last executing test programs:

873.992977ms ago: executing program 2 (id=3586):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x1a, &(0x7f0000000240)=ANY=[@ANYBLOB="18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000002907000100000001760600010000004750000001000000185200000d0000000000000000000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffff0142e29fbfa400000000000007040000f0ffffff08000000", @ANYRES64=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000068c600005000000183a00000400"/48], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
recvfrom$llc(r2, 0x0, 0x0, 0xa7a028f7425b35c2, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000))
r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'ip_vti0\x00'})
sendmsg$nl_route_sched(r7, 0x0, 0x0)
r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r9 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0)
listen(r7, 0x217)
ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0xfffffffd)
close(0xffffffffffffffff)
close(0x3)
connect$rose(r3, &(0x7f00000000c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c)

869.208485ms ago: executing program 2 (id=3587):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f000000dbc0), 0xffffffffffffffff)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$ppp(r3, &(0x7f00000005c0)="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", 0xaf6)
pipe(&(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
tee(r2, r5, 0xaf6, 0x6)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="1800000000000000b3"], 0x18}, 0x1, 0x0, 0x0, 0x404c000}, 0x804)
r7 = socket$inet6(0xa, 0x2, 0x0)
r8 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_int(r8, 0x0, 0x6, &(0x7f0000002200)=0x4, 0x4)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000f80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_WOWLAN(r9, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000004280)={0x24, r10, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x48}, @val={0x8, 0x3, r11}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x2400c094)
sendmsg$NL80211_CMD_SET_CHANNEL(r4, &(0x7f00000021c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00012cbd7000fddbdf254100000008000300", @ANYRES32=r11, @ANYBLOB="0c009900080000000e0035130000a000020000000800260099090000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000009c0), r12)
sendmsg$NLBL_UNLABEL_C_STATICADD(r12, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r13, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@newtaction={0x2cc, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x250, 0x1, [@m_ctinfo={0x160, 0x1, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x99}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x200}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}]}, {0xe9, 0x6, "eb0e48b9b3387e86cbb2b0fe5c9988b0ea82132d71196202c47fc92b5fa205c707050abb36510bfedcc3056b157a00b9a4da46aec58df5b5d40860add8ff9f796719e2c6d9041acb8e4e7725e80a4ab02dcf6d0f13acd9dc6b00a1d802ce419bf4b55d77a23c63ffd55c4f469e37cfe526d68f35e9a2a5ea403cb4ad134db40098a96000742066f75de18722fc884d3fe91a57fedd53e1161551b471c47a17f29751e8a875179c444fcaa95929d6819ca4fe885a00e01c5dacb6c8a6c0a90bef6c5d49cb5a68ecf43789bfe044fc4f14e791e934503017dc7b4d195d28ac5fa70086dd8afb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0xbc, 0x34, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xfffffffd, 0x6, 0x8, 0x9}, 0x43}}]}, {0x72, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be570631961812505684e260d3f7382"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbmod={0x30, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x68, 0x1, [@m_gact={0x64, 0x16, 0x0, 0x0, {{0x9}, {0x4}, {0x36, 0x6, "3b5787a933d0695a3c65e24e5c4c8a9428e87983fcb08e778c4c16d937c9d6cdd2b42f9e24f75184f7dfdc33389e6615d6aa"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x4004000}, 0x4050)
r14 = socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r15 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r15}, 0xc)
sendto(r14, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0)
recvmmsg(r14, &(0x7f00000037c0)=[{{&(0x7f0000000300)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})
r16 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r9)
sendmsg$IPVS_CMD_SET_INFO(r14, &(0x7f00000020c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r16, @ANYBLOB="020026bd7000fcdbdf250e0000003c0002800800040033c300000800030000000000060002004e2400000800030000000000080007001000000005000d000000000008000800f2ffffff08000500070000001800018008000900190000000c00070001ff03000000000008000500010000005000028014000100fe8000000000000000000000000000bb08000900dc060000080005000500000006000e004e24000008000800060000000800080000000000080004000000008006000e004e220000040001801c00028006000f000200000006000b000a00000006000e004e2400000800040000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
sendmsg$FOU_CMD_ADD(r0, &(0x7f000000dc80)={0x0, 0x0, &(0x7f000000dc40)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="b4012abd7000ffdbdf250100000005000200000033c03ee64cc1b3f8c9359538e79711aaf4"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)

783.748305ms ago: executing program 2 (id=3588):
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='rxrpc_peer\x00', r1, 0x0, 0xfffffffffffffff9}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='rxrpc_peer\x00', r1}, 0x18)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a800160008000140097c1100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
unshare(0x6a040000)

673.732006ms ago: executing program 2 (id=3589):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0)
sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="07011b00000074390000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000030200"/24], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vlan0\x00', 0x400})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000202010400000000000000000a0000003c0002800c00028005000100000000002c00018014000300fe8000000000000000000000000000001400040000000000000000000000004000000001"], 0x50}}, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112})
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'syzkaller0\x00', 0x400})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00', <r5=>0x0})
r6 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000200)={'pim6reg0\x00', {0x2, 0x4e20, @private=0xa010101}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="00040000000000000a004e220000000720010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000030000000a004e2000000008ff0200000000000000000000000000010500000000000000000000000000000000000000bbdd000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e240000000920010000000000000000000000000002abbc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e21000000052001000000000000000000000000000008000000000000000000000000000000000000000000000000000000dd00"/528], 0x210)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r5], 0x20}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}, {0x0, 0x10}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x9, 0xffe0}, {0x10, 0xffff}, {0xffe0}}}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000500)={0x34, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x7f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20)
getsockopt$IP_SET_OP_GET_BYINDEX(r10, 0x1, 0x53, &(0x7f00000000c0)={0x7, 0x7, 0x2}, &(0x7f00000001c0)=0x28)

550.299748ms ago: executing program 2 (id=3592):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @canfd={{0x4, 0x0, 0x1}, 0x2, 0x0, 0x0, 0x0, "d672142d1f74bef25ee0eeaf396a6d2994672842367b91e9be9b5e91744a604aa4400e5f0dcec8c731f5193ba986ac67116224dcaeb7df245e35d77e7ef7ab07"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$can_bcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000080000000200000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="020000e001"], 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000)
sendmsg$can_bcm(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)={0x1, 0x930, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x35, 0x1, 0x0, 0x0, "c075bfebcd0ba27d0241591616a6b1cb67d98ec29b60126a252d15082816668e112528aec50cd3705b13923c6b01ee331a6f97344bf7669085864df306abfaa0"}}, 0x80}}, 0x11)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x6020400)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb0}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90)
socket(0x10, 0x3, 0x0)
ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f00000001c0)={0x1})
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', <r8=>0x0, 0x0, 0xa000, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback}}}})
ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000140)='bond_slave_1\x00')
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000000c0)={'tunl0\x00', r8, 0x40, 0x1, 0x2, 0x9, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @local, @multicast2}}}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)

454.116118ms ago: executing program 1 (id=3593):
r0 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0)
recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182)
r1 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x10, 0xfffffffe}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_skb=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x44, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYRES64=r2], 0x20}, 0x1, 0x0, 0x0, 0xc040}, 0x4004000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x51}, 0x20040000)
r9 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x74, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x44, 0x2, [@TCA_GRED_LIMIT={0x8}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x6, 0x37, 0xa, 0x80000001, 0xb, 0x6, 0xffffffff, 0x2, 0x0, 0x14, 0x9, 0x8, 0x6, 0x8bc, 0x6}}]}}]}, 0x74}}, 0x24000010)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r12=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x101}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
accept4$ax25(r4, 0x0, &(0x7f00000001c0), 0x0)

453.619632ms ago: executing program 0 (id=3594):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000004})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, r3, 0x1, 0xffffffff, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$MRT(r4, 0x0, 0xcf, 0xfffffffffffffffc, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0x2})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0xa0000000})
epoll_pwait(r1, &(0x7f0000000180)=[{}], 0x1, 0xc, 0x0, 0x0)

342.978279ms ago: executing program 1 (id=3595):
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000"], 0x8c}, 0x1, 0x0, 0x0, 0x140048d2}, 0x4000080) (async)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge_slave_0\x00', <r3=>0x0}) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYBLOB="280000001d843a5bb941d9aed1d9df250700000032e138b87032c813e712bb97fcaed4c39bcababa022b06599432fa696b7c6d20806a5f35341d5f6e4e4aeb516c7eb65bd709000000aad72f7b3305b95dbfcca4379e6921c4e91b03edfbb097b4ecbf6d570975bf676009dc8086df0ab8732e715811", @ANYRES8=r2], 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000050) (async)
mmap(&(0x7f0000423000/0x3000)=nil, 0x3000, 0x2, 0x31, 0xffffffffffffffff, 0xc12d0000) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYRESOCT=0x0], 0x4c}}, 0x2) (async)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x224e, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001f40)=ANY=[@ANYBLOB="10110000", @ANYRES16=r8, @ANYBLOB="13072bbd7000ffdbdf25670000000800c400070000000800c400810000000800c400bf0000000800c4000a0000000800c3"], 0x1110}, 0x1, 0x0, 0x0, 0x884}, 0x40020) (async)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x110, r9, 0x1000)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000340)={0x0, 0x2, 0x40}, 0x8) (async)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r10, &(0x7f0000000000)={0x1f, 0xfff7, 0x4}, 0x59) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRESDEC=r4, @ANYBLOB="030000000800010073698b0024000280080001000000000000000000", @ANYRES32=0x0, @ANYBLOB="08000200ac14144005000900890000000600080017000000"], 0x50}}, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r11, 0x8040942d, &(0x7f0000000040)) (async)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r5, 0x8008f512, &(0x7f0000000140)) (async)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81})
socket$kcm(0x29, 0x5, 0x0) (async)
write$bt_hci(r10, &(0x7f0000000080)=ANY=[], 0x6)

342.345143ms ago: executing program 0 (id=3596):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)={0x20, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0xc, 0x1a, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x8}]}]}, 0x20}], 0x1}, 0x0)
r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c)
sendto$inet6(r2, &(0x7f00000004c0)="008fd3b715655ebf776d3fd66a22c6d018ee2993027ea4924c9f6996aa2c2a1438146839263263719ce8b920f2f6faeeff60419c2c1a4fe6da895e9c66b12d8802747109afb89fff92aba198734b5350caefd0e566e9913011fd1508cccb5ee8360a33c7277758cd46c4c176a67088ae8851f117caa68705876948a9b88936f1fdc8aea859c3c70457f1808347f40c4ecd9c", 0x92, 0x14, &(0x7f0000000140)={0xa, 0x4e23, 0x2, @mcast1, 0xe}, 0x1c)
sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2000000000000000000000000700000001440e05"], 0x20}}], 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000000c0), 0x3f, 0x0)
ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000100))
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000010003704000000c7bc65db19161b2d00", @ANYRES64=r5, @ANYBLOB="4008000000000000e00012800c0001006d6163766c616e00d0000280400005800a0004000da9fec54e3500000a000400aaaaaaaaaabb00000a000400ffffffffffff00000a000400f8d40562af4e00000a000400ffffffffffff0000280005800a000400aaaaaaaaaaaa00000a000400ffffffffffff00000a000400aaaaaaaaaaaa00001c0005800a0004000180c200000000000a0004000180c200000300000800030001000000280005800a000400aaaaaaaaaaaa00000a000400aaaaaaeaaaaa00000a000400ffffffffffff00000600020000000000100005800a000400aaaaaaaaaaaa0000"], 0x100}}, 0x4)

290.790232ms ago: executing program 1 (id=3597):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x10, &(0x7f00000001c0)=@raw=[@generic={0x10, 0x6, 0xf, 0x3, 0x1}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x30, 0x4}, @call={0x85, 0x0, 0x0, 0x50}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x1dac6, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[0x1], 0x0, 0x10, 0x480f97a5}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1b, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000009471110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005d40), r2)
sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000005e00)={0x0, 0x0, &(0x7f0000005dc0)={&(0x7f0000005d80)=ANY=[@ANYBLOB="30e75907", @ANYRES16=r3, @ANYBLOB="010025bd7000fbdbdf250100000006000a00020000000c0009000200aaaaaaaaaaaa050007000d000000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8)
connect$packet(r4, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x1, 0x8, 0x6, @remote}, 0x14)

288.857948ms ago: executing program 0 (id=3598):
socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="9df3035b1f"], 0x48}, 0x1, 0x0, 0x0, 0x4811}, 0x840) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=<r0=>0x0, @ANYBLOB="9df3035b1f"], 0x48}, 0x1, 0x0, 0x0, 0x4811}, 0x840)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'syz_tun\x00', @random="f401401000"}) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'syz_tun\x00', @random="f401401000"})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002001, 0x0) (async)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002001, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
close(0xffffffffffffffff) (async)
close(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x20000000) (async)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x20000000)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
read(0xffffffffffffffff, &(0x7f0000000340)=""/49, 0x31)
sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x8044)
bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0xfff7fffd, @empty, 0x4}, 0x1c)
sendto$inet6(r3, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000280)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc)
sendto$inet6(r3, &(0x7f0000000040)='\v', 0x1, 0x20008081, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x10}, 0xc)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) (async)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00'})
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32=r4, @ANYBLOB="0008f23e17e845523b1fe000000080e530da02b9e4295831036e7e6f97f77e61ca2e0881f97aebe27efc2772c6a1f133f1404887907f4111e7e42c65050a657e09aacf2e381fac7891445374660a507912cec987eb47ba9194b857a9a405ade64f5e27bedcd38710f5cf92e77cb0fe5e985b43fac5fdb7a2468a97fb10f97d570a1c5339163ebf8eb962154208e489f02be32259e3264c32542c4f8b81e8c432f03118", @ANYRES64=0x0, @ANYRESOCT=r2], 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002)

143.808433ms ago: executing program 1 (id=3599):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23311, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x46141}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048890}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="290a00000000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="2400030000"], 0x40}}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x37, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x3f, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x40}}, 0x0)
sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x60, 0x5, 0x6, 0x101, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x44080}, 0x40000)

142.138073ms ago: executing program 0 (id=3600):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
preadv(r0, &(0x7f00000032c0)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001000)=""/23, 0x17}, {&(0x7f0000001040)=""/219, 0xdb}, {&(0x7f0000001140)=""/83, 0x53}, {&(0x7f00000011c0)=""/207, 0xcf}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/4096, 0x1000}], 0x7, 0x1, 0x1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000003400)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000033c0)={&(0x7f0000003380)={0x3c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6f20}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4)
r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000003480)=@o_path={&(0x7f0000003440)='./file0\x00', 0x0, 0x10, r1}, 0x18)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000034c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x50)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003700)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003a40)={0xffffffffffffffff, 0xe0, &(0x7f0000003940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000003780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f00000037c0)=[0x0], &(0x7f0000003800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r6=>0x0, 0x60, &(0x7f0000003840)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000003880), &(0x7f00000038c0), 0x8, 0x85, 0x8, 0x8, &(0x7f0000003900)}}, 0x10)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003a80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000003b80)={0x11, 0x22, &(0x7f0000003540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x174, 0x0, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@exit, @map_idx={0x18, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x71}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x10}, @map_fd={0x18, 0x9, 0x1, 0x0, r3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003680)='GPL\x00', 0x2, 0x25, &(0x7f00000036c0)=""/37, 0x41000, 0x4, '\x00', 0x0, @fallback=0x34, r4, 0x8, &(0x7f0000003740)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x2, &(0x7f0000003b00)=[r7], &(0x7f0000003b40)=[{0x4, 0x4, 0xd, 0x2}, {0x3, 0x2, 0x7, 0x2}], 0x10, 0x6}, 0x94)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003c80), r1)
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000003d40)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003d00)={&(0x7f0000003cc0)={0x34, r9, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffad}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040010}, 0x20000000)
syz_genetlink_get_family_id$l2tp(&(0x7f0000003d80), r1)
recvmsg$kcm(r4, &(0x7f0000004f00)={&(0x7f0000003dc0)=@nl, 0x80, &(0x7f0000004e40)=[{&(0x7f0000003e40)=""/4096, 0x1000}], 0x1, &(0x7f0000004e80)=""/94, 0x5e}, 0x20)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000004f40)={0x7, 'veth0_to_bridge\x00', {0x9}, 0xc4a7})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004f80))
r10 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000004fc0)=<r11=>0x0, &(0x7f0000005000)=0x4)
bind$xdp(r10, &(0x7f0000005040)={0x2c, 0x4, r11, 0x40}, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000005080), r4)
ioctl$EXT4_IOC_CHECKPOINT(r8, 0x4004662b, &(0x7f00000050c0)=0x5)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000005100)={<r12=>0x0, 0x2a, "dadc3b33754ad92d5664b534eb26cabb1aa698b466185ce7700c56ea2d1643cdfdb7c4333a2ce7b64622"}, &(0x7f0000005140)=0x32)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000005180)=@assoc_value={r12, 0x9}, &(0x7f00000051c0)=0x8)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000005300)={&(0x7f0000005200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000052c0)={&(0x7f0000005240)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x43}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40)
socket$unix(0x1, 0x2, 0x0)
r13 = bpf$ITER_CREATE(0x21, &(0x7f0000005340)={r4}, 0x8)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r13, &(0x7f0000005380))
ioctl$PTP_PIN_SETFUNC2(r13, 0x40603d10, &(0x7f00000053c0)={'\x00', 0x2a9d, 0x2, 0x8})
connect$can_bcm(0xffffffffffffffff, &(0x7f0000005480)={0x1d, r5}, 0x10)

73.284918ms ago: executing program 0 (id=3601):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r3=>0x0}, &(0x7f0000000200)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={r3, 0x5c5, 0x0, 0x81, 0x3, 0x5}, 0x14) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70ad28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xc, 0xffff}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xa3}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x20000040) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)

72.626728ms ago: executing program 1 (id=3602):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x400}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x400}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000)
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0)
socket(0x10, 0x3, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x400}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x400}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000) (async)
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) (async)

