last executing test programs:

1.200203466s ago: executing program 1 (id=3648):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061107c000000000007000000000000009500000000000000c2058b8a6c0bfceb46af027f03bc71e36d8061adc1ef9ded15420ba2e71c5f9c2a0262b002b919d30bf6e40582d9bf2d5297b68be76034a956a2206a6a32739799c21d54fbc5872c160c839bd301d913fb01c103f3b7bd1bfc0b33d8e797b4d1c0c708924d567015fc2e3d41cc5b569e15f4aa714a39ec98610166acc7dac98e463acf5b168653e3f52528e394eaf7786d17e76c6709c15da46117f58366a9b60947ea042a00b313a6dc82"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000000000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f080001400000000053df62351c98960d7061796c6f6164001c0002800800034000000014e0c10e4202576a8b08000240000000050900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a000000000000000000"], 0xb8}}, 0x0)
clock_gettime(0x11482ca5a753e9f9, &(0x7f0000000040))

1.199347635s ago: executing program 1 (id=3649):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0)
close(0x3)
recvfrom$inet(r1, &(0x7f0000000000)=""/8, 0xfffffffffffffd0b, 0x400123eb, 0x0, 0x1154103478d401ea)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
sendmsg$unix(r4, &(0x7f0000000840)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0xa, 0x8800}, 0x4000080)
close(r2)
syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff)
socket$inet(0x10, 0x3, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x0)
socket(0x2, 0x80805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c)
sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getlink={0x28, 0x12, 0x301, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x8a6b, 0x11530}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x4083}]}, 0x28}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@hci, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/58, 0x3a}, {&(0x7f0000000300)=""/142, 0x8e}, {&(0x7f0000000440)=""/162, 0xa2}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/219, 0xdb}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/206, 0xce}], 0x7, &(0x7f0000000a80)=""/225, 0xe1}, 0x40000120)

1.109706504s ago: executing program 2 (id=3652):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0x2d, 0x0, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c0016800800", @ANYRES16=r1], 0x38}}, 0x10)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_buf(r3, 0x6, 0x21, &(0x7f0000000000), 0x0)

1.050294801s ago: executing program 2 (id=3653):
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="8c003f2000", @ANYRES16=0x0, @ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x4040014}, 0x80)
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000000)=""/38, &(0x7f0000000040)=0x26)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000200))
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)="711f63377215cd29eb9258fd", 0xc}, 0x1, 0x0, 0x0, 0x2000c196}, 0x4044004)
recvmmsg(r4, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc61}, 0xffff}], 0x1, 0x162, 0x0)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r5, 0x0, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r7, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r6)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x2c}], 0x2)
r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25CALLACCPTAPPRV(r9, 0x89e8)

1.045348955s ago: executing program 1 (id=3654):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x35}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xdada}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x8000f, 0x120) (async)
r2 = socket$inet6(0xa, 0x8000f, 0x120)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c) (async)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) (async)
recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4)
socket$inet6(0x2d, 0x2, 0x0) (async)
r3 = socket$inet6(0x2d, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x40, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c08000000040003000c000180060000008848000008000200", @ANYRES32, @ANYBLOB], 0x2c}}, 0x40)
sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000401008000440000000c8080002400000000b080003400000000208000540000000040900010073797a30000000000900020073797a32"], 0x98}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x160}}, 0x0)
socket$can_raw(0x1d, 0x3, 0x1) (async)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
setsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4)
write$cgroup_int(r1, &(0x7f0000000000)=0x9, 0x12)

1.044887083s ago: executing program 1 (id=3656):
socket(0x10, 0x803, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000de28d72f0cd6c94a99563fce48393b1cfcc88696020000009abaa73ab1f2be7de3f80ae60e3e710ae2dc225dc1b847e0e761f34a3cfa6240d88793cef580e7693d03568c4e5013ea43e3cb5838b0babf2dc6020e22d62007222934ad8a110b3c8dc68e00d98efc0801a99f95be5e995ae1306b8a0e4525ca6d4b4fa1b80ef220", @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf254a00000008000300000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10)
close(0xffffffffffffffff)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x1d, 0x2, 0x6)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x7fffffff, 0x8000000000000, 0x0, 0x0, 0x1000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x800, 0x5, 0x0, 0x1}, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000100)=0x9, 0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
syz_open_procfs$namespace(0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, 0x0, 0x0)

988.179399ms ago: executing program 2 (id=3658):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r2, 0x400448e0, &(0x7f0000000a00))
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028005000300000000000800014000000001080002400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
socket$inet(0x10, 0x6, 0x22)
syz_emit_ethernet(0x2e, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff08fb1e0200200000004995582278ac1e0101baae00000000000188d7000c90786b718368"], 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8ad8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000004c0)='xen_mc_extend_args\x00', r1}, 0x18)
r5 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20)
r6 = socket(0x8000000010, 0x2, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x2000000000000032, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000080000850000000000"], &(0x7f0000000a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10004a}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write(r6, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r9, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10)
r10 = socket(0x10, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2000000068000100ffffffffffdbdf250a0000000000000004000b00040006"], 0x20}}, 0x0)
ioctl$sock_inet_SIOCSARP(r8, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

910.077743ms ago: executing program 2 (id=3660):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x25dfdbff, {0x81, 0x80, 0x80}, [@FRA_SRC={0x14, 0x2, @mcast1}]}, 0x30}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe5}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014)

909.652696ms ago: executing program 2 (id=3661):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0)
close(0x3)
recvfrom$inet(r1, &(0x7f0000000000)=""/8, 0xfffffffffffffd0b, 0x400123eb, 0x0, 0x1154103478d401ea)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
sendmsg$unix(r4, &(0x7f0000000840)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0xa, 0x8800}, 0x4000080)
close(r2)
syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff)
socket$inet(0x10, 0x3, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x0)
socket(0x2, 0x80805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c)
sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getlink={0x28, 0x12, 0x301, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x8a6b, 0x11530}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x4083}]}, 0x28}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@hci, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/58, 0x3a}, {&(0x7f0000000300)=""/142, 0x8e}, {&(0x7f0000000440)=""/162, 0xa2}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/219, 0xdb}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/206, 0xce}], 0x7, &(0x7f0000000a80)=""/225, 0xe1}, 0x40000120)

734.284243ms ago: executing program 2 (id=3663):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0)
sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000429bd7000fddbdf250900000005001300450000000800140002000000080014001a000000050013001000000005001d000f0000000500130087000000050013007f00f8ff04007f000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4c010}, 0x4010)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000000)=""/254, 0x26, 0xfe, 0x1}, 0x20)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x6, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0)
bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_smc(0x2b, 0x1, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
write$cgroup_int(r5, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r5, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r5, 0x0)

372.554048ms ago: executing program 0 (id=3670):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write(r1, &(0x7f00000002c0), 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25250000000000eeff6e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x80002, 0x0)
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xc8, 0x0, 0xc000000)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000330001fbb9aefa3185c93bf4849828bd7002fcdbdf2546000000"], 0x14}, 0x1, 0x8000000000000, 0x0, 0x10008090}, 0x8004)
recvmmsg(r7, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000780)=""/260, 0x104}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000002900)=""/4114, 0x1012}, {&(0x7f00000017c0)=""/220, 0xdc}, {&(0x7f0000000f40)=""/218, 0xda}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000008c0)=""/234, 0xea}], 0x8}, 0x80000002}], 0x4, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)

372.28498ms ago: executing program 0 (id=3671):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400410005000b00", @ANYRES32=r0, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

279.789045ms ago: executing program 0 (id=3672):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x2}], 0x1}, 0x480c0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
r3 = socket(0xa, 0x3, 0x2)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x94, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x114}}, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f00000001c0)={'geneve0\x00', {0x2, 0x0, @broadcast}})
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000180))
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r7, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', <r8=>0x0})
ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000040)={'virt_wifi0\x00', {0x2, 0x0, @dev}})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
socket$inet6_tcp(0xa, 0x1, 0x0)

236.095239ms ago: executing program 0 (id=3673):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, [@printk={@llx, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x7, 0x0, 0x5}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0xa556cc2fabc7b233, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f00000032c0)={0x868, 0x4, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000e40)={0x0, 0x32, "7f658d2ce34a324aa7e997cbc327bb3594f3d0d58d385e98e081a3fe9a9baa8c6ad8db9dd85fb35df0edc2c8a808da73d77e"}, &(0x7f0000000ec0)=0x3a)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000031c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @mcast2, 0x1}}, 0x6, 0x5, 0x8, 0xcfe, 0x80, 0x2, 0x53}, &(0x7f0000003280)=0x9c) (async, rerun: 64)
r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800090000000000010000001c140000fe0000010000000008000100000001"], 0x24}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', r3, 0x29, 0xf, 0x3, 0xd, 0x10, @private1, @private1, 0x80, 0x40, 0x5, 0x9}})

139.988593ms ago: executing program 0 (id=3674):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async, rerun: 64)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_getroute={0x24, 0x1a, 0x101, 0x0, 0x0, {}, [@RTA_IIF={0x8, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 64)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0}) (async)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0x3}, 0x10) (async)
write(r5, &(0x7f00000000c0)="240000001e005f0214ffffffffff05f9070000000100faffffffffffff0a0000e3825fe4", 0x24)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r4, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x6, 0xa6, 0x5}, {0x8, 0x0, 0xf8, 0x1}, {0x4, 0x6, 0xc, 0x100}, {0x101, 0x9, 0x6a, 0x1}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x0)

139.568605ms ago: executing program 1 (id=3675):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01f71800f7000000000024000000240000000200000000000000000000040000000300000000000000000000000000000000000000b77f376acb20"], 0xffffffffffffffff, 0x3e, 0x0, 0xa}, 0x28)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x8, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x0, 0x2, 0x41}]}}}}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x0, 0x4000, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]]}, 0x3c}}, 0x80)

60.34279ms ago: executing program 1 (id=3676):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0)
close(0x3)
recvfrom$inet(r1, &(0x7f0000000000)=""/8, 0xfffffffffffffd0b, 0x400123eb, 0x0, 0x1154103478d401ea)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
sendmsg$unix(r4, &(0x7f0000000840)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0xa, 0x8800}, 0x4000080)
close(r2)
syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff)
socket$inet(0x10, 0x3, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44)
sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getlink={0x28, 0x12, 0x301, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x8a6b, 0x11530}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x4083}]}, 0x28}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@hci, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/58, 0x3a}, {&(0x7f0000000300)=""/142, 0x8e}, {&(0x7f0000000440)=""/162, 0xa2}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/219, 0xdb}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/206, 0xce}], 0x7, &(0x7f0000000a80)=""/225, 0xe1}, 0x40000120)

0s ago: executing program 0 (id=3677):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2}}, &(0x7f0000000080)='GPL\x00', 0x8000, 0x0, 0x0, 0x41100, 0x0, '\x00', r2}, 0x94)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x24}}, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x10}}}]}, 0x38}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r7, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x1}]}}]}, 0x54}}, 0x4848)

kernel console output (not intermixed with test programs):

