410900][T15222] tipc: Resetting bearer <eth:syzkaller0>
[  193.420634][T15225] netlink: 'syz.2.3152': attribute type 1 has an invalid length.
[  193.423529][T15225] netlink: 'syz.2.3152': attribute type 11 has an invalid length.
[  193.428014][T15219] tipc: Resetting bearer <eth:syzkaller0>
[  193.431515][T15219] tipc: Disabling bearer <eth:syzkaller0>
[  193.483522][T15229] lo speed is unknown, defaulting to 1000
[  193.703188][T15256] bond0: Error: Cannot enslave bond to itself.
[  194.419522][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  195.089630][T15386] netlink: 'syz.2.3198': attribute type 4 has an invalid length.
[  195.219351][T15403] atomic_op ffff88811ae38198 conn xmit_atomic 0000000000000000
[  195.258055][T15407] C: renamed from lo (while UP)
[  195.311743][T15415] netlink: 'syz.1.3208': attribute type 10 has an invalid length.
[  195.339145][T15420] netlink: 'syz.0.3210': attribute type 1 has an invalid length.
[  195.551738][T15450] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  195.680457][T15468] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  195.828739][T15476] lo speed is unknown, defaulting to 1000
[  195.871983][T15490] __nla_validate_parse: 22 callbacks suppressed
[  195.871995][T15490] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3231'.
[  195.909986][T15493] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.3232'.
[  195.915223][T15493] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.3232'.
[  195.928535][T15496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3234'.
[  196.054961][T15509] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3238'.
[  196.070848][T15507] lo speed is unknown, defaulting to 1000
[  196.204037][T15526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3242'.
[  196.223369][T15528] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3243'.
[  196.266098][T15535] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3246'.
[  196.268991][T15535] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3246'.
[  196.317816][T15542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3249'.
[  196.499530][    C1] net_ratelimit: 5 callbacks suppressed
[  196.499540][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  196.503822][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  196.514737][T15574] validate_nla: 3 callbacks suppressed
[  196.514750][T15574] netlink: 'syz.0.3264': attribute type 64 has an invalid length.
[  196.594935][T15584] netlink: 'syz.1.3268': attribute type 13 has an invalid length.
[  196.598383][T15584] netlink: 'syz.1.3268': attribute type 17 has an invalid length.
[  196.598425][T15582] lo speed is unknown, defaulting to 1000
[  196.613247][T15584] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  196.768688][T15605] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  196.793776][T15611] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  196.865670][T15627] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.878224][T15631] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  196.888299][T15626] tipc: Disabling bearer <eth:syzkaller0>
[  196.931978][T15643] lo speed is unknown, defaulting to 1000
[  197.162721][T15670] delete_channel: no stack
[  197.186700][T15672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  197.283941][T15680] vlan1: entered allmulticast mode
[  197.539551][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  197.542523][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  197.677577][T15708] netem: incorrect gi model size
[  197.679546][T15708] netem: change failed
[  197.779051][T15713] netlink: 'syz.1.3317': attribute type 29 has an invalid length.
[  197.783323][T15714] netlink: 'syz.1.3317': attribute type 29 has an invalid length.
[  197.786010][T15714] netlink: 'syz.1.3317': attribute type 29 has an invalid length.
[  197.788675][T15714] netlink: 'syz.1.3317': attribute type 29 has an invalid length.
[  197.792323][T15714] netlink: 'syz.1.3317': attribute type 29 has an invalid length.
[  197.795064][T15714] netlink: 'syz.1.3317': attribute type 29 has an invalid length.
[  197.798187][T15714] netlink: 'syz.1.3317': attribute type 29 has an invalid length.
[  198.012750][T15733] bridge44: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  198.156896][T15760] tap0: tun_chr_ioctl cmd 1074025675
[  198.160089][T15760] tap0: persist disabled
[  198.171684][T15760] bridge45: entered allmulticast mode
[  198.579606][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  198.582593][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  198.735562][T15866] lo speed is unknown, defaulting to 1000
[  199.103102][T15888] syzkaller0: entered promiscuous mode
[  199.108509][T15888] syzkaller0: entered allmulticast mode
[  199.426333][T15915] lo speed is unknown, defaulting to 1000
[  199.619520][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  199.622276][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  199.719740][T15951] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  200.077622][T15983] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  200.659623][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  201.020565][T16040] __nla_validate_parse: 28 callbacks suppressed
[  201.020580][T16040] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3437'.
[  201.200914][T16073] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  201.246257][T16085] sch_tbf: burst 3298 is lower than device lo mtu (11337746) !
[  201.377190][T16096] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3452'.
[  201.437482][T16101] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  201.478431][T16104] lo speed is unknown, defaulting to 1000
[  201.601405][T16110] validate_nla: 55 callbacks suppressed
[  201.601419][T16110] netlink: 'syz.0.3458': attribute type 1 has an invalid length.
[  201.637745][T16110] smc: adding net device bond0 with user defined pnetid SYZ2
[  201.641932][T16110] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.669524][T16110] bond0: (slave bridge36): making interface the new active one
[  201.672898][T16110] bond0: (slave bridge36): Enslaving as an active interface with an up link
[  201.685986][T16112] bond0: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  201.699566][    C1] net_ratelimit: 2 callbacks suppressed
[  201.699581][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  201.704260][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  201.868613][T16127] netlink: 'syz.0.3464': attribute type 1 has an invalid length.