3.385262ms ago: executing program 0 (id=3603):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003500)=@newtaction={0x60, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x31fd, 0x4, 0x0, 0x0, 0xfa05}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0xa850}, 0x4001)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000440)={0x3, 0xb}, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="a400000010000104000000006f00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000007c0012800e00010069703665727370616e000000680002800600030006000000060002"], 0xa4}}, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r3, &(0x7f0000000000), 0xe)
listen(r3, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000200)=0x20004, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)="3875c120c2aee1b9d7dc2e78f298c86ad11434a73956c5dcb96575b3d255484ed7e57590e5aa3e2e1b4d87b143ca486b97b93b51c847acb7e7217648f819570e2294f1dd30ef42903f4f8f3484c1015c900c0bc526c9c4b73e9d389278f104858bef56af938b79613645226da2", 0x6d}], 0x1, 0x0, 0x98}, 0x20000000)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000006c0)=@pptp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000740)=""/130, 0x82}, {&(0x7f0000000800)=""/135, 0x87}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/107, 0x6b}], 0x4, &(0x7f0000002c40)=""/158, 0x9e}, 0x20)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000140), &(0x7f00000001c0)=0x4)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x4e24, 0x0, 0x2}, {0x0, 0xfffffffffffffffb, 0x6, 0xfffffffffffffffe, 0x4000000000000000, 0x80000000000}, {0xfffffffffffffffc, 0x0, 0x0, 0x7}, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x22, 0x3c}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x0, 0x7, 0xfffffffc, 0x1002}}, 0xe8)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4)
recvmmsg(r4, &(0x7f0000003d80)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/201, 0xc9}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0xfffffff8}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000540)=""/237, 0xed}, {&(0x7f0000000980)=""/39, 0x27}, {&(0x7f00000008c0)=""/85, 0x55}, {&(0x7f0000002d40)=""/4115, 0x1013}, {&(0x7f0000000640)=""/44, 0x2c}, {&(0x7f0000000ac0)=""/240, 0xf0}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x12002, 0x0)

798.071µs ago: executing program 2 (id=3604):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="84000000", @ANYRESHEX=r0, @ANYBLOB="f3f40000000000000000030000007000018008000300000000000d0001007564703a73797bb100000000440004"], 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0)

0s ago: executing program 1 (id=3605):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), r0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x68, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xe011}, 0x20000010)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r3, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
shutdown(r5, 0x1)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32, @ANYBLOB="fe00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/28], 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018910000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r7, @ANYRESHEX=r4], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8)
sendto$inet6(r5, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c)
listen(r4, 0x39e)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x2)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