 ieee802154 phy0 wpan0: encryption failed: -126
[  120.690829][T10639] __nla_validate_parse: 32 callbacks suppressed
[  120.690837][T10639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1345'.
[  120.700099][T10639] team0: Device gtp1 is up. Set it down before adding it as a team port
[  120.739189][T10641] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1346'.
[  120.750254][T10639] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1345'.
[  120.753136][T10639] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1345'.
[  120.761216][T10639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1345'.
[  120.766745][T10643] netlink: 'syz.2.1347': attribute type 1 has an invalid length.
[  120.783824][T10643] bond9: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  120.792711][T10643] bond9: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  120.796401][T10643] bond9: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  120.814492][T10647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1348'.
[  120.840813][T10656] netlink: 'syz.1.1351': attribute type 11 has an invalid length.
[  120.843519][T10656] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1351'.
[  120.849156][T10656] lo: entered allmulticast mode
[  120.851079][T10656] lo: left allmulticast mode
[  120.876253][T10665] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1353'.
[  120.923522][T10670] Bluetooth: MGMT ver 1.23
[  120.926508][T10667] siw: device registration error -23
[  121.062306][T10696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1365'.
[  121.065221][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1365'.
[  121.094630][T10697] syzkaller0: entered promiscuous mode
[  121.096798][T10697] syzkaller0: entered allmulticast mode
[  121.878059][T10694] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  121.999451][T10721] validate_nla: 1 callbacks suppressed
[  121.999460][T10721] netlink: 'syz.0.1370': attribute type 1 has an invalid length.
[  122.214489][T10743] syz.0.1377 uses old SIOCAX25GETINFO
[  122.320319][T10767] netlink: 'syz.2.1384': attribute type 1 has an invalid length.
[  122.364311][T10767] 8021q: adding VLAN 0 to HW filter on device bond12
[  122.368427][T10767] bond11: (slave bond12): making interface the new active one
[  122.371248][T10767] bond11: (slave bond12): Enslaving as an active interface with an up link
[  122.379830][T10774] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.423240][T10782] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.458833][T10783] syzkaller0: entered promiscuous mode
[  122.460745][T10783] syzkaller0: entered allmulticast mode
[  122.464018][T10783] tipc: Resetting bearer <eth:syzkaller0>
[  122.470366][T10789] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  122.512986][T10781] tipc: Resetting bearer <eth:syzkaller0>
[  122.587468][T10781] tipc: Disabling bearer <eth:syzkaller0>
[  122.669518][T10812] syzkaller1: entered promiscuous mode
[  122.671418][T10812] syzkaller1: entered allmulticast mode
[  122.723302][T10820] syzkaller0: entered promiscuous mode
[  122.725292][T10820] syzkaller0: entered allmulticast mode
[  122.728675][T10820] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.732485][T10820] tipc: Resetting bearer <eth:syzkaller0>
[  122.736360][T10819] tipc: Resetting bearer <eth:syzkaller0>
[  122.741243][T10819] tipc: Disabling bearer <eth:syzkaller0>
[  122.880631][ T7410] IPVS: starting estimator thread 0...
[  122.881125][T10839] lo speed is unknown, defaulting to 1000
[  122.987425][T10841] IPVS: using max 134 ests per chain, 321600 per kthread
[  123.004614][T10856] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  123.078622][T10860] lo speed is unknown, defaulting to 1000
[  123.449356][T10896] erspan0: entered promiscuous mode
[  124.686177][T10908] netlink: 'syz.1.1427': attribute type 11 has an invalid length.
[  124.724555][T10918] netlink: 'syz.2.1431': attribute type 1 has an invalid length.
[  124.732399][T10921] netlink: 'syz.0.1432': attribute type 4 has an invalid length.
[  124.763570][T10931] netlink: 'syz.0.1434': attribute type 7 has an invalid length.
[  124.785493][T10936] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  124.788738][T10936] IPv6: NLM_F_CREATE should be set when creating new route
[  124.791729][T10936] IPv6: NLM_F_CREATE should be set when creating new route
[  124.795658][T10936] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  124.867973][T10948] netlink: 'syz.2.1440': attribute type 1 has an invalid length.
[  124.873062][T10949] netlink: 'syz.2.1440': attribute type 1 has an invalid length.
[  124.993789][T10968] netlink: 'syz.1.1447': attribute type 1 has an invalid length.
[  125.114463][T10968] bond9: (slave gretap2): making interface the new active one
[  125.120318][T10968] bond9: (slave gretap2): Enslaving as an active interface with an up link
[  125.129818][T10968] 8021q: adding VLAN 0 to HW filter on device bond9
[  125.178085][T10993] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  125.229203][T11008] ieee802154 phy0 wpan0: encryption failed: -126
[  125.246156][T11010] netlink: 'syz.1.1460': attribute type 10 has an invalid length.
[  125.253234][T11010] team0: Failed to send options change via netlink (err -105)
[  125.255713][T11010] team0: Port device dummy0 added
[  125.318306][T11021] sctp: [Deprecated]: syz.0.1462 (pid 11021) Use of struct sctp_assoc_value in delayed_ack socket option.
[  125.318306][T11021] Use struct sctp_sack_info instead
[  125.325708][T11021] sctp: [Deprecated]: syz.0.1462 (pid 11021) Use of struct sctp_assoc_value in delayed_ack socket option.
[  125.325708][T11021] Use struct sctp_sack_info instead
[  125.359336][T11025] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  125.704054][T11049] __nla_validate_parse: 37 callbacks suppressed
[  125.704064][T11049] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1472'.
[  126.021781][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1473'.
[  126.025311][T11053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1473'.
[  126.028324][T11052] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1473'.
[  126.028669][T11053] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1473'.
[  126.033399][T11052] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  126.039241][T11052] gretap1: entered promiscuous mode
[  126.058702][T11056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1474'.
[  126.099777][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1476'.
[  126.103181][T11063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1476'.
[  126.124078][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1477'.
[  126.127866][T11067] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1477'.
[  126.717305][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  129.309741][T11098] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.312756][T11098] syzkaller0: entered promiscuous mode
[  129.314828][T11098] syzkaller0: entered allmulticast mode
[  129.324929][T11098] tipc: Resetting bearer <eth:syzkaller0>
[  129.384979][T11113] validate_nla: 4 callbacks suppressed
[  129.384993][T11113] netlink: 'syz.1.1488': attribute type 4 has an invalid length.
[  129.399292][T11096] tipc: Resetting bearer <eth:syzkaller0>
[  129.408082][T11096] tipc: Disabling bearer <eth:syzkaller0>
[  129.411136][   T47] lo speed is unknown, defaulting to 1000
[  129.413107][   T47] syz2: Port: 1 Link DOWN
[  129.461447][T11117] netlink: del zone limit has 4 unknown bytes
[  129.489293][T11121] delete_channel: no stack
[  129.662529][T11137] netlink: 'syz.1.1497': attribute type 7 has an invalid length.
[  129.665626][T11137] netlink: 'syz.1.1497': attribute type 8 has an invalid length.
[  129.694172][T11139] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  129.699992][T11139] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  129.846887][T11147] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  130.363192][T11157] syzkaller1: entered allmulticast mode
[  130.523340][T11175] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8
[  130.580252][T11184] netlink: 'syz.1.1511': attribute type 1 has an invalid length.
[  130.582994][T11184] netlink: 'syz.1.1511': attribute type 2 has an invalid length.
[  130.697253][T11182] netlink: 'syz.2.1510': attribute type 1 has an invalid length.
[  130.700290][T11182] nbd: error processing sock list
[  130.702460][T11182] block nbd0: shutting down sockets
[  130.746628][T11194] vlan5: entered allmulticast mode
[  130.749026][T11194] bond0: entered allmulticast mode
[  130.770519][T11197] __nla_validate_parse: 7 callbacks suppressed
[  130.770529][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1515'.
[  130.778004][T11197] netlink: 'syz.2.1515': attribute type 30 has an invalid length.
[  130.807612][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1515'.
[  130.811288][T11197] netlink: 'syz.2.1515': attribute type 30 has an invalid length.
[  130.814876][T11191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1513'.
[  130.906528][T11207] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9
[  130.956414][T11212] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1519'.
[  130.979860][T11214] syzkaller1: entered allmulticast mode
[  130.984163][T11214] syzkaller1: left allmulticast mode
[  131.104470][T11219] netlink: 'syz.1.1522': attribute type 1 has an invalid length.
[  131.108638][T11219] netlink: 'syz.1.1522': attribute type 3 has an invalid length.
[  131.111126][T11219] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1522'.
[  131.114837][T11219] netlink: 560 bytes leftover after parsing attributes in process `syz.1.1522'.
[  131.119322][T11221] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  131.132207][T11219] sock: sock_timestamping_bind_phc: sock not bind to device
[  131.626025][T11235] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.631933][T11235] tipc: Resetting bearer <eth:syzkaller0>
[  131.635682][T11234] tipc: Disabling bearer <eth:syzkaller0>
[  131.696546][T11237] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1529'.
[  131.697169][T11238] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1529'.
[  131.760456][T11240] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1530'.
[  131.989511][T11261] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1535'.
[  132.136435][T11295] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  132.164882][T11297] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  132.170625][T11297] CPU: 1 UID: 0 PID: 11297 Comm: syz.0.1540 Not tainted syzkaller #0 PREEMPT(full) 
[  132.170636][T11297] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  132.170640][T11297] Call Trace:
[  132.170643][T11297]  <TASK>
[  132.170647][T11297]  dump_stack_lvl+0x189/0x250
[  132.170659][T11297]  ? __pfx_dump_stack_lvl+0x10/0x10
[  132.170668][T11297]  ? __pfx__printk+0x10/0x10
[  132.170676][T11297]  ? kernfs_root+0x1c/0x230
[  132.170685][T11297]  ? kernfs_path_from_node+0x2f/0x290
[  132.170692][T11297]  ? kernfs_path_from_node+0x250/0x290
[  132.170698][T11297]  ? kernfs_path_from_node+0x2f/0x290
[  132.170706][T11297]  sysfs_warn_dup+0x8e/0xa0
[  132.170714][T11297]  sysfs_do_create_link_sd+0xc0/0x110
[  132.170721][T11297]  device_add_class_symlinks+0x1cf/0x240
[  132.170729][T11297]  device_add+0x475/0xb50
[  132.170736][T11297]  wiphy_register+0x1ba6/0x28d0
[  132.170749][T11297]  ? __pfx_wiphy_register+0x10/0x10
[  132.170758][T11297]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  132.170767][T11297]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  132.170775][T11297]  ieee80211_register_hw+0x3425/0x4080
[  132.170791][T11297]  ? ieee80211_register_hw+0x1481/0x4080
[  132.170805][T11297]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  132.170817][T11297]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  132.170836][T11297]  ? __hrtimer_setup+0x187/0x210
[  132.170847][T11297]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  132.170863][T11297]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  132.170885][T11297]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  132.170899][T11297]  ? trace_kmalloc+0x1f/0xd0
[  132.170914][T11297]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  132.170928][T11297]  ? kstrndup+0xbf/0x160
[  132.170936][T11297]  hwsim_new_radio_nl+0xea4/0x1b10
[  132.170945][T11297]  ? __pfx___nla_validate_parse+0x10/0x10
[  132.170958][T11297]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  132.170968][T11297]  ? __nla_parse+0x40/0x60
[  132.170978][T11297]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  132.170988][T11297]  genl_family_rcv_msg_doit+0x215/0x300
[  132.170997][T11297]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  132.171007][T11297]  ? bpf_lsm_capable+0x9/0x20
[  132.171016][T11297]  ? security_capable+0x7e/0x2e0
[  132.171027][T11297]  genl_rcv_msg+0x60e/0x790
[  132.171035][T11297]  ? __pfx_genl_rcv_msg+0x10/0x10
[  132.171043][T11297]  ? __kasan_slab_alloc+0x6c/0x80
[  132.171052][T11297]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  132.171060][T11297]  ? __netlink_lookup+0xbd/0x810
[  132.171066][T11297]  ? rcu_is_watching+0x15/0xb0
[  132.171074][T11297]  netlink_rcv_skb+0x208/0x470
[  132.171084][T11297]  ? __pfx_genl_rcv_msg+0x10/0x10
[  132.171092][T11297]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  132.171103][T11297]  ? lock_release+0x4b/0x3e0
[  132.171113][T11297]  ? down_read+0x1ad/0x2e0
[  132.171120][T11297]  genl_rcv+0x28/0x40
[  132.171127][T11297]  netlink_unicast+0x82f/0x9e0
[  132.171137][T11297]  ? __pfx_netlink_unicast+0x10/0x10
[  132.171146][T11297]  ? netlink_sendmsg+0x642/0xb30
[  132.171151][T11297]  ? skb_put+0x11b/0x210
[  132.171159][T11297]  netlink_sendmsg+0x805/0xb30
[  132.171166][T11297]  ? __pfx_netlink_sendmsg+0x10/0x10
[  132.171172][T11297]  ? aa_sock_msg_perm+0xf1/0x1d0
[  132.171179][T11297]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  132.171186][T11297]  ? __pfx_netlink_sendmsg+0x10/0x10
[  132.171192][T11297]  __sock_sendmsg+0x21c/0x270
[  132.171201][T11297]  ____sys_sendmsg+0x505/0x830
[  132.171209][T11297]  ? __pfx_____sys_sendmsg+0x10/0x10
[  132.171217][T11297]  ? import_iovec+0x74/0xa0
[  132.171225][T11297]  ___sys_sendmsg+0x21f/0x2a0
[  132.171232][T11297]  ? __pfx____sys_sendmsg+0x10/0x10
[  132.171244][T11297]  ? __fget_files+0x2a/0x420
[  132.171249][T11297]  ? __fget_files+0x3a0/0x420
[  132.171256][T11297]  __x64_sys_sendmsg+0x19b/0x260
[  132.171264][T11297]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  132.171270][T11297]  ? rcu_is_watching+0x15/0xb0
[  132.171278][T11297]  ? do_user_addr_fault+0xc8a/0x1390
[  132.171289][T11297]  ? rcu_is_watching+0x15/0xb0
[  132.171295][T11297]  do_syscall_64+0xfa/0x3b0
[  132.171302][T11297]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.171309][T11297]  ? exc_page_fault+0x9f/0xf0
[  132.171318][T11297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.171325][T11297] RIP: 0033:0x7fb54958ebe9
[  132.171333][T11297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  132.171339][T11297] RSP: 002b:00007fb54a31e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  132.171348][T11297] RAX: ffffffffffffffda RBX: 00007fb5497b6180 RCX: 00007fb54958ebe9
[  132.171353][T11297] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  132.171357][T11297] RBP: 00007fb549611e19 R08: 0000000000000000 R09: 0000000000000000
[  132.171361][T11297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  132.171367][T11297] R13: 00007fb5497b6218 R14: 00007fb5497b6180 R15: 00007fff1a67ace8
[  132.171375][T11297]  </TASK>
[  132.391679][T11309] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  132.394544][T11309] IPv6: NLM_F_CREATE should be set when creating new route
[  132.400060][T11309] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  132.480895][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.524382][T11328] bridge: RTM_NEWNEIGH with invalid ether address
[  132.762385][T11369] netlink: 'syz.1.1565': attribute type 11 has an invalid length.
[  134.012171][T11449] vlan6: entered promiscuous mode
[  134.014470][T11449] bond0: entered promiscuous mode
[  134.016691][T11449] vlan6: entered allmulticast mode
[  134.030408][T11451] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  134.032991][T11451] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.141072][T11445] lo speed is unknown, defaulting to 1000
[  134.359144][T11478] lo speed is unknown, defaulting to 1000
[  134.482736][T11505] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  134.486638][T11505] tipc: Resetting bearer <eth:syzkaller0>
[  134.706556][T11531] syzkaller0: entered promiscuous mode
[  134.709311][T11531] syzkaller0: entered allmulticast mode
[  134.812127][T11533] lo speed is unknown, defaulting to 1000
[  135.021048][T11544] validate_nla: 15 callbacks suppressed
[  135.021061][T11544] netlink: 'syz.2.1627': attribute type 3 has an invalid length.
[  135.032404][T11549] vlan4: entered promiscuous mode
[  135.034219][T11549] vlan4: entered allmulticast mode
[  135.035992][T11549] hsr_slave_1: entered allmulticast mode
[  135.225572][T11556] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.229748][T11556] tipc: Disabling bearer <eth:syzkaller0>
[  135.518781][   T27] tipc: Resetting bearer <eth:syzkaller0>
[  136.338845][T11593] __nla_validate_parse: 27 callbacks suppressed
[  136.338860][T11593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1641'.
[  136.353035][T11592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1641'.
[  136.428746][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1642'.
[  137.187847][T11600] netlink: 'syz.1.1644': attribute type 2 has an invalid length.
[  137.190468][T11600] netlink: 119 bytes leftover after parsing attributes in process `syz.1.1644'.
[  137.195243][T11600] netlink: 2120 bytes leftover after parsing attributes in process `syz.1.1644'.
[  137.269440][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1643'.