[  201.881273][T16127] 8021q: adding VLAN 0 to HW filter on device bond4
[  201.897872][T16127] bond4: (slave veth11): Enslaving as an active interface with a down link
[  201.901655][T16127] erspan0: entered allmulticast mode
[  201.904930][T16127] bond3: (slave erspan0): Releasing active interface
[  201.910561][T16127] bond4: (slave erspan0): making interface the new active one
[  201.913911][T16127] erspan0: entered promiscuous mode
[  201.915939][T16127] bond4: (slave erspan0): Enslaving as an active interface with an up link
[  202.128048][T16141] bridge46: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  202.132553][T16141] bridge46: entered promiscuous mode
[  202.134411][T16141] bridge46: entered allmulticast mode
[  202.175828][ T5857] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  202.178812][ T5857] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  202.190393][ T5857] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  202.193163][ T5857] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  202.231133][T16158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3474'.
[  202.234558][T16158] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3474'.
[  202.305902][T16167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3478'.
[  202.512168][T16173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3481'.
[  202.516457][T16173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3481'.
[  202.525694][T16173] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3481'.
[  202.721550][T16189] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  202.739631][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  202.742721][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  202.767299][T16195] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  202.803175][T16195] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  202.851452][T16195] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  202.858506][T16203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3494'.
[  202.894478][T16207] vlan1: entered promiscuous mode
[  202.922605][T16195] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  202.982565][ T5857] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  202.993555][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  203.003034][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  203.011732][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  203.046296][T16214] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3497'.
[  203.050251][T16214] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  203.779584][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  203.782671][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  203.853318][T16264] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  203.856471][T16264] IPv6: NLM_F_CREATE should be set when creating new route
[  203.859663][T16264] IPv6: NLM_F_CREATE should be set when creating new route
[  204.112718][T16283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  204.115790][T16283] IPv6: NLM_F_CREATE should be set when creating new route
[  204.118814][T16283] IPv6: NLM_F_CREATE should be set when creating new route
[  204.819529][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  204.821939][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  204.902483][T16378] geneve4: entered promiscuous mode
[  204.904967][ T5857] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  204.908643][ T5857] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  204.914124][ T5857] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  204.917680][ T5857] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  204.947549][T16382] sock: sock_timestamping_bind_phc: sock not bind to device
[  205.205673][T16409] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  205.208225][T16409] IPv6: NLM_F_CREATE should be set when creating new route
[  205.210782][T16409] IPv6: NLM_F_CREATE should be set when creating new route
[  205.292995][T16419] netlink: 'syz.0.3574': attribute type 2 has an invalid length.
[  205.302444][T16419] : entered promiscuous mode
[  205.333436][T16435] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  205.345327][T16435] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  205.349607][T16435] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  205.520790][T16472] netlink: 'syz.2.3591': attribute type 1 has an invalid length.
[  205.523614][T16472] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  205.527804][T16472] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  205.556494][T16472] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  205.561523][T16472] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  205.570349][T16472] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) !
[  205.839261][T16500] batadv0: left allmulticast mode
[  205.843389][T16500] batadv_slave_0: left promiscuous mode
[  205.859549][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  205.864412][T16500] vlan2: left allmulticast mode
[  205.866091][T16500] veth1: left allmulticast mode
[  205.874283][T16500] bridge22: left allmulticast mode
[  205.913172][T16500] bridge42: left promiscuous mode
[  205.915278][T16500] bridge42: left allmulticast mode
[  205.924150][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  205.927542][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  205.931620][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  205.934948][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  206.237713][T16529] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  206.240853][T16529] IPv6: NLM_F_CREATE should be set when creating new route
[  206.243890][T16529] IPv6: NLM_F_CREATE should be set when creating new route
[  206.290565][T16533] __nla_validate_parse: 19 callbacks suppressed
[  206.290582][T16533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3614'.
[  206.297657][T16533] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3614'.
[  206.331502][T16538] netlink: 'syz.0.3617': attribute type 1 has an invalid length.
[  206.354245][T16538] 8021q: adding VLAN 0 to HW filter on device bond5
[  206.358343][T16538] bond5: (slave wlan0): Opening slave failed
[  206.367744][T16538] vlan2: entered allmulticast mode
[  206.369955][T16538] veth1: entered allmulticast mode
[  206.375274][T16541] vlan2: entered allmulticast mode
[  206.379108][T16539] lo speed is unknown, defaulting to 1000
[  206.426123][T16548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3618'.
[  206.755179][T16589] netlink: 'syz.1.3632': attribute type 1 has an invalid length.
[  206.794206][T16597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3636'.
[  206.799752][T16597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3636'.
[  206.807011][T16597] pim6reg: entered allmulticast mode
[  206.810465][T16597] pim6reg: left allmulticast mode
[  206.899635][    C1] net_ratelimit: 1 callbacks suppressed
[  206.899652][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  206.905002][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  207.149254][T16616] wg1 speed is unknown, defaulting to 1000
[  207.152080][T16616] wg1 speed is unknown, defaulting to 1000
[  207.154914][T16616] wg1 speed is unknown, defaulting to 1000
[  207.161940][T16616] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  207.173533][T16616] wg1 speed is unknown, defaulting to 1000
[  207.179803][T16616] wg1 speed is unknown, defaulting to 1000
[  207.183177][T16616] wg1 speed is unknown, defaulting to 1000
[  207.192569][T16616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3644'.
[  207.235955][T16626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3648'.
[  207.240004][T16626] netlink: 'syz.2.3648': attribute type 2 has an invalid length.
[  207.331590][T16636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3653'.
[  207.335239][T16636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3653'.