10/0x10
[  219.546634][T13419]  ? aa_sock_msg_perm+0xf1/0x1d0
[  219.546643][T13419]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  219.546651][T13419]  ? __pfx_netlink_sendmsg+0x10/0x10
[  219.546661][T13419]  __sock_sendmsg+0x21c/0x270
[  219.546671][T13419]  ____sys_sendmsg+0x505/0x830
[  219.546684][T13419]  ? __pfx_____sys_sendmsg+0x10/0x10
[  219.546700][T13419]  ? import_iovec+0x74/0xa0
[  219.546712][T13419]  ___sys_sendmsg+0x21f/0x2a0
[  219.546724][T13419]  ? __pfx____sys_sendmsg+0x10/0x10
[  219.546752][T13419]  ? __fget_files+0x2a/0x420
[  219.546759][T13419]  ? __fget_files+0x3a0/0x420
[  219.546771][T13419]  __x64_sys_sendmsg+0x19b/0x260
[  219.546783][T13419]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  219.546799][T13419]  ? rcu_is_watching+0x15/0xb0
[  219.546809][T13419]  ? do_syscall_64+0xbe/0x3b0
[  219.546820][T13419]  do_syscall_64+0xfa/0x3b0
[  219.546828][T13419]  ? lockdep_hardirqs_on+0x9c/0x150
[  219.546836][T13419]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.546844][T13419]  ? exc_page_fault+0x9f/0xf0
[  219.546854][T13419]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.546861][T13419] RIP: 0033:0x7fc8e898eba9
[  219.546870][T13419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  219.546877][T13419] RSP: 002b:00007fc8e98ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  219.546887][T13419] RAX: ffffffffffffffda RBX: 00007fc8e8bd6090 RCX: 00007fc8e898eba9
[  219.546892][T13419] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000b
[  219.546897][T13419] RBP: 00007fc8e8a11e19 R08: 0000000000000000 R09: 0000000000000000
[  219.546903][T13419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  219.546908][T13419] R13: 00007fc8e8bd6128 R14: 00007fc8e8bd6090 R15: 00007ffebef0ee18
[  219.546923][T13419]  </TASK>
[  219.913098][T13421] netlink: 'syz.1.1877': attribute type 1 has an invalid length.
[  219.916865][T13421] netlink: 'syz.1.1877': attribute type 1 has an invalid length.
[  220.000928][T13425] netlink: 'syz.1.1879': attribute type 4 has an invalid length.
[  220.127294][T13436] netlink: 'syz.0.1881': attribute type 1 has an invalid length.
[  220.130629][T13436] netlink: 'syz.0.1881': attribute type 1 has an invalid length.
[  220.176126][T13440] netlink: 'syz.0.1882': attribute type 21 has an invalid length.
[  220.312060][T13457] bond0: (slave rose0): Error: Device can not be enslaved while up
[  220.415131][T13466] dvmrp1: tun_chr_ioctl cmd 1074025677
[  220.417060][T13466] dvmrp1: linktype set to 773
[  220.524403][T13473] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  220.527472][T13473] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  221.517221][T13498] lo speed is unknown, defaulting to 1000
[  221.628943][T13512] lo speed is unknown, defaulting to 1000
[  221.846501][T13525] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  221.849545][T13523] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  221.946575][T13529] __nla_validate_parse: 34 callbacks suppressed
[  221.946589][T13529] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1908'.
[  222.109035][T13544] validate_nla: 5 callbacks suppressed
[  222.109050][T13544] netlink: 'syz.2.1911': attribute type 4 has an invalid length.
[  222.187045][T13550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1913'.
[  222.251171][T13553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1914'.
[  222.266510][T13546] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  222.308583][T13557] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1914'.
[  222.420525][T13564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1916'.
[  222.423478][T13564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1916'.
[  222.508516][T13567] lo speed is unknown, defaulting to 1000
[  222.560488][T13575] netlink: 'syz.1.1920': attribute type 1 has an invalid length.
[  222.599368][T13578] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1921'.
[  222.602581][T13578] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1921'.
[  222.660437][T13588] netlink: 'syz.0.1925': attribute type 1 has an invalid length.
[  222.663128][T13588] netlink: 'syz.0.1925': attribute type 4 has an invalid length.
[  222.673936][T13592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1924'.
[  222.677458][T13587] netlink: 'syz.0.1925': attribute type 1 has an invalid length.
[  222.680876][T13588] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1925'.
[  222.681456][T13587] netlink: 'syz.0.1925': attribute type 4 has an invalid length.
[  222.706608][T13590] netlink: 'syz.1.1923': attribute type 8 has an invalid length.
[  222.713191][T13590] bond0: entered promiscuous mode
[  222.730214][T13590] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  222.733267][T13590] bond0: left promiscuous mode
[  222.736406][T13590] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  222.838827][T13600] netlink: set zone limit has 4 unknown bytes
[  222.852194][T13599] lo speed is unknown, defaulting to 1000
[  222.981186][T13612] netlink: 'syz.2.1931': attribute type 39 has an invalid length.
[  222.986799][T13607] lo speed is unknown, defaulting to 1000
[  222.992083][T13610] lo speed is unknown, defaulting to 1000
[  222.995976][T13603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  223.027773][T13612] netlink: 'syz.2.1931': attribute type 5 has an invalid length.
[  223.052755][T13603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  223.085467][T13612] vlan1: entered allmulticast mode
[  223.609303][T13652] netlink: 'syz.2.1941': attribute type 1 has an invalid length.
[  223.629431][T13646] can: request_module (can-proto-4) failed.
[  223.632922][T13647] can: request_module (can-proto-4) failed.
[  223.643846][T13652] 8021q: adding VLAN 0 to HW filter on device bond9
[  223.679116][T13647] lo speed is unknown, defaulting to 1000
[  224.015660][T13667] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  224.018215][T13667] CPU: 1 UID: 0 PID: 13667 Comm: syz.2.1944 Not tainted syzkaller #0 PREEMPT(full) 
[  224.018226][T13667] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  224.018232][T13667] Call Trace:
[  224.018236][T13667]  <TASK>
[  224.018242][T13667]  dump_stack_lvl+0x189/0x250
[  224.018258][T13667]  ? __pfx_dump_stack_lvl+0x10/0x10
[  224.018269][T13667]  ? __pfx__printk+0x10/0x10
[  224.018283][T13667]  ? kernfs_path_from_node+0x2f/0x290
[  224.018293][T13667]  ? kernfs_path_from_node+0x250/0x290
[  224.018301][T13667]  ? kernfs_path_from_node+0x2f/0x290
[  224.018312][T13667]  sysfs_warn_dup+0x8e/0xa0
[  224.018321][T13667]  sysfs_do_create_link_sd+0xc0/0x110
[  224.018331][T13667]  device_add_class_symlinks+0x1cf/0x240
[  224.018343][T13667]  device_add+0x475/0xb50
[  224.018355][T13667]  wiphy_register+0x1c81/0x2aa0
[  224.018375][T13667]  ? __pfx_wiphy_register+0x10/0x10
[  224.018385][T13667]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  224.018400][T13667]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  224.018416][T13667]  ieee80211_register_hw+0x3442/0x40a0
[  224.018444][T13667]  ? ieee80211_register_hw+0x13e1/0x40a0
[  224.018461][T13667]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  224.018475][T13667]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  224.018488][T13667]  ? __hrtimer_setup+0x187/0x210
[  224.018495][T13667]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  224.018506][T13667]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  224.018533][T13667]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  224.018544][T13667]  ? trace_kmalloc+0x1f/0xd0
[  224.018555][T13667]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  224.018566][T13667]  ? kstrndup+0xbf/0x160
[  224.018581][T13667]  hwsim_new_radio_nl+0xea4/0x1b10
[  224.018620][T13667]  ? __pfx___nla_validate_parse+0x10/0x10
[  224.018645][T13667]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  224.018668][T13667]  ? __nla_parse+0x40/0x60
[  224.018680][T13667]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  224.018697][T13667]  genl_family_rcv_msg_doit+0x215/0x300
[  224.018713][T13667]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  224.018731][T13667]  ? bpf_lsm_capable+0x9/0x20
[  224.018741][T13667]  ? security_capable+0x7e/0x2e0
[  224.018756][T13667]  genl_rcv_msg+0x60e/0x790
[  224.018771][T13667]  ? __pfx_genl_rcv_msg+0x10/0x10
[  224.018781][T13667]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  224.018800][T13667]  netlink_rcv_skb+0x208/0x470
[  224.018809][T13667]  ? __lock_acquire+0xab9/0xd20
[  224.018820][T13667]  ? __pfx_genl_rcv_msg+0x10/0x10
[  224.018832][T13667]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  224.018851][T13667]  ? down_read+0x1ad/0x2e0
[  224.018861][T13667]  genl_rcv+0x28/0x40
[  224.018872][T13667]  netlink_unicast+0x82f/0x9e0
[  224.018884][T13667]  ? __pfx_netlink_unicast+0x10/0x10
[  224.018893][T13667]  ? netlink_sendmsg+0x642/0xb30
[  224.018901][T13667]  ? skb_put+0x11b/0x210
[  224.018913][T13667]  netlink_sendmsg+0x805/0xb30
[  224.018927][T13667]  ? __pfx_netlink_sendmsg+0x10/0x10
[  224.018937][T13667]  ? aa_sock_msg_perm+0xf1/0x1d0
[  224.018947][T13667]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  224.018955][T13667]  ? __pfx_netlink_sendmsg+0x10/0x10
[  224.018965][T13667]  __sock_sendmsg+0x21c/0x270
[  224.018997][T13667]  ____sys_sendmsg+0x505/0x830
[  224.019013][T13667]  ? __pfx_____sys_sendmsg+0x10/0x10
[  224.019029][T13667]  ? import_iovec+0x74/0xa0
[  224.019042][T13667]  ___sys_sendmsg+0x21f/0x2a0
[  224.019055][T13667]  ? __pfx____sys_sendmsg+0x10/0x10
[  224.019085][T13667]  ? __fget_files+0x2a/0x420
[  224.019092][T13667]  ? __fget_files+0x3a0/0x420
[  224.019104][T13667]  __x64_sys_sendmsg+0x19b/0x260
[  224.019123][T13667]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  224.019152][T13667]  ? do_syscall_64+0xbe/0x3b0
[  224.019172][T13667]  do_syscall_64+0xfa/0x3b0
[  224.019187][T13667]  ? lockdep_hardirqs_on+0x9c/0x150
[  224.019202][T13667]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.019217][T13667]  ? exc_page_fault+0x9f/0xf0
[  224.019234][T13667]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.019248][T13667] RIP: 0033:0x7fc8e898eba9
[  224.019258][T13667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  224.019265][T13667] RSP: 002b:00007fc8e98ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  224.019275][T13667] RAX: ffffffffffffffda RBX: 00007fc8e8bd6090 RCX: 00007fc8e898eba9
[  224.019282][T13667] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a
[  224.019287][T13667] RBP: 00007fc8e8a11e19 R08: 0000000000000000 R09: 0000000000000000
[  224.019292][T13667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  224.019297][T13667] R13: 00007fc8e8bd6128 R14: 00007fc8e8bd6090 R15: 00007ffebef0ee18
[  224.019311][T13667]  </TASK>
[  224.522312][T13697] lo speed is unknown, defaulting to 1000
[  224.690975][T13707] lo speed is unknown, defaulting to 1000
[  224.719143][T13709] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  224.889820][T13720] : entered promiscuous mode
[  225.392048][T13755] tunl0: entered promiscuous mode
[  225.394336][T13755] tunl0: entered allmulticast mode
[  225.670346][T13777] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  225.674251][T13777] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  225.677136][T13777] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  225.679784][T13777] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  225.728705][T13780] syzkaller1: entered promiscuous mode
[  225.730645][T13780] syzkaller1: entered allmulticast mode
[  225.860048][T13782] 8021q: adding VLAN 0 to HW filter on device bond11
[  226.288910][T13807] openvswitch: netlink: Flow key attr not present in new flow.
[  226.394514][T13812] lo speed is unknown, defaulting to 1000
[  226.712558][T13832] hsr_slave_0: left promiscuous mode
[  226.716284][T13832] hsr_slave_1: left promiscuous mode
[  227.595187][T13853] __nla_validate_parse: 104 callbacks suppressed
[  227.595229][T13853] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1996'.
[  227.610827][T13853] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1996'.
[  227.635366][T13853] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1996'.
[  227.765945][T13873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2000'.
[  227.784850][T13877] validate_nla: 5 callbacks suppressed
[  227.784860][T13877] netlink: 'syz.2.2001': attribute type 1 has an invalid length.
[  227.796416][T13877] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2001'.
[  227.846760][T13877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2001'.
[  227.855133][T13877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2001'.
[  227.958347][T13900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2006'.
[  227.990265][T13904] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2009'.
[  228.006346][T13906] netlink: 'syz.0.2010': attribute type 1 has an invalid length.
[  228.026572][T13906] 8021q: adding VLAN 0 to HW filter on device bond13
[  228.043194][T13906] bond13: (slave geneve5): making interface the new active one
[  228.047320][T13906] bond13: (slave geneve5): Enslaving as an active interface with an up link
[  228.957148][T13925] netlink: 'syz.1.2016': attribute type 13 has an invalid length.
[  228.960431][T13925] netlink: 'syz.1.2016': attribute type 17 has an invalid length.
[  228.981879][T13925] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  229.042651][T13924] lo speed is unknown, defaulting to 1000
[  229.080221][T13925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  229.124118][T13930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2018'.
[  229.146967][T13934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  229.212547][T13924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  229.290592][T13945] netlink: 'syz.0.2021': attribute type 10 has an invalid length.
[  229.440324][T13958] bridge11: port 1(veth11) entered blocking state
[  229.442546][T13958] bridge11: port 1(veth11) entered disabled state
[  229.445219][T13958] veth11: entered allmulticast mode
[  229.448175][T13958] veth11: entered promiscuous mode
[  229.452786][T13958] bridge11: port 2(veth0_to_bond) entered blocking state
[  229.456638][T13958] bridge11: port 2(veth0_to_bond) entered disabled state
[  229.460114][T13958] veth0_to_bond: entered allmulticast mode
[  229.463901][T13958] veth0_to_bond: entered promiscuous mode
[  229.499663][T13969] lo speed is unknown, defaulting to 1000
[  230.073416][T13999] syzkaller1: entered promiscuous mode
[  230.075758][T13999] syzkaller1: entered allmulticast mode
[  230.137969][T14003] sctp: [Deprecated]: syz.1.2037 (pid 14003) Use of int in max_burst socket option.
[  230.137969][T14003] Use struct sctp_assoc_value instead
[  230.260756][T14015] bridge13: entered allmulticast mode
[  230.316096][T14022] lo speed is unknown, defaulting to 1000
[  230.468769][T14044] netlink: 'syz.2.2050': attribute type 27 has an invalid length.
[  230.472208][T14044] tunl0: left promiscuous mode
[  230.476192][T14044] tunl0: left allmulticast mode
[  230.480571][T14044] wg2: left promiscuous mode
[  230.482276][T14044] wg2: left allmulticast mode
[  230.485075][T14044] batadv_slave_0: left promiscuous mode
[  230.487213][T14044] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  230.489715][T14044] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  230.496928][T14044] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  230.504661][T14044] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  230.507190][T14044] tipc: Resetting bearer <eth:syzkaller0>
[  230.509912][T14044] syzkaller0: left promiscuous mode
[  230.511755][T14044] syzkaller0: left allmulticast mode
[  230.515867][T14044] ip6gretap1: left promiscuous mode
[  230.529001][T14044] ip6tnl1: left promiscuous mode
[  230.546133][T14044] bridge13: left allmulticast mode
[  230.548751][ T5866] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  230.576719][ T5866] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  230.579658][ T5866] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  230.584649][T14049] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  231.373193][ T5851] Bluetooth: hci2: link tx timeout
[  231.376334][ T5851] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  231.680994][T14102] netlink: 'syz.2.2067': attribute type 1 has an invalid length.
[  231.690220][T14099] lo speed is unknown, defaulting to 1000
[  231.724137][T14104] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  231.992766][T14118] netlink: 'syz.0.2071': attribute type 5 has an invalid length.
[  232.301112][T14133] lo speed is unknown, defaulting to 1000
[  232.586095][T14140] bond0: option arp_validate: invalid value (18446744073491447809)
[  232.669672][T14142] __nla_validate_parse: 27 callbacks suppressed
[  232.669682][T14142] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2078'.
[  232.784036][T14154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2080'.
[  232.848822][T14159] lo speed is unknown, defaulting to 1000
[  232.885138][T14161] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2081'.
[  232.896590][T14159] netlink: 'syz.2.2081': attribute type 1 has an invalid length.
[  232.899811][T14159] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2081'.
[  232.957204][T14164] veth0_to_bond: left allmulticast mode
[  232.970584][T14164] veth0_to_bond: left promiscuous mode
[  232.981931][T14164] bridge11: port 2(veth0_to_bond) entered disabled state
[  232.990405][T14164] : (slave bond_slave_0): Releasing backup interface
[  233.002702][T14164] : (slave bond_slave_1): Releasing backup interface
[  233.008572][T14165] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  233.009125][T14164] team0: Port device team_slave_0 removed
[  233.016092][T14164] team0: Port device team_slave_1 removed
[  233.019699][T14164] : (slave batadv_slave_0): Releasing backup interface
[  233.024827][T14164] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  233.045184][T14165] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  233.312230][T14173] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2083'.
[  233.397039][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  233.421692][T14178] syzkaller0: entered promiscuous mode
[  233.426498][T14178] syzkaller0: entered allmulticast mode
[  233.488450][T14180] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  233.701673][T14190] lo speed is unknown, defaulting to 1000
[  233.859999][T14196] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  233.936079][ T5866] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  233.940817][ T5866] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  233.950495][ T5866] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  233.963305][ T5866] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  234.130841][T14210] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  234.139068][T14210] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  234.148990][T14210] netlink: 'syz.2.2096': attribute type 10 has an invalid length.
[  234.151902][T14210] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  234.162156][T14210] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  234.166440][T14210] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  234.358278][T14219] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2098'.
[  234.363122][T14219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2098'.
[  234.796182][T14227] lo speed is unknown, defaulting to 1000
[  235.003684][T14231] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2101'.
[  235.153481][T14245] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2105'.
[  235.183219][T14247] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2106'.
[  235.370650][T14251] lo speed is unknown, defaulting to 1000
[  236.140133][T14278] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  236.144497][T14278] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  236.249463][T14282] pimreg: entered allmulticast mode
[  236.253084][T14282] pimreg: left allmulticast mode
[  236.672844][T14294] netlink: 'syz.2.2120': attribute type 16 has an invalid length.
[  236.676882][T14294] netlink: 'syz.2.2120': attribute type 17 has an invalid length.
[  236.699476][T14294] 8021q: adding VLAN 0 to HW filter on device 
[  236.702509][T14294] 8021q: adding VLAN 0 to HW filter on device team0
[  236.710730][T14294] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  236.717064][T12694] lo speed is unknown, defaulting to 1000
[  236.722015][T12694] syz2: Port: 1 Link ACTIVE
[  236.829057][T14302] netlink: 'syz.0.2123': attribute type 13 has an invalid length.
[  236.831725][T14302] netlink: 'syz.0.2123': attribute type 17 has an invalid length.
[  236.856349][T14302] 8021q: adding VLAN 0 to HW filter on device bond0
[  236.860097][T14302] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  236.889772][T14308] lo speed is unknown, defaulting to 1000
[  236.927435][T14309] netlink: 'syz.2.2125': attribute type 10 has an invalid length.
[  236.936127][T14309] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  237.162995][T14330] syzkaller1: entered promiscuous mode
[  237.168245][T14330] syzkaller1: entered allmulticast mode
[  237.319947][T14338] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  237.340274][T14338] bond9: left promiscuous mode
[  237.351245][T14338] bond10: left promiscuous mode
[  237.353857][T14338] bridge9: left promiscuous mode
[  237.356770][T14341] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  237.691957][T14356] __nla_validate_parse: 11 callbacks suppressed
[  237.691974][T14356] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2138'.
[  237.892593][T14365] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2140'.
[  237.899117][T14365] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2140'.