[  137.274291][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1643'.
[  137.329126][T11606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1645'.
[  137.346652][T11608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1646'.
[  138.062827][T11621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1650'.
[  138.131222][T11628] netlink: 'syz.1.1652': attribute type 11 has an invalid length.
[  138.214075][T11632] netlink: 'syz.1.1654': attribute type 4 has an invalid length.
[  138.446716][T11649] netlink: 'syz.0.1658': attribute type 8 has an invalid length.
[  139.177712][T11668] syzkaller1: entered promiscuous mode
[  139.179757][T11668] syzkaller1: entered allmulticast mode
[  139.282344][T11683] xt_socket: unknown flags 0x50
[  139.284442][ T5870] bond0: (slave bond_slave_0): interface is now down
[  139.285079][T11683] bond0: entered allmulticast mode
[  139.286731][ T5870] bond0: (slave bond_slave_1): interface is now down
[  139.290076][T11683] bond_slave_0: entered allmulticast mode
[  139.292776][T11683] bond_slave_1: entered allmulticast mode
[  139.307160][ T5870] bond0: (slave bond_slave_0): interface is now down
[  139.310193][ T5870] bond0: (slave bond_slave_1): interface is now down
[  139.312712][ T5870] bond0: now running without any active interface!
[  139.339855][T11692] macsec1: entered promiscuous mode
[  139.366037][T11699] netlink: 'syz.0.1674': attribute type 8 has an invalid length.
[  139.545646][T11739] netlink: 'syz.0.1685': attribute type 1 has an invalid length.
[  139.549167][T11739] NCSI netlink: No device for ifindex 813332851
[  139.559037][T11739] bridge11: entered allmulticast mode
[  139.562400][T11739] team0: Port device bridge11 added
[  139.697234][T11749] block nbd0: not configured, cannot reconfigure
[  139.779617][T11761] netlink: 'syz.0.1693': attribute type 2 has an invalid length.
[  139.798737][T11761] syz_tun (unregistering): left promiscuous mode
[  139.818509][T11765] netlink: 'syz.2.1695': attribute type 83 has an invalid length.
[  139.956583][T11770] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (0); Ignoring new local tt entry: 02:04:00:bf:05:00
[  139.966060][T11770] netlink: 'syz.2.1697': attribute type 5 has an invalid length.
[  140.034601][T11778] validate_nla: 1 callbacks suppressed
[  140.034613][T11778] netlink: 'syz.1.1698': attribute type 10 has an invalid length.
[  140.042890][T11778] 8021q: adding VLAN 0 to HW filter on device team0
[  140.150802][T11781] lo speed is unknown, defaulting to 1000
[  140.393934][T11790] IPv6: sit4: Disabled Multicast RS
[  140.397112][T11790] sit4: entered allmulticast mode
[  140.749227][T11803] netlink: 'syz.1.1708': attribute type 1 has an invalid length.
[  141.144149][T11840] netlink: set zone limit has 4 unknown bytes
[  141.183665][T11846] pimreg: entered allmulticast mode
[  141.185824][T11835] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.189017][T11835] syzkaller0: entered promiscuous mode
[  141.190806][T11835] syzkaller0: entered allmulticast mode
[  141.206413][T11835] tipc: Resetting bearer <eth:syzkaller0>
[  141.213150][T11835] tipc: Disabling bearer <eth:syzkaller0>
[  141.314152][T11866] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  141.463879][T11884] __nla_validate_parse: 90 callbacks suppressed
[  141.463889][T11884] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1734'.
[  141.473430][T11884] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  141.508308][T11892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1736'.
[  141.511691][T11892] netlink: 'syz.1.1736': attribute type 5 has an invalid length.
[  141.514559][T11892] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1736'.
[  141.527320][T11892] geneve3: entered promiscuous mode
[  141.529364][T11892] geneve3: entered allmulticast mode
[  141.536859][T10416] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  141.541317][T10416] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  141.549936][T10416] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  141.557763][T10416] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  141.564400][T11896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1738'.
[  141.582878][T11901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1740'.
[  141.632492][T11903] tipc: Bearer <eth:team0>: already 2 bearers with priority 10
[  141.634953][T11903] tipc: Bearer <eth:team0>: trying with adjusted priority
[  141.637998][T11903] tipc: Enabling of bearer <eth:team0> rejected, max 3 bearers permitted
[  141.845399][T11931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1749'.
[  141.945602][T11935] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1750'.
[  141.965837][T11938] netlink: 'syz.1.1751': attribute type 1 has an invalid length.
[  141.996968][T11941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1752'.
[  142.000811][T11941] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1752'.
[  142.004141][T11940] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1752'.
[  142.022619][T11940] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  142.053085][T11943] netlink: 'syz.1.1753': attribute type 3 has an invalid length.
[  142.073343][T11948] netlink: 'syz.1.1754': attribute type 10 has an invalid length.
[  142.076825][T11948] dummy0: entered promiscuous mode
[  142.082342][T11948] dummy0: entered allmulticast mode
[  142.093689][T11948] team0: Port device dummy0 removed
[  142.096180][T11948] bridge0: port 1(dummy0) entered blocking state
[  142.099500][T11948] bridge0: port 1(dummy0) entered disabled state
[  142.173639][T11958] openvswitch: netlink: Multiple metadata blocks provided
[  142.196433][T11962] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  142.270407][T11976] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  142.296034][T11986] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20002
[  142.599201][T11989] netlink: 'syz.0.1768': attribute type 2 has an invalid length.
[  143.142556][T12000] vlan7: entered allmulticast mode
[  143.196083][T11999] netlink: 'syz.1.1770': attribute type 10 has an invalid length.
[  143.200012][T11999] 8021q: adding VLAN 0 to HW filter on device team0
[  143.508866][T12024] team0: Device macvlan4 is already an upper device of the team interface
[  143.736143][T12065] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.740018][T12065] syzkaller0: entered promiscuous mode
[  143.742064][T12065] syzkaller0: entered allmulticast mode
[  143.755998][T12064] tipc: Resetting bearer <eth:syzkaller0>
[  143.760901][T12064] tipc: Disabling bearer <eth:syzkaller0>
[  144.111756][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.119125][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.180981][T12125] raw_sendmsg: syz.0.1812 forgot to set AF_INET. Fix it!
[  144.895026][T12190] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  145.181869][T12202] bridge_slave_0: entered promiscuous mode
[  145.203459][T12207] netlink: 'syz.2.1836': attribute type 1 has an invalid length.
[  145.223469][T12207] bond13: (slave bridge8): making interface the new active one
[  145.227537][T12207] bond13: (slave bridge8): Enslaving as an active interface with an up link
[  145.336554][T12222] team0: entered promiscuous mode
[  145.343150][T12222] team_slave_0: entered promiscuous mode
[  145.346842][T12222] team_slave_1: entered promiscuous mode
[  145.352289][T12222] bridge11: entered promiscuous mode
[  145.355622][T12221] team0: left promiscuous mode
[  145.357356][T12221] team_slave_0: left promiscuous mode
[  145.359319][T12221] team_slave_1: left promiscuous mode
[  145.361298][T12221] bridge11: left promiscuous mode
[  145.420127][T12237] netlink: 'syz.0.1847': attribute type 4 has an invalid length.
[  145.498695][T12261] sctp: [Deprecated]: syz.2.1854 (pid 12261) Use of int in max_burst socket option.
[  145.498695][T12261] Use struct sctp_assoc_value instead
[  145.519502][T12265] pimreg: entered allmulticast mode
[  145.568355][T12271] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  145.661490][T12278] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  145.729492][T12293] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.732344][T12293] syzkaller0: entered promiscuous mode
[  145.734292][T12293] syzkaller0: entered allmulticast mode
[  145.740591][T12293] tipc: Resetting bearer <eth:syzkaller0>
[  145.743098][T12292] tipc: Resetting bearer <eth:syzkaller0>
[  145.746628][T12292] tipc: Disabling bearer <eth:syzkaller0>
[  145.826520][T12306] netlink: 'syz.1.1870': attribute type 178 has an invalid length.
[  145.833444][T12305] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  145.838589][T12305] netlink: 'syz.1.1870': attribute type 2 has an invalid length.
[  145.862564][T12310] netlink: 'syz.1.1871': attribute type 1 has an invalid length.
[  145.865399][T12310] netlink: 'syz.1.1871': attribute type 1 has an invalid length.
[  145.868309][T12310] netlink: 'syz.1.1871': attribute type 2 has an invalid length.
[  146.049011][T12335] sctp: [Deprecated]: syz.0.1879 (pid 12335) Use of int in maxseg socket option.
[  146.049011][T12335] Use struct sctp_assoc_value instead
[  146.458568][T12342] netlink: 'syz.0.1881': attribute type 15 has an invalid length.
[  146.504194][T12346] lo speed is unknown, defaulting to 1000
[  146.581071][T12346] __nla_validate_parse: 35 callbacks suppressed
[  146.581082][T12346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1883'.
[  146.754491][T12362] syzkaller1: entered promiscuous mode
[  146.756475][T12362] syzkaller1: entered allmulticast mode
[  146.809746][T12364] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1888'.
[  146.812761][T12364] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1888'.
[  146.819151][T12365] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1888'.
[  146.827334][T12365] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1888'.
[  146.905054][T12370] veth12: entered allmulticast mode
[  146.911003][T12371] netlink: 'syz.0.1889': attribute type 1 has an invalid length.
[  146.918777][T12371] 8021q: adding VLAN 0 to HW filter on device bond11
[  146.925078][T12371] bond11: (slave ip6gretap1): making interface the new active one
[  146.928348][T12371] bond11: (slave ip6gretap1): Enslaving as an active interface with an up link
[  146.933077][T12371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1889'.
[  146.936750][T12371] erspan0: entered allmulticast mode
[  146.943344][T12371] bond11: (slave erspan0): Enslaving as an active interface with an up link
[  147.662215][T12387] batman_adv: batadv0: Interface deactivated: dummy0
[  147.790456][T12374] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  147.812675][T12387] gtp1: left promiscuous mode
[  147.825085][T12387] veth7: left promiscuous mode
[  147.842707][T12387] bond6: left promiscuous mode
[  147.845051][T12387] vxcan5: left promiscuous mode
[  147.850504][T12387] syz_tun: left allmulticast mode
[  147.852674][T12387] macvtap1: left promiscuous mode
[  147.855521][T12387] macvtap1: left allmulticast mode
[  147.861686][T12387] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  147.892798][T12387] macvlan3: left promiscuous mode
[  147.894523][T12387] macvlan3: left allmulticast mode
[  147.904168][T12387] gretap1: left promiscuous mode
[  147.909243][T12387] vlan5: left allmulticast mode
[  147.911062][T12387] vlan6: left promiscuous mode
[  147.912759][T12387] bond0: left promiscuous mode
[  147.914510][T12387] vlan6: left allmulticast mode
[  147.916237][T12387] bond0: left allmulticast mode
[  147.926083][ T5870] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  147.929358][ T5870] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.932403][ T5870] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  147.935319][ T5870] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.942690][ T5870] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  147.945489][ T5870] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  148.141974][T12429] netlink: 'syz.0.1908': attribute type 32 has an invalid length.
[  148.144798][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1908'.
[  148.147982][T12429] (unnamed net_device) (uninitialized): option coupled_control: invalid value (3)
[  148.164360][T12433] syzkaller1: entered promiscuous mode
[  148.166267][T12433] syzkaller1: entered allmulticast mode
[  148.336674][T12450] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  148.381879][T12462] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1918'.
[  148.388971][T12462] geneve4: entered promiscuous mode
[  148.392706][T12462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1918'.
[  148.446451][T12475] erspan0: entered promiscuous mode
[  148.449150][T12475] vlan5: entered promiscuous mode
[  148.468429][T12474] erspan0: left allmulticast mode
[  148.498774][T12474] bond0: left allmulticast mode
[  148.500800][T12474] bond_slave_0: left allmulticast mode
[  148.502953][T12474] bond_slave_1: left allmulticast mode
[  148.548184][T12474] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  148.557420][ T5852] bond11: (slave erspan0): link status definitely down, disabling slave
[  148.560180][ T5852] ip6gretap1: entered promiscuous mode
[  148.645115][T12493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1930'.
[  148.679226][T12501] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.782080][T12519] gretap3: entered promiscuous mode
[  148.786326][T12519] bond13: (slave gretap3): making interface the new active one
[  148.791525][T12519] bond13: (slave gretap3): Enslaving as an active interface with an up link
[  149.793923][T12568] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.817751][T12574] vti1: entered promiscuous mode
[  149.819662][T12574] vti1: entered allmulticast mode
[  149.914696][T12606] kthread_run failed with err -4
[  149.932834][T12611] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  150.479206][T12716] validate_nla: 12 callbacks suppressed
[  150.479216][T12716] netlink: 'syz.1.2002': attribute type 9 has an invalid length.
[  150.486660][T12716] macvlan3: entered promiscuous mode
[  150.489048][T12716] hsr0: entered promiscuous mode
[  150.490923][T12716] macvlan3: entered allmulticast mode
[  150.492848][T12716] hsr0: entered allmulticast mode
[  150.494690][T12716] hsr_slave_0: entered allmulticast mode
[  150.503795][T12719] netlink: 'syz.1.2002': attribute type 9 has an invalid length.
[  150.509031][T12719] macvlan4: entered promiscuous mode
[  150.511013][T12719] macvlan4: entered allmulticast mode
[  150.547936][T12726] lo speed is unknown, defaulting to 1000
[  150.566849][T12729] netlink: 'syz.2.2006': attribute type 1 has an invalid length.
[  150.598610][T12741] netlink: 'syz.2.2009': attribute type 11 has an invalid length.
[  150.631791][T12747] unsupported nlmsg_type 40
[  150.697318][ T5870] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967272. macoff=96
[  150.781305][T12772] ip6gre1: entered allmulticast mode
[  150.818967][T12783] netlink: 'syz.1.2023': attribute type 1 has an invalid length.
[  150.829021][T12783] bond14: entered promiscuous mode
[  150.830798][T12783] 8021q: adding VLAN 0 to HW filter on device bond14
[  150.834509][T12783] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  150.837213][T12783] IPv6: NLM_F_CREATE should be set when creating new route
[  150.839921][T12783] IPv6: NLM_F_CREATE should be set when creating new route
[  150.843707][T12783] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  150.901469][T12796] netlink: 'syz.1.2027': attribute type 10 has an invalid length.
[  150.904475][T12796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  150.930830][T12802] netlink: 'syz.1.2030': attribute type 2 has an invalid length.
[  150.985530][T12815] tunl0: entered promiscuous mode
[  150.988017][T12815] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  151.111374][T12839] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  151.135380][T12844] openvswitch: netlink: Multiple metadata blocks provided
[  151.195735][T12852] netlink: 'syz.1.2044': attribute type 10 has an invalid length.
[  151.211845][T12852] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.217677][ T5852] bond0: (slave batadv0): interface is now down
[  151.230520][T12852] netlink: 'syz.1.2044': attribute type 10 has an invalid length.
[  151.233323][T12852] batadv0: entered promiscuous mode
[  151.235190][T12852] batadv0: entered allmulticast mode
[  151.237448][T12852] bridge0: port 2(batadv0) entered blocking state
[  151.239797][T12852] bridge0: port 2(batadv0) entered disabled state
[  151.297416][ T5852] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  151.300462][ T5852] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  151.441688][T12873] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.454151][T12876] tipc: Disabling bearer <eth:syzkaller0>
[  151.485395][T12862] lo speed is unknown, defaulting to 1000
[  151.560325][T12886] 1X: renamed from 60X
[  151.563781][T12886] 1X: entered allmulticast mode
[  151.565476][T12886] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  151.602050][T12893] __nla_validate_parse: 72 callbacks suppressed
[  151.602077][T12893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2054'.
[  151.614524][T12895] netlink: 'syz.1.2055': attribute type 2 has an invalid length.
[  151.656602][T12900] can: request_module (can-proto-3) failed.
[  151.677457][T12906] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2059'.
[  151.701391][T12915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2062'.
[  151.870958][T12933] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.2066'.
[  151.879609][T12933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2066'.
[  151.935060][T12938] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2067'.
[  151.997617][T12942] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2069'.
[  152.056850][T12947] netlink: 588 bytes leftover after parsing attributes in process `syz.2.2071'.