[  207.338689][T16636] netlink: 'syz.1.3653': attribute type 1 has an invalid length.
[  207.353971][T16636] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3653'.
[  207.380146][T16636] nbd: socks must be embedded in a SOCK_ITEM attr
[  207.383125][T16636] block nbd2: shutting down sockets
[  207.410028][T16639] netlink: 'syz.1.3653': attribute type 1 has an invalid length.
[  207.431562][T16651] lo speed is unknown, defaulting to 1000
[  207.434284][T16651] wg1 speed is unknown, defaulting to 1000
[  207.449681][T16639] nbd: socks must be embedded in a SOCK_ITEM attr
[  207.452574][T16639] block nbd2: shutting down sockets
[  207.498456][T16660] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  207.504190][T16661] syzkaller0: entered promiscuous mode
[  207.506307][T16661] syzkaller0: entered allmulticast mode
[  207.514220][T16660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.520753][T16660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.539363][T16660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.550033][T16663] tipc: Resetting bearer <eth:syzkaller0>
[  207.553328][T16660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.564136][T16660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.578485][T16660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.582550][T16660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.586091][T16660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.590346][T16660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.593886][T16660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.597569][T16660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.604351][T16660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.610563][T16660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.614865][T16660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.618422][T16660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.624837][T16660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.628472][T16660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.632274][T16660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.635968][T16660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.640561][T16660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.644098][T16660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.647696][T16660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.653811][T16660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.660531][T16660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.664579][T16660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.673505][T16660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.677280][T16660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.685136][T16660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.695324][T16660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.700362][T16660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.703784][T16660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.706881][T16660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.712230][T16657] tipc: Resetting bearer <eth:syzkaller0>
[  207.719259][T16657] tipc: Disabling bearer <eth:syzkaller0>
[  207.832844][T16688] netlink: 'syz.2.3670': attribute type 2 has an invalid length.
[  207.939601][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  207.942275][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  208.237310][T16729] bridge47: entered promiscuous mode
[  208.241393][T16729] bridge47: entered allmulticast mode
[  208.244563][T16729] team0: Port device bridge47 added
[  208.259731][T16734] lo speed is unknown, defaulting to 1000
[  208.262186][T16734] wg1 speed is unknown, defaulting to 1000
[  208.354137][T16749] IPv6: NLM_F_CREATE should be specified when creating new route
[  208.359300][T16749] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  208.362248][T16749] IPv6: NLM_F_CREATE should be set when creating new route
[  208.383860][T16751] vlan1: entered allmulticast mode
[  208.385589][T16753] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  208.516095][T16763] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.572431][T16751] syzkaller0: entered promiscuous mode
[  208.574916][T16751] syzkaller0: entered allmulticast mode
[  208.713268][T16766] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  208.755506][T16766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  208.784313][T16764] tipc: Disabling bearer <eth:syzkaller0>
[  208.829775][T16788] netlink: 'syz.2.3703': attribute type 20 has an invalid length.
[  208.979603][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  208.982588][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  209.564006][T16808] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  210.019509][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  211.856474][T16811] IPv6: NLM_F_CREATE should be specified when creating new route
[  211.859861][T16812] __nla_validate_parse: 10 callbacks suppressed
[  211.859873][T16812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3710'.
[  211.862837][T16811] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  211.867662][T16811] IPv6: NLM_F_CREATE should be set when creating new route
[  211.871461][T16812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3710'.
[  211.883111][T16812] bridge37: port 1(veth13) entered blocking state
[  211.885661][T16812] bridge37: port 1(veth13) entered disabled state
[  211.888087][T16812] veth13: entered allmulticast mode
[  211.891953][T16812] veth13: entered promiscuous mode
[  211.900267][T16812] bridge37: port 2(veth0_to_bond) entered blocking state
[  211.903545][T16812] bridge37: port 2(veth0_to_bond) entered disabled state
[  211.909711][T16812] veth0_to_bond: entered allmulticast mode
[  211.912960][T16812] veth0_to_bond: entered promiscuous mode
[  211.924436][T16814] lo speed is unknown, defaulting to 1000
[  211.926782][T16814] wg1 speed is unknown, defaulting to 1000
[  212.001782][T16827] lo speed is unknown, defaulting to 1000
[  212.008118][T16827] wg1 speed is unknown, defaulting to 1000
[  212.055792][T16836] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3715'.
[  212.059792][T16828] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3715'.
[  212.099560][    C1] net_ratelimit: 3 callbacks suppressed
[  212.099571][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  212.104128][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  212.159149][T16855] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3724'.
[  212.162373][T16855] netlink: 'syz.1.3724': attribute type 7 has an invalid length.
[  212.165116][T16855] netlink: 'syz.1.3724': attribute type 8 has an invalid length.
[  212.167779][T16855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3724'.
[  212.284145][T16872] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  212.384834][T16871] tipc: Disabling bearer <eth:syzkaller0>
[  212.393381][T16879] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  212.498855][T16893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3740'.
[  212.504229][T16893] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  212.507327][T16893] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[  212.600201][T16896] delete_channel: no stack
[  212.990123][   T12] erspan0: left promiscuous mode
[  213.139687][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  213.142653][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  213.181105][T16899] syzkaller1: entered promiscuous mode
[  213.183288][T16899] syzkaller1: entered allmulticast mode
[  213.365323][T16906] pim6reg1: entered promiscuous mode
[  213.367662][T16906] pim6reg1: entered allmulticast mode
[  213.507720][T16926] netlink: 'syz.1.3750': attribute type 1 has an invalid length.