[  238.009794][T14375] netlink: 'syz.0.2142': attribute type 1 has an invalid length.
[  238.027243][T14375] bond14: entered promiscuous mode
[  238.029317][T14375] 8021q: adding VLAN 0 to HW filter on device bond14
[  238.036394][T14375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2142'.
[  238.057310][T14375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2142'.
[  238.064850][T14375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2142'.
[  238.136965][T14387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2144'.
[  238.234066][T14395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2145'.
[  238.317385][T14404] lo speed is unknown, defaulting to 1000
[  238.394677][T14409] pim6reg: entered allmulticast mode
[  238.400079][T14409] pim6reg: left allmulticast mode
[  238.452185][T14414] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2147'.
[  238.528742][T14417] netlink: 'syz.2.2149': attribute type 12 has an invalid length.
[  239.047899][T14421] netlink: 'syz.0.2150': attribute type 1 has an invalid length.
[  239.091055][T14421] bond15: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  239.096342][T14421] bond15: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  239.100184][T14421] bond15: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  239.143237][T14423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2150'.
[  239.371886][T14437] netlink: 'syz.0.2155': attribute type 1 has an invalid length.
[  239.428188][T14435] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  239.479629][T14442] bond2: (slave macvlan0): Error -98 calling set_mac_address
[  239.525242][T14448] bridge0: port 1(erspan1) entered blocking state
[  239.527486][T14448] bridge0: port 1(erspan1) entered disabled state
[  239.529619][T14448] erspan1: entered allmulticast mode
[  239.532485][T14448] erspan1: entered promiscuous mode
[  239.548209][T14444] lo speed is unknown, defaulting to 1000
[  239.882787][T14492] netlink: 'syz.0.2166': attribute type 5 has an invalid length.
[  239.928529][T14492] netlink: 'syz.0.2166': attribute type 10 has an invalid length.
[  239.945673][T14499] syzkaller1: entered allmulticast mode
[  239.992221][T14503] netlink: 'syz.0.2170': attribute type 1 has an invalid length.
[  240.809305][T14514] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  240.888469][T14523] netlink: 'syz.1.2176': attribute type 1 has an invalid length.
[  241.006287][T14538] netlink: 'syz.0.2182': attribute type 1 has an invalid length.
[  241.027509][T14543] openvswitch: netlink: Flow key attr not present in new flow.
[  241.030795][T14543] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available
[  241.053915][T14545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  241.067163][T14549] netlink: 'syz.2.2185': attribute type 83 has an invalid length.
[  242.281747][T14600] lo speed is unknown, defaulting to 1000
[  242.387711][T14612] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  242.425438][T14617] sctp: [Deprecated]: syz.1.2200 (pid 14617) Use of int in maxseg socket option.
[  242.425438][T14617] Use struct sctp_assoc_value instead
[  242.444146][T14616] sctp: [Deprecated]: syz.1.2200 (pid 14616) Use of int in maxseg socket option.
[  242.444146][T14616] Use struct sctp_assoc_value instead
[  242.616247][T14627] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  242.755178][T14631] lo speed is unknown, defaulting to 1000
[  242.963216][T14652] vlan0: entered promiscuous mode
[  242.964982][T14652] bond0: entered promiscuous mode
[  242.966705][T14652] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  242.969156][T14652] vlan0: entered allmulticast mode
[  242.972092][T14652] bond0: entered allmulticast mode
[  242.974962][T14652] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  242.992863][T14655] __nla_validate_parse: 34 callbacks suppressed
[  242.992874][T14655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2209'.
[  242.999996][T14655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2209'.
[  243.010717][T14655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2209'.
[  243.045897][T14663] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.2211'.
[  243.050597][T14659] lo speed is unknown, defaulting to 1000
[  243.136343][T14665] lo speed is unknown, defaulting to 1000
[  243.152084][T14670] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  243.286125][T14680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2215'.
[  243.305825][T14678] netlink: 9044 bytes leftover after parsing attributes in process `syz.0.2214'.
[  243.331722][T14673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2214'.
[  243.499855][T14686] lo speed is unknown, defaulting to 1000
[  243.509123][T14689] lo speed is unknown, defaulting to 1000
[  243.680032][T14697] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2220'.
[  243.689384][T14697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2220'.
[  243.749458][T14699] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2221'.
[  244.238663][T14734] validate_nla: 4 callbacks suppressed
[  244.238678][T14734] netlink: 'syz.1.2227': attribute type 1 has an invalid length.
[  244.250786][T14734] netlink: 'syz.1.2227': attribute type 2 has an invalid length.
[  244.465806][T14753] lo speed is unknown, defaulting to 1000
[  245.129246][T14787] netlink: 'syz.2.2235': attribute type 1 has an invalid length.
[  245.231862][T14749] delete_channel: no stack
[  245.642887][T14827] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[  245.647459][T14827] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  245.688589][T14832] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  245.735780][T14833] mac80211_hwsim hwsim17 syzkaller0: entered promiscuous mode
[  245.745856][T14833] mac80211_hwsim hwsim17 syzkaller0: entered allmulticast mode
[  245.759914][T14834] tipc: Resetting bearer <eth:syzkaller0>
[  245.767423][T14845] netlink: 'syz.2.2247': attribute type 21 has an invalid length.
[  245.902845][T14851] sctp: [Deprecated]: syz.0.2249 (pid 14851) Use of int in max_burst socket option.
[  245.902845][T14851] Use struct sctp_assoc_value instead
[  245.998592][T14863] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  246.008070][T14863] netlink: 'syz.2.2252': attribute type 10 has an invalid length.
[  246.011224][T14863] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  246.017479][T14863] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  246.021111][T14863] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  246.054553][T14870] netlink: 'syz.0.2253': attribute type 1 has an invalid length.
[  246.057698][T14869] netlink: 'syz.0.2253': attribute type 1 has an invalid length.
[  246.109269][T14873] netlink: 'syz.0.2254': attribute type 6 has an invalid length.
[  246.172144][T14874] netlink: 'syz.0.2254': attribute type 12 has an invalid length.
[  246.845170][T14886] xt_bpf: check failed: parse error
[  246.994734][T14895] lo speed is unknown, defaulting to 1000
[  247.144720][T14912] netlink: 'syz.0.2265': attribute type 39 has an invalid length.
[  248.163254][T14951] __nla_validate_parse: 26 callbacks suppressed
[  248.163267][T14951] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2276'.
[  248.168580][T14951] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2276'.
[  248.171438][T14951] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2276'.
[  248.181561][T14936] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2271'.
[  248.253160][T14958] lo speed is unknown, defaulting to 1000
[  248.489591][T14976] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2281'.
[  248.683144][T14997] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2286'.
[  248.689044][T14997] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  248.726710][T14999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2288'.
[  248.756558][T14999] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2288'.
[  248.826777][T15005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2290'.
[  248.946956][T15023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2294'.
[  248.988707][T15023] lo speed is unknown, defaulting to 1000
[  249.486178][T15055] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  249.795395][T15062] Bluetooth: MGMT ver 1.23
[  249.925812][T15067] lo speed is unknown, defaulting to 1000
[  250.140926][T15087] validate_nla: 3 callbacks suppressed
[  250.140941][T15087] netlink: 'syz.0.2311': attribute type 10 has an invalid length.
[  250.173082][T15087] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  250.204476][T15087] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  250.208008][T15087] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  250.241317][T15099] netlink: 'syz.2.2316': attribute type 1 has an invalid length.
[  250.361168][T15108] sctp: [Deprecated]: syz.2.2318 (pid 15108) Use of struct sctp_assoc_value in delayed_ack socket option.
[  250.361168][T15108] Use struct sctp_sack_info instead
[  250.425916][T15112] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  250.481126][   T10] lo speed is unknown, defaulting to 1000
[  250.484291][   T10] %: Port: 1 Link DOWN
[  250.510876][T15121] netlink: 'syz.1.2323': attribute type 5 has an invalid length.
[  250.699996][T15137] openvswitch: netlink: Key type 9232 is out of range max 32
[  250.858094][T15146] lo speed is unknown, defaulting to 1000
[  250.861355][T15148] lo speed is unknown, defaulting to 1000
[  251.055568][T15162] veth7: left promiscuous mode
[  251.057375][T15162] geneve4: left promiscuous mode
[  251.059017][T15162] mac80211_hwsim hwsim17 syzkaller0: left promiscuous mode
[  251.061347][T15162] bond14: left promiscuous mode
[  251.222271][T15168] bond0: (slave bond7): Error -95 calling ndo_bpf
[  251.226465][T15168] syzkaller0 speed is unknown, defaulting to 1000
[  251.229218][T15168] syzkaller0 speed is unknown, defaulting to 1000
[  251.232530][T15168] syzkaller0 speed is unknown, defaulting to 1000
[  251.256553][T15168] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  251.263278][T15170] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[  251.279422][T15171] netlink: 'syz.0.2334': attribute type 10 has an invalid length.
[  251.283239][T15168] syzkaller0 speed is unknown, defaulting to 1000
[  251.288698][T15168] syzkaller0 speed is unknown, defaulting to 1000
[  251.292970][T15168] syzkaller0 speed is unknown, defaulting to 1000
[  251.540371][T15181] lo speed is unknown, defaulting to 1000
[  251.546066][T15181] syzkaller0 speed is unknown, defaulting to 1000
[  252.352144][T15209] siw: device registration error -23
[  252.385401][T15209] netlink: 'syz.0.2346': attribute type 4 has an invalid length.
[  252.924993][T15238] lo speed is unknown, defaulting to 1000
[  252.930038][T15238] syzkaller0 speed is unknown, defaulting to 1000
[  253.188663][T15247] netlink: 'syz.1.2353': attribute type 1 has an invalid length.
[  253.509707][T15253] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  253.571864][T15253] __nla_validate_parse: 13 callbacks suppressed
[  253.571876][T15253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2355'.
[  253.579807][T15253] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2355'.
[  253.623295][T15255] lo speed is unknown, defaulting to 1000
[  253.627259][T15255] syzkaller0 speed is unknown, defaulting to 1000
[  253.885899][T15261] ip6gre1: entered allmulticast mode
[  253.967988][T15263] lo speed is unknown, defaulting to 1000
[  253.983362][T15263] syzkaller0 speed is unknown, defaulting to 1000
[  254.003864][T15270] IPv6: NLM_F_CREATE should be specified when creating new route
[  254.041944][T15272] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2361'.
[  254.045525][T15272] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2361'.
[  254.152452][T15275] lo speed is unknown, defaulting to 1000
[  254.160543][T15275] syzkaller0 speed is unknown, defaulting to 1000
[  254.204470][T15282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2365'.
[  254.214980][T15282] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2365'.
[  254.385719][T15292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2368'.
[  254.453960][T15299] netlink: 3010 bytes leftover after parsing attributes in process `syz.2.2370'.
[  254.480467][T15300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2369'.
[  254.498167][T15300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2369'.
[  254.575837][T15304] lo: MTU too low for tipc bearer
[  254.582354][T15304] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  254.622141][T15309] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  254.849280][T15337] netlink: 'syz.1.2380': attribute type 39 has an invalid length.
[  254.855630][T15337] netlink: 'syz.1.2380': attribute type 5 has an invalid length.
[  255.116410][T15351] openvswitch: netlink: Message has 16 unknown bytes.
[  255.119059][T15351] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  255.152005][T15351] lo speed is unknown, defaulting to 1000
[  255.157221][T15351] syzkaller0 speed is unknown, defaulting to 1000
[  255.184372][T15353] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  256.121243][T15363] lo speed is unknown, defaulting to 1000
[  256.136276][T15363] syzkaller0 speed is unknown, defaulting to 1000
[  256.211682][T15373] openvswitch: netlink: IP tunnel dst address not specified
[  256.447422][T15394] netlink: 'syz.2.2395': attribute type 2 has an invalid length.
[  256.608727][T15410] netlink: 'syz.0.2399': attribute type 30 has an invalid length.
[  256.615721][T15410] IPVS: Unknown mcast interface: hsr0
[  256.841256][T15418] netlink: 'syz.1.2402': attribute type 3 has an invalid length.
[  257.186446][T15440] netlink: 'syz.1.2406': attribute type 24 has an invalid length.
[  257.189132][T15440] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  257.192204][T15440] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  257.437046][T15445] lo speed is unknown, defaulting to 1000
[  257.442147][T15445] syzkaller0 speed is unknown, defaulting to 1000
[  257.588514][   T33] audit: type=1107 audit(1758377499.934:5): pid=15457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='umƶ:34[ү+#V䥤S@jRFtn"9IiJ_(E߭|`p.`rBeę
[  257.588514][   T33] Z&̐U!% Tj(B'
[  257.793715][ T5851] Bluetooth: hci1: command 0x0406 tx timeout
[  257.860903][T15480] lo speed is unknown, defaulting to 1000
[  257.873157][T15480] syzkaller0 speed is unknown, defaulting to 1000
[  257.883175][T15486] vlan1: entered promiscuous mode
[  257.885862][T15486] vlan1: entered allmulticast mode
[  257.887901][T15486] hsr_slave_1: entered allmulticast mode
[  258.057829][T15501] lo speed is unknown, defaulting to 1000
[  258.061915][T15501] syzkaller0 speed is unknown, defaulting to 1000
[  258.134100][T15506] 8021q: adding VLAN 0 to HW filter on device bond0
[  258.139374][T15506] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  258.331603][T15510] lo speed is unknown, defaulting to 1000
[  258.338012][T15510] syzkaller0 speed is unknown, defaulting to 1000
[  258.983846][T15527] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  259.047250][T15530] __nla_validate_parse: 14 callbacks suppressed
[  259.047265][T15530] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2429'.
[  259.150311][T15534] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  259.521975][T15554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2434'.
[  259.537882][T15554] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  259.551056][T15554] bond9: left allmulticast mode
[  259.554148][T15554] vlan0: left promiscuous mode
[  259.556178][T15554] bond0: left promiscuous mode
[  259.558259][T15554] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  259.561309][T15554] vlan0: left allmulticast mode
[  259.563371][T15554] bond0: left allmulticast mode
[  259.565923][T15554] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  259.591020][T15554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2434'.
[  259.595762][T15554] hsr_slave_0: left promiscuous mode
[  259.601189][T15554] hsr_slave_1: left promiscuous mode
[  259.838252][T15564] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2437'.
[  259.951821][T15575] lo speed is unknown, defaulting to 1000
[  259.957374][T15575] syzkaller0 speed is unknown, defaulting to 1000
[  259.967795][T15576] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  260.402775][T15585] syzkaller0: entered promiscuous mode
[  260.405164][T15585] syzkaller0: entered allmulticast mode
[  260.519143][T15590] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2442'.
[  260.557118][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.562485][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.566221][T15590] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  260.571756][T15590] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  260.799429][T15606] lo speed is unknown, defaulting to 1000
[  260.803121][T15606] syzkaller0 speed is unknown, defaulting to 1000
[  260.855528][T15608] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  260.859223][T15608] syzkaller0: entered promiscuous mode
[  260.860994][T15608] syzkaller0: entered allmulticast mode
[  260.863981][T15608] tipc: Resetting bearer <eth:syzkaller0>
[  261.181958][T15615] netlink: 'syz.2.2446': attribute type 12 has an invalid length.
[  261.465866][T15625] lo speed is unknown, defaulting to 1000
[  261.469227][T15625] syzkaller0 speed is unknown, defaulting to 1000
[  261.691199][T15631] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2450'.
[  261.694479][T15631] ip6gretap0: entered promiscuous mode
[  261.698653][T15631] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2450'.
[  261.747398][T15636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2451'.
[  261.768394][T15639] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  261.774792][T15639] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  261.923477][T15644] lo speed is unknown, defaulting to 1000
[  261.929028][T15644] syzkaller0 speed is unknown, defaulting to 1000
[  261.986073][T15648] syzkaller1: entered promiscuous mode
[  261.987838][T15648] syzkaller1: entered allmulticast mode
[  262.262199][T15654] lo speed is unknown, defaulting to 1000
[  262.270152][T15654] syzkaller0 speed is unknown, defaulting to 1000
[  262.392484][T15657] lo speed is unknown, defaulting to 1000
[  262.400499][T15657] syzkaller0 speed is unknown, defaulting to 1000
[  262.533318][T15661] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20000
[  262.705034][T15664] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  262.808268][T15667] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2459'.
[  263.418929][T15679] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2463'.
[  263.926758][T15699] lo speed is unknown, defaulting to 1000
[  263.931813][T15699] syzkaller0 speed is unknown, defaulting to 1000
[  264.072726][T15720] __nla_validate_parse: 3 callbacks suppressed
[  264.072743][T15720] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2474'.
[  264.080051][T15721] netlink: 'syz.2.2472': attribute type 13 has an invalid length.
[  264.083131][T15721] netlink: 'syz.2.2472': attribute type 17 has an invalid length.
[  264.112353][T15721] 8021q: adding VLAN 0 to HW filter on device 
[  264.115512][T15721] 8021q: adding VLAN 0 to HW filter on device team0
[  264.118763][T15721] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  264.123249][   T47] lo speed is unknown, defaulting to 1000
[  264.125764][   T47] %: Port: 1 Link ACTIVE
[  264.137419][T15713] xfrm0: entered promiscuous mode
[  264.139513][T15713] xfrm0: entered allmulticast mode
[  264.187284][T15713] lo speed is unknown, defaulting to 1000
[  264.190980][T15713] syzkaller0 speed is unknown, defaulting to 1000
[  264.263152][T15712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  264.289046][T15729] lo speed is unknown, defaulting to 1000
[  264.292737][T15729] syzkaller0 speed is unknown, defaulting to 1000
[  264.403226][T15729] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2477'.
[  264.630624][T15735] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2478'.
[  264.658389][T15737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2479'.
[  264.661111][T15737] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2479'.
[  264.666830][T15737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2479'.
[  264.670185][T15737] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2479'.
[  264.675933][T15737] netlink: 540 bytes leftover after parsing attributes in process `syz.0.2479'.
[  264.756019][T15741] netlink: 'syz.0.2480': attribute type 1 has an invalid length.
[  264.967280][T15758] lo speed is unknown, defaulting to 1000
[  264.972219][T15758] syzkaller0 speed is unknown, defaulting to 1000
[  265.145349][T15773] lo speed is unknown, defaulting to 1000
[  265.149803][T15773] syzkaller0 speed is unknown, defaulting to 1000
[  265.198903][T15778] lo: entered allmulticast mode
[  265.200745][T15778] tunl0: entered allmulticast mode
[  265.202607][T15778] gre0: entered allmulticast mode
[  265.205343][T15778] gretap0: entered allmulticast mode
[  265.207791][T15778] erspan0: entered allmulticast mode
[  265.209788][T15778] ip_vti0: entered allmulticast mode
[  265.211744][T15778] ip6_vti0: entered allmulticast mode
[  265.213853][T15778] sit0: entered allmulticast mode
[  265.215656][T15778] ip6tnl0: entered allmulticast mode
[  265.220603][T15778] ip6gre0: entered allmulticast mode
[  265.223434][T15778] ip6gretap0: entered allmulticast mode
[  265.225536][T15778] bond0: entered allmulticast mode
[  265.227189][T15778] bond7: entered allmulticast mode
[  265.228757][T15778] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  265.231307][T15778] nlmon0: entered allmulticast mode
[  265.233406][T15778] 0X: entered allmulticast mode