[  152.077374][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  152.104549][T12961] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2074'.
[  152.108331][T12961] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2074'.
[  152.171116][T12976] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.174216][T12976] syzkaller0: entered promiscuous mode
[  152.177484][T12976] syzkaller0: entered allmulticast mode
[  152.180532][T12980] siw: device registration error -23
[  152.188003][T12976] tipc: Resetting bearer <eth:syzkaller0>
[  152.190594][T12975] tipc: Resetting bearer <eth:syzkaller0>
[  152.193279][T12975] tipc: Disabling bearer <eth:syzkaller0>
[  152.312844][T12989] : renamed from pim6reg1
[  152.421822][T13006] lo speed is unknown, defaulting to 1000
[  152.584460][T13031] !: renamed from dummy0
[  152.615692][T13019] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  152.619608][T13020] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  153.294441][T13056] batadv_slave_0: entered promiscuous mode
[  153.522428][T13062] tipc: Resetting bearer <eth:syzkaller0>
[  153.554133][T13062] hsr0: left allmulticast mode
[  153.555832][T13062] hsr_slave_0: left allmulticast mode
[  153.558618][T13062] hsr0: left promiscuous mode
[  153.563928][T10901] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  153.567673][T10901] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  153.571232][T10901] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  153.574837][T10901] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  153.626415][T13072] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  153.791563][T13097] syzkaller1: entered promiscuous mode
[  153.793371][T13097] syzkaller1: entered allmulticast mode
[  154.203370][T13137] syzkaller0: create flow: hash 558567897 index 1
[  154.211956][T13137] syzkaller0: delete flow: hash 558567897 index 1
[  154.342437][T13146] pim6reg1: entered promiscuous mode
[  154.344501][T13146] pim6reg1: entered allmulticast mode
[  154.350576][T13146] veth18: entered allmulticast mode
[  155.390894][T13193] delete_channel: no stack
[  155.771299][T13240] validate_nla: 12 callbacks suppressed
[  155.771308][T13240] netlink: 'syz.2.2143': attribute type 3 has an invalid length.
[  155.855001][T13249] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  155.884694][T13255] ip6tnl3: entered promiscuous mode
[  155.991927][T13266] bridge0: port 1(ipvlan2) entered blocking state
[  155.994084][T13266] bridge0: port 1(ipvlan2) entered disabled state
[  155.996251][T13266] ipvlan2: entered allmulticast mode
[  155.998111][T13266] bridge0: entered allmulticast mode
[  156.000287][T13266] ipvlan2: left allmulticast mode
[  156.001898][T13266] bridge0: left allmulticast mode
[  156.056460][T13268] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.064286][T13267] tipc: Resetting bearer <eth:syzkaller0>
[  156.069114][T13267] tipc: Disabling bearer <eth:syzkaller0>
[  156.114880][T13278] netlink: 'syz.0.2167': attribute type 16 has an invalid length.
[  156.235420][T13291] netlink: 'syz.0.2172': attribute type 8 has an invalid length.
[  156.828438][T13312] __nla_validate_parse: 30 callbacks suppressed
[  156.828452][T13312] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2179'.
[  156.963672][T13323] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2183'.
[  156.977781][T13323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2183'.
[  157.123009][T13340] bond0: entered promiscuous mode
[  157.146081][T13350] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2191'.
[  157.147624][T13352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2192'.
[  157.149094][T13350] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2191'.
[  157.155316][T13350] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2191'.
[  157.161259][T13350] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  157.164130][T13350] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  157.170183][T13350] netlink: 'syz.1.2191': attribute type 4 has an invalid length.
[  157.172876][T13350] netlink: 'syz.1.2191': attribute type 4 has an invalid length.
[  157.176794][T12388] lo speed is unknown, defaulting to 1000
[  157.179023][T12388] syz2: Port: 1 Link ACTIVE
[  157.207699][T13350] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  157.278244][T13368] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.280883][T13368] syzkaller0: entered promiscuous mode
[  157.282663][T13368] syzkaller0: entered allmulticast mode
[  157.286872][T13368] tipc: Resetting bearer <eth:syzkaller0>
[  157.296409][T13368] tipc: Resetting bearer <eth:syzkaller0>
[  157.296934][T13374] IPv6: Can't replace route, no match found
[  157.302932][T13368] tipc: Disabling bearer <eth:syzkaller0>
[  157.307909][T13374] pimreg: left allmulticast mode
[  157.329962][T13376] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2201'.
[  157.333473][T13376] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2201'.
[  157.350197][T13378] openvswitch: netlink: Message has 20 unknown bytes.
[  157.352526][T13378] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  157.391565][T13385] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2205'.
[  157.396737][T13385] netlink: 'syz.0.2205': attribute type 16 has an invalid length.
[  157.400785][T13385] netlink: 'syz.0.2205': attribute type 17 has an invalid length.
[  157.421295][T13387] IPv6: sit4: Disabled Multicast RS
[  157.450079][T13390] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  157.453769][T13390] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.515886][T13390] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  157.519358][T13390] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.563222][T13390] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  157.566520][T13390] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.615652][T13390] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  157.619143][T13390] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.625369][T13404] syzkaller1: entered promiscuous mode
[  157.627526][T13404] syzkaller1: entered allmulticast mode
[  157.722823][T10901] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  157.726381][T10901] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.733072][T10416] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  157.736563][T10416] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.744599][T10416] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  157.748242][T10416] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.754591][T10416] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  157.759069][T10416] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.885720][T13425] netlink: 'syz.1.2220': attribute type 11 has an invalid length.
[  157.885880][T13423] vti2: entered promiscuous mode
[  157.890539][T13423] vti2: entered allmulticast mode
[  157.916955][T13432] syzkaller1: entered promiscuous mode
[  157.919348][T13432] syzkaller1: entered allmulticast mode
[  158.097709][T13444] netlink: 'syz.1.2227': attribute type 6 has an invalid length.
[  158.125265][T13449] netlink: 'syz.1.2228': attribute type 27 has an invalid length.
[  158.220074][T13458] bridge0: port 2(batadv0) entered disabled state
[  158.224503][T13458] bridge0: port 1(0!) entered disabled state
[  158.272781][T13459] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  158.396344][T13461] ieee802154 phy0 wpan0: encryption failed: -126
[  159.677286][ T5870] ip6gretap1: left promiscuous mode
[  160.296839][T13507] 8021q: adding VLAN 0 to HW filter on device bond16
[  160.300064][T13507] bond15: (slave bond16): making interface the new active one
[  160.302583][T13507] bond15: (slave bond16): Enslaving as an active interface with an up link
[  160.310948][T13507] bond15: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  160.314832][T13507] bond15: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  161.605428][T13522] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  161.609911][T13522] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  161.613186][T13522] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  161.616304][T13522] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  161.619876][T13522] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  161.624680][T13522] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  161.627662][T13522] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  161.630502][T13523] lo speed is unknown, defaulting to 1000
[  161.630584][T13522] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  161.640628][T13522] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  161.648173][T13522] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  161.651236][T13522] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  161.659585][T13522] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  161.899380][T13537] __nla_validate_parse: 10 callbacks suppressed
[  161.899391][T13537] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2255'.
[  162.008494][T13541] validate_nla: 3 callbacks suppressed
[  162.008504][T13541] netlink: 'syz.0.2257': attribute type 1 has an invalid length.
[  162.018608][T13541] 8021q: adding VLAN 0 to HW filter on device bond12
[  162.024496][T13541] macvlan2: entered promiscuous mode
[  162.026439][T13541] macvlan2: entered allmulticast mode
[  162.029061][T13541] bond12: entered promiscuous mode
[  162.030956][T13541] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  162.034270][T13541] bond12: left promiscuous mode
[  162.157899][T13561] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2263'.
[  162.243711][T13570] : renamed from bond_slave_0
[  162.245945][T13568] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  162.311800][T13547] syzkaller1: entered allmulticast mode
[  162.340010][T13573] netlink: 'syz.0.2266': attribute type 13 has an invalid length.
[  162.343793][T13573] netlink: 'syz.0.2266': attribute type 17 has an invalid length.
[  162.370306][T13573] 8021q: adding VLAN 0 to HW filter on device team0
[  162.374996][T13573] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  162.395285][T13572] lo speed is unknown, defaulting to 1000
[  162.427335][T10416] bond11: (slave erspan0): failed to get link speed/duplex
[  162.434703][T13572] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2266'.
[  162.537417][T10901] bond11: (slave erspan0): failed to get link speed/duplex
[  162.647141][T10416] bond11: (slave erspan0): failed to get link speed/duplex
[  162.757241][ T5870] bond11: (slave erspan0): failed to get link speed/duplex
[  162.867268][T10901] bond11: (slave erspan0): failed to get link speed/duplex
[  162.977259][T10901] bond11: (slave erspan0): failed to get link speed/duplex
[  163.017617][T13583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2268'.
[  163.030265][T13588] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2269'.
[  163.059919][T13592] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) !
[  163.083419][T13599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2274'.
[  163.084028][T13597] netlink: 'syz.1.2273': attribute type 4 has an invalid length.
[  163.096820][  T793] lo speed is unknown, defaulting to 1000
[  163.097740][ T5852] bond11: (slave erspan0): failed to get link speed/duplex
[  163.099948][  T793] syz2: Port: 1 Link DOWN
[  163.106024][T13597] netlink: 'syz.1.2273': attribute type 4 has an invalid length.
[  163.109469][  T793] lo speed is unknown, defaulting to 1000
[  163.111326][  T793] syz2: Port: 1 Link ACTIVE
[  163.156281][T13608] netlink: 'syz.0.2277': attribute type 27 has an invalid length.
[  163.172720][T13608] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  163.189256][T13608] netlink: 'syz.0.2277': attribute type 5 has an invalid length.
[  163.212147][ T5870] bond11: (slave erspan0): failed to get link speed/duplex
[  163.238109][T13617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2280'.
[  163.332645][T13632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2286'.
[  163.341519][ T6491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.344737][ T6491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.887526][T13657] netlink: 38043 bytes leftover after parsing attributes in process `syz.1.2294'.
[  164.003796][T13671] syzkaller1: entered promiscuous mode
[  164.005539][T13671] syzkaller1: entered allmulticast mode
[  164.421775][T13681] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  164.440787][T13682] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  164.470925][T13686] netlink: 'syz.1.2303': attribute type 10 has an invalid length.
[  164.488769][T13689] netlink: 'syz.2.2305': attribute type 23 has an invalid length.
[  164.516613][T13692] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2306'.
[  164.883144][T13750] 8021q: adding VLAN 0 to HW filter on device bond13
[  164.893765][T13754] 8021q: adding VLAN 0 to HW filter on device bond13
[  164.896704][T13754] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address
[  164.901811][T13754] bond13: (slave vxcan3): Error -95 calling set_mac_address
[  164.913042][T13753] lo speed is unknown, defaulting to 1000
[  165.851864][T13802] batadv_slave_0: entered promiscuous mode
[  165.854167][T13802] batadv_slave_0: left promiscuous mode
[  165.862966][T13801] delete_channel: no stack
[  165.878399][T13807] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.881020][T13806] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  165.884401][T13807] syzkaller0: entered promiscuous mode
[  165.886505][T13807] syzkaller0: entered allmulticast mode
[  165.898390][T13806] tipc: Resetting bearer <eth:syzkaller0>
[  165.907531][T13805] tipc: Resetting bearer <eth:syzkaller0>
[  165.911621][T13805] tipc: Disabling bearer <eth:syzkaller0>
[  166.136024][T13839] syzkaller1: entered promiscuous mode
[  166.139113][T13839] syzkaller1: entered allmulticast mode
[  166.173972][T13852] sctp: [Deprecated]: syz.2.2353 (pid 13852) Use of int in maxseg socket option.
[  166.173972][T13852] Use struct sctp_assoc_value instead
[  166.225763][T13865] netlink: 'syz.1.2357': attribute type 11 has an invalid length.
[  166.353791][T13882] lo speed is unknown, defaulting to 1000
[  166.421051][T13882] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.442914][T13882] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.445815][T13882] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address
[  166.453804][T13882] bond0: (slave vxcan1): Error -95 calling set_mac_address
[  166.583841][T10901] bond0 (unregistering): Released all slaves
[  166.648786][T13930] IPVS: set_ctl: invalid protocol: 50 172.30.0.1:20001
[  166.790965][T13945] lo speed is unknown, defaulting to 1000
[  166.794965][T13954] IPVS: persistence engine module ip_vs_pe_ not found
[  166.840108][T13961] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  166.842939][T13961] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  166.884743][T13945] macvtap0: entered allmulticast mode
[  166.886988][T13945] mac80211_hwsim hwsim19 wlan0: entered allmulticast mode
[  166.890972][T13945] mac80211_hwsim hwsim19 wlan0: left allmulticast mode
[  167.045884][T13965] batman_adv: batadv0: Removing interface: dummy0
[  167.049868][T13965] bond2: (slave bridge5): Releasing active interface
[  167.053643][T13965] bond6: (slave vxcan5): Releasing backup interface
[  167.057458][T13965] batman_adv: batadv0: Removing interface: ip6gretap1
[  167.061315][T13965] bond11: (slave bond12): Releasing backup interface
[  167.064851][T13965] bond13: (slave bridge8): Releasing active interface
[  167.077681][T13965] team0: Mode changed to "activebackup"
[  167.314043][T13975] __nla_validate_parse: 55 callbacks suppressed
[  167.314057][T13975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2388'.
[  167.412188][T13985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2390'.
[  167.447652][T10416] net_ratelimit: 40 callbacks suppressed
[  167.447666][T10416] bond11: (slave erspan0): failed to get link speed/duplex
[  167.552123][T13997] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2394'.
[  167.558002][T10416] bond11: (slave erspan0): failed to get link speed/duplex
[  167.594910][T14002] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2396'.
[  167.597987][T14002] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2396'.
[  167.601184][T14002] validate_nla: 6 callbacks suppressed
[  167.601193][T14002] netlink: 'syz.2.2396': attribute type 6 has an invalid length.
[  167.606250][T14002] netlink: 'syz.2.2396': attribute type 5 has an invalid length.
[  167.609907][T14002] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2396'.
[  167.667205][ T5852] bond11: (slave erspan0): failed to get link speed/duplex
[  167.706140][T14011] bridge0: port 1(ipvlan2) entered blocking state
[  167.710650][T14011] bridge0: port 1(ipvlan2) entered disabled state
[  167.713391][T14011] ipvlan2: entered allmulticast mode
[  167.715554][T14011] bridge0: entered allmulticast mode
[  167.718976][T14011] ipvlan2: left allmulticast mode
[  167.721282][T14011] bridge0: left allmulticast mode
[  167.760094][T14013] openvswitch: netlink: Missing key (keys=40, expected=80)
[  167.779744][ T5871] bond11: (slave erspan0): failed to get link speed/duplex
[  167.897236][T10416] bond11: (slave erspan0): failed to get link speed/duplex
[  168.007122][ T5871] bond11: (slave erspan0): failed to get link speed/duplex
[  168.117146][ T5871] bond11: (slave erspan0): failed to get link speed/duplex
[  168.237187][ T5871] bond11: (slave erspan0): failed to get link speed/duplex
[  168.347187][ T5871] bond11: (slave erspan0): failed to get link speed/duplex
[  168.529059][T14019] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2402'.
[  168.551891][T14025] pimreg: left allmulticast mode
[  168.560271][T14020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2404'.
[  168.580975][T14030] IPv6: Can't replace route, no match found
[  168.608100][T14025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2406'.