[  213.533946][T16918] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3748'.
[  213.588799][T16946] delete_channel: no stack
[  213.704900][T16953] macsec0: entered promiscuous mode
[  213.707064][T16953] macsec0: entered allmulticast mode
[  213.727073][T16961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3760'.
[  213.731021][T16961] IPv6: Can't replace route, no match found
[  213.736754][T16961] netlink: 284 bytes leftover after parsing attributes in process `syz.2.3760'.
[  213.764757][T16964] ip6erspan0: entered allmulticast mode
[  213.913251][T16982] lo speed is unknown, defaulting to 1000
[  213.916149][T16982] wg1 speed is unknown, defaulting to 1000
[  214.179550][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  214.181909][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  214.215761][T17013] lo speed is unknown, defaulting to 1000
[  214.218382][T17010] tc_dump_action: action bad kind
[  214.221205][T17013] wg1 speed is unknown, defaulting to 1000
[  214.462133][T17047] lo speed is unknown, defaulting to 1000
[  214.465438][T17047] wg1 speed is unknown, defaulting to 1000
[  214.547921][T17053] netlink: 'syz.2.3791': attribute type 1 has an invalid length.
[  214.551892][T17054] netlink: 'syz.2.3791': attribute type 1 has an invalid length.
[  214.639057][T17064] delete_channel: no stack
[  214.673116][T17068] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  214.677914][T17068] bond4: (slave erspan0): Releasing active interface
[  214.682402][T17068] bridge_slave_0: left allmulticast mode
[  214.684553][T17068] bridge_slave_0: left promiscuous mode
[  214.686488][T17068] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.690276][T17068] bridge_slave_1: left promiscuous mode
[  214.692340][T17068] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.696801][T17068] veth0_to_bond: left allmulticast mode
[  214.698799][T17068] veth0_to_bond: left promiscuous mode
[  214.701172][T17068] bridge37: port 2(veth0_to_bond) entered disabled state
[  214.707530][T17068] team0: Port device team_slave_0 removed
[  214.713156][T17068] team0: Port device team_slave_1 removed
[  214.715418][T17068] batman_adv: batadv0: Removing interface: batadv_slave_0
[  214.718263][T17068] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  214.720902][T17068] batman_adv: batadv0: Removing interface: batadv_slave_1
[  214.725675][T17068] bond2: (slave ip6gretap2): Releasing backup interface
[  214.735575][T17068] bond0: (slave bridge36): Releasing active interface
[  214.742642][T17068] bond4: (slave veth11): Releasing active interface
[  214.749092][T17068] veth13: left allmulticast mode
[  214.752203][T17068] veth13: left promiscuous mode
[  214.754508][T17068] bridge37: port 1(veth13) entered disabled state
[  214.979649][   T25] block nbd1: Possible stuck request ffff888022b38000: control (read@0,1024B). Runtime 90 seconds
[  215.219595][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  215.222046][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  215.512520][T17096] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  215.808574][T17113] netlink: 'syz.1.3813': attribute type 11 has an invalid length.
[  215.819183][T17113] netlink: 'syz.1.3813': attribute type 11 has an invalid length.
[  215.821396][T17115] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  215.907924][T17127] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  215.922872][T17127] syzkaller0: mtu less than device minimum
[  217.299678][    C1] net_ratelimit: 2 callbacks suppressed
[  217.299733][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  217.304934][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  218.339670][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  218.342765][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  219.379635][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  219.382670][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  220.419632][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  220.422453][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  221.459577][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  221.462104][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  222.499572][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  222.502243][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  223.539561][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  223.542025][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  224.580098][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  224.582655][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  225.619707][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  225.622886][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  226.659657][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  226.662636][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  227.699620][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  227.702627][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  228.739617][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  228.742991][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  229.779657][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  229.782356][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  230.819599][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  230.822156][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  231.859569][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  231.862023][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  232.899789][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  232.902462][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  233.541485][T17141] __nla_validate_parse: 13 callbacks suppressed
[  233.541501][T17141] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3825'.
[  233.551258][T17145] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3823'.
[  233.579882][T17150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3826'.
[  233.593847][T17156] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3829'.
[  233.598300][T17156] 0: renamed from hsr0
[  233.602199][T17156] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  233.605605][T17156] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  233.608951][T17156] 0: entered allmulticast mode
[  233.613371][T17156] hsr_slave_0: entered allmulticast mode
[  233.616088][T17156] hsr_slave_1: entered allmulticast mode
[  233.618501][T17156] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  233.653961][T17164] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3832'.
[  233.699336][T17171] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3834'.
[  233.703003][T17171] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3834'.
[  233.939597][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  233.942171][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  233.957843][T17192] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3843'.
[  233.994053][T17196] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3845'.
[  234.041346][T17204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3848'.
[  234.201517][T17234] netlink: 'syz.0.3859': attribute type 3 has an invalid length.
[  234.206714][T17236] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  234.215264][T17236] syzkaller0: entered promiscuous mode
[  234.217954][T17236] syzkaller0: entered allmulticast mode
[  234.221419][T17236] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  234.225791][T17236] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  234.236182][T17236] tipc: Resetting bearer <eth:syzkaller0>
[  234.246947][T17235] tipc: Resetting bearer <eth:syzkaller0>
[  234.257435][T17235] tipc: Disabling bearer <eth:syzkaller0>
[  234.295490][T17248] lo speed is unknown, defaulting to 1000
[  234.298331][T17248] wg1 speed is unknown, defaulting to 1000
[  234.417348][T17269] netlink: 'syz.1.3872': attribute type 1 has an invalid length.