[  265.235782][T15778] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  265.266882][T15770] lo speed is unknown, defaulting to 1000
[  265.270294][T15770] syzkaller0 speed is unknown, defaulting to 1000
[  265.320574][T15785] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2490'.
[  265.336575][T15785] netlink: 'syz.0.2490': attribute type 1 has an invalid length.
[  265.369809][T15782] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  265.376472][T15785] 8021q: adding VLAN 0 to HW filter on device bond16
[  265.450979][T15788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2489'.
[  265.569750][T11279] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  265.573338][T11279] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  265.578932][T11279] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  265.745852][T15809] openvswitch: netlink: Flow actions attr not present in new flow.
[  265.863427][T15813] vlan0: entered promiscuous mode
[  265.865274][T15813] bond0: entered promiscuous mode
[  265.866864][T15813] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  266.025230][T15822] lo speed is unknown, defaulting to 1000
[  266.030363][T15822] syzkaller0 speed is unknown, defaulting to 1000
[  266.094108][T15834] netlink: 'syz.1.2504': attribute type 39 has an invalid length.
[  266.107962][T15834] netlink: 'syz.1.2504': attribute type 5 has an invalid length.
[  266.131232][T15834] vlan1: entered allmulticast mode
[  266.132888][T15834] bridge_slave_0: entered allmulticast mode
[  266.205562][T15841] siw: device registration error -23
[  266.268464][T15841] netlink: 'syz.0.2506': attribute type 4 has an invalid length.
[  266.438977][T15853] lo speed is unknown, defaulting to 1000
[  266.442518][T15853] syzkaller0 speed is unknown, defaulting to 1000
[  266.545026][T15872] netlink: 'syz.2.2516': attribute type 9 has an invalid length.
[  266.549664][T15872] syzkaller0: left promiscuous mode
[  266.554179][T15872] syzkaller0: left allmulticast mode
[  266.562833][T15872] tipc: Resetting bearer <eth:syzkaller0>
[  266.575554][T15874] lo: MTU too low for tipc bearer
[  266.577269][T15874] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  266.868873][T15901] lo speed is unknown, defaulting to 1000
[  266.879522][T15901] syzkaller0 speed is unknown, defaulting to 1000
[  267.180377][T15901] netlink: 'syz.1.2525': attribute type 3 has an invalid length.
[  267.182934][T15901] netlink: 'syz.1.2525': attribute type 2 has an invalid length.
[  267.501308][T15918] syzkaller1: entered allmulticast mode
[  267.618889][T15922] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  267.849644][ T6920] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0
[  267.853163][ T6920] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0
[  267.857254][ T6920] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0
[  268.073168][T15959] vlan0 (unregistering): left allmulticast mode
[  268.075890][T15959] bridge0 (unregistering): left allmulticast mode
[  268.079441][T15959] bridge6: port 1(vlan0) entered disabled state
[  268.127085][T15961] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  268.330974][T15978] lo speed is unknown, defaulting to 1000
[  268.335652][T15981] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  268.338095][T15981] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  268.345234][T15978] syzkaller0 speed is unknown, defaulting to 1000
[  268.392907][T15985] syzkaller1: entered promiscuous mode
[  268.395037][T15985] syzkaller1: entered allmulticast mode
[  269.182891][T16038] __nla_validate_parse: 45 callbacks suppressed
[  269.182905][T16038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2566'.
[  269.189810][T16040] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2567'.
[  269.190792][T16037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2566'.
[  269.231813][T16038] 8021q: adding VLAN 0 to HW filter on device bond6
[  269.241469][T16037] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2566'.
[  269.285595][T16050] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  269.348315][T16053] syzkaller0: entered promiscuous mode
[  269.350102][T16053] syzkaller0: entered allmulticast mode
[  269.351970][T16053] tipc: Resetting bearer <eth:syzkaller0>
[  269.409684][T16059] sctp: [Deprecated]: syz.2.2570 (pid 16059) Use of struct sctp_assoc_value in delayed_ack socket option.
[  269.409684][T16059] Use struct sctp_sack_info instead
[  269.601729][T16071] lo speed is unknown, defaulting to 1000
[  269.607329][T16070] lo speed is unknown, defaulting to 1000
[  269.607406][T16071] syzkaller0 speed is unknown, defaulting to 1000
[  269.624498][T16070] syzkaller0 speed is unknown, defaulting to 1000
[  270.194335][T16099] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2578'.
[  270.347805][T16119] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2584'.
[  270.350876][T16120] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2584'.
[  270.352380][T16115] xt_l2tp: v2 sid > 0xffff: 1114112
[  270.361778][T16115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2583'.
[  270.446797][T16128] 8021q: adding VLAN 0 to HW filter on device bond0
[  270.449780][T16128] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  270.558001][T16136] macvtap1: entered promiscuous mode
[  270.559752][T16136] macvtap1: entered allmulticast mode
[  270.638986][T16148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2589'.
[  270.642026][T16148] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2589'.
[  270.885741][T16159] lo speed is unknown, defaulting to 1000
[  270.890601][T16159] syzkaller0 speed is unknown, defaulting to 1000
[  271.070844][T16167] lo speed is unknown, defaulting to 1000
[  271.104260][T16167] syzkaller0 speed is unknown, defaulting to 1000
[  271.282901][T16186] openvswitch: netlink: Missing valid actions attribute.
[  271.284525][T16185] bond6: option mode: unable to set because the bond device is up
[  271.290444][T16186] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  271.450413][T16194] validate_nla: 7 callbacks suppressed
[  271.450424][T16194] netlink: 'syz.2.2604': attribute type 5 has an invalid length.
[  271.840004][T16205] netlink: 'syz.2.2607': attribute type 13 has an invalid length.
[  271.842724][T16205] netlink: 'syz.2.2607': attribute type 17 has an invalid length.
[  271.860849][T16205] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  271.902720][T16205] lo speed is unknown, defaulting to 1000
[  271.907069][T16202] lo speed is unknown, defaulting to 1000
[  271.908552][T16205] syzkaller0 speed is unknown, defaulting to 1000
[  271.927298][T16202] syzkaller0 speed is unknown, defaulting to 1000
[  271.967204][T16207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  272.027946][T16205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  272.087767][T16207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  272.163128][T16213] lo speed is unknown, defaulting to 1000
[  272.168676][T16213] syzkaller0 speed is unknown, defaulting to 1000
[  272.683363][T16232] siw: device registration error -23
[  272.695837][T16231] lo speed is unknown, defaulting to 1000
[  272.699218][T16231] syzkaller0 speed is unknown, defaulting to 1000
[  272.800211][T16241] lo speed is unknown, defaulting to 1000
[  272.809778][T16241] syzkaller0 speed is unknown, defaulting to 1000
[  272.822561][T16249] netlink: 'syz.1.2615': attribute type 1 has an invalid length.
[  272.966736][T16253] lo speed is unknown, defaulting to 1000
[  272.970425][T16253] syzkaller0 speed is unknown, defaulting to 1000
[  273.058790][T16263] lo speed is unknown, defaulting to 1000
[  273.067733][T16263] syzkaller0 speed is unknown, defaulting to 1000
[  273.198486][T16276] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  273.207328][T16276] mac80211_hwsim hwsim17 syzkaller0: entered promiscuous mode
[  273.400684][T16282] lo speed is unknown, defaulting to 1000
[  273.409680][T16282] syzkaller0 speed is unknown, defaulting to 1000
[  273.465353][T16294] netlink: 'syz.1.2629': attribute type 30 has an invalid length.
[  273.662425][T16311] netlink: 'syz.0.2635': attribute type 39 has an invalid length.
[  273.681282][T16311] netlink: 'syz.0.2635': attribute type 5 has an invalid length.
[  273.700777][T16311] vlan0: entered allmulticast mode
[  273.939316][T16325] lo speed is unknown, defaulting to 1000
[  273.981906][T16325] syzkaller0 speed is unknown, defaulting to 1000
[  274.148492][T16339] bond11: entered promiscuous mode
[  274.150402][T16339] 8021q: adding VLAN 0 to HW filter on device bond11
[  274.179134][T16340] openvswitch: netlink: Flow actions attr not present in new flow.
[  274.260290][T16348] __nla_validate_parse: 19 callbacks suppressed
[  274.260302][T16348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2642'.
[  274.368941][T16360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2641'.
[  274.436993][T16362] bridge0: port 1(netdevsim2) entered blocking state
[  274.440784][T16362] bridge0: port 1(netdevsim2) entered disabled state
[  274.446621][T16362] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[  274.452716][T16362] netdevsim netdevsim2 netdevsim2: entered promiscuous mode
[  274.494950][T16362] syzkaller1: entered promiscuous mode
[  274.496782][T16362] syzkaller1: entered allmulticast mode
[  274.517444][T16365] openvswitch: netlink: Flow actions attr not present in new flow.
[  274.568498][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2645'.
[  274.633373][T16381] sch_fq: defrate 0 ignored.
[  274.677003][T16375] lo speed is unknown, defaulting to 1000
[  274.680950][T16375] syzkaller0 speed is unknown, defaulting to 1000
[  274.711136][   T33] audit: type=1107 audit(1758377517.054:6): pid=16384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  274.849964][T16401] tipc: Resetting bearer <eth:syzkaller0>
[  275.047107][T16414] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 3, id = 0
[  275.142571][T16420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2655'.
[  275.151201][T16420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2655'.
[  275.423212][T16445] lo speed is unknown, defaulting to 1000
[  275.440761][T16445] syzkaller0 speed is unknown, defaulting to 1000
[  275.571586][T16468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2666'.
[  275.626205][T16473] netlink: 'syz.2.2667': attribute type 21 has an invalid length.
[  275.629832][T16473] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2667'.
[  275.636617][T16473] netlink: 'syz.2.2667': attribute type 5 has an invalid length.
[  275.641500][T16473] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2667'.
[  275.715567][T16475] lo speed is unknown, defaulting to 1000
[  275.720471][T16475] syzkaller0 speed is unknown, defaulting to 1000
[  275.768307][T16480] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2670'.
[  275.771156][T16480] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2670'.
[  275.922648][T16486] netlink: 'syz.2.2672': attribute type 28 has an invalid length.
[  276.028080][T16493] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  276.076997][T16495] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  276.360190][T16517] ave_0: entered promiscuous mode
[  276.731494][T16534] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  276.745015][T16534] syzkaller0: entered promiscuous mode
[  276.747537][T16534] syzkaller0: entered allmulticast mode
[  276.760129][T16533] tipc: Resetting bearer <eth:syzkaller0>
[  276.777245][T16533] tipc: Disabling bearer <eth:syzkaller0>
[  277.540296][T16556] lo speed is unknown, defaulting to 1000
[  277.548320][T16556] syzkaller0 speed is unknown, defaulting to 1000
[  277.913102][T16572] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  278.228659][T16602] lo speed is unknown, defaulting to 1000
[  278.232310][T16602] syzkaller0 speed is unknown, defaulting to 1000
[  278.917094][T16632] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  279.442063][T16664] lo speed is unknown, defaulting to 1000
[  279.447651][T16664] syzkaller0 speed is unknown, defaulting to 1000
[  279.979032][T16671] __nla_validate_parse: 21 callbacks suppressed
[  279.979048][T16671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2727'.
[  279.980370][T16674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2729'.
[  280.858463][T16685] lo speed is unknown, defaulting to 1000
[  280.864701][T16685] syzkaller0 speed is unknown, defaulting to 1000
[  280.958971][T16695] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2734'.
[  280.961803][T16695] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2734'.
[  280.973983][T16695] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2734'.
[  280.977019][T16695] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2734'.
[  280.986065][T16695] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2734'.
[  280.993240][T16695] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2734'.
[  281.002979][T16695] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2734'.
[  281.006752][T16695] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2734'.
[  281.100117][T16704] validate_nla: 3 callbacks suppressed
[  281.100136][T16704] netlink: 'syz.2.2736': attribute type 46 has an invalid length.
[  281.145912][T16716] openvswitch: netlink: Flow actions attr not present in new flow.
[  281.248885][T16722] lo speed is unknown, defaulting to 1000
[  281.252998][T16722] syzkaller0 speed is unknown, defaulting to 1000
[  281.407620][T16729] syzkaller1: entered promiscuous mode
[  281.409772][T16729] syzkaller1: entered allmulticast mode
[  281.919666][T16751] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  282.111781][T16761] syzkaller1: entered allmulticast mode
[  282.555536][T16787] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  282.559826][T16786] IPVS: stopping backup sync thread 16787 ...
[  282.743260][T16800] lo speed is unknown, defaulting to 1000
[  282.746727][T16800] syzkaller0 speed is unknown, defaulting to 1000
[  282.943343][T16809] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  282.948707][T16809] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  283.153920][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  283.438032][T16815] netlink: 'syz.1.2765': attribute type 7 has an invalid length.
[  283.441223][T16815] netlink: 'syz.1.2765': attribute type 8 has an invalid length.
[  283.471042][T16817] geneve0: entered promiscuous mode
[  283.509213][T16820] syzkaller1: entered promiscuous mode
[  283.511164][T16820] syzkaller1: entered allmulticast mode
[  283.999754][T16852] netlink: 'syz.0.2775': attribute type 27 has an invalid length.
[  284.059035][T16864] lo speed is unknown, defaulting to 1000
[  284.063452][T16864] syzkaller0 speed is unknown, defaulting to 1000
[  284.147664][T16870] syzkaller1: entered promiscuous mode
[  284.149441][T16870] syzkaller1: entered allmulticast mode
[  284.250040][T16876] syzkaller1: entered promiscuous mode
[  284.252275][T16876] syzkaller1: entered allmulticast mode
[  284.306846][T16878] lo speed is unknown, defaulting to 1000
[  284.311583][T16878] syzkaller0 speed is unknown, defaulting to 1000
[  284.601373][T16895] netlink: 'syz.1.2786': attribute type 33 has an invalid length.
[  284.620017][T16895] netlink: 'syz.1.2786': attribute type 33 has an invalid length.
[  284.663304][T16903] netlink: 'syz.2.2788': attribute type 12 has an invalid length.
[  285.043626][T16913] netlink: 'syz.2.2791': attribute type 21 has an invalid length.
[  285.047176][T16913] __nla_validate_parse: 35 callbacks suppressed
[  285.047190][T16913] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2791'.
[  285.089908][T16917] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2792'.
[  285.281585][T16925] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2795'.
[  285.417003][T16937] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2797'.
[  285.420323][T16937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2797'.
[  285.484078][T16936] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2799'.
[  285.540599][T16944] IPVS: stopping backup sync thread 11563 ...
[  285.555812][T16946] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2803'.
[  285.631854][T16948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2804'.
[  285.652381][T16953] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2803'.
[  285.725323][T16950] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  285.729190][T16950] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0
[  285.768619][T16959] lo speed is unknown, defaulting to 1000
[  285.772264][T16959] syzkaller0 speed is unknown, defaulting to 1000
[  285.796714][T16950] netdevsim netdevsim2 netdevsim2 (unregistering): left allmulticast mode
[  285.799481][T16950] netdevsim netdevsim2 netdevsim2 (unregistering): left promiscuous mode
[  285.803452][T16950] bridge0: port 1(netdevsim2) entered disabled state
[  285.811692][T16950] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  285.815598][T16950] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0
[  285.847544][T16961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2807'.
[  285.862157][T16950] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  285.867153][T16950] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0
[  286.015569][T11279] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  286.018327][T11279] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 256 - 0
[  286.029907][T11279] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  286.032578][T11279] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 256 - 0
[  286.048195][T11279] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  286.050979][T11279] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 256 - 0
[  286.064237][ T5866] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  286.067367][ T5866] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 256 - 0
[  286.143158][T16968] lo speed is unknown, defaulting to 1000
[  286.149646][T16968] syzkaller0 speed is unknown, defaulting to 1000
[  286.186946][T16969] netlink: 'syz.2.2809': attribute type 29 has an invalid length.
[  286.194948][T16969] netlink: 'syz.2.2809': attribute type 29 has an invalid length.
[  286.475481][T16978] lo speed is unknown, defaulting to 1000
[  286.480552][T16978] syzkaller0 speed is unknown, defaulting to 1000
[  287.008628][T16991] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  287.292813][T17009] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  287.334967][T17012] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  287.460606][T17009] tipc: Resetting bearer <eth:syzkaller0>
[  287.508251][   T47] lo speed is unknown, defaulting to 1000
[  287.510685][   T47] %: Port: 1 Link DOWN
[  287.587063][ T6920] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  287.596209][ T6920] netdevsim netdevsim2 eth0: unset [0, 1] type 1 family 0 port 256 - 0
[  287.610262][ T6920] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  287.614400][ T6920] netdevsim netdevsim2 eth1: unset [0, 1] type 1 family 0 port 256 - 0
[  287.631698][ T6920] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  287.636961][ T6920] netdevsim netdevsim2 eth2: unset [0, 1] type 1 family 0 port 256 - 0
[  287.640739][T17016] lo speed is unknown, defaulting to 1000
[  287.643248][ T6920] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  287.648740][ T6920] netdevsim netdevsim2 eth3: unset [0, 1] type 1 family 0 port 256 - 0
[  287.661656][T17016] syzkaller0 speed is unknown, defaulting to 1000
[  287.731666][T17027] tipc: Failed to remove unknown binding: 66,1,1/0:1421642859/1421642861
[  287.740163][T17027] tipc: Failed to remove unknown binding: 66,1,1/0:1421642859/1421642861
[  288.398302][T17046] netlink: 'syz.2.2831': attribute type 4 has an invalid length.
[  288.417810][T17048] lo speed is unknown, defaulting to 1000
[  288.422925][T17048] syzkaller0 speed is unknown, defaulting to 1000
[  288.465999][T17050] lo speed is unknown, defaulting to 1000
[  288.471091][T17050] syzkaller0 speed is unknown, defaulting to 1000
[  288.680393][T17050] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  288.982982][T17080] openvswitch: netlink: Flow actions attr not present in new flow.
[  289.045158][T17082] lo speed is unknown, defaulting to 1000
[  289.050615][T17082] syzkaller0 speed is unknown, defaulting to 1000
[  289.351862][T17099] lo speed is unknown, defaulting to 1000
[  289.363589][T17099] syzkaller0 speed is unknown, defaulting to 1000
[  289.419721][T17102] syzkaller1: entered promiscuous mode
[  289.421717][T17102] syzkaller1: entered allmulticast mode
[  289.811828][T17113] lo speed is unknown, defaulting to 1000
[  289.817460][T17113] syzkaller0 speed is unknown, defaulting to 1000
[  289.855523][T17114] lo speed is unknown, defaulting to 1000
[  289.873046][T17114] syzkaller0 speed is unknown, defaulting to 1000
[  290.025235][T17121] lo speed is unknown, defaulting to 1000
[  290.029388][T17121] syzkaller0 speed is unknown, defaulting to 1000
[  290.147017][T17131] __nla_validate_parse: 14 callbacks suppressed
[  290.147032][T17131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2850'.
[  290.344537][T17141] lo speed is unknown, defaulting to 1000
[  290.348037][T17141] syzkaller0 speed is unknown, defaulting to 1000
[  290.442592][T17149] syz.2.2856 uses old SIOCAX25GETINFO
[  290.639909][T17165] lo speed is unknown, defaulting to 1000
[  290.644537][T17165] syzkaller0 speed is unknown, defaulting to 1000
[  290.669769][T17167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2861'.
[  290.705308][T17167] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2861'.
[  290.823196][T17176] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  290.956994][T17192] ip6_vti0: entered allmulticast mode