[  168.644622][T14030] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2407'.
[  168.725814][T14052] netlink: 'syz.2.2411': attribute type 13 has an invalid length.
[  168.729526][T14052] netlink: 'syz.2.2411': attribute type 17 has an invalid length.
[  168.740326][T14052] erspan0: left promiscuous mode
[  168.748577][T14052] syz_tun: left promiscuous mode
[  168.752776][T14052] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.756108][T14052] 8021q: adding VLAN 0 to HW filter on device team0
[  168.760668][T14052] 1X: left allmulticast mode
[  168.800198][T14052] lo speed is unknown, defaulting to 1000
[  168.852583][T14063] lo speed is unknown, defaulting to 1000
[  168.899322][T14067] bridge: RTM_NEWNEIGH with invalid ether address
[  169.360667][T14096] geneve4: entered promiscuous mode
[  169.620847][T14109] wg1: entered promiscuous mode
[  169.626181][T14109] wg1: entered allmulticast mode
[  170.407828][ T5844] Bluetooth: hci1: command 0x0406 tx timeout
[  170.510667][T14139] netlink: 'syz.1.2443': attribute type 8 has an invalid length.
[  170.807694][T14145] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  170.839697][T14152] netlink: 'syz.1.2446': attribute type 11 has an invalid length.
[  170.928076][T14145] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  171.026569][T10901] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  171.030024][T10901] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  171.035917][T10901] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  171.045196][T10901] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  171.048132][T10901] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  171.051050][T10901] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  171.054069][T10901] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  171.056847][T10901] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  171.316747][T14169] syzkaller0: entered promiscuous mode
[  171.318667][T14169] syzkaller0: entered allmulticast mode
[  172.344843][T14220] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20002
[  172.349433][T14220] IPv6: Can't replace route, no match found
[  172.420820][T14229] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.424116][T14229] syzkaller0: entered promiscuous mode
[  172.426317][T14229] syzkaller0: entered allmulticast mode
[  172.432683][T14229] tipc: Resetting bearer <eth:syzkaller0>
[  172.435754][T14228] tipc: Resetting bearer <eth:syzkaller0>
[  172.439764][T14228] tipc: Disabling bearer <eth:syzkaller0>
[  172.633316][T14238] __nla_validate_parse: 8 callbacks suppressed
[  172.633328][T14238] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2468'.
[  172.648523][T14238] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.652251][T14239] syzkaller0: entered promiscuous mode
[  172.654537][T14239] syzkaller0: entered allmulticast mode
[  172.676827][T14237] tipc: Resetting bearer <eth:syzkaller0>
[  172.681297][T14237] tipc: Disabling bearer <eth:syzkaller0>
[  172.804014][T14251] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2472'.
[  172.820963][T14251] netlink: 'syz.2.2472': attribute type 12 has an invalid length.
[  172.823789][T14251] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2472'.
[  172.865842][T14261] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  172.871146][T14261] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  172.914282][T14265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2478'.
[  172.993172][T14273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2480'.
[  173.000609][T14274] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR
[  173.699866][T14289] netlink: 'syz.1.2481': attribute type 5 has an invalid length.
[  173.753207][T14291] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2483'.
[  173.791708][T14301] tipc: Can't bind to reserved service type 1
[  173.827331][T14301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2485'.
[  173.863224][T14304] syzkaller0: entered promiscuous mode
[  173.865463][T14304] syzkaller0: entered allmulticast mode
[  173.947275][T14301] block nbd0: server does not support multiple connections per device.
[  173.950756][T14301] block nbd0: shutting down sockets
[  174.036490][T14311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2492'.
[  174.054295][T14311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2492'.
[  174.121566][T14333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2495'.
[  174.350814][T14350] lo speed is unknown, defaulting to 1000
[  174.435538][T14360] net_ratelimit: 22 callbacks suppressed
[  174.435548][T14360] netlink: set zone limit has 4 unknown bytes
[  174.435667][T14362] ieee802154 phy0 wpan0: encryption failed: -22
[  174.442503][T14362] ieee802154 phy0 wpan0: encryption failed: -22
[  174.550555][T14374] netlink: set zone limit has 4 unknown bytes
[  174.562520][T10901] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  175.419826][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.422759][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.544590][T14419] netlink: 'syz.2.2518': attribute type 13 has an invalid length.
[  175.548115][T14419] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  175.581427][T14421] ip_vti0: Master is either lo or non-ether device
[  175.632946][T14428] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.635655][T14428] syzkaller0: entered promiscuous mode
[  175.638962][T14428] syzkaller0: entered allmulticast mode
[  175.649164][T14428] tipc: Resetting bearer <eth:syzkaller0>
[  175.653554][T14428] tipc: Disabling bearer <eth:syzkaller0>
[  175.853766][T14441] lo speed is unknown, defaulting to 1000
[  176.013434][T14449] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  176.016736][T14449] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  176.019341][T14449] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  176.795732][T14461] netlink: 'syz.2.2534': attribute type 1 has an invalid length.
[  176.896117][T14465] pim6reg9: entered allmulticast mode
[  176.898428][T14465] netlink: 'syz.2.2536': attribute type 2 has an invalid length.
[  176.900920][T14465] netlink: 'syz.2.2536': attribute type 1 has an invalid length.
[  176.931424][T14471] netlink: 'syz.0.2539': attribute type 10 has an invalid length.
[  176.934139][T14474] netlink: 'syz.0.2539': attribute type 10 has an invalid length.
[  176.937447][T14474] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[  176.939790][T14474] bond0: (slave wlan1): Enslaving as an active interface with a down link
[  176.952860][T14477] netlink: 'syz.2.2541': attribute type 4 has an invalid length.
[  176.955529][T14478] netlink: 'syz.2.2541': attribute type 4 has an invalid length.
[  177.031965][T10901] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  177.034556][T10901] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  177.039117][T10901] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  177.046003][T10901] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  177.262156][T14498] hsr_slave_0: left promiscuous mode
[  177.264419][T14498] hsr_slave_1: left promiscuous mode
[  177.829916][T14500] __nla_validate_parse: 88 callbacks suppressed
[  177.829933][T14500] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2550'.
[  178.177501][T14514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2556'.
[  178.182404][T14514] vlan7: entered allmulticast mode
[  178.184256][T14514] bridge0: entered allmulticast mode
[  178.598952][T14550] validate_nla: 4 callbacks suppressed
[  178.599026][T14550] netlink: 'syz.2.2567': attribute type 12 has an invalid length.
[  178.604088][T14550] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2567'.
[  178.739312][T14565] netlink: 'syz.2.2572': attribute type 7 has an invalid length.
[  178.742599][T14565] netlink: 'syz.2.2572': attribute type 8 has an invalid length.
[  178.745878][T14565] netlink: 'syz.2.2572': attribute type 15 has an invalid length.
[  178.752508][T14564] netlink: 'syz.2.2572': attribute type 7 has an invalid length.
[  178.755813][T14564] netlink: 'syz.2.2572': attribute type 8 has an invalid length.
[  178.761385][T14564] netlink: 'syz.2.2572': attribute type 15 has an invalid length.
[  178.768231][T14565] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2572'.
[  178.892165][ T5844] Bluetooth: hci2: link tx timeout
[  178.893978][ T5844] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  178.896588][ T5844] Bluetooth: hci2: link tx timeout
[  178.898395][ T5844] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  178.901421][ T5844] Bluetooth: hci2: link tx timeout
[  178.903165][ T5844] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  178.905707][ T5844] Bluetooth: hci2: link tx timeout
[  178.908683][T14585] openvswitch: netlink: VXLAN extension 2 out of range max 1
[  178.909287][ T5844] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  178.913877][ T5844] Bluetooth: hci2: link tx timeout
[  178.916912][ T5844] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  178.920284][ T5844] Bluetooth: hci2: link tx timeout
[  178.922062][ T5844] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  178.924621][ T5844] Bluetooth: hci2: link tx timeout
[  178.926329][ T5844] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  178.929734][ T5844] Bluetooth: hci2: link tx timeout
[  178.931676][ T5844] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  179.619183][T14600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2586'.
[  179.665280][T14611] netlink: 'syz.2.2590': attribute type 1 has an invalid length.
[  179.692498][T14618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2592'.
[  179.735242][T14623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2594'.
[  179.739027][T14623] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2594'.
[  179.742230][T14623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2594'.
[  179.745099][T14623] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2594'.
[  179.767560][T14627] netlink: 'syz.0.2595': attribute type 12 has an invalid length.
[  179.817606][T14631] IPv6: sit5: Disabled Multicast RS
[  179.819728][T14631] sit5: entered allmulticast mode
[  179.926239][T14639] syzkaller0: entered promiscuous mode
[  179.928632][T14639] syzkaller0: entered allmulticast mode
[  179.932473][T14641] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  180.000224][T14650] netlink: 'syz.0.2605': attribute type 12 has an invalid length.
[  180.121258][T14673] bridge0: port 1(macvlan2) entered blocking state
[  180.126919][T14673] bridge0: port 1(macvlan2) entered disabled state
[  180.131215][T14673] macvlan2: entered allmulticast mode
[  180.133535][T14673] bridge0: entered allmulticast mode
[  180.136374][T14673] macvlan2: left allmulticast mode
[  180.138780][T14673] bridge0: left allmulticast mode
[  180.797114][ T5844] Bluetooth: hci2: command 0x0405 tx timeout
[  181.010550][T14739] lo speed is unknown, defaulting to 1000
[  181.128930][T14754] team1: entered promiscuous mode
[  181.131160][T14754] team1: entered allmulticast mode
[  181.179600][T14763] netlink: 'syz.0.2641': attribute type 11 has an invalid length.
[  181.825508][T14775] lo speed is unknown, defaulting to 1000
[  182.227180][ T5852] syzkaller0: tun_net_xmit 76
[  182.228859][ T5852] syzkaller0: tun_net_xmit 48
[  182.230511][T14816] syzkaller0: tun_net_xmit 76
[  182.232479][T14816] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.239952][T14815] tipc: Resetting bearer <eth:syzkaller0>
[  182.252896][T14815] tipc: Disabling bearer <eth:syzkaller0>
[  182.384246][T14821] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.386720][T14821] syzkaller0: entered promiscuous mode
[  182.389300][T14821] syzkaller0: entered allmulticast mode
[  182.395268][T14821] tipc: Resetting bearer <eth:syzkaller0>
[  182.398050][T14820] tipc: Resetting bearer <eth:syzkaller0>
[  182.401775][T14820] tipc: Disabling bearer <eth:syzkaller0>
[  182.439846][T14823] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.616786][T14841] ieee802154 phy0 wpan0: encryption failed: -90
[  182.838436][T14855] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  182.840870][T14855] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  182.846851][T14856] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  182.865129][T14862] sctp: [Deprecated]: syz.1.2676 (pid 14862) Use of int in maxseg socket option.
[  182.865129][T14862] Use struct sctp_assoc_value instead
[  182.873050][T14860] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  182.878184][ T5844] Bluetooth: hci2: command 0x0405 tx timeout
[  183.062148][T14877] __nla_validate_parse: 107 callbacks suppressed
[  183.062158][T14877] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2680'.
[  183.306234][T14879] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2681'.
[  183.559357][T14901] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2688'.
[  183.691298][T14915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2693'.
[  183.696490][T14915] bridge0: port 1(macvlan4) entered blocking state
[  183.698965][T14915] bridge0: port 1(macvlan4) entered disabled state
[  183.701287][T14915] macvlan4: entered allmulticast mode
[  183.703510][T14915] macvlan4: left allmulticast mode
[  183.806824][T14925] validate_nla: 16 callbacks suppressed
[  183.806834][T14925] netlink: 'syz.1.2697': attribute type 12 has an invalid length.
[  183.812866][T14925] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2697'.
[  183.862138][T14928] netlink: 'syz.1.2698': attribute type 12 has an invalid length.
[  183.864715][T14928] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2698'.
[  183.931423][T14931] netlink: 'syz.1.2699': attribute type 3 has an invalid length.
[  184.026678][T14943] 8021q: adding VLAN 0 to HW filter on device bond18
[  184.048341][T14946] netlink: 'syz.1.2704': attribute type 12 has an invalid length.
[  184.051183][T14946] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2704'.
[  184.092174][T14948] netlink: 'syz.1.2705': attribute type 12 has an invalid length.
[  184.095006][T14948] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2705'.
[  184.142074][T14950] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2706'.
[  184.173737][T14956] block nbd1: Unsupported socket: shutdown callout must be supported.
[  184.179160][T14956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2708'.
[  184.191287][T14956] lo speed is unknown, defaulting to 1000
[  184.300868][T14959] GUP no longer grows the stack in syz.1.2709 (14959): 200000003000-20000000a000 (200000001000)
[  184.304975][T14959] CPU: 0 UID: 0 PID: 14959 Comm: syz.1.2709 Not tainted syzkaller #0 PREEMPT(full) 
[  184.304987][T14959] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  184.304992][T14959] Call Trace:
[  184.304995][T14959]  <TASK>
[  184.304999][T14959]  dump_stack_lvl+0x189/0x250
[  184.305011][T14959]  ? __pfx_dump_stack_lvl+0x10/0x10
[  184.305020][T14959]  ? __pfx__printk+0x10/0x10
[  184.305031][T14959]  ? find_vma+0xe7/0x160
[  184.305045][T14959]  ? unwind_next_frame+0xa5/0x2390
[  184.305061][T14959]  __get_user_pages+0x24d0/0x2ce0
[  184.305075][T14959]  ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190
[  184.305091][T14959]  ? __gup_longterm_locked+0xc68/0x1660
[  184.305109][T14959]  ? rcu_is_watching+0x15/0xb0
[  184.305121][T14959]  __gup_longterm_locked+0xde9/0x1660
[  184.305138][T14959]  ? sanity_check_pinned_pages+0x123a/0x1300
[  184.305151][T14959]  gup_fast_fallback+0x1e6a/0x2010
[  184.305164][T14959]  ? __pfx_gup_fast_fallback+0x10/0x10
[  184.305172][T14959]  ? stack_trace_save+0x9c/0xe0
[  184.305180][T14959]  ? __pfx_stack_trace_save+0x10/0x10
[  184.305189][T14959]  ? pin_user_pages_fast+0x4d/0xb0
[  184.305198][T14959]  iov_iter_extract_pages+0x35a/0x5e0
[  184.305207][T14959]  extract_iter_to_sg+0xe46/0x24e0
[  184.305220][T14959]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  184.305233][T14959]  ? __asan_memset+0x22/0x50
[  184.305241][T14959]  af_alg_get_rsgl+0x436/0x810
[  184.305253][T14959]  aead_recvmsg+0x4cc/0x13f0
[  184.305263][T14959]  ? rcu_is_watching+0x15/0xb0
[  184.305271][T14959]  ? __pfx_aead_recvmsg+0x10/0x10
[  184.305282][T14959]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  184.305293][T14959]  ? security_socket_recvmsg+0x7e/0x2e0
[  184.305305][T14959]  ? __pfx_aead_recvmsg+0x10/0x10
[  184.305319][T14959]  sock_recvmsg_nosec+0x186/0x1c0
[  184.305336][T14959]  ____sys_recvmsg+0x3aa/0x460
[  184.305350][T14959]  ? __pfx_____sys_recvmsg+0x10/0x10
[  184.305365][T14959]  ? import_iovec+0x74/0xa0
[  184.305377][T14959]  ___sys_recvmsg+0x1b5/0x510
[  184.305391][T14959]  ? __pfx____sys_recvmsg+0x10/0x10
[  184.305401][T14959]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  184.305418][T14959]  ? __fget_files+0x2a/0x420
[  184.305429][T14959]  ? rcu_is_watching+0x15/0xb0
[  184.305436][T14959]  ? lock_release+0x4b/0x3e0
[  184.305446][T14959]  ? __might_fault+0xcc/0x130
[  184.305455][T14959]  do_recvmmsg+0x307/0x770
[  184.305464][T14959]  ? __pfx_do_recvmmsg+0x10/0x10
[  184.305471][T14959]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[  184.305484][T14959]  ? __pfx_do_futex+0x10/0x10
[  184.305495][T14959]  __x64_sys_recvmmsg+0x190/0x240
[  184.305502][T14959]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  184.305511][T14959]  ? rcu_is_watching+0x15/0xb0
[  184.305518][T14959]  do_syscall_64+0xfa/0x3b0
[  184.305525][T14959]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.305531][T14959]  ? exc_page_fault+0x9f/0xf0
[  184.305541][T14959]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.305548][T14959] RIP: 0033:0x7fbebfb8ebe9
[  184.305555][T14959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  184.305561][T14959] RSP: 002b:00007fbec0a67038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  184.305570][T14959] RAX: ffffffffffffffda RBX: 00007fbebfdb5fa0 RCX: 00007fbebfb8ebe9
[  184.305575][T14959] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000009