[  234.422010][T17269] netlink: 'syz.1.3872': attribute type 2 has an invalid length.
[  234.426280][T17269] netlink: 'syz.1.3872': attribute type 1 has an invalid length.
[  234.430185][T17269] netlink: 'syz.1.3872': attribute type 1 has an invalid length.
[  234.541707][T17282] netlink: 'syz.1.3876': attribute type 2 has an invalid length.
[  234.638425][T17299] lo speed is unknown, defaulting to 1000
[  234.641537][T17299] wg1 speed is unknown, defaulting to 1000
[  234.766477][T17308] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  234.854905][T17312] netlink: 'syz.2.3886': attribute type 1 has an invalid length.
[  234.956885][T17329] lo speed is unknown, defaulting to 1000
[  234.959111][T17329] wg1 speed is unknown, defaulting to 1000
[  234.979535][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  234.982033][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  235.024357][T17335] delete_channel: no stack
[  235.155505][T17359] netlink: 'syz.1.3901': attribute type 1 has an invalid length.
[  235.301587][T17369] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  235.445704][T17392] netlink: 'syz.2.3912': attribute type 1 has an invalid length.
[  235.453004][T17392] vlan1: entered allmulticast mode
[  235.454986][T17392] veth1: entered allmulticast mode
[  235.534901][T17405] netlink: 'syz.1.3914': attribute type 32 has an invalid length.
[  235.538660][T17405] bond0: option coupled_control: mode dependency failed, not supported in mode active-backup(1)
[  236.019624][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  236.022159][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  236.887845][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.892602][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  237.043902][T17505] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  237.052880][T17506] IPVS: set_ctl: invalid protocol: 58 172.30.0.2:20003
[  238.040114][T17555] lo speed is unknown, defaulting to 1000
[  238.043305][T17555] wg1 speed is unknown, defaulting to 1000
[  238.109623][    C1] net_ratelimit: 2 callbacks suppressed
[  238.109639][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  238.114944][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  238.322176][T17592] IPv6: NLM_F_CREATE should be specified when creating new route
[  238.324764][T17592] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  238.327123][T17592] IPv6: NLM_F_CREATE should be set when creating new route
[  238.443231][T17608] lo speed is unknown, defaulting to 1000
[  238.446532][T17608] wg1 speed is unknown, defaulting to 1000
[  238.484199][T17611] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  238.557084][T17625] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  238.559455][T17625] IPv6: NLM_F_CREATE should be set when creating new route
[  238.633189][T17638] lo speed is unknown, defaulting to 1000
[  238.635615][T17638] wg1 speed is unknown, defaulting to 1000
[  239.060552][T17677] __nla_validate_parse: 34 callbacks suppressed
[  239.060571][T17677] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3993'.
[  239.092985][T17677] bond6: entered promiscuous mode
[  239.095170][T17677] 8021q: adding VLAN 0 to HW filter on device bond6
[  239.101146][T17677] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3993'.
[  239.149666][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  239.152776][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  239.512858][T17707] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4003'.
[  239.518558][T17707] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4003'.
[  239.547811][T17711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4007'.
[  239.552801][T17711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4007'.
[  239.584833][T17715] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.590796][T17715] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  239.594513][T17715] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  239.603545][T17714] tipc: Disabling bearer <eth:syzkaller0>
[  239.663882][T17717] validate_nla: 66 callbacks suppressed
[  239.663894][T17717] netlink: 'syz.0.4009': attribute type 12 has an invalid length.
[  239.688860][T17719] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4010'.
[  239.750766][T17721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4011'.
[  239.753869][T17721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4011'.
[  240.179604][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  240.182329][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  240.282535][T17701] delete_channel: no stack
[  241.219547][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  241.222485][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  242.259570][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  242.262549][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  242.864558][T17748] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  242.868023][T17748] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  242.907055][T17751] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  242.927600][T17755] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4023'.
[  242.991355][T17766] netlink: 'syz.1.4025': attribute type 9 has an invalid length.