[  290.964053][T17191] bond0: (slave wlan1): Releasing backup interface
[  290.976669][T17191] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  290.983326][T17191] bond1: (slave gretap1): Releasing active interface
[  290.986759][T17192] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2867'.
[  290.997536][T17191] bond2: (slave macvlan3): Releasing backup interface
[  290.999717][T17191] bond2: (slave macvlan3): the permanent HWaddr of slave - 3a:53:f4:92:90:9d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  291.009586][T17191] bond2: (slave macvlan4): Releasing backup interface
[  291.014730][T17191] bond2: (slave ip6gretap1): Releasing backup interface
[  291.019695][T17191] bond8: (slave bridge0): Releasing active interface
[  291.024939][T17191] bond2: (slave macvlan5): Releasing backup interface
[  291.029933][T17191] bond10: (slave bridge9): Releasing backup interface
[  291.035044][T17191] erspan1: left allmulticast mode
[  291.038915][T17191] erspan1: left promiscuous mode
[  291.041335][T17191] bridge0: port 1(erspan1) entered disabled state
[  291.105260][T17191] team0: Mode changed to "activebackup"
[  291.129828][T17199] netlink: 'syz.0.2868': attribute type 2 has an invalid length.
[  291.135951][T17199] netlink: 'syz.0.2868': attribute type 1 has an invalid length.
[  291.373033][T17221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2876'.
[  291.512758][T17233] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  291.518680][T17233] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  291.584057][T17244] IPVS: set_ctl: invalid protocol: 29 172.30.1.2:20003
[  291.594446][T17244] IPVS: set_ctl: invalid protocol: 12 172.20.20.40:20004
[  291.640615][T17248] netlink: 'syz.1.2883': attribute type 3 has an invalid length.
[  291.646578][T17248] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  291.676223][T17250] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2884'.
[  291.717121][T17252] netlink: 'syz.2.2885': attribute type 33 has an invalid length.
[  291.720893][T17252] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2885'.
[  291.846725][T17258] lo speed is unknown, defaulting to 1000
[  291.852277][T17258] syzkaller0 speed is unknown, defaulting to 1000
[  292.502201][T17270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2890'.
[  292.582594][T17286] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2893'.
[  292.857729][T17291] IPv6: sit5: Disabled Multicast RS
[  292.992616][T17298] lo speed is unknown, defaulting to 1000
[  292.999182][T17298] syzkaller0 speed is unknown, defaulting to 1000
[  293.032048][T17299] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2897'.
[  293.649546][T17329] lo speed is unknown, defaulting to 1000
[  293.653004][T17329] syzkaller0 speed is unknown, defaulting to 1000
[  293.927582][T17345] openvswitch: netlink: IPv4 tun info is not correct
[  294.015648][T17350] lo speed is unknown, defaulting to 1000
[  294.021139][T17350] syzkaller0 speed is unknown, defaulting to 1000
[  294.318694][T17354] lo speed is unknown, defaulting to 1000
[  294.322231][T17354] syzkaller0 speed is unknown, defaulting to 1000
[  294.581676][T17365] netlink: 'syz.1.2915': attribute type 1 has an invalid length.
[  294.687529][T17368] lo speed is unknown, defaulting to 1000
[  294.691651][T17368] syzkaller0 speed is unknown, defaulting to 1000
[  294.718192][T17377] netlink: 'syz.2.2919': attribute type 10 has an invalid length.
[  294.726386][T17369] lo speed is unknown, defaulting to 1000
[  294.735452][T17369] syzkaller0 speed is unknown, defaulting to 1000
[  295.038166][T17387] netem: incorrect ge model size
[  295.040338][T17387] netem: change failed
[  295.055069][T17392] netlink: 'syz.0.2923': attribute type 29 has an invalid length.
[  295.059982][T17392] netlink: 'syz.0.2923': attribute type 29 has an invalid length.
[  295.074058][T17392] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[  295.096812][T17398] netlink: 'syz.2.2924': attribute type 16 has an invalid length.
[  295.199993][T17404] lo speed is unknown, defaulting to 1000
[  295.205263][T17404] syzkaller0 speed is unknown, defaulting to 1000
[  295.359126][T17410] __nla_validate_parse: 10 callbacks suppressed
[  295.359134][T17411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2927'.
[  295.359141][T17410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2927'.
[  295.384365][T17410] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  295.470827][T17416] bond0: Unable to set down delay as MII monitoring is disabled
[  295.557455][T17425] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  295.710447][T17436] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  296.064142][T17464] netlink: 'syz.2.2937': attribute type 21 has an invalid length.
[  296.066717][T17464] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2937'.
[  297.284602][T17464] netlink: 'syz.2.2937': attribute type 5 has an invalid length.
[  297.286960][T17464] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2937'.
[  297.327909][T17493] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2940'.
[  297.389492][T17496] netlink: 'syz.0.2941': attribute type 1 has an invalid length.
[  297.415692][T17493] lo speed is unknown, defaulting to 1000
[  297.420846][T17493] syzkaller0 speed is unknown, defaulting to 1000
[  297.545220][T17518] vxcan4: entered promiscuous mode
[  297.706053][T17521] lo speed is unknown, defaulting to 1000
[  297.710851][T17521] syzkaller0 speed is unknown, defaulting to 1000
[  298.506551][T17538] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  298.671040][T17542] syz.1.2950: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  298.679130][T17542] CPU: 1 UID: 0 PID: 17542 Comm: syz.1.2950 Not tainted syzkaller #0 PREEMPT(full) 
[  298.679150][T17542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  298.679159][T17542] Call Trace:
[  298.679165][T17542]  <TASK>
[  298.679172][T17542]  dump_stack_lvl+0x189/0x250
[  298.679196][T17542]  ? __pfx_dump_stack_lvl+0x10/0x10
[  298.679220][T17542]  ? __pfx__printk+0x10/0x10
[  298.679239][T17542]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  298.679255][T17542]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  298.679272][T17542]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  298.679290][T17542]  warn_alloc+0x214/0x310
[  298.679315][T17542]  ? __pfx_warn_alloc+0x10/0x10
[  298.679343][T17542]  ? __get_vm_area_node+0x28f/0x300
[  298.679362][T17542]  ? xskq_create+0xbf/0x170
[  298.679378][T17542]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  298.679454][T17542]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  298.679477][T17542]  ? __kasan_kmalloc+0x93/0xb0
[  298.679498][T17542]  vmalloc_user_noprof+0xad/0xf0
[  298.679516][T17542]  ? xskq_create+0xbf/0x170
[  298.679530][T17542]  xskq_create+0xbf/0x170
[  298.679545][T17542]  xsk_init_queue+0xb0/0x110
[  298.679561][T17542]  xsk_setsockopt+0x57b/0x8d0
[  298.679581][T17542]  ? __pfx_xsk_setsockopt+0x10/0x10
[  298.679600][T17542]  ? __pfx_aa_sk_perm+0x10/0x10
[  298.679622][T17542]  ? __fget_files+0x2a/0x420
[  298.679632][T17542]  ? aa_sock_opt_perm+0xff/0x1b0
[  298.679648][T17542]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  298.679662][T17542]  ? __pfx_xsk_setsockopt+0x10/0x10
[  298.679682][T17542]  do_sock_setsockopt+0x17c/0x1b0
[  298.679704][T17542]  __x64_sys_setsockopt+0x13f/0x1b0
[  298.679725][T17542]  do_syscall_64+0xfa/0x3b0
[  298.679739][T17542]  ? lockdep_hardirqs_on+0x9c/0x150
[  298.679753][T17542]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.679766][T17542]  ? exc_page_fault+0x9f/0xf0
[  298.679781][T17542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.679794][T17542] RIP: 0033:0x7fc7c698eba9
[  298.679807][T17542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  298.679819][T17542] RSP: 002b:00007fc7c7859038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  298.679833][T17542] RAX: ffffffffffffffda RBX: 00007fc7c6bd6090 RCX: 00007fc7c698eba9
[  298.679843][T17542] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005
[  298.679851][T17542] RBP: 00007fc7c6a11e19 R08: 0000000000000004 R09: 0000000000000000
[  298.679858][T17542] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  298.679867][T17542] R13: 00007fc7c6bd6128 R14: 00007fc7c6bd6090 R15: 00007fff1c6e4a18
[  298.679891][T17542]  </TASK>
[  298.679896][T17542] Mem-Info:
[  298.781600][T17542] active_anon:21957 inactive_anon:0 isolated_anon:0
[  298.781600][T17542]  active_file:1376 inactive_file:38284 isolated_file:0
[  298.781600][T17542]  unevictable:1794 dirty:68 writeback:0
[  298.781600][T17542]  slab_reclaimable:11025 slab_unreclaimable:106321
[  298.781600][T17542]  mapped:18435 shmem:2456 pagetables:1345
[  298.781600][T17542]  sec_pagetables:0 bounce:0
[  298.781600][T17542]  kernel_misc_reclaimable:0
[  298.781600][T17542]  free:217409 free_pcp:22620 free_cma:0
[  298.799056][T17542] Node 0 active_anon:59556kB inactive_anon:0kB active_file:4172kB inactive_file:135532kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29404kB dirty:128kB writeback:0kB shmem:4984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5760kB pagetables:2864kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  298.811074][T17542] Node 1 active_anon:28272kB inactive_anon:0kB active_file:1332kB inactive_file:17604kB unevictable:3640kB isolated(anon):0kB isolated(file):0kB mapped:44336kB dirty:144kB writeback:0kB shmem:4840kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7676kB pagetables:2516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  298.823247][T17542] Node 0 DMA free:12972kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:320kB local_pcp:0kB free_cma:0kB
[  298.835539][T17542] lowmem_reserve[]: 0 811 811 811 811
[  298.837712][T17542] Node 0 DMA32 free:172104kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:2048KB free_highatomic:1984KB active_anon:59556kB inactive_anon:0kB active_file:4172kB inactive_file:135532kB unevictable:3536kB writepending:128kB present:1556484kB managed:830852kB mlocked:0kB bounce:0kB free_pcp:33728kB local_pcp:14928kB free_cma:0kB
[  298.850516][T17542] lowmem_reserve[]: 0 0 0 0 0
[  298.852428][T17542] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  298.863913][T17542] lowmem_reserve[]: 0 0 854 854 854
[  298.865984][T17542] Node 1 Normal free:225944kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28272kB inactive_anon:0kB active_file:1332kB inactive_file:17604kB unevictable:3640kB writepending:144kB present:1048576kB managed:874952kB mlocked:104kB bounce:0kB free_pcp:56552kB local_pcp:35260kB free_cma:0kB
[  298.878063][T17542] lowmem_reserve[]: 0 0 0 0 0
[  298.879957][T17542] Node 0 DMA: 5*4kB (U) 5*8kB (U) 5*16kB (U) 5*32kB (U) 6*64kB (U) 6*128kB (U) 5*256kB (U) 6*512kB (U) 5*1024kB (U) 1*2048kB (M) 0*4096kB = 12972kB
[  298.890982][T17542] Node 0 DMA32: 1048*4kB (UM) 747*8kB (UME) 507*16kB (UM) 23*32kB (MEH) 170*64kB (UMEH) 53*128kB (UMEH) 59*256kB (UME) 69*512kB (UMEH) 75*1024kB (UH) 4*2048kB (M) 0*4096kB = 172104kB
[  298.900082][T17542] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  298.907484][T17542] Node 1 Normal: 330*4kB (ME) 279*8kB (ME) 491*16kB (UME) 319*32kB (UME) 52*64kB (UM) 40*128kB (UME) 59*256kB (UME) 111*512kB (UME) 99*1024kB (UM) 5*2048kB (UME) 3*4096kB (M) = 225904kB
[  298.915261][T17542] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  298.915428][T17556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2953'.
[  298.918818][T17542] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  298.918875][T17542] 42116 total pagecache pages
[  298.918885][T17542] 0 pages in swap cache
[  298.928578][T17556] gtp0: entered promiscuous mode
[  298.929757][T17542] Free swap  = 124996kB
[  298.929768][T17542] Total swap = 124996kB
[  298.931737][T17556] gtp0: entered allmulticast mode
[  298.933318][T17542] 786301 pages RAM
[  298.933328][T17542] 0 pages HighMem/MovableOnly
[  298.933334][T17542] 241356 pages reserved
[  298.933340][T17542] 0 pages cma reserved
[  299.048887][T17560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2955'.
[  299.332664][T17568] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2959'.
[  299.474128][T17583] lo speed is unknown, defaulting to 1000
[  299.481114][T17584] lo speed is unknown, defaulting to 1000
[  299.485170][T17583] syzkaller0 speed is unknown, defaulting to 1000
[  299.494580][T17584] syzkaller0 speed is unknown, defaulting to 1000
[  299.498237][T17586] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  299.508081][T17586] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  299.523265][T17586] netlink: 'syz.2.2964': attribute type 10 has an invalid length.
[  299.534532][T17586] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  299.559277][T17586] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  299.562260][T17586] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  299.863768][T17595] netlink: 'syz.1.2966': attribute type 29 has an invalid length.
[  299.867138][T17595] netlink: 'syz.1.2966': attribute type 29 has an invalid length.
[  299.875815][T17595] netlink: 588 bytes leftover after parsing attributes in process `syz.1.2966'.
[  299.973869][T17602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2968'.
[  300.096214][T17608] netlink: del zone limit has 8 unknown bytes
[  300.153372][T17615] netlink: 'syz.0.2971': attribute type 1 has an invalid length.
[  300.431662][T17648] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  300.441796][T17648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2979'.
[  300.490058][T17645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2978'.
[  300.656063][T17670] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2983'.
[  300.753124][T17685] batadv_slave_0: entered promiscuous mode
[  300.756380][T17685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2983'.
[  300.776348][T17670] netlink: 428 bytes leftover after parsing attributes in process `syz.2.2983'.
[  300.779513][T17670] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2983'.
[  300.879342][T17698] netlink: 'syz.0.2987': attribute type 39 has an invalid length.
[  300.882730][T17698] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2987'.
[  300.885885][T17698] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2987'.
[  300.888796][T17698] netlink: 'syz.0.2987': attribute type 5 has an invalid length.
[  300.891285][T17698] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2987'.
[  300.902921][T17698] vlan0: entered allmulticast mode
[  300.921103][T17700] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2989'.
[  300.938983][T17696] lo speed is unknown, defaulting to 1000
[  300.944027][T17696] syzkaller0 speed is unknown, defaulting to 1000
[  301.048621][T17710] netlink: 'syz.1.2991': attribute type 1 has an invalid length.
[  301.214372][T17728] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  301.386679][T17744] netlink: 'syz.2.3001': attribute type 2 has an invalid length.
[  301.478690][T17756] openvswitch: netlink: VXLAN extension 4 out of range max 1
[  302.115866][T17790] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  302.314347][T17801] batadv0: entered promiscuous mode
[  302.443795][ T5851] Bluetooth: hci0: command tx timeout
[  302.445903][ T5851] Bluetooth: hci2: command 0x0406 tx timeout
[  302.509394][T17809] 8021q: adding VLAN 0 to HW filter on device bond13
[  302.535584][T17812] 8021q: adding VLAN 0 to HW filter on device bond12
[  302.872462][T17848] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  302.910473][T17852] validate_nla: 2 callbacks suppressed
[  302.910487][T17852] netlink: 'syz.0.3030': attribute type 1 has an invalid length.
[  302.915771][T17852] netlink: 'syz.0.3030': attribute type 1 has an invalid length.
[  303.152561][T17862] openvswitch: netlink: IPv4 tun info is not correct
[  303.186837][T17864] netlink: 'syz.0.3034': attribute type 1 has an invalid length.
[  303.404660][T17870] lo speed is unknown, defaulting to 1000
[  303.408275][T17870] syzkaller0 speed is unknown, defaulting to 1000
[  303.649302][T17883] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  303.720106][T17892] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  303.857976][T17911] netlink: 'syz.1.3047': attribute type 1 has an invalid length.
[  303.863229][T17911] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  303.880724][T17907] netlink: 'syz.0.3045': attribute type 1 has an invalid length.
[  304.287535][T17939] lo speed is unknown, defaulting to 1000
[  304.291055][T17939] syzkaller0 speed is unknown, defaulting to 1000
[  304.450060][T17944] 8021q: adding VLAN 0 to HW filter on device bond0
[  304.455332][T17944] 8021q: adding VLAN 0 to HW filter on device team0
[  304.465207][T17944] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  304.767134][T17953] lo speed is unknown, defaulting to 1000
[  304.771127][T17953] syzkaller0 speed is unknown, defaulting to 1000
[  305.258857][T17964] lo speed is unknown, defaulting to 1000
[  305.266187][T17964] syzkaller0 speed is unknown, defaulting to 1000
[  305.416577][T17974] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  305.421231][T17974] syzkaller0: entered promiscuous mode
[  305.424107][T17974] syzkaller0: entered allmulticast mode
[  305.581933][T17974] tipc: Resetting bearer <eth:syzkaller0>
[  305.586054][T17973] tipc: Resetting bearer <eth:syzkaller0>
[  305.596742][T17973] tipc: Disabling bearer <eth:syzkaller0>
[  306.012399][T17993] lo speed is unknown, defaulting to 1000
[  306.020665][T17993] syzkaller0 speed is unknown, defaulting to 1000
[  306.117897][T17997] __nla_validate_parse: 21 callbacks suppressed
[  306.117908][T17997] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3067'.
[  306.147234][T17999] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.3068'.
[  306.162469][T17999] siw: device registration error -23
[  306.227796][T17999] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3068'.
[  306.304658][T18006] syzkaller1: entered promiscuous mode
[  306.311651][T18006] syzkaller1: entered allmulticast mode
[  306.585084][T18024] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3074'.
[  306.591116][T18024] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3074'.
[  306.994581][T18039] netlink: del zone limit has 8 unknown bytes
[  307.310492][T18070] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3086'.
[  307.667388][T18072] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3088'.
[  307.672620][T18072] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3088'.
[  307.701033][T18072] bond17: entered promiscuous mode
[  307.703787][T18072] 8021q: adding VLAN 0 to HW filter on device bond17
[  307.807669][T18072] bond17 (unregistering): Released all slaves
[  307.930485][T18075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3089'.
[  308.174447][T18084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3091'.
[  308.205502][ T5848] Bluetooth: hci2: command 0x0406 tx timeout
[  308.227647][T18088] lo speed is unknown, defaulting to 1000
[  308.231494][T18088] syzkaller0 speed is unknown, defaulting to 1000
[  308.370428][T18102] netlink: 'syz.1.3094': attribute type 5 has an invalid length.
[  308.421774][T18108] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  310.439737][T18191] lo speed is unknown, defaulting to 1000
[  310.445661][T18191] syzkaller0 speed is unknown, defaulting to 1000
[  310.594564][T18201] netlink: 'syz.1.3119': attribute type 5 has an invalid length.
[  310.650995][T18201] netlink: 'syz.1.3119': attribute type 10 has an invalid length.
[  310.685889][T18201] 8021q: adding VLAN 0 to HW filter on device team0
[  310.699282][T18201] team0: entered promiscuous mode
[  310.701850][T18201] bond0: (slave team0): Enslaving as an active interface with a down link
[  310.787832][T18205] lo speed is unknown, defaulting to 1000
[  310.793162][T18205] syzkaller0 speed is unknown, defaulting to 1000
[  311.019804][T18224] lo speed is unknown, defaulting to 1000
[  311.030237][T18224] syzkaller0 speed is unknown, defaulting to 1000
[  311.316862][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  311.898779][T18243] __nla_validate_parse: 11 callbacks suppressed
[  311.898796][T18243] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3129'.
[  311.988046][T18249] IPVS: Scheduler module ip_vs_ not found
[  312.049331][T18258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3131'.
[  312.052965][T18257] lo speed is unknown, defaulting to 1000
[  312.059707][T18257] syzkaller0 speed is unknown, defaulting to 1000
[  312.412130][T18271] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3137'.
[  312.606691][T18283] lo speed is unknown, defaulting to 1000
[  312.612059][T18283] syzkaller0 speed is unknown, defaulting to 1000
[  312.728824][T18290] lo speed is unknown, defaulting to 1000
[  312.732976][T18290] syzkaller0 speed is unknown, defaulting to 1000
[  312.894620][T18296] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3141'.
[  313.019230][T18299] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3142'.
[  313.059761][T18301] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3143'.
[  313.446180][T18320] netlink: 'syz.1.3149': attribute type 6 has an invalid length.
[  313.620600][T18334] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3153'.
[  313.626442][T18335] netlink: 'syz.2.3152': attribute type 13 has an invalid length.
[  313.629275][T18335] netlink: 'syz.2.3152': attribute type 17 has an invalid length.
[  313.670381][T18335] 8021q: adding VLAN 0 to HW filter on device 
[  313.673211][T18335] 8021q: adding VLAN 0 to HW filter on device team0
[  313.678826][T18335] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  313.688552][ T9531] lo speed is unknown, defaulting to 1000
[  313.690639][ T9531] %: Port: 1 Link ACTIVE
[  313.718383][T18335] lo speed is unknown, defaulting to 1000