[  184.305580][T14959] RBP: 00007fbebfc11e19 R08: 0000000000000000 R09: 0000000000000000
[  184.305584][T14959] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  184.305589][T14959] R13: 00007fbebfdb6038 R14: 00007fbebfdb5fa0 R15: 00007fff393fce08
[  184.305596][T14959]  </TASK>
[  184.957986][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  184.999942][T15031] netlink: 'syz.1.2734': attribute type 12 has an invalid length.
[  185.003749][T15027] netlink: 'syz.2.2733': attribute type 6 has an invalid length.
[  185.020696][T15034] tipc: Disabling bearer <eth:macvtap0>
[  186.125292][T15093] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  186.155236][T15099] netlink: 'syz.0.2757': attribute type 12 has an invalid length.
[  186.288766][T15105] netlink: 'syz.1.2760': attribute type 1 has an invalid length.
[  186.298990][T15105] 8021q: adding VLAN 0 to HW filter on device bond19
[  186.553279][T15137] tap0: tun_chr_ioctl cmd 1074025677
[  186.555103][T15137] tap0: linktype set to 776
[  186.635691][T15155] netlink: 'syz.2.2774': attribute type 1 has an invalid length.
[  186.668535][T15162] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  186.674279][T15162] geneve4: entered promiscuous mode
[  186.866088][T15197] can: request_module (can-proto-5) failed.
[  186.875467][T15198] can: request_module (can-proto-5) failed.
[  186.880952][T15197] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  186.973570][T15207] syzkaller0: entered promiscuous mode
[  186.975492][T15207] syzkaller0: entered allmulticast mode
[  187.891846][T15252] lo speed is unknown, defaulting to 1000
[  188.086197][T15261] sctp: [Deprecated]: syz.2.2813 (pid 15261) Use of struct sctp_assoc_value in delayed_ack socket option.
[  188.086197][T15261] Use struct sctp_sack_info instead
[  188.245860][T15279] syzkaller1: entered promiscuous mode
[  188.250753][T15279] syzkaller1: entered allmulticast mode
[  188.413022][T15295] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  188.416589][T15297] syzkaller0: entered promiscuous mode
[  188.419413][T15297] syzkaller0: entered allmulticast mode
[  188.424554][T15296] tipc: Resetting bearer <eth:syzkaller0>
[  188.426771][T15295] sch_tbf: burst 151 is lower than device syzkaller0 mtu (313) !
[  188.430194][T15299] __nla_validate_parse: 32 callbacks suppressed
[  188.430201][T15299] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2824'.
[  188.441902][T15295] tipc: Resetting bearer <eth:syzkaller0>
[  188.445680][T15295] tipc: Disabling bearer <eth:syzkaller0>
[  188.452394][T15302] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2825'.
[  188.479324][T15307] veth0_to_team: left allmulticast mode
[  188.635665][T15324] syzkaller1: entered promiscuous mode
[  188.639159][T15324] syzkaller1: entered allmulticast mode
[  188.648414][T15327] vlan5: entered allmulticast mode
[  188.650118][T15327] bridge_slave_0: entered allmulticast mode
[  188.741725][T15342] IPVS: Error connecting to the multicast addr
[  188.959393][T15358] syzkaller0: entered promiscuous mode
[  188.961343][T15358] syzkaller0: entered allmulticast mode
[  189.197174][ T5844] Bluetooth: hci2: command 0x0405 tx timeout
[  189.630759][T15382] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2850'.
[  189.633553][T15382] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2850'.
[  189.636653][T15383] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2850'.
[  189.639879][T15383] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2850'.
[  189.643349][T15382] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2850'.
[  189.676246][T15390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2852'.
[  189.682758][T15390] validate_nla: 13 callbacks suppressed
[  189.682766][T15390] netlink: 'syz.0.2852': attribute type 2 has an invalid length.
[  190.561179][T15407] netlink: 'syz.0.2858': attribute type 10 has an invalid length.
[  190.563816][T15407] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2858'.
[  190.566887][T15407] dummy0: entered promiscuous mode
[  190.570995][T15407] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  190.631149][T15411] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2858'.
[  192.225797][T15447] netlink: 'syz.2.2871': attribute type 12 has an invalid length.
[  192.483107][T15478] bond0: (slave wlan1): Releasing backup interface
[  192.485642][T15478] mac80211_hwsim hwsim6 wlan1 (unregistering): left promiscuous mode
[  193.619752][T15535] __nla_validate_parse: 3 callbacks suppressed
[  193.619762][T15535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2901'.
[  193.924812][T15558] netlink: 410 bytes leftover after parsing attributes in process `syz.0.2908'.
[  193.931207][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  194.060179][T15570] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2912'.
[  194.063361][T15571] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2912'.
[  194.287751][T15587] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2918'.
[  194.292765][T15587] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2918'.
[  194.387945][T15594] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  194.422244][T15590] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.495592][T15603] lo speed is unknown, defaulting to 1000
[  194.559468][T15603] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2923'.
[  194.633021][T15614] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  194.649212][T15616] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  194.724246][T15574] syz.1.2913 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  194.736782][T15574] CPU: 1 UID: 0 PID: 15574 Comm: syz.1.2913 Not tainted syzkaller #0 PREEMPT(full) 
[  194.736794][T15574] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  194.736799][T15574] Call Trace:
[  194.736802][T15574]  <TASK>
[  194.736805][T15574]  dump_stack_lvl+0x189/0x250
[  194.736818][T15574]  ? __pfx_dump_stack_lvl+0x10/0x10
[  194.736826][T15574]  ? __pfx__printk+0x10/0x10
[  194.736837][T15574]  ? rcu_is_watching+0x15/0xb0
[  194.736844][T15574]  dump_header+0xd3/0x480
[  194.736855][T15574]  oom_kill_process+0x387/0x920
[  194.736863][T15574]  out_of_memory+0xf09/0x12a0
[  194.736870][T15574]  ? rcu_is_watching+0x15/0xb0
[  194.736894][T15574]  ? __pfx_out_of_memory+0x10/0x10
[  194.736900][T15574]  ? percpu_ref_put+0x19/0x180
[  194.736911][T15574]  ? lock_release+0x4b/0x3e0
[  194.736922][T15574]  mem_cgroup_out_of_memory+0x145/0x240
[  194.736929][T15574]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  194.736938][T15574]  ? _raw_spin_unlock+0x28/0x50
[  194.736947][T15574]  ? memcg1_oom_prepare+0x37f/0x450
[  194.736957][T15574]  try_charge_memcg+0xdff/0x1290
[  194.736966][T15574]  ? rcu_is_watching+0x15/0xb0
[  194.736975][T15574]  ? __pfx_try_charge_memcg+0x10/0x10
[  194.736983][T15574]  ? rcu_needs_cpu+0xa1/0xb0
[  194.736989][T15574]  ? xa_load+0x60/0x210
[  194.736997][T15574]  ? rcu_is_watching+0x15/0xb0
[  194.737003][T15574]  ? rcu_is_watching+0x15/0xb0
[  194.737010][T15574]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  194.737019][T15574]  charge_memcg+0x9f/0x180
[  194.737027][T15574]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  194.737036][T15574]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  194.737046][T15574]  __read_swap_cache_async+0x28c/0x510
[  194.737055][T15574]  swap_cluster_readahead+0x305/0x5f0
[  194.737064][T15574]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  194.737072][T15574]  ? rcu_is_watching+0x15/0xb0
[  194.737093][T15574]  ? filemap_get_entry+0xad/0x2f0
[  194.737102][T15574]  ? get_vma_policy+0x27c/0x3c0
[  194.737111][T15574]  swapin_readahead+0x17d/0xb50
[  194.737119][T15574]  ? __pfx_filemap_get_entry+0x10/0x10
[  194.737126][T15574]  ? get_swap_device_info+0x1c/0x2b0
[  194.737133][T15574]  ? rcu_is_watching+0x15/0xb0
[  194.737139][T15574]  ? __pfx_swapin_readahead+0x10/0x10
[  194.737147][T15574]  ? __filemap_get_folio+0x9a6/0xaf0
[  194.737154][T15574]  ? swap_cache_get_folio+0xae/0x3b0
[  194.737162][T15574]  do_swap_page+0x525/0x5ac0
[  194.737170][T15574]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  194.737180][T15574]  ? ___pte_offset_map+0x29/0x250
[  194.737189][T15574]  ? lock_acquire+0x5f/0x360
[  194.737198][T15574]  ? do_swap_page+0x184/0x5ac0
[  194.737206][T15574]  ? __pfx_do_swap_page+0x10/0x10
[  194.737213][T15574]  ? rcu_is_watching+0x15/0xb0
[  194.737220][T15574]  ? __pfx_default_wake_function+0x10/0x10
[  194.737230][T15574]  ? ___pte_offset_map+0x45/0x250
[  194.737237][T15574]  ? ___pte_offset_map+0x1cf/0x250
[  194.737246][T15574]  ? pte_offset_map_rw_nolock+0xea/0x160
[  194.737255][T15574]  __handle_mm_fault+0xe55/0x5440
[  194.737266][T15574]  ? __pfx___handle_mm_fault+0x10/0x10
[  194.737275][T15574]  ? lock_release+0x4b/0x3e0
[  194.737286][T15574]  ? lock_vma_under_rcu+0xdf/0x3d0
[  194.737295][T15574]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  194.737305][T15574]  handle_mm_fault+0x40a/0x8e0
[  194.737315][T15574]  do_user_addr_fault+0xa81/0x1390
[  194.737328][T15574]  ? rcu_is_watching+0x15/0xb0
[  194.737334][T15574]  ? trace_page_fault_user+0x84/0x1e0
[  194.737345][T15574]  exc_page_fault+0x76/0xf0
[  194.737369][T15574]  asm_exc_page_fault+0x26/0x30
[  194.737379][T15574] RIP: 0033:0x7fbebfbc14a8
[  194.737386][T15574] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f
[  194.737392][T15574] RSP: 002b:00007fff393fcf00 EFLAGS: 00010293
[  194.737400][T15574] RAX: 0000000000000000 RBX: 00007fbebfdb5fa0 RCX: 00007fbebfbc14a5
[  194.737405][T15574] RDX: 00007fff393fcf40 RSI: 0000000000000000 RDI: 0000000000000000
[  194.737410][T15574] RBP: 00007fbebfdb7da0 R08: 0000000000000000 R09: 7fffffffffffffff
[  194.737414][T15574] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000002f94e
[  194.737419][T15574] R13: 00007fbebfdb6090 R14: ffffffffffffffff R15: 00007fff393fd080
[  194.737426][T15574]  </TASK>
[  194.875523][T15574] memory: usage 307200kB, limit 307200kB, failcnt 414
[  194.878583][T15574] memory+swap: usage 304524kB, limit 9007199254740988kB, failcnt 0
[  194.881217][T15574] kmem: usage 301196kB, limit 9007199254740988kB, failcnt 0
[  194.883986][T15574] Memory cgroup stats for /syz1:
[  194.884061][T15574] cache 0
[  194.886908][T15574] rss 0
[  194.917715][T15627] bond11: (slave erspan0): Releasing active interface
[  194.920047][T15627] ip6gretap1: entered promiscuous mode
[  194.922075][T15574] rss_huge 0
[  194.923245][T15574] shmem 0
[  194.924262][T15574] mapped_file 0
[  194.925411][T15574] dirty 0
[  194.926428][T15574] writeback 0
[  194.938058][T15574] workingset_refault_anon 2
[  194.939604][T15574] workingset_refault_file 0
[  194.941196][T15574] swap 188416
[  194.942306][T15574] swapcached 16384
[  194.943517][T15574] pgpgin 139237
[  194.944693][T15574] pgpgout 139233
[  194.945904][T15574] pgfault 262175
[  194.947247][T15574] pgmajfault 8
[  194.948508][T15574] inactive_anon 0
[  194.949756][T15574] active_anon 16384
[  194.951037][T15574] inactive_file 0
[  194.952285][T15574] active_file 0
[  194.953463][T15574] unevictable 0
[  194.954660][T15574] hierarchical_memory_limit 314572800
[  194.956435][T15574] hierarchical_memsw_limit 9223372036854771712
[  194.963750][T15627] bond0: (slave 30): Releasing backup interface
[  194.966424][T15574] total_cache 0
[  194.967746][T15574] total_rss 0
[  194.968934][T15574] total_rss_huge 0
[  194.970845][T15574] total_shmem 0
[  194.972003][T15574] total_mapped_file 0
[  194.973347][T15574] total_dirty 0
[  194.974470][T15574] total_writeback 0
[  194.975700][T15574] total_workingset_refault_anon 2
[  194.978538][T15574] total_workingset_refault_file 0
[  194.980194][T15574] total_swap 188416
[  194.981403][T15574] total_swapcached 16384
[  194.982794][T15574] total_pgpgin 139237
[  194.984260][T15574] total_pgpgout 139233
[  194.985977][T15574] total_pgfault 262175
[  194.988021][T15574] total_pgmajfault 8
[  194.989476][T15574] total_inactive_anon 0
[  194.990917][T15574] total_active_anon 16384
[  194.992367][T15574] total_inactive_file 0
[  194.994040][T15574] total_active_file 0
[  194.995716][T15574] total_unevictable 0
[  194.997510][T15574] anon_cost 0
[  194.998708][T15574] file_cost 0
[  194.999902][T15574] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2913,pid=15574,uid=0
[  195.004815][T15574] Memory cgroup out of memory: Killed process 15574 (syz.1.2913) total-vm:101888kB, anon-rss:948kB, file-rss:23140kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  195.012008][T15627] : left promiscuous mode
[  195.018837][T15627] bond0: (slave bond_slave_1): Releasing backup interface
[  195.022527][T15627] bond_slave_1: left promiscuous mode
[  195.025365][T15627] team0: Port device team_slave_0 removed
[  195.032957][T15627] team0: Port device team_slave_1 removed
[  195.035337][T15627] batman_adv: batadv0: Removing interface: batadv_slave_0
[  195.047799][T15627] bond6: (slave geneve3): Releasing active interface
[  195.057428][T15627] bond7: (slave bond8): Releasing backup interface
[  195.060455][T15627] bond9: (slave gretap3): Releasing active interface
[  195.068143][T15627] team0: Port device bridge11 removed
[  195.070521][T15627] bond11: (slave ip6gretap1): Releasing active interface
[  195.072839][T15627] ip6gretap1: left promiscuous mode
[  195.097833][T15631] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  195.143914][T15641] bridge13: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  195.161668][T15643] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2933'.
[  195.196740][T15647] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.239580][T15647] tipc: Resetting bearer <eth:syzkaller0>
[  195.242780][T15646] tipc: Disabling bearer <eth:syzkaller0>
[  195.291496][T15660] netlink: 'syz.0.2939': attribute type 3 has an invalid length.
[  195.357781][T15664] bridge0: port 1(erspan0) entered blocking state
[  195.360131][T15664] bridge0: port 1(erspan0) entered disabled state
[  195.362496][T15664] erspan0: entered allmulticast mode
[  195.364735][T15664] erspan0: entered promiscuous mode
[  195.368718][T15664] erspan0: left allmulticast mode
[  195.370991][T15664] erspan0: left promiscuous mode
[  195.374008][T15664] bridge0: port 1(erspan0) entered disabled state
[  195.438653][T15674] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2945'.
[  195.443574][T15674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2945'.
[  195.461634][T15678] netlink: 'syz.0.2947': attribute type 2 has an invalid length.
[  195.531294][T15681] bridge_slave_0: default FDB implementation only supports local addresses
[  197.292563][T15730] netlink: 'syz.1.2965': attribute type 1 has an invalid length.
[  197.297243][T15730] netlink: 'syz.1.2965': attribute type 1 has an invalid length.
[  197.305744][T15735] netlink: 'syz.0.2966': attribute type 23 has an invalid length.
[  197.349910][T15747] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  197.395225][T15755] syzkaller0: entered promiscuous mode
[  197.397528][T15755] syzkaller0: entered allmulticast mode
[  197.414547][T15755] netlink: 'syz.0.2972': attribute type 27 has an invalid length.
[  197.471391][T15765] batman_adv: batadv0: Adding interface: ipvlan2
[  197.475884][T15765] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  198.725126][T15860] syzkaller0: entered promiscuous mode
[  198.727795][T15860] syzkaller0: entered allmulticast mode
[  198.742847][T15864] netlink: 'syz.2.3005': attribute type 3 has an invalid length.
[  198.747469][T15864] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  198.755019][T15864] __nla_validate_parse: 16 callbacks suppressed
[  198.755027][T15864] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3005'.
[  198.796542][T15873] netlink: 'syz.2.3008': attribute type 1 has an invalid length.
[  198.799210][T15873] netlink: 208 bytes leftover after parsing attributes in process `syz.2.3008'.
[  198.802160][T15873] netlink: 'syz.2.3008': attribute type 1 has an invalid length.
[  198.804772][T15873] netlink: 'syz.2.3008': attribute type 2 has an invalid length.
[  198.902017][T15899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3014'.
[  198.908705][T15900] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3014'.
[  198.911852][T15900] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3014'.
[  199.074929][T15926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3023'.
[  199.083607][T15926] veth0_to_team: entered promiscuous mode
[  199.086131][T15926] veth0_to_team: entered allmulticast mode
[  199.157754][T15932] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.3026'.
[  199.227491][T15939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3028'.
[  199.231129][T15939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3028'.
[  199.251395][T15941] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3029'.
[  199.673262][T15971] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  199.991729][T15995] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  199.999174][T15995] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  200.001864][T15995] syzkaller0: entered promiscuous mode
[  200.003840][T15995] syzkaller0: entered allmulticast mode
[  200.008411][T15994] tipc: Resetting bearer <eth:syzkaller0>
[  200.014520][T15994] tipc: Disabling bearer <eth:syzkaller0>
[  200.093470][T15997] veth0_to_bond: entered allmulticast mode
[  200.739664][T16068] lo speed is unknown, defaulting to 1000
[  200.787255][T16070] block nbd1: server does not support multiple connections per device.
[  200.793678][T16070] block nbd1: shutting down sockets
[  200.895182][   T10] lo speed is unknown, defaulting to 1000
[  200.897407][   T10] syz2: Port: 1 Link DOWN
[  200.899136][T10416] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  200.903558][T10416] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  200.906311][T10416] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  200.910962][T10416] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  201.330707][T16125] team0: Mode changed to "activebackup"