[  243.076541][T17774] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  243.079727][T17774] IPv6: NLM_F_CREATE should be set when creating new route
[  243.299626][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  243.302192][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  243.389124][T17781] ==================================================================
[  243.391736][T17781] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  243.394351][T17781] Read of size 2 at addr ffff8881140dbbc2 by task syz.2.4032/17781
[  243.398078][T17781] 
[  243.399216][T17781] CPU: 0 UID: 0 PID: 17781 Comm: syz.2.4032 Not tainted syzkaller #0 PREEMPT(full) 
[  243.399229][T17781] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  243.399235][T17781] Call Trace:
[  243.399248][T17781]  <TASK>
[  243.399252][T17781]  dump_stack_lvl+0x189/0x250
[  243.399267][T17781]  ? __pfx_dump_stack_lvl+0x10/0x10
[  243.399279][T17781]  ? lock_release+0x4b/0x3e0
[  243.399293][T17781]  ? __virt_addr_valid+0x4a5/0x5c0
[  243.399305][T17781]  print_report+0xca/0x240
[  243.399314][T17781]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  243.399322][T17781]  kasan_report+0x118/0x150
[  243.399335][T17781]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  243.399344][T17781]  __xfrm_state_lookup+0x6ad/0x8d0
[  243.399354][T17781]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  243.399364][T17781]  xfrm_state_add+0x27d/0xc40
[  243.399376][T17781]  xfrm_add_sa+0x35a1/0x4070
[  243.399388][T17781]  ? __pfx_xfrm_add_sa+0x10/0x10
[  243.399396][T17781]  ? apparmor_capable+0x137/0x1b0
[  243.399408][T17781]  ? __nla_parse+0x40/0x60
[  243.399420][T17781]  xfrm_user_rcv_msg+0x7a3/0xab0
[  243.399430][T17781]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  243.399439][T17781]  ? bpf_trace_run2+0x322/0x4b0
[  243.399455][T17781]  ? rcu_is_watching+0x15/0xb0
[  243.399464][T17781]  ? trace_contention_end+0x39/0x120
[  243.399472][T17781]  ? __mutex_lock+0x335/0x1350
[  243.399487][T17781]  netlink_rcv_skb+0x208/0x470
[  243.399499][T17781]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  243.399508][T17781]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  243.399521][T17781]  ? lock_release+0x4b/0x3e0
[  243.399532][T17781]  ? netlink_deliver_tap+0x2e/0x1b0
[  243.399543][T17781]  xfrm_netlink_rcv+0x79/0x90
[  243.399552][T17781]  netlink_unicast+0x82f/0x9e0
[  243.399565][T17781]  ? __pfx_netlink_unicast+0x10/0x10
[  243.399576][T17781]  ? netlink_sendmsg+0x642/0xb30
[  243.399587][T17781]  ? skb_put+0x11b/0x210
[  243.399596][T17781]  netlink_sendmsg+0x805/0xb30
[  243.399609][T17781]  ? __pfx_netlink_sendmsg+0x10/0x10
[  243.399620][T17781]  ? futex_unqueue+0x22/0x240
[  243.399629][T17781]  ? aa_sock_msg_perm+0xf1/0x1d0
[  243.399636][T17781]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  243.399644][T17781]  ? __pfx_netlink_sendmsg+0x10/0x10
[  243.399684][T17781]  __sock_sendmsg+0x21c/0x270
[  243.399697][T17781]  ____sys_sendmsg+0x505/0x830
[  243.399708][T17781]  ? __pfx_____sys_sendmsg+0x10/0x10
[  243.399718][T17781]  ? import_iovec+0x74/0xa0
[  243.399729][T17781]  ___sys_sendmsg+0x21f/0x2a0
[  243.399738][T17781]  ? __pfx____sys_sendmsg+0x10/0x10
[  243.399747][T17781]  ? futex_wait+0x285/0x360
[  243.399762][T17781]  ? __fget_files+0x2a/0x420
[  243.399769][T17781]  ? __fget_files+0x3a0/0x420
[  243.399778][T17781]  __x64_sys_sendmsg+0x19b/0x260
[  243.399786][T17781]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  243.399796][T17781]  ? rcu_is_watching+0x15/0xb0
[  243.399804][T17781]  ? rcu_is_watching+0x15/0xb0
[  243.399812][T17781]  do_syscall_64+0xfa/0x3b0
[  243.399820][T17781]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.399828][T17781]  ? exc_page_fault+0x9f/0xf0
[  243.399839][T17781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.399847][T17781] RIP: 0033:0x7fb06f58ebe9
[  243.399856][T17781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  243.399863][T17781] RSP: 002b:00007fb070395038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  243.399874][T17781] RAX: ffffffffffffffda RBX: 00007fb06f7b5fa0 RCX: 00007fb06f58ebe9
[  243.399880][T17781] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000007
[  243.399886][T17781] RBP: 00007fb06f611e19 R08: 0000000000000000 R09: 0000000000000000
[  243.399892][T17781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  243.399897][T17781] R13: 00007fb06f7b6038 R14: 00007fb06f7b5fa0 R15: 00007ffef7890458
[  243.399907][T17781]  </TASK>
[  243.399910][T17781] 
[  243.540178][T17781] Allocated by task 14372:
[  243.542062][T17781]  kasan_save_track+0x3e/0x80
[  243.544037][T17781]  __kasan_slab_alloc+0x6c/0x80
[  243.546088][T17781]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  243.548397][T17781]  xfrm_state_alloc+0x24/0x2f0
[  243.550446][T17781]  __find_acq_core+0x8a7/0x1c00
[  243.552446][T17781]  xfrm_find_acq+0x78/0xa0
[  243.554330][T17781]  xfrm_alloc_userspi+0x6b3/0xc90
[  243.556195][T17781]  xfrm_user_rcv_msg+0x7a3/0xab0
[  243.557913][T17781]  netlink_rcv_skb+0x208/0x470
[  243.559830][T17781]  xfrm_netlink_rcv+0x79/0x90
[  243.561854][T17781]  netlink_unicast+0x82f/0x9e0
[  243.563926][T17781]  netlink_sendmsg+0x805/0xb30
[  243.566014][T17781]  __sock_sendmsg+0x21c/0x270
[  243.567996][T17781]  ____sys_sendmsg+0x505/0x830
[  243.569967][T17781]  ___sys_sendmsg+0x21f/0x2a0