[  313.723957][T18335] syzkaller0 speed is unknown, defaulting to 1000
[  313.901612][T18349] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  314.411929][T18351] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3158'.
[  314.477192][T18357] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3159'.
[  314.581744][T18357] lo speed is unknown, defaulting to 1000
[  314.587758][T18357] syzkaller0 speed is unknown, defaulting to 1000
[  314.735441][T18374] batadv0: entered promiscuous mode
[  314.912419][T18392] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  315.852709][T18419] lo speed is unknown, defaulting to 1000
[  315.869304][T18418] lo speed is unknown, defaulting to 1000
[  315.872292][T18419] syzkaller0 speed is unknown, defaulting to 1000
[  315.893447][T18418] syzkaller0 speed is unknown, defaulting to 1000
[  316.251272][T18449] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3181'.
[  316.341873][T18449] lo speed is unknown, defaulting to 1000
[  316.347124][T18449] syzkaller0 speed is unknown, defaulting to 1000
[  316.481259][T18458] netlink: 'syz.2.3182': attribute type 3 has an invalid length.
[  316.894429][T18462] bond0: default FDB implementation only supports local addresses
[  317.126324][T18479] netlink: 'syz.0.3188': attribute type 23 has an invalid length.
[  317.272798][T18484] lo speed is unknown, defaulting to 1000
[  317.277375][T18484] syzkaller0 speed is unknown, defaulting to 1000
[  317.362503][T18489] netlink: 'syz.0.3190': attribute type 2 has an invalid length.
[  317.500893][T18494] netlink: 'syz.2.3191': attribute type 1 has an invalid length.
[  317.678637][T18494] 8021q: adding VLAN 0 to HW filter on device bond13
[  317.699969][T18495] veth17: entered promiscuous mode
[  317.706816][T18495] bond13: (slave veth17): Enslaving as an active interface with a down link
[  317.727609][T18501] veth19: entered promiscuous mode
[  317.734438][T18501] bond13: (slave veth19): Enslaving as an active interface with a down link
[  317.797828][T18505] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3192'.
[  318.920140][T18536] netlink: 179620 bytes leftover after parsing attributes in process `syz.0.3200'.
[  318.945495][T18538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  318.988280][T18543] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3202'.
[  319.030908][T18547] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  319.065438][T18536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3200'.
[  319.098723][T18552] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3204'.
[  319.104455][T18552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3204'.
[  319.162350][T18559] openvswitch: netlink: Flow actions attr not present in new flow.
[  319.188958][T18564] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  319.193726][T18564] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  319.211715][T18559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3206'.
[  319.220445][T18564] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3208'.
[  319.415492][T18586] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3213'.
[  319.419010][T18586] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3213'.
[  319.626805][T18595] lo speed is unknown, defaulting to 1000
[  319.635197][T18595] syzkaller0 speed is unknown, defaulting to 1000
[  319.920503][T18605] lo speed is unknown, defaulting to 1000
[  319.928404][T18605] syzkaller0 speed is unknown, defaulting to 1000
[  320.130227][T18618] netlink: 'syz.1.3222': attribute type 1 has an invalid length.
[  320.154386][T18618] bond14: (slave vxcan1): The slave device specified does not support setting the MAC address
[  320.159378][T18618] bond14: (slave vxcan1): Error -95 calling set_mac_address
[  320.211345][T18623] gretap2: entered promiscuous mode
[  320.215073][T18623] bond14: (slave gretap2): making interface the new active one
[  320.218773][T18623] bond14: (slave gretap2): Enslaving as an active interface with an up link
[  320.449242][T18637] netlink: 'syz.0.3229': attribute type 1 has an invalid length.
[  320.472489][T18636] lo speed is unknown, defaulting to 1000
[  320.482356][T18636] syzkaller0 speed is unknown, defaulting to 1000
[  320.730056][T18661] 8021q: adding VLAN 0 to HW filter on device bond17
[  320.746382][T18661] bond17: (slave ip6gretap2): Enslaving as an active interface with an up link
[  320.811645][T18668] nbd: couldn't find a device at index 0
[  321.229044][T18709] pimreg: entered allmulticast mode
[  321.240241][T18713] veth0: entered promiscuous mode
[  321.276245][T18713] veth0 (unregistering): left promiscuous mode
[  321.347356][T18723] lo speed is unknown, defaulting to 1000
[  321.350807][T18723] syzkaller0 speed is unknown, defaulting to 1000
[  321.360065][T18713] syzkaller1: entered promiscuous mode
[  321.361820][T18713] syzkaller1: entered allmulticast mode
[  321.437126][T18729] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  321.481711][T18731] netlink: 'syz.1.3249': attribute type 2 has an invalid length.
[  321.491591][T18731] : entered promiscuous mode
[  321.496357][T18731] veth0_to_bridge: entered promiscuous mode
[  321.499211][T18731] veth0_to_bridge: left promiscuous mode
[  321.502596][T18731] netlink: 'syz.1.3249': attribute type 1 has an invalid length.
[  321.508587][T18731] netlink: 'syz.1.3249': attribute type 1 has an invalid length.
[  321.575769][T18733] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  321.639432][T18735] lo speed is unknown, defaulting to 1000
[  321.643468][T18735] syzkaller0 speed is unknown, defaulting to 1000
[  321.820430][T18741] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  322.210449][T18767] openvswitch: netlink: Tunnel attr 167 out of range max 16
[  322.521791][T18799] lo speed is unknown, defaulting to 1000
[  322.526666][T18799] syzkaller0 speed is unknown, defaulting to 1000
[  322.800539][T18817] sctp: [Deprecated]: syz.2.3266 (pid 18817) Use of int in maxseg socket option.
[  322.800539][T18817] Use struct sctp_assoc_value instead
[  322.870854][T18821] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  323.009989][T18824] lo speed is unknown, defaulting to 1000
[  323.015602][T18824] syzkaller0 speed is unknown, defaulting to 1000
[  323.095114][T18831] netlink: zone id is out of range
[  323.097420][T18831] netlink: zone id is out of range
[  323.099684][T18831] netlink: zone id is out of range
[  323.102585][T18831] netlink: zone id is out of range
[  323.118614][T18831] netlink: 'syz.0.3269': attribute type 1 has an invalid length.
[  323.126571][T18831] __nla_validate_parse: 21 callbacks suppressed
[  323.126584][T18831] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3269'.
[  323.164038][T18833] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  323.168194][T18833] tipc: Resetting bearer <eth:syzkaller0>
[  323.228079][T18841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3272'.
[  323.244951][T18842] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3272'.
[  323.297388][T18846] lo: left allmulticast mode
[  323.299425][T18846] tunl0: left allmulticast mode
[  323.302352][T18846] gre0: left allmulticast mode
[  323.305706][T18846] gretap0: left allmulticast mode
[  323.308789][T18846] erspan0: left allmulticast mode
[  323.312621][T18846] ip_vti0: left allmulticast mode
[  323.328322][T18846] ip6_vti0: left allmulticast mode
[  323.330631][T18846] sit0: left allmulticast mode
[  323.332636][T18846] ip6tnl0: left allmulticast mode
[  323.344136][T18846] ip6gre0: left allmulticast mode
[  323.346231][T18846] ip6gretap0: left allmulticast mode
[  323.348336][T18846] bond0: left allmulticast mode
[  323.350168][T18846] bond7: left allmulticast mode
[  323.369525][T18846] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  323.374130][T18853] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3277'.
[  323.394456][T18846] nlmon0: left allmulticast mode
[  323.396828][T18846] 0X: left allmulticast mode
[  323.410795][T18846] geneve4: left allmulticast mode
[  323.413000][T18846] mac80211_hwsim hwsim17 syzkaller0: left promiscuous mode
[  323.416403][T18846] mac80211_hwsim hwsim17 syzkaller0: left allmulticast mode
[  323.489196][T18853] lo speed is unknown, defaulting to 1000
[  323.539588][T18853] syzkaller0 speed is unknown, defaulting to 1000
[  323.539772][T18866] netlink: 'syz.0.3278': attribute type 13 has an invalid length.
[  323.578393][T18866] netlink: 'syz.0.3278': attribute type 17 has an invalid length.
[  323.672316][ T5866] bond0: (slave bond7): interface is now down
[  323.676200][ T5866] bond0: (slave wlan1): interface is now down
[  323.680106][T18866] 8021q: adding VLAN 0 to HW filter on device bond0
[  323.685896][T18866] netlink: 'syz.0.3278': attribute type 13 has an invalid length.
[  323.692912][T18866] netlink: 'syz.0.3278': attribute type 17 has an invalid length.
[  323.695824][   T12] bond0: (slave bond7): interface is now down
[  323.697713][   T12] bond0: (slave wlan1): interface is now down
[  323.717147][ T6920] bond0: (slave bond7): interface is now down
[  323.719366][ T6920] bond0: (slave wlan1): interface is now down
[  323.781423][ T6920] bond0: (slave bond7): interface is now down
[  323.790267][ T6920] bond0: (slave wlan1): interface is now down
[  323.811113][ T6920] bond0: now running without any active interface!
[  323.992143][T18893] lo speed is unknown, defaulting to 1000
[  323.996898][T18893] syzkaller0 speed is unknown, defaulting to 1000
[  324.100313][T18908] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3287'.
[  324.116073][T18909] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3287'.
[  324.248717][   T33] audit: type=1800 audit(1758377566.594:7): pid=18909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3287" name="memory.events" dev="tmpfs" ino=5140 res=0 errno=0
[  324.462220][T18923] net_ratelimit: 9 callbacks suppressed
[  324.462230][T18923] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  324.604930][T18928] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3292'.
[  324.608676][T18928] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3292'.
[  324.697103][T18932] lo speed is unknown, defaulting to 1000
[  324.702622][T18932] syzkaller0 speed is unknown, defaulting to 1000
[  324.859984][T18939] siw: device registration error -23
[  325.020012][T18963] netlink: 15586 bytes leftover after parsing attributes in process `syz.1.3300'.
[  325.096792][T18967] syzkaller1: entered promiscuous mode
[  325.098577][T18967] syzkaller1: entered allmulticast mode
[  325.101993][T18967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3301'.
[  325.345782][T18975] lo speed is unknown, defaulting to 1000
[  325.352369][T18975] syzkaller0 speed is unknown, defaulting to 1000
[  325.980077][T18995] lo speed is unknown, defaulting to 1000
[  325.984077][T18995] syzkaller0 speed is unknown, defaulting to 1000
[  325.996499][T18994] validate_nla: 3 callbacks suppressed
[  325.996509][T18994] netlink: 'syz.2.3310': attribute type 1 has an invalid length.
[  326.026973][T18994] 8021q: adding VLAN 0 to HW filter on device bond15
[  327.106693][T19030] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  327.273124][T19040] syzkaller1: entered promiscuous mode
[  327.275956][T19040] syzkaller1: entered allmulticast mode
[  327.374983][T19049] IPv6: sit6: Disabled Multicast RS
[  327.378801][   T33] audit: type=1107 audit(1758377569.724:8): pid=19045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='7nX08Dl^/c#@X[ǀ!ŞzLs<-J<s@hsTjav:/>?r3SKiu&(yF*2'
[  327.456970][T19052] sctp: [Deprecated]: syz.2.3321 (pid 19052) Use of int in max_burst socket option deprecated.
[  327.456970][T19052] Use struct sctp_assoc_value instead
[  327.622629][T19055] lo speed is unknown, defaulting to 1000
[  327.626906][T19055] syzkaller0 speed is unknown, defaulting to 1000
[  327.793482][T19066] lo speed is unknown, defaulting to 1000
[  327.800065][T19066] syzkaller0 speed is unknown, defaulting to 1000
[  328.441916][T19103] __nla_validate_parse: 6 callbacks suppressed
[  328.441932][T19103] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3333'.
[  328.451028][T19103] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3333'.
[  328.454771][T19103] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3333'.
[  328.454786][T19100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3332'.
[  328.647981][T19108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3335'.
[  328.668290][T19108] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  328.910913][T19118] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3339'.
[  328.914624][T19118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3339'.
[  329.008629][T19125] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.3341'.
[  329.157352][T19136] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3344'.
[  329.242360][T19143] netlink: 'syz.0.3346': attribute type 3 has an invalid length.
[  329.267243][T19143] pimreg: left allmulticast mode
[  329.294121][T19141] netlink: 'syz.1.3345': attribute type 10 has an invalid length.
[  329.303976][T19141] dummy0: entered promiscuous mode
[  329.311139][T19141] bond0: (slave dummy0): Enslaving as an active interface with a down link
[  329.326634][T19146] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3346'.
[  329.369325][T19143] 8021q: adding VLAN 0 to HW filter on device bond0
[  329.375104][T19143] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  329.479105][T19152] siw: device registration error -23
[  329.708208][T19169] lo speed is unknown, defaulting to 1000
[  329.712151][T19176] netlink: 'syz.1.3354': attribute type 2 has an invalid length.
[  329.720743][T19166] lo speed is unknown, defaulting to 1000
[  329.721056][T19169] syzkaller0 speed is unknown, defaulting to 1000
[  329.723600][T19176] netlink: 'syz.1.3354': attribute type 8 has an invalid length.
[  329.739258][T19166] syzkaller0 speed is unknown, defaulting to 1000
[  329.972266][T19185] lo speed is unknown, defaulting to 1000
[  329.977635][T19185] syzkaller0 speed is unknown, defaulting to 1000
[  330.172261][T19197] lo speed is unknown, defaulting to 1000
[  330.185343][T19197] syzkaller0 speed is unknown, defaulting to 1000
[  330.307700][T19207] nbd: must specify at least one socket
[  330.449162][T19222] netlink: 'syz.2.3362': attribute type 1 has an invalid length.
[  330.455036][T19222] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR
[  330.568030][T19227] netlink: 'syz.0.3361': attribute type 8 has an invalid length.
[  330.611612][T19238] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  330.617386][T19237] netlink: 'syz.0.3365': attribute type 10 has an invalid length.
[  330.705542][T19237] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  331.217393][T19261] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  331.431013][T19271] bond16 (unregistering): Released all slaves
[  331.817567][T19303] lo speed is unknown, defaulting to 1000
[  331.820907][T19303] syzkaller0 speed is unknown, defaulting to 1000
[  333.040870][T19369] bridge: RTM_NEWNEIGH with invalid ether address
[  333.091661][T19376] nftables ruleset with unbound chain
[  333.180135][T19384] netlink: 'syz.0.3400': attribute type 6 has an invalid length.
[  333.192846][T19384] netlink: 'syz.0.3400': attribute type 21 has an invalid length.
[  333.196018][T19384] netlink: 'syz.0.3400': attribute type 22 has an invalid length.
[  333.198567][T19384] netlink: 'syz.0.3400': attribute type 23 has an invalid length.
[  333.201145][T19384] netlink: 'syz.0.3400': attribute type 25 has an invalid length.
[  334.108304][T19403] lo speed is unknown, defaulting to 1000
[  334.111146][T19405] __nla_validate_parse: 16 callbacks suppressed
[  334.111156][T19405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3405'.
[  334.117625][T19403] syzkaller0 speed is unknown, defaulting to 1000
[  334.184976][T19406] netlink: 'syz.2.3405': attribute type 4 has an invalid length.
[  334.191678][T12694] lo speed is unknown, defaulting to 1000
[  334.195397][T19406] netlink: 'syz.2.3405': attribute type 4 has an invalid length.
[  334.198333][T12694] %: Port: 1 Link DOWN
[  334.221012][ T9531] lo speed is unknown, defaulting to 1000
[  334.223227][ T9531] %: Port: 1 Link ACTIVE
[  334.292571][T19414] 8021q: adding VLAN 0 to HW filter on device bond18
[  334.389262][T19417] lo speed is unknown, defaulting to 1000
[  334.392868][T19417] syzkaller0 speed is unknown, defaulting to 1000
[  334.482230][T19422] netlink: 'syz.0.3409': attribute type 6 has an invalid length.
[  334.828908][T19438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3414'.
[  334.839235][T19435] netlink: 'syz.0.3414': attribute type 2 has an invalid length.
[  334.881899][T19440] openvswitch: netlink: Invalid VLAN frame
[  335.041419][T19447] lo speed is unknown, defaulting to 1000
[  335.053433][T19447] syzkaller0 speed is unknown, defaulting to 1000
[  335.058769][T19457] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  335.142220][T19461] netlink: 'syz.2.3422': attribute type 21 has an invalid length.
[  335.146700][T19461] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3422'.
[  335.906376][T19473] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  336.066164][T19487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  336.259518][T19502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3434'.
[  336.263091][T19502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3434'.
[  336.268013][T19502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3434'.
[  336.271564][T19502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3434'.
[  336.276104][T19502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3434'.
[  336.279729][T19502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3434'.
[  336.283216][T19502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3434'.
[  336.324916][T19509] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001
[  336.391197][T11279] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  336.395609][T11279] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  336.399190][T11279] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  336.402952][T11279] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  336.698115][T19539] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  336.700357][T19539] IPv6: NLM_F_CREATE should be set when creating new route
[  336.702614][T19539] IPv6: NLM_F_CREATE should be set when creating new route
[  336.709653][T19539] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  336.808393][T19546] lo speed is unknown, defaulting to 1000
[  336.813457][T19546] syzkaller0 speed is unknown, defaulting to 1000
[  336.861393][T19549] lo: entered allmulticast mode
[  336.864425][T19549] tunl0: entered allmulticast mode
[  336.866825][T19549] gre0: entered allmulticast mode
[  336.870583][T19549] gretap0: entered allmulticast mode
[  336.881356][T19549] erspan0: entered allmulticast mode
[  336.890946][T19549] ip_vti0: entered allmulticast mode
[  336.893421][T19549] ip6_vti0: entered allmulticast mode
[  336.899024][T19549] sit0: entered allmulticast mode
[  336.906831][T19549] ip6tnl0: entered allmulticast mode
[  336.909529][T19549] ip6gre0: entered allmulticast mode
[  336.912211][T19549] ip6gretap0: entered allmulticast mode
[  336.917123][T19549] bond0: entered allmulticast mode
[  336.918902][T19549] bond7: entered allmulticast mode
[  336.921114][T19549] 8021q: adding VLAN 0 to HW filter on device bond0
[  336.924682][T19549] nlmon0: entered allmulticast mode
[  336.928270][T19549] 0X: entered allmulticast mode
[  336.930360][T19549] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  336.961391][T19551] siw: device registration error -23
[  337.032302][T19551] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  337.356338][T19575] netlink: zone id is out of range
[  337.358872][T19575] netlink: zone id is out of range
[  337.361611][T19575] netlink: zone id is out of range
[  337.364746][T19575] netlink: zone id is out of range
[  337.367256][T19575] netlink: zone id is out of range
[  337.369442][T19575] netlink: zone id is out of range
[  337.371514][T19575] netlink: zone id is out of range
[  338.098155][T19613] lo speed is unknown, defaulting to 1000
[  338.102179][T19613] syzkaller0 speed is unknown, defaulting to 1000
[  338.401112][T19619] veth0: entered promiscuous mode
[  338.456408][T19618] veth0: left promiscuous mode
[  338.513601][   T33] audit: type=1800 audit(1758377580.854:9): pid=19630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3464" name="blkio.bfq.time_recursive" dev="tmpfs" ino=5512 res=0 errno=0
[  338.530206][T19628] lo speed is unknown, defaulting to 1000
[  338.536303][T19628] syzkaller0 speed is unknown, defaulting to 1000
[  338.739775][T19643] lo: left allmulticast mode
[  338.743447][T19643] tunl0: left allmulticast mode
[  338.747013][T19643] gre0: left allmulticast mode
[  338.749381][T19643] gretap0: left allmulticast mode
[  338.751751][T19643] erspan0: left allmulticast mode
[  338.755862][T19643] ip_vti0: left allmulticast mode
[  338.758180][T19643] ip6_vti0: left allmulticast mode
[  338.760068][T19643] sit0: left allmulticast mode
[  338.761821][T19643] ip6tnl0: left allmulticast mode
[  338.764345][T19643] ip6gre0: left allmulticast mode
[  338.766198][T19643] ip6gretap0: left allmulticast mode
[  338.768700][T19643] bond0: left allmulticast mode
[  338.770647][T19643] bond7: left allmulticast mode
[  338.772873][T19643] bond0: (slave bond7): Error -95 calling ndo_bpf
[  338.805433][T19645] 8021q: adding VLAN 0 to HW filter on device bond16
[  339.449627][T19666] validate_nla: 3 callbacks suppressed
[  339.449652][T19666] netlink: 'syz.1.3474': attribute type 1 has an invalid length.
[  339.455237][T19666] __nla_validate_parse: 145 callbacks suppressed