[  201.476636][T16135] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  201.736066][T16177] lo speed is unknown, defaulting to 1000
[  201.836445][T16192] nbd: couldn't find device at index -710344704
[  201.908274][T16199] validate_nla: 2 callbacks suppressed
[  201.908288][T16199] netlink: 'syz.2.3114': attribute type 15 has an invalid length.
[  202.079496][ T5870] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  202.190306][T16232] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20003
[  202.983272][T16260] geneve0: entered promiscuous mode
[  202.985099][T16260] geneve0: entered allmulticast mode
[  203.204660][T16291] netlink: 'syz.2.3141': attribute type 3 has an invalid length.
[  203.209850][T16291] syz.2.3141: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  203.214592][T16291] CPU: 1 UID: 0 PID: 16291 Comm: syz.2.3141 Not tainted syzkaller #0 PREEMPT(full) 
[  203.214602][T16291] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  203.214607][T16291] Call Trace:
[  203.214611][T16291]  <TASK>
[  203.214614][T16291]  dump_stack_lvl+0x189/0x250
[  203.214628][T16291]  ? __pfx_dump_stack_lvl+0x10/0x10
[  203.214642][T16291]  ? __pfx__printk+0x10/0x10
[  203.214651][T16291]  ? lock_release+0x4b/0x3e0
[  203.214662][T16291]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  203.214670][T16291]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  203.214678][T16291]  warn_alloc+0x214/0x310
[  203.214690][T16291]  ? stack_depot_save_flags+0x40/0x860
[  203.214700][T16291]  ? __pfx_warn_alloc+0x10/0x10
[  203.214710][T16291]  ? kasan_save_track+0x4f/0x80
[  203.214718][T16291]  ? xskq_create+0x56/0x170
[  203.214728][T16291]  ? xsk_init_queue+0xb0/0x110
[  203.214737][T16291]  ? xsk_setsockopt+0x4dc/0x8d0
[  203.214746][T16291]  ? do_sock_setsockopt+0x17c/0x1b0
[  203.214753][T16291]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  203.214760][T16291]  ? do_syscall_64+0xfa/0x3b0
[  203.214766][T16291]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.214774][T16291]  __vmalloc_node_range_noprof+0x125/0x12f0
[  203.214789][T16291]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  203.214799][T16291]  ? xskq_create+0x56/0x170
[  203.214808][T16291]  ? __kasan_kmalloc+0x93/0xb0
[  203.214818][T16291]  vmalloc_user_noprof+0xad/0xf0
[  203.214828][T16291]  ? xskq_create+0xbf/0x170
[  203.214837][T16291]  xskq_create+0xbf/0x170
[  203.214848][T16291]  xsk_init_queue+0xb0/0x110
[  203.214857][T16291]  xsk_setsockopt+0x4dc/0x8d0
[  203.214867][T16291]  ? __pfx_xsk_setsockopt+0x10/0x10
[  203.214875][T16291]  ? __pfx_aa_sk_perm+0x10/0x10
[  203.214885][T16291]  ? lock_release+0x4b/0x3e0
[  203.214895][T16291]  ? aa_sock_opt_perm+0xff/0x1b0
[  203.214901][T16291]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  203.214909][T16291]  ? __pfx_xsk_setsockopt+0x10/0x10
[  203.214918][T16291]  do_sock_setsockopt+0x17c/0x1b0
[  203.214926][T16291]  __x64_sys_setsockopt+0x13f/0x1b0
[  203.214933][T16291]  do_syscall_64+0xfa/0x3b0
[  203.214940][T16291]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.214946][T16291]  ? exc_page_fault+0x9f/0xf0
[  203.214956][T16291]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.214963][T16291] RIP: 0033:0x7f4ac658ebe9
[  203.214970][T16291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  203.214977][T16291] RSP: 002b:00007f4ac7364038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  203.214985][T16291] RAX: ffffffffffffffda RBX: 00007f4ac67b5fa0 RCX: 00007f4ac658ebe9
[  203.214990][T16291] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b
[  203.214995][T16291] RBP: 00007f4ac6611e19 R08: 0000000000000004 R09: 0000000000000000
[  203.214999][T16291] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  203.215004][T16291] R13: 00007f4ac67b6038 R14: 00007f4ac67b5fa0 R15: 00007fff2cd68228
[  203.215012][T16291]  </TASK>
[  203.215015][T16291] Mem-Info:
[  203.329469][T16291] active_anon:5335 inactive_anon:8 isolated_anon:0
[  203.329469][T16291]  active_file:1322 inactive_file:38163 isolated_file:0
[  203.329469][T16291]  unevictable:1768 dirty:130 writeback:0
[  203.329469][T16291]  slab_reclaimable:11110 slab_unreclaimable:105250
[  203.329469][T16291]  mapped:18405 shmem:2585 pagetables:1032
[  203.329469][T16291]  sec_pagetables:0 bounce:0
[  203.329469][T16291]  kernel_misc_reclaimable:0
[  203.329469][T16291]  free:229277 free_pcp:26795 free_cma:0
[  203.348328][T16291] Node 0 active_anon:12220kB inactive_anon:32kB active_file:3072kB inactive_file:149440kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38676kB dirty:340kB writeback:0kB shmem:4892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7696kB pagetables:1992kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  203.361784][T16291] Node 1 active_anon:9052kB inactive_anon:0kB active_file:2216kB inactive_file:3212kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34944kB dirty:180kB writeback:0kB shmem:5448kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6056kB pagetables:2204kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  203.375209][T16291] Node 0 DMA free:14440kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:552kB local_pcp:248kB free_cma:0kB
[  203.387536][T16291] lowmem_reserve[]: 0 811 811 811 811
[  203.390880][T16291] Node 0 DMA32 free:69180kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12220kB inactive_anon:32kB active_file:3072kB inactive_file:149440kB unevictable:3536kB writepending:340kB present:1556484kB managed:830908kB mlocked:0kB bounce:0kB free_pcp:47968kB local_pcp:18160kB free_cma:0kB
[  203.404640][T16291] lowmem_reserve[]: 0 0 0 0 0
[  203.422854][T16291] Node 1 DMA32 free:451404kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:7120kB local_pcp:2456kB free_cma:0kB
[  203.434934][T16291] lowmem_reserve[]: 0 0 854 854 854
[  203.437144][T16291] Node 1 Normal free:382084kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9052kB inactive_anon:0kB active_file:2216kB inactive_file:3212kB unevictable:3536kB writepending:180kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:52040kB local_pcp:34952kB free_cma:0kB
[  203.449117][T16291] lowmem_reserve[]: 0 0 0 0 0
[  203.450938][T16291] Node 0 DMA: 11*4kB (U) 18*8kB (U) 37*16kB (UM) 37*32kB (UM) 17*64kB (UM) 17*128kB (UM) 14*256kB (UM) 7*512kB (UM) 2*1024kB (UM) 0*2048kB 0*4096kB = 14444kB
[  203.458700][T16291] Node 0 DMA32: 1571*4kB (UM) 892*8kB (UME) 739*16kB (UME) 104*32kB (ME) 44*64kB (UM) 35*128kB (M) 20*256kB (M) 9*512kB (ME) 7*1024kB (M) 0*2048kB 4*4096kB (UM) = 69148kB
[  203.466467][T16291] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 3*16kB (UM) 2*32kB (M) 3*64kB (UM) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (M) 2*2048kB (M) 108*4096kB (M) = 451404kB
[  203.474542][T16291] Node 1 Normal: 1231*4kB (UM) 1005*8kB (UE) 616*16kB (UME) 561*32kB (UME) 434*64kB (UME) 228*128kB (UME) 117*256kB (UME) 79*512kB (UME) 47*1024kB (UM) 21*2048kB (UE) 30*4096kB (UM) = 382148kB
[  203.483006][T16291] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  203.486902][T16291] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  203.491026][T16291] 42041 total pagecache pages
[  203.492996][T16291] 5 pages in swap cache
[  203.494783][T16291] Free swap  = 124976kB
[  203.496584][T16291] Total swap = 124996kB
[  203.498843][T16291] 786301 pages RAM
[  203.500690][T16291] 0 pages HighMem/MovableOnly
[  203.512480][T16291] 241342 pages reserved
[  203.514814][T16291] 0 pages cma reserved
[  203.671534][T16329] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  203.759858][T16341] __nla_validate_parse: 27 callbacks suppressed
[  203.759871][T16341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3157'.
[  203.768383][T16341] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3157'.
[  203.772351][T16342] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3157'.
[  203.805385][T16338] netlink: 'syz.0.3156': attribute type 3 has an invalid length.
[  203.808980][T16338] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  203.834163][T16345] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3158'.
[  203.862352][T16356] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3159'.
[  203.908133][T16360] netlink: zone id is out of range
[  203.909824][T16360] netlink: zone id is out of range
[  203.911509][T16360] netlink: zone id is out of range
[  203.911589][T16364] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3164'.
[  203.913184][T16360] netlink: zone id is out of range
[  203.913189][T16360] netlink: zone id is out of range
[  203.913193][T16360] netlink: zone id is out of range
[  203.922979][T16360] netlink: zone id is out of range
[  203.924649][T16360] netlink: zone id is out of range
[  203.926592][T16360] netlink: zone id is out of range
[  204.034328][T16374] team0: Device gtp2 is up. Set it down before adding it as a team port
[  204.146937][T16384] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  204.151460][T16384] syzkaller0: entered promiscuous mode
[  204.154228][T16384] syzkaller0: entered allmulticast mode
[  204.174030][T16384] tipc: Resetting bearer <eth:syzkaller0>
[  204.177602][T16384] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3173'.
[  204.182089][T16383] tipc: Resetting bearer <eth:syzkaller0>
[  204.199629][T16383] tipc: Disabling bearer <eth:syzkaller0>
[  204.205160][T16390] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3176'.
[  204.257127][T16393] netlink: 'syz.2.3177': attribute type 1 has an invalid length.
[  204.264561][T16393] netlink: 'syz.2.3177': attribute type 2 has an invalid length.
[  204.271262][T16393] netlink: 1172 bytes leftover after parsing attributes in process `syz.2.3177'.
[  204.276024][T16399] netlink: 'syz.0.3179': attribute type 9 has an invalid length.
[  204.327378][T16400] IPv6: Can't replace route, no match found
[  204.330088][T16403] IPv6: Can't replace route, no match found
[  204.366503][T16409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3183'.
[  204.577776][T16439] syzkaller0: create flow: hash 558567897 index 1
[  204.588914][T16439] syzkaller0: delete flow: hash 558567897 index 1
[  204.651290][T16443] netlink: 'syz.1.3193': attribute type 10 has an invalid length.
[  204.654590][T16443] macvlan1: entered allmulticast mode
[  204.951153][T16467] lo speed is unknown, defaulting to 1000
[  205.339877][T16531] netlink: 'syz.1.3216': attribute type 16 has an invalid length.
[  205.342871][T16531] netlink: 'syz.1.3216': attribute type 17 has an invalid length.
[  205.365116][T16531] 8021q: adding VLAN 0 to HW filter on device bond0
[  205.391022][  T792] lo speed is unknown, defaulting to 1000
[  205.392984][  T792] syz2: Port: 1 Link ACTIVE
[  206.075167][ T7410] lo speed is unknown, defaulting to 1000
[  206.078603][ T7410] syz2: Port: 1 Link DOWN
[  206.268188][T16558] netlink: 'syz.2.3230': attribute type 1 has an invalid length.
[  206.688214][T16587] netlink: 'syz.0.3238': attribute type 11 has an invalid length.
[  206.794843][T16593] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  206.908399][T16606] 8021q: adding VLAN 0 to HW filter on device bond14
[  206.918242][T16606] veth11: entered promiscuous mode
[  206.921251][T16606] bond14: (slave veth11): Enslaving as an active interface with an up link
[  206.945556][T16609] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  206.949709][T16609] syzkaller0: entered promiscuous mode
[  206.952127][T16609] syzkaller0: entered allmulticast mode
[  207.773345][T16619] validate_nla: 5 callbacks suppressed
[  207.773361][T16619] netlink: 'syz.1.3248': attribute type 12 has an invalid length.
[  207.779495][T16608] tipc: Resetting bearer <eth:syzkaller0>
[  207.789586][T16608] tipc: Disabling bearer <eth:syzkaller0>
[  207.852126][T16642] netlink: 'syz.0.3254': attribute type 6 has an invalid length.
[  208.211040][T16677] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  208.440323][T16702] netlink: 'syz.1.3272': attribute type 7 has an invalid length.
[  208.518014][T16719] tipc: New replicast peer: 255.255.255.255
[  208.520737][T16719] tipc: Enabled bearer <udp:s>, priority 26
[  208.536893][T16725] sctp: [Deprecated]: syz.2.3280 (pid 16725) Use of struct sctp_assoc_value in delayed_ack socket option.
[  208.536893][T16725] Use struct sctp_sack_info instead
[  208.558745][T16726] lo speed is unknown, defaulting to 1000
[  208.822112][T16768] netlink: 'syz.2.3292': attribute type 10 has an invalid length.
[  208.826269][T16768] team0: Port device hsr_slave_0 added
[  208.869586][T16772] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  208.872377][T16772] syzkaller0: entered promiscuous mode
[  208.874291][T16772] syzkaller0: entered allmulticast mode
[  208.880981][T16772] tipc: Resetting bearer <eth:syzkaller0>
[  208.884827][T16771] tipc: Resetting bearer <eth:syzkaller0>
[  208.889988][T16771] tipc: Disabling bearer <eth:syzkaller0>
[  208.951319][T16783] net_ratelimit: 13 callbacks suppressed
[  208.951329][T16783] openvswitch: netlink: Message has 8 unknown bytes.
[  209.034319][T16790] team0: No ports can be present during mode change
[  209.037660][ T5844] Bluetooth: hci2: command 0x0405 tx timeout
[  209.042353][T16790] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  209.074762][T16794] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  209.078683][T16794] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  209.083347][T16794] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  209.756294][T16816] __nla_validate_parse: 26 callbacks suppressed
[  209.756335][T16816] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3308'.
[  209.802498][T16825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3310'.
[  209.806814][T16825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3310'.
[  209.820434][T16825] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3310'.
[  209.825616][T16825] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3310'.
[  209.856036][T16831] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3312'.
[  209.949048][T16848] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3314'.
[  209.953717][T16848] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3314'.
[  210.112338][T16868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3323'.
[  210.152995][T16871] netlink: 'syz.2.3324': attribute type 1 has an invalid length.
[  210.164037][T16871] 8021q: adding VLAN 0 to HW filter on device bond15
[  210.174150][T16871] bond15: (slave bridge16): making interface the new active one
[  210.177634][T16871] bond15: (slave bridge16): Enslaving as an active interface with an up link
[  210.184326][T16871] bond15: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  210.237365][T16883] netlink: 'syz.0.3327': attribute type 12 has an invalid length.
[  210.241626][T16883] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.3327'.
[  210.267318][T16871] 8021q: adding VLAN 0 to HW filter on device bond16
[  210.269847][T16871] bridge0: port 1(bond16) entered blocking state
[  210.272166][T16871] bridge0: port 1(bond16) entered disabled state
[  210.274283][T16871] bond16: entered allmulticast mode
[  210.276560][T16871] bond16: entered promiscuous mode
[  210.333844][T16896] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  210.377818][T16905] netlink: 'syz.0.3337': attribute type 12 has an invalid length.
[  210.404486][T16901] netlink: 'syz.2.3335': attribute type 4 has an invalid length.
[  210.466286][T16911] 8021q: adding VLAN 0 to HW filter on device bond17
[  210.580713][T16936] .70: renamed from hsr0
[  210.589719][T16936] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  210.598591][T16936] .70: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  210.605224][T16936] .70: entered allmulticast mode
[  210.607375][T16936] hsr_slave_0: entered allmulticast mode
[  210.609871][T16936] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[  210.638602][T16941] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20001
[  210.731467][T16949] netlink: 'syz.1.3346': attribute type 1 has an invalid length.
[  210.791800][T16957] netlink: 'syz.1.3347': attribute type 12 has an invalid length.
[  210.946684][T16965] lo speed is unknown, defaulting to 1000
[  211.380168][T17014] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[  211.384172][T17014] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  211.390231][T17011] lo speed is unknown, defaulting to 1000
[  211.445357][T17019] syzkaller1: entered promiscuous mode
[  211.447676][T17019] syzkaller1: entered allmulticast mode
[  211.508594][T17023] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  211.512652][T17022] tipc: Resetting bearer <eth:syzkaller0>
[  211.546003][T17022] tipc: Disabling bearer <eth:syzkaller0>
[  211.641608][ T5852] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  212.716589][T17087] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  212.801571][T17107] validate_nla: 8 callbacks suppressed
[  212.801586][T17107] netlink: 'syz.2.3392': attribute type 12 has an invalid length.
[  212.844744][T17110] netlink: 'syz.0.3393': attribute type 3 has an invalid length.
[  212.848009][T17110] netlink: 'syz.0.3393': attribute type 1 has an invalid length.
[  212.851024][T17110] NCSI netlink: No device for ifindex 0
[  212.932715][T10416] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  213.736662][T17133] lo speed is unknown, defaulting to 1000
[  213.761942][T14149] IPVS: starting estimator thread 0...
[  213.763921][T17133] ieee802154 phy0 wpan0: encryption failed: -22
[  213.801517][T17150] netlink: 'syz.0.3405': attribute type 21 has an invalid length.
[  213.857119][T17139] IPVS: using max 132 ests per chain, 316800 per kthread
[  213.867502][T17160] netlink: 'syz.2.3407': attribute type 13 has an invalid length.
[  213.936994][T17178] netlink: 'syz.1.3404': attribute type 1 has an invalid length.
[  213.989119][ T5870] IPVS: stop unused estimator thread 0...
[  214.661183][T17183] xt_limit: Overflow, try lower: 271964/0