[  243.571999][T17781]  __x64_sys_sendmsg+0x19b/0x260
[  243.574113][T17781]  do_syscall_64+0xfa/0x3b0
[  243.576076][T17781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.578574][T17781] 
[  243.579624][T17781] Freed by task 1841:
[  243.581143][T17781]  kasan_save_track+0x3e/0x80
[  243.582943][T17781]  kasan_save_free_info+0x46/0x50
[  243.584863][T17781]  __kasan_slab_free+0x5b/0x80
[  243.586446][T17781]  kmem_cache_free+0x18f/0x400
[  243.588375][T17781]  xfrm_state_gc_task+0x52d/0x6b0
[  243.590518][T17781]  process_scheduled_works+0xae1/0x17b0
[  243.592892][T17781]  worker_thread+0x8a0/0xda0
[  243.594888][T17781]  kthread+0x711/0x8a0
[  243.596560][T17781]  ret_from_fork+0x3fc/0x770
[  243.598575][T17781]  ret_from_fork_asm+0x1a/0x30
[  243.600637][T17781] 
[  243.601705][T17781] The buggy address belongs to the object at ffff8881140dba80
[  243.601705][T17781]  which belongs to the cache xfrm_state of size 928
[  243.607347][T17781] The buggy address is located 322 bytes inside of
[  243.607347][T17781]  freed 928-byte region [ffff8881140dba80, ffff8881140dbe20)
[  243.613041][T17781] 
[  243.614086][T17781] The buggy address belongs to the physical page:
[  243.616845][T17781] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8881140d8480 pfn:0x1140d8
[  243.620603][T17781] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  243.623575][T17781] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  243.626485][T17781] page_type: f5(slab)
[  243.628189][T17781] raw: 057ff00000000040 ffff88801cf37b40 dead000000000122 0000000000000000
[  243.630948][T17781] raw: ffff8881140d8480 00000000800e0008 00000000f5000000 0000000000000000
[  243.634252][T17781] head: 057ff00000000040 ffff88801cf37b40 dead000000000122 0000000000000000
[  243.637820][T17781] head: ffff8881140d8480 00000000800e0008 00000000f5000000 0000000000000000
[  243.641529][T17781] head: 057ff00000000002 ffffea0004503601 00000000ffffffff 00000000ffffffff
[  243.645203][T17781] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  243.648851][T17781] page dumped because: kasan: bad access detected
[  243.651568][T17781] page_owner tracks the page as allocated
[  243.654021][T17781] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 10828, tgid 10826 (syz.0.1643), ts 100760853318, free_ts 100673929755
[  243.662099][T17781]  post_alloc_hook+0x240/0x2a0
[  243.664193][T17781]  get_page_from_freelist+0x21e4/0x22c0
[  243.666559][T17781]  __alloc_frozen_pages_noprof+0x181/0x370
[  243.669062][T17781]  alloc_pages_mpol+0x232/0x4a0
[  243.671201][T17781]  allocate_slab+0x8a/0x370
[  243.673192][T17781]  ___slab_alloc+0xbeb/0x1410
[  243.675204][T17781]  kmem_cache_alloc_noprof+0x283/0x3c0
[  243.677456][T17781]  xfrm_state_alloc+0x24/0x2f0
[  243.679409][T17781]  xfrm_state_find+0x37d4/0x5400
[  243.681488][T17781]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  243.684103][T17781]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  243.686354][T17781]  xfrm_lookup_route+0x3c/0x1c0
[  243.688394][T17781]  __ip4_datagram_connect+0x9a5/0x1270
[  243.690721][T17781]  __ip6_datagram_connect+0x9f0/0x1150
[  243.693095][T17781]  ip6_datagram_connect_v6_only+0x63/0xa0
[  243.695466][T17781]  __sys_connect+0x316/0x440
[  243.697378][T17781] page last free pid 10818 tgid 10817 stack trace:
[  243.700193][T17781]  __free_frozen_pages+0xbc4/0xd30
[  243.702452][T17781]  free_large_kmalloc+0x13a/0x1f0
[  243.704529][T17781]  vhost_dev_set_owner+0x8b8/0xb10
[  243.706691][T17781]  vhost_dev_ioctl+0xc6/0xe00
[  243.708661][T17781]  vhost_vsock_dev_ioctl+0x21f/0xdc0
[  243.710410][T17781]  __se_sys_ioctl+0xfc/0x170
[  243.712051][T17781]  do_syscall_64+0xfa/0x3b0
[  243.713518][T17781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.715498][T17781] 
[  243.716346][T17781] Memory state around the buggy address:
[  243.718525][T17781]  ffff8881140dba80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  243.721360][T17781]  ffff8881140dbb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  243.724676][T17781] >ffff8881140dbb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  243.727372][T17781]                                            ^
[  243.729435][T17781]  ffff8881140dbc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  243.732313][T17781]  ffff8881140dbc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  243.735478][T17781] ==================================================================
[  243.738959][T17781] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  243.742001][T17781] CPU: 0 UID: 0 PID: 17781 Comm: syz.2.4032 Not tainted syzkaller #0 PREEMPT(full) 
[  243.745706][T17781] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  243.749780][T17781] Call Trace:
[  243.751150][T17781]  <TASK>
[  243.752387][T17781]  dump_stack_lvl+0x99/0x250
[  243.754290][T17781]  ? __asan_memcpy+0x40/0x70
[  243.756135][T17781]  ? __pfx_dump_stack_lvl+0x10/0x10
[  243.758226][T17781]  ? __pfx__printk+0x10/0x10
[  243.760099][T17781]  vpanic+0x281/0x750
[  243.761721][T17781]  ? __pfx_vpanic+0x10/0x10
[  243.763541][T17781]  ? rcu_is_watching+0x15/0xb0
[  243.765201][T17781]  panic+0xb9/0xc0
[  243.766567][T17781]  ? __pfx_panic+0x10/0x10
[  243.768098][T17781]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  243.770379][T17781]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  243.772762][T17781]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  243.774810][T17781]  check_panic_on_warn+0x89/0xb0