[  339.455249][T19666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3474'.
[  339.461445][T19666] netlink: 'syz.1.3474': attribute type 1 has an invalid length.
[  339.557938][T19675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3475'.
[  340.005970][T19682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3478'.
[  340.516502][T19697] netlink: 'syz.0.3482': attribute type 39 has an invalid length.
[  340.652918][T19711] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  340.765805][T19714] geneve0: left promiscuous mode
[  340.791847][T19714] gretap2: left promiscuous mode
[  340.820920][T19719] vlan0: entered promiscuous mode
[  340.822921][T19719] hsr_slave_1: entered promiscuous mode
[  340.825745][T19719] vlan0: entered allmulticast mode
[  340.827781][T19719] hsr_slave_1: entered allmulticast mode
[  340.851707][T19721] netlink: 'syz.2.3488': attribute type 12 has an invalid length.
[  340.919113][T19726] lo speed is unknown, defaulting to 1000
[  340.922717][T19726] syzkaller0 speed is unknown, defaulting to 1000
[  341.177115][T19731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3490'.
[  341.260208][T19735] netlink: 'syz.2.3492': attribute type 3 has an invalid length.
[  341.265732][T19735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3492'.
[  341.338422][T19738] netlink: 'syz.2.3493': attribute type 4 has an invalid length.
[  341.417031][T19744] netlink: 212916 bytes leftover after parsing attributes in process `syz.2.3495'.
[  341.488909][T19752] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3497'.
[  341.521013][T19756] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3496'.
[  341.554865][T19756] bond17: entered promiscuous mode
[  341.556814][T19756] 8021q: adding VLAN 0 to HW filter on device bond17
[  341.560976][T19761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3498'.
[  341.657439][T19756] bond17 (unregistering): Released all slaves
[  341.676390][T19761] netlink: 'syz.0.3498': attribute type 12 has an invalid length.
[  341.682682][T12628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  341.690564][T12628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  341.699045][T19752] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  341.702957][T19752] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  341.909575][T19771] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3500'.
[  342.258863][T19792] syzkaller1: entered promiscuous mode
[  342.261165][T19792] syzkaller1: entered allmulticast mode
[  342.370971][T19796] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  342.420363][T19798] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20004
[  342.634729][T19806] syzkaller1: entered promiscuous mode
[  342.636939][T19806] syzkaller1: entered allmulticast mode
[  343.081538][T19828] syzkaller1: entered promiscuous mode
[  343.085884][T19828] syzkaller1: entered allmulticast mode
[  343.342997][T19843] vxcan0: entered promiscuous mode
[  343.492732][T19844] nlmon0: left allmulticast mode
[  343.502076][T19844] 0X: left allmulticast mode
[  343.508742][T19844] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  343.525172][T19844] vlan0: left promiscuous mode
[  343.527260][T19844] hsr_slave_1: left promiscuous mode
[  343.529477][T19844] vlan0: left allmulticast mode
[  343.531343][T19844] hsr_slave_1: left allmulticast mode
[  343.547496][   T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  343.550430][   T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  343.559474][   T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  343.562215][   T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  343.626044][T19866] lo speed is unknown, defaulting to 1000
[  343.631374][T19866] syzkaller0 speed is unknown, defaulting to 1000
[  343.876952][T19882] lo speed is unknown, defaulting to 1000
[  343.882330][T19882] syzkaller0 speed is unknown, defaulting to 1000
[  344.209190][T19887] RDS: rds_bind could not find a transport for ::ffff:172.20.20.55, load rds_tcp or rds_rdma?
[  344.611528][T19932] net_ratelimit: 23 callbacks suppressed
[  344.611543][T19932] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  344.626684][T19932] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  344.637377][T19926] lo speed is unknown, defaulting to 1000
[  344.641131][T19926] syzkaller0 speed is unknown, defaulting to 1000
[  344.713046][T19940] __nla_validate_parse: 9 callbacks suppressed
[  344.713057][T19940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3542'.
[  345.070048][T19962] netlink: zone id is out of range
[  345.071939][T19962] netlink: zone id is out of range
[  345.078222][T19962] netlink: zone id is out of range
[  345.081460][T19962] netlink: zone id is out of range
[  345.084427][T19962] netlink: zone id is out of range
[  345.086134][T19962] netlink: zone id is out of range
[  345.087769][T19962] netlink: zone id is out of range
[  345.089425][T19962] netlink: zone id is out of range
[  345.216205][T19969] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3550'.
[  345.219334][T19969] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3550'.
[  345.222204][T19969] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3550'.
[  345.660368][T19980] netlink: 'syz.0.3553': attribute type 10 has an invalid length.
[  345.721081][T19987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3554'.
[  346.085220][T19989] lo speed is unknown, defaulting to 1000
[  346.090065][T19989] syzkaller0 speed is unknown, defaulting to 1000
[  346.128378][T19990] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3556'.
[  346.455859][T20003] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3558'.
[  346.459165][T20003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3558'.
[  346.489733][T20003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3558'.
[  346.580433][T20013] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3560'.
[  346.736742][T20029] lo speed is unknown, defaulting to 1000
[  346.741002][T20029] syzkaller0 speed is unknown, defaulting to 1000
[  347.032714][T20051] lo speed is unknown, defaulting to 1000
[  347.036320][T20051] syzkaller0 speed is unknown, defaulting to 1000
[  347.115777][T20064] lo speed is unknown, defaulting to 1000
[  347.142879][T20064] syzkaller0 speed is unknown, defaulting to 1000
[  347.169516][T20066] netlink: 'syz.2.3572': attribute type 8 has an invalid length.
[  347.355812][T20077] lo speed is unknown, defaulting to 1000
[  347.369280][T20077] syzkaller0 speed is unknown, defaulting to 1000
[  347.377300][T20078] netlink: 'syz.1.3576': attribute type 4 has an invalid length.
[  347.424696][T20074] nbd2: detected capacity change from 0 to 127
[  347.431447][   T56] block nbd2: Receive control failed (result -104)
[  347.470200][T20083] syzkaller1: entered promiscuous mode
[  347.471898][T20083] syzkaller1: entered allmulticast mode
[  347.591849][T20089] lo speed is unknown, defaulting to 1000
[  347.607657][T20089] syzkaller0 speed is unknown, defaulting to 1000
[  348.243857][T20128] netlink: 'syz.2.3588': attribute type 21 has an invalid length.
[  348.263395][T20128] lo speed is unknown, defaulting to 1000
[  348.269635][T20128] syzkaller0 speed is unknown, defaulting to 1000
[  348.762269][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  348.767068][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  348.771238][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  348.780052][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  348.968043][T20176] netlink: 'syz.0.3601': attribute type 14 has an invalid length.
[  348.971153][T20176] netlink: 'syz.0.3601': attribute type 11 has an invalid length.
[  349.042568][T20182] ==================================================================
[  349.046106][T20182] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  349.049649][T20182] Read of size 1 at addr ffff88802672b030 by task syz.0.3603/20182
[  349.053479][T20182] 
[  349.054761][T20182] CPU: 0 UID: 0 PID: 20182 Comm: syz.0.3603 Not tainted syzkaller #0 PREEMPT(full) 
[  349.054781][T20182] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  349.054792][T20182] Call Trace:
[  349.054798][T20182]  <TASK>
[  349.054805][T20182]  dump_stack_lvl+0x189/0x250
[  349.054826][T20182]  ? __kasan_check_byte+0x12/0x40
[  349.054876][T20182]  ? __pfx_dump_stack_lvl+0x10/0x10
[  349.054893][T20182]  ? lock_release+0x4b/0x3e0
[  349.054915][T20182]  ? __virt_addr_valid+0x4a5/0x5c0
[  349.054942][T20182]  print_report+0xca/0x240
[  349.054956][T20182]  ? xfrm_state_find+0x2cf2/0x5400
[  349.054976][T20182]  kasan_report+0x118/0x150
[  349.054995][T20182]  ? xfrm_state_find+0x2cf2/0x5400
[  349.055017][T20182]  xfrm_state_find+0x2cf2/0x5400
[  349.055044][T20182]  ? xfrm_state_find+0x1da/0x5400
[  349.055064][T20182]  ? __pfx_xfrm_state_find+0x10/0x10
[  349.055089][T20182]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  349.055116][T20182]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  349.055130][T20182]  ? __lock_acquire+0xab9/0xd20
[  349.055157][T20182]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  349.055176][T20182]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  349.055191][T20182]  ? xfrm_expand_policies+0x41f/0x6a0
[  349.055206][T20182]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  349.055224][T20182]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  349.055238][T20182]  ? rcuref_put+0x1b7/0x210
[  349.055257][T20182]  ? __pfx_rcuref_put+0x10/0x10
[  349.055276][T20182]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  349.055300][T20182]  xfrm_lookup_route+0x3c/0x1c0
[  349.055314][T20182]  __ip4_datagram_connect+0x9a5/0x1270
[  349.055346][T20182]  __ip6_datagram_connect+0x9f0/0x1150
[  349.055367][T20182]  ? __pfx___ip6_datagram_connect+0x10/0x10
[  349.055384][T20182]  ? __local_bh_enable_ip+0x12d/0x1c0
[  349.055398][T20182]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  349.055415][T20182]  ip6_datagram_connect_v6_only+0x63/0xa0
[  349.055432][T20182]  __sys_connect+0x316/0x440
[  349.055450][T20182]  ? __pfx___sys_connect+0x10/0x10
[  349.055475][T20182]  __x64_sys_connect+0x7a/0x90
[  349.055490][T20182]  do_syscall_64+0xfa/0x3b0
[  349.055506][T20182]  ? lockdep_hardirqs_on+0x9c/0x150
[  349.055520][T20182]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.055534][T20182]  ? exc_page_fault+0x9f/0xf0
[  349.055547][T20182]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.055561][T20182] RIP: 0033:0x7fa6b738eba9
[  349.055575][T20182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  349.055588][T20182] RSP: 002b:00007fa6b82e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  349.055605][T20182] RAX: ffffffffffffffda RBX: 00007fa6b75d5fa0 RCX: 00007fa6b738eba9
[  349.055616][T20182] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000009
[  349.055626][T20182] RBP: 00007fa6b7411e19 R08: 0000000000000000 R09: 0000000000000000
[  349.055634][T20182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  349.055643][T20182] R13: 00007fa6b75d6038 R14: 00007fa6b75d5fa0 R15: 00007ffc3b43fb28
[  349.055661][T20182]  </TASK>
[  349.055667][T20182] 
[  349.077012][T20184] lo speed is unknown, defaulting to 1000
[  349.078491][T20182] Allocated by task 17392:
[  349.078503][T20182]  kasan_save_track+0x3e/0x80
[  349.078526][T20182]  __kasan_slab_alloc+0x6c/0x80
[  349.078544][T20182]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  349.083158][T20184] syzkaller0 speed is unknown, defaulting to 1000
[  349.084028][T20182]  xfrm_state_alloc+0x24/0x2f0
[  349.084054][T20182]  __find_acq_core+0x8a7/0x1c00
[  349.084072][T20182]  xfrm_find_acq+0x78/0xa0
[  349.084090][T20182]  xfrm_alloc_userspi+0x6b3/0xc90
[  349.084103][T20182]  xfrm_user_rcv_msg+0x7a3/0xab0
[  349.084115][T20182]  netlink_rcv_skb+0x208/0x470
[  349.084130][T20182]  xfrm_netlink_rcv+0x79/0x90
[  349.084141][T20182]  netlink_unicast+0x82f/0x9e0
[  349.084153][T20182]  netlink_sendmsg+0x805/0xb30
[  349.084167][T20182]  __sock_sendmsg+0x21c/0x270
[  349.084179][T20182]  ____sys_sendmsg+0x505/0x830
[  349.084194][T20182]  ___sys_sendmsg+0x21f/0x2a0
[  349.084210][T20182]  __x64_sys_sendmsg+0x19b/0x260
[  349.084226][T20182]  do_syscall_64+0xfa/0x3b0
[  349.084240][T20182]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.084254][T20182] 
[  349.084259][T20182] Freed by task 10:
[  349.084267][T20182]  kasan_save_track+0x3e/0x80
[  349.084285][T20182]  kasan_save_free_info+0x46/0x50
[  349.084299][T20182]  __kasan_slab_free+0x5b/0x80
[  349.084315][T20182]  kmem_cache_free+0x18f/0x400
[  349.084332][T20182]  xfrm_state_gc_task+0x52d/0x6b0
[  349.084346][T20182]  process_scheduled_works+0xae1/0x17b0
[  349.084358][T20182]  worker_thread+0x8a0/0xda0
[  349.084370][T20182]  kthread+0x711/0x8a0
[  349.084385][T20182]  ret_from_fork+0x439/0x7d0
[  349.084397][T20182]  ret_from_fork_asm+0x1a/0x30
[  349.084414][T20182] 
[  349.084418][T20182] The buggy address belongs to the object at ffff88802672ad00
[  349.084418][T20182]  which belongs to the cache xfrm_state of size 928
[  349.084431][T20182] The buggy address is located 816 bytes inside of
[  349.084431][T20182]  freed 928-byte region [ffff88802672ad00, ffff88802672b0a0)
[  349.084445][T20182] 
[  349.084450][T20182] The buggy address belongs to the physical page:
[  349.084459][T20182] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802672b600 pfn:0x26728
[  349.084475][T20182] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  349.084487][T20182] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  349.084501][T20182] page_type: f5(slab)
[  349.084514][T20182] raw: 00fff00000000040 ffff88801afb1780 dead000000000122 0000000000000000
[  349.261171][T20182] raw: ffff88802672b600 00000000800e0009 00000000f5000000 0000000000000000
[  349.264372][T20182] head: 00fff00000000040 ffff88801afb1780 dead000000000122 0000000000000000
[  349.267624][T20182] head: ffff88802672b600 00000000800e0009 00000000f5000000 0000000000000000
[  349.270880][T20182] head: 00fff00000000002 ffffea000099ca01 00000000ffffffff 00000000ffffffff
[  349.274128][T20182] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  349.277443][T20182] page dumped because: kasan: bad access detected
[  349.279971][T20182] page_owner tracks the page as allocated
[  349.281844][T20182] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 14334, tgid 14333 (syz.2.2131), ts 237188512720, free_ts 222416126631
[  349.288940][T20182]  post_alloc_hook+0x240/0x2a0
[  349.290599][T20182]  get_page_from_freelist+0x21e4/0x22c0
[  349.292511][T20182]  __alloc_frozen_pages_noprof+0x181/0x370
[  349.294851][T20182]  alloc_pages_mpol+0x232/0x4a0
[  349.296837][T20182]  allocate_slab+0x8a/0x370
[  349.298427][T20182]  ___slab_alloc+0xbeb/0x1420
[  349.300019][T20182]  kmem_cache_alloc_noprof+0x283/0x3c0
[  349.301905][T20182]  xfrm_state_alloc+0x24/0x2f0
[  349.303849][T20182]  pfkey_add+0x6e4/0x2e00
[  349.305576][T20182]  pfkey_sendmsg+0xbfe/0x1090
[  349.307320][T20182]  __sock_sendmsg+0x21c/0x270
[  349.308930][T20182]  ____sys_sendmsg+0x505/0x830
[  349.310555][T20182]  ___sys_sendmsg+0x21f/0x2a0
[  349.312423][T20182]  __x64_sys_sendmsg+0x19b/0x260
[  349.314455][T20182]  do_syscall_64+0xfa/0x3b0
[  349.316228][T20182]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.318462][T20182] page last free pid 23 tgid 23 stack trace:
[  349.320732][T20182]  __free_frozen_pages+0xbc4/0xd30
[  349.322685][T20182]  __tlb_remove_table+0x2d2/0x3b0
[  349.324608][T20182]  tlb_remove_table_rcu+0x85/0x100
[  349.326628][T20182]  rcu_core+0xcab/0x1770
[  349.328278][T20182]  handle_softirqs+0x286/0x870
[  349.330167][T20182]  run_ksoftirqd+0x9b/0x100
[  349.331951][T20182]  smpboot_thread_fn+0x542/0xa60
[  349.333911][T20182]  kthread+0x711/0x8a0
[  349.335516][T20182]  ret_from_fork+0x439/0x7d0
[  349.337364][T20182]  ret_from_fork_asm+0x1a/0x30
[  349.339265][T20182] 
[  349.340228][T20182] Memory state around the buggy address:
[  349.342376][T20182]  ffff88802672af00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  349.345486][T20182]  ffff88802672af80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  349.348650][T20182] >ffff88802672b000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  349.351766][T20182]                                      ^
[  349.354007][T20182]  ffff88802672b080: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  349.357099][T20182]  ffff88802672b100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  349.360228][T20182] ==================================================================
[  349.376173][T20182] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  349.378534][T20182] CPU: 1 UID: 0 PID: 20182 Comm: syz.0.3603 Not tainted syzkaller #0 PREEMPT(full) 
[  349.382013][T20182] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  349.385490][T20182] Call Trace:
[  349.386603][T20182]  <TASK>
[  349.387562][T20182]  dump_stack_lvl+0x99/0x250
[  349.389043][T20182]  ? __asan_memcpy+0x40/0x70
[  349.390766][T20182]  ? __pfx_dump_stack_lvl+0x10/0x10
[  349.392368][T20182]  ? __pfx__printk+0x10/0x10
[  349.393969][T20182]  vpanic+0x281/0x750
[  349.395148][T20182]  ? preempt_schedule+0xae/0xc0
[  349.396639][T20182]  ? __pfx_vpanic+0x10/0x10
[  349.398031][T20182]  ? preempt_schedule_common+0x83/0xd0
[  349.399907][T20182]  ? preempt_schedule+0xae/0xc0
[  349.401438][T20182]  ? __pfx_preempt_schedule+0x10/0x10
[  349.403105][T20182]  panic+0xb9/0xc0
[  349.404262][T20182]  ? __pfx_panic+0x10/0x10
[  349.405654][T20182]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  349.407450][T20182]  ? xfrm_state_find+0x2cf2/0x5400
[  349.409176][T20182]  check_panic_on_warn+0x89/0xb0
[  349.410877][T20182]  ? xfrm_state_find+0x2cf2/0x5400
[  349.412382][T20182]  end_report+0x78/0x160
[  349.413658][T20182]  kasan_report+0x129/0x150
[  349.415083][T20182]  ? xfrm_state_find+0x2cf2/0x5400
[  349.416616][T20182]  xfrm_state_find+0x2cf2/0x5400
[  349.418087][T20182]  ? xfrm_state_find+0x1da/0x5400
[  349.419609][T20182]  ? __pfx_xfrm_state_find+0x10/0x10
[  349.421183][T20182]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  349.423047][T20182]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  349.425039][T20182]  ? __lock_acquire+0xab9/0xd20
[  349.426533][T20182]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  349.428166][T20182]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  349.429718][T20182]  ? xfrm_expand_policies+0x41f/0x6a0
[  349.431286][T20182]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  349.432847][T20182]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  349.434612][T20182]  ? rcuref_put+0x1b7/0x210
[  349.436162][T20182]  ? __pfx_rcuref_put+0x10/0x10
[  349.437717][T20182]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  349.439372][T20182]  xfrm_lookup_route+0x3c/0x1c0
[  349.440825][T20182]  __ip4_datagram_connect+0x9a5/0x1270
[  349.442421][T20182]  __ip6_datagram_connect+0x9f0/0x1150
[  349.444054][T20182]  ? __pfx___ip6_datagram_connect+0x10/0x10
[  349.445781][T20182]  ? __local_bh_enable_ip+0x12d/0x1c0
[  349.447373][T20182]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  349.449056][T20182]  ip6_datagram_connect_v6_only+0x63/0xa0
[  349.450767][T20182]  __sys_connect+0x316/0x440
[  349.452205][T20182]  ? __pfx___sys_connect+0x10/0x10
[  349.454162][T20182]  __x64_sys_connect+0x7a/0x90
[  349.455978][T20182]  do_syscall_64+0xfa/0x3b0
[  349.457662][T20182]  ? lockdep_hardirqs_on+0x9c/0x150
[  349.459494][T20182]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.461647][T20182]  ? exc_page_fault+0x9f/0xf0
[  349.463201][T20182]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.465188][T20182] RIP: 0033:0x7fa6b738eba9
[  349.466831][T20182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  349.473754][T20182] RSP: 002b:00007fa6b82e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  349.476959][T20182] RAX: ffffffffffffffda RBX: 00007fa6b75d5fa0 RCX: 00007fa6b738eba9
[  349.479990][T20182] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000009
[  349.482520][T20182] RBP: 00007fa6b7411e19 R08: 0000000000000000 R09: 0000000000000000
[  349.485047][T20182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  349.487502][T20182] R13: 00007fa6b75d6038 R14: 00007fa6b75d5fa0 R15: 00007ffc3b43fb28
[  349.489962][T20182]  </TASK>
[  349.491924][T20182] Kernel Offset: disabled
[  349.493620][T20182] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:13:11  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001631 RDI=0000000000001632 RBP=00000000000003f8 RSP=ffffc9000ef7ed10
R8 =ffff888108a60237 R9 =1ffff1102114c046 R10=dffffc0000000000 R11=ffffffff854fac30
R12=dffffc0000000000 R13=ffffffff99b0290c R14=ffffffff99df7480 R15=0000000000000000
RIP=ffffffff854facac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa6b82e16c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc8e97056c0 CR3=000000002723c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fa6b75a7498 00007fa6b75a7470 XMM03=00007fa6b75a74a8 00007fa6b75a74a0
XMM04=00007fa6b810d100 00007fa6b75a7460 XMM05=00007fa6b75a7478 00007fa6b75a74c0
XMM06=00007fa6b75a74b8 00007fa6b75a74b0 XMM07=00007fa6b75a74a8 00007fa6b75a74a0
XMM08=0000000000000000 00007fa6b7412ee7 XMM09=0000000000000000 00007fa6b7412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff8999e8c0 RBX=00000010c6f7a0b5 RCX=ffff888042a48000 RDX=0000000000000100
RSI=0000000000000000 RDI=00000010c6f7a0b5 RBP=0000000000000000 RSP=ffffc900001e0a90
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffff5200003c154
R12=000000101b2b299e R13=0019999999999998 R14=ffffc900288b3540 R15=0000001f237594ba
RIP=ffffffff8999e8c0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc2010a8068 CR3=0000000125a48000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffff0000 0000000000000000
XMM02=ffff000000000000 ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