[  214.681141][T17186] tipc: Enabled bearer <eth:gre0>, priority 10
[  214.684400][T17186] tipc: Enabling of bearer <eth:gre0> rejected, already enabled
[  214.768206][T17204] syzkaller1: entered promiscuous mode
[  214.770109][T17204] syzkaller1: entered allmulticast mode
[  214.869283][T17223] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  214.887570][T17225] __nla_validate_parse: 38 callbacks suppressed
[  214.887579][T17225] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3422'.
[  214.912668][T17225] netlink: 'syz.1.3422': attribute type 10 has an invalid length.
[  214.916714][T17216] lo speed is unknown, defaulting to 1000
[  215.034753][T17234] lo speed is unknown, defaulting to 1000
[  215.809351][T14149] tipc: Node number set to 550023520
[  215.932586][T17261] veth15: entered promiscuous mode
[  216.153156][T17270] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  216.165867][T17270] tipc: Disabling bearer <eth:syzkaller0>
[  216.668691][T17290] netlink: 'syz.2.3436': attribute type 12 has an invalid length.
[  216.671233][T17290] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.3436'.
[  216.796721][T17292] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3437'.
[  216.828067][T17295] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3438'.
[  216.830991][T17295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3438'.
[  216.833925][T17295] netlink: 'syz.2.3438': attribute type 5 has an invalid length.
[  216.892999][T17299] syzkaller1: entered promiscuous mode
[  216.895417][T17299] syzkaller1: entered allmulticast mode
[  216.902628][T17299] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  216.906192][T17299] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode
[  216.909685][T17299] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode
[  216.913354][T17299] tipc: Resetting bearer <eth:syzkaller0>
[  216.960248][ T6902] tipc: Resetting bearer <eth:syzkaller0>
[  217.101671][T17307] netlink: 'syz.2.3444': attribute type 1 has an invalid length.
[  217.113394][T17307] 8021q: adding VLAN 0 to HW filter on device bond18
[  217.130829][T17307] bond18: (slave bridge17): making interface the new active one
[  217.134661][T17307] bond18: (slave bridge17): Enslaving as an active interface with an up link
[  217.146506][T17307] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.157856][T17312] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.3446'.
[  217.231402][T17318] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3449'.
[  217.263920][T17320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3450'.
[  217.313979][T17326] lo speed is unknown, defaulting to 1000
[  217.496534][T17345] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3459'.
[  217.502342][T17345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3459'.
[  217.743861][T17377] vti3: entered promiscuous mode
[  217.996585][T17388] openvswitch: netlink: Duplicate or invalid key (type 0).
[  218.000190][T17388] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  218.305224][T17426] validate_nla: 1 callbacks suppressed
[  218.305234][T17426] netlink: 'syz.0.3485': attribute type 12 has an invalid length.
[  218.318851][T17422] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  218.321661][T17422] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  218.377792][T17431] netlink: 'syz.0.3487': attribute type 1 has an invalid length.
[  218.380396][T17431] netlink: 'syz.0.3487': attribute type 1 has an invalid length.
[  218.382968][T17431] netlink: 'syz.0.3487': attribute type 1 has an invalid length.
[  218.385497][T17431] netlink: 'syz.0.3487': attribute type 1 has an invalid length.
[  218.397312][T17431] netlink: 'syz.0.3487': attribute type 1 has an invalid length.
[  218.485792][T17442] netlink: 'syz.0.3490': attribute type 1 has an invalid length.
[  218.499543][T17442] bond15: entered promiscuous mode
[  218.501923][T17442] 8021q: adding VLAN 0 to HW filter on device bond15
[  218.513989][T17442] batadv1: entered promiscuous mode
[  218.516046][T17442] batadv1: entered allmulticast mode
[  218.519605][T17442] 8021q: adding VLAN 0 to HW filter on device batadv1
[  218.522632][T17442] bond15: (slave batadv1): making interface the new active one
[  218.525501][T17442] bond15: (slave batadv1): Enslaving as an active interface with an up link
[  218.537490][T17442] IPv6: NLM_F_CREATE should be specified when creating new route
[  218.560987][T17452] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  218.565541][T17452] tipc: Resetting bearer <eth:syzkaller0>
[  218.583700][T17456] netlink: 'syz.0.3495': attribute type 11 has an invalid length.
[  218.601085][T17458] netlink: 'syz.2.3496': attribute type 1 has an invalid length.
[  218.605360][T17460] netlink: 'syz.0.3497': attribute type 13 has an invalid length.
[  218.610062][T17460] netlink: 'syz.0.3497': attribute type 17 has an invalid length.
[  218.620103][T17460] 8021q: adding VLAN 0 to HW filter on device team0
[  218.623521][T17460] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  218.656595][T17460] lo speed is unknown, defaulting to 1000
[  218.819259][T17484] team0: No ports can be present during mode change
[  220.061017][T17531] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  220.133295][T17537] bond0: option arp_validate: invalid value (18446744073491447809)
[  220.335634][T17550] tipc: Resetting bearer <eth:syzkaller0>
[  220.386638][T17554] __nla_validate_parse: 13 callbacks suppressed
[  220.386648][T17554] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3525'.
[  220.855088][T17577] veth0_to_bond: left allmulticast mode
[  220.858802][T17577] macsec1: left promiscuous mode
[  220.860464][T17577] macsec1: left allmulticast mode
[  220.862276][T17577] veth3: left promiscuous mode
[  220.863960][T17577] geneve2: left promiscuous mode
[  220.865924][T17577] hsr1: left allmulticast mode
[  220.868158][T17577] batadv_slave_0: left allmulticast mode
[  220.870857][T17577] vlan4: left promiscuous mode
[  220.872487][T17577] vlan4: left allmulticast mode
[  220.874083][T17577] hsr_slave_1: left allmulticast mode
[  220.875914][T17577] bridge11: left allmulticast mode
[  220.878027][T17577] geneve4: left promiscuous mode
[  220.879739][T17577] vti1: left promiscuous mode
[  220.881324][T17577] vti1: left allmulticast mode
[  220.883026][T17577] vti2: left promiscuous mode
[  220.884584][T17577] vti2: left allmulticast mode
[  220.886582][T17577] team1: left promiscuous mode
[  220.888292][T17577] team1: left allmulticast mode
[  220.898458][T17577] veth11: left promiscuous mode
[  220.901095][T17577] vti3: left promiscuous mode
[  220.904806][T17577] bond15: left promiscuous mode
[  220.908507][T17577] batadv1: left promiscuous mode
[  220.910146][T17577] batadv1: left allmulticast mode
[  220.940157][T17580] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.3535'.
[  221.061010][T17593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3541'.
[  221.064182][T17592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3541'.
[  221.112836][T17599] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.3543'.
[  221.249730][T17625] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3549'.
[  221.391303][T17636] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3554'.
[  221.413779][T17640] batadv2: entered promiscuous mode
[  222.119326][T17643] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3556'.
[  222.330571][T17655] pim6reg1: entered promiscuous mode
[  222.332366][T17655] pim6reg1: entered allmulticast mode
[  222.441707][T17655] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3561'.
[  222.543029][T17664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3563'.
[  223.412789][T17684] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  223.416547][T17683] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  223.419416][T17686] validate_nla: 4 callbacks suppressed
[  223.419429][T17686] netlink: 'syz.2.3572': attribute type 12 has an invalid length.
[  223.420839][T17683] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  223.518974][T17688] gretap0: entered promiscuous mode
[  223.521090][T17688] vlan5: entered promiscuous mode
[  223.530371][T17689] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  223.534068][T17689] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  223.842789][T17720] syzkaller0: entered promiscuous mode
[  223.846328][T17720] syzkaller0: entered allmulticast mode
[  224.270503][T17760] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  224.273105][T17762] netlink: 'syz.0.3598': attribute type 1 has an invalid length.
[  224.318046][T17762] 8021q: adding VLAN 0 to HW filter on device bond16
[  224.449624][T17786] netlink: 'syz.2.3607': attribute type 1 has an invalid length.
[  224.481401][T17789] openvswitch: netlink: Flow key attr not present in new flow.
[  224.484972][T17789] netlink: 'syz.2.3608': attribute type 2 has an invalid length.
[  224.644675][T17807] 8021q: VLANs not supported on ip_vti0
[  224.948652][T17849] netlink: 'syz.2.3631': attribute type 9 has an invalid length.
[  224.976885][T17851] netlink: 'syz.2.3632': attribute type 4 has an invalid length.
[  224.976903][T17852] netlink: 'syz.2.3632': attribute type 4 has an invalid length.
[  225.102092][T17861] netlink: 'syz.2.3636': attribute type 15 has an invalid length.
[  225.552742][T17908] __nla_validate_parse: 18 callbacks suppressed
[  225.552752][T17908] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3651'.
[  225.558334][T17908] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3651'.
[  225.618088][T17915] sctp: [Deprecated]: syz.2.3653 (pid 17915) Use of int in maxseg socket option.
[  225.618088][T17915] Use struct sctp_assoc_value instead
[  225.629443][T17915] ieee802154 phy0 wpan0: encryption failed: -22
[  225.632895][T17918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3655'.
[  225.652377][T17918] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3655'.
[  225.682644][T17924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3657'.
[  225.685732][T17924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3657'.
[  225.729542][T17927] netlink: 'syz.2.3658': attribute type 12 has an invalid length.
[  225.807162][T17935] lo speed is unknown, defaulting to 1000
[  225.869225][T17944] netlink: 'syz.0.3662': attribute type 10 has an invalid length.
[  225.874554][T17944] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3662'.
[  225.885090][T17944] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3662'.
[  226.286283][T17974] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3670'.
[  226.328562][T17976] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.3671'.
[  226.436241][T17978] team0: Mode changed to "loadbalance"
[  226.717847][T17995] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  226.721956][T17995] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  226.725390][T17995] CPU: 0 UID: 0 PID: 17995 Comm: syz.0.3678 Not tainted syzkaller #0 PREEMPT(full) 
[  226.729123][T17995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  226.732560][T17995] RIP: 0010:xfrm_alloc_spi+0xe0e/0xf30
[  226.734409][T17995] Code: 00 fc ff df 80 3c 03 00 4c 8b 34 24 74 08 4c 89 f7 e8 f6 0a 01 f8 4d 8b 36 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 48 8b 5c 24 58 74 08 4c 89 f7 e8 bf 0b 01 f8 4d 89 3e
[  226.740688][T17995] RSP: 0018:ffffc9000df1f0e0 EFLAGS: 00010246
[  226.742713][T17995] RAX: 0000000000000000 RBX: 1ffff110072ab096 RCX: dffffc0000000000
[  226.745322][T17995] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008
[  226.748026][T17995] RBP: ffffc9000df1f230 R08: ffff888108d70000 R09: 0000000000000002
[  226.750753][T17995] R10: 000000000000000a R11: 0000000000000000 R12: 1ffff11020f54c86
[  226.753351][T17995] R13: ffff8880395584b0 R14: 0000000000000000 R15: ffff8880395584a8
[  226.756031][T17995] FS:  00007fb54a3606c0(0000) GS:ffff8880b861a000(0000) knlGS:0000000000000000
[  226.758969][T17995] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  226.761176][T17995] CR2: 00007fb54a35ffc8 CR3: 000000010c898000 CR4: 00000000000006f0
[  226.763866][T17995] Call Trace:
[  226.764989][T17995]  <TASK>
[  226.765976][T17995]  ? xfrm_alloc_spi+0x2a0/0xf30
[  226.767607][T17995]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  226.769326][T17995]  ? xfrm_find_acq+0x87/0xa0
[  226.770872][T17995]  xfrm_alloc_userspi+0x70b/0xc90
[  226.772527][T17995]  ? apparmor_capable+0x137/0x1b0
[  226.774186][T17995]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  226.776042][T17995]  ? __nla_parse+0x40/0x60
[  226.777600][T17995]  xfrm_user_rcv_msg+0x7a3/0xab0
[  226.779285][T17995]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  226.781197][T17995]  ? __pfx___mutex_trylock_common+0x10/0x10
[  226.783150][T17995]  ? kasan_save_track+0x4f/0x80
[  226.784880][T17995]  ? rcu_is_watching+0x15/0xb0
[  226.786784][T17995]  ? trace_contention_end+0x39/0x120
[  226.789049][T17995]  ? __mutex_lock+0x335/0x1350
[  226.791084][T17995]  netlink_rcv_skb+0x208/0x470
[  226.792687][T17995]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  226.794509][T17995]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  226.796294][T17995]  ? lock_release+0x4b/0x3e0
[  226.797908][T17995]  ? net_generic+0x1e/0x240
[  226.799453][T17995]  ? net_generic+0x1e/0x240
[  226.800944][T17995]  ? netlink_deliver_tap+0x2e/0x1b0
[  226.802702][T17995]  xfrm_netlink_rcv+0x79/0x90
[  226.804307][T17995]  netlink_unicast+0x82f/0x9e0
[  226.805922][T17995]  ? __pfx_netlink_unicast+0x10/0x10
[  226.807761][T17995]  ? netlink_sendmsg+0x642/0xb30
[  226.809470][T17995]  ? skb_put+0x11b/0x210
[  226.810915][T17995]  netlink_sendmsg+0x805/0xb30
[  226.812553][T17995]  ? __pfx_netlink_sendmsg+0x10/0x10
[  226.814358][T17995]  ? futex_unqueue+0x22/0x240
[  226.815964][T17995]  ? aa_sock_msg_perm+0xf1/0x1d0
[  226.817697][T17995]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  226.819560][T17995]  ? __pfx_netlink_sendmsg+0x10/0x10
[  226.821553][T17995]  __sock_sendmsg+0x21c/0x270
[  226.823136][T17995]  ____sys_sendmsg+0x505/0x830
[  226.824768][T17995]  ? __pfx_____sys_sendmsg+0x10/0x10
[  226.826512][T17995]  ? import_iovec+0x74/0xa0
[  226.828069][T17995]  ___sys_sendmsg+0x21f/0x2a0
[  226.829755][T17995]  ? __pfx____sys_sendmsg+0x10/0x10
[  226.831759][T17995]  ? futex_wait+0x285/0x360
[  226.833483][T17995]  ? __fget_files+0x2a/0x420
[  226.835323][T17995]  ? __fget_files+0x3a0/0x420
[  226.836923][T17995]  __x64_sys_sendmsg+0x19b/0x260
[  226.838659][T17995]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  226.840527][T17995]  ? rcu_is_watching+0x15/0xb0
[  226.842141][T17995]  do_syscall_64+0xfa/0x3b0
[  226.843942][T17995]  ? rcu_is_watching+0x15/0xb0
[  226.845759][T17995]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.847792][T17995]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.849749][T17995] RIP: 0033:0x7fb54958ebe9
[  226.851249][T17995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  226.857664][T17995] RSP: 002b:00007fb54a360038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  226.860748][T17995] RAX: ffffffffffffffda RBX: 00007fb5497b5fa0 RCX: 00007fb54958ebe9
[  226.863450][T17995] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  226.866038][T17995] RBP: 00007fb549611e19 R08: 0000000000000000 R09: 0000000000000000
[  226.868653][T17995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  226.871241][T17995] R13: 00007fb5497b6038 R14: 00007fb5497b5fa0 R15: 00007fff1a67ace8
[  226.874047][T17995]  </TASK>
[  226.875178][T17995] Modules linked in:
[  226.876742][T17995] ---[ end trace 0000000000000000 ]---
[  226.878837][T17995] RIP: 0010:xfrm_alloc_spi+0xe0e/0xf30
[  226.880756][T17995] Code: 00 fc ff df 80 3c 03 00 4c 8b 34 24 74 08 4c 89 f7 e8 f6 0a 01 f8 4d 8b 36 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 48 8b 5c 24 58 74 08 4c 89 f7 e8 bf 0b 01 f8 4d 89 3e
[  226.887740][T17995] RSP: 0018:ffffc9000df1f0e0 EFLAGS: 00010246
[  226.889814][T17995] RAX: 0000000000000000 RBX: 1ffff110072ab096 RCX: dffffc0000000000
[  226.892438][T17995] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008
[  226.895048][T17995] RBP: ffffc9000df1f230 R08: ffff888108d70000 R09: 0000000000000002
[  226.897733][T17995] R10: 000000000000000a R11: 0000000000000000 R12: 1ffff11020f54c86
[  226.900376][T17995] R13: ffff8880395584b0 R14: 0000000000000000 R15: ffff8880395584a8
[  226.903038][T17995] FS:  00007fb54a3606c0(0000) GS:ffff8880b861a000(0000) knlGS:0000000000000000
[  226.906196][T17995] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  226.908591][T17995] CR2: 00007fb54a35ffc8 CR3: 000000010c898000 CR4: 00000000000006f0
[  226.911239][T17995] Kernel panic - not syncing: Fatal exception in interrupt
[  226.914454][T17995] Kernel Offset: disabled
[  226.915886][T17995] Rebooting in 86400 seconds..

VM DIAGNOSIS:
02:46:52  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000df1e910
R8 =ffff888108af0237 R9 =1ffff1102115e046 R10=dffffc0000000000 R11=ffffffff854f2340
R12=dffffc0000000000 R13=ffffffff99afb916 R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f23bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb54a3606c0 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb54a35ffc8 CR3=000000010c898000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fb549787498 00007fb549787470 XMM03=00007fb5497874a8 00007fb5497874a0
XMM04=00007fb54a2ed100 00007fb549787460 XMM05=00007fb549787478 00007fb5497874c0
XMM06=00007fb5497874b8 00007fb5497874b0 XMM07=00007fb5497874a8 00007fb5497874a0
XMM08=0000000000000000 00007fb549612ee7 XMM09=0000000000000000 00007fb549612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=6cbb9da14821df00 RBX=ffffffff819683b8 RCX=6cbb9da14821df00 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa38530 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d4000
RIP=ffffffff8b79f3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555bfc57a7e8 CR3=000000010c128000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