[  243.776469][T17781]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  243.778265][T17781]  end_report+0x78/0x160
[  243.779695][T17781]  kasan_report+0x129/0x150
[  243.781465][T17781]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  243.783259][T17781]  __xfrm_state_lookup+0x6ad/0x8d0
[  243.784913][T17781]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  243.786724][T17781]  xfrm_state_add+0x27d/0xc40
[  243.788486][T17781]  xfrm_add_sa+0x35a1/0x4070
[  243.790224][T17781]  ? __pfx_xfrm_add_sa+0x10/0x10
[  243.791908][T17781]  ? apparmor_capable+0x137/0x1b0
[  243.793611][T17781]  ? __nla_parse+0x40/0x60
[  243.795141][T17781]  xfrm_user_rcv_msg+0x7a3/0xab0
[  243.796928][T17781]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  243.798947][T17781]  ? bpf_trace_run2+0x322/0x4b0
[  243.800987][T17781]  ? rcu_is_watching+0x15/0xb0
[  243.803007][T17781]  ? trace_contention_end+0x39/0x120
[  243.805090][T17781]  ? __mutex_lock+0x335/0x1350
[  243.806902][T17781]  netlink_rcv_skb+0x208/0x470
[  243.808550][T17781]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  243.810479][T17781]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  243.812282][T17781]  ? lock_release+0x4b/0x3e0
[  243.813846][T17781]  ? netlink_deliver_tap+0x2e/0x1b0
[  243.815588][T17781]  xfrm_netlink_rcv+0x79/0x90
[  243.817182][T17781]  netlink_unicast+0x82f/0x9e0
[  243.818853][T17781]  ? __pfx_netlink_unicast+0x10/0x10
[  243.820715][T17781]  ? netlink_sendmsg+0x642/0xb30
[  243.822563][T17781]  ? skb_put+0x11b/0x210
[  243.824119][T17781]  netlink_sendmsg+0x805/0xb30
[  243.825763][T17781]  ? __pfx_netlink_sendmsg+0x10/0x10
[  243.827710][T17781]  ? futex_unqueue+0x22/0x240
[  243.829219][T17781]  ? aa_sock_msg_perm+0xf1/0x1d0
[  243.830803][T17781]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  243.832522][T17781]  ? __pfx_netlink_sendmsg+0x10/0x10
[  243.834317][T17781]  __sock_sendmsg+0x21c/0x270
[  243.835845][T17781]  ____sys_sendmsg+0x505/0x830
[  243.837602][T17781]  ? __pfx_____sys_sendmsg+0x10/0x10
[  243.839351][T17781]  ? import_iovec+0x74/0xa0
[  243.840908][T17781]  ___sys_sendmsg+0x21f/0x2a0
[  243.842484][T17781]  ? __pfx____sys_sendmsg+0x10/0x10
[  243.844314][T17781]  ? futex_wait+0x285/0x360
[  243.846041][T17781]  ? __fget_files+0x2a/0x420
[  243.847711][T17781]  ? __fget_files+0x3a0/0x420
[  243.849288][T17781]  __x64_sys_sendmsg+0x19b/0x260
[  243.851112][T17781]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  243.852944][T17781]  ? rcu_is_watching+0x15/0xb0
[  243.854693][T17781]  ? rcu_is_watching+0x15/0xb0
[  243.856301][T17781]  do_syscall_64+0xfa/0x3b0
[  243.857965][T17781]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.859991][T17781]  ? exc_page_fault+0x9f/0xf0
[  243.861536][T17781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.863638][T17781] RIP: 0033:0x7fb06f58ebe9
[  243.865366][T17781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  243.872789][T17781] RSP: 002b:00007fb070395038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  243.876054][T17781] RAX: ffffffffffffffda RBX: 00007fb06f7b5fa0 RCX: 00007fb06f58ebe9
[  243.879093][T17781] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000007
[  243.882255][T17781] RBP: 00007fb06f611e19 R08: 0000000000000000 R09: 0000000000000000
[  243.885346][T17781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  243.888372][T17781] R13: 00007fb06f7b6038 R14: 00007fb06f7b5fa0 R15: 00007ffef7890458
[  243.891426][T17781]  </TASK>
[  243.893432][T17781] Kernel Offset: disabled
[  243.895217][T17781] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:17:51  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000079 RBX=0000000000000079 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000018a5 RDI=00000000000018a6 RBP=00000000000003f8 RSP=ffffc900072b69d0
R8 =ffff8880214c0237 R9 =1ffff11004298046 R10=dffffc0000000000 R11=ffffffff854f2040
R12=dffffc0000000000 R13=ffffffff99afb909 R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f20bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb0703956c0 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4e530e56c0 CR3=000000011c810000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffff000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007fb0702ed100 00007fb06f787460 XMM05=00007fb06f787478 00007fb06f7874c0
XMM06=00007fb06f7874b8 00007fb06f7874b0 XMM07=00007fb06f7874a8 00007fb06f7874a0
XMM08=0000000000000000 00007fb06f612ee7 XMM09=0000000000000000 00007fb06f612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff8186d85a RBX=0000000000000001 RCX=0000000000010000 RDX=ffff888108f38000
RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000012 RSP=ffffc900001e0de8
R8 =0000000000000001 R9 =0000000000000002 R10=0000000000000001 R11=0000000000010000
R12=ffff888105fad478 R13=0000000000000000 R14=ffff888108f3802c R15=ffff888108f38000
RIP=ffffffff8186db84 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f5f23fcfc80 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000002040 CR3=000000011a692000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000251 0000000039386c6c
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffff00000000 XMM09=0000000000000251 0000000039386c6c
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
