last executing test programs:

723.610538ms ago: executing program 0 (id=4357):
syz_emit_ethernet(0x43b, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r3, 0x400454cd, 0x339)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast})
close(r3)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES16=r2, @ANYRES16=r0, @ANYBLOB="010003000000000000000a00000008000300", @ANYRES32=r5, @ANYBLOB="180750800400050008000880040002000500020000000000"], 0x34}, 0x1, 0x0, 0x0, 0x48881}, 0x20000040)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000340), r1)
sendmsg$FOU_CMD_DEL(r1, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xffffff03, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="2d6fc75b6b040025bd7000fbdbdf250200000008000b00", @ANYRES32=r6, @ANYBLOB="04000500"], 0x20}, 0x1, 0x0, 0x0, 0x40090}, 0x4010)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02})
close(r7)
r10 = socket$netlink(0x10, 0x3, 0x0)
preadv(r8, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0)
r11 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000091405002cbd7000fbdbdf2508000100050000000800010001000000080001000100000008000100000100"], 0x50}, 0x1, 0x0, 0x0, 0x440008c0}, 0x4804)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES8=r10, @ANYRESHEX], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x2, &(0x7f00000009c0)=ANY=[@ANYBLOB="18020f0000000000000000000000000018110000", @ANYRESOCT, @ANYBLOB="00000000000000002702000014000000b7030000000000009297850000009c000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\tM\x00'/12, @ANYRES32=r12, @ANYBLOB="ae4d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000050000000300"/20, @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB="4400000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401001c00128009000100626f6e64000000000c000280050001000600000008000a00", @ANYRES32=r6], 0x44}}, 0x0)

523.361978ms ago: executing program 0 (id=4360):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20)
r2 = accept$alg(r1, 0x0, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000100)=0x4)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0], 0x38}, 0x1, 0x0, 0x0, 0x40488d5}, 0x20008000)
bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x5, r3, 0x1, 0x80, 0x6, @link_local}, 0x14)
recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000004100)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001880)="70041bf1af037f02b0e2a31763fb27cf170a0cd27c99482f8378cae752292bd667bda71457062f3643862b46a3fdbd08fdf88d29190d0d3b2169152152d200e10e5ad49d2128ee09fde9724fe910be868caf447520d9a4966303722e0c2d6b263aa9e1f0a2d0e49cfec999b07c3edcf0ef9ff9b97610a1e4412d1ceb10711e4319a9654f3706a3cde5736edf4f3a9df2220e0c360641e47005e95c79d8fb3ca617422afeb3db296bb43b877578df43055af0ce81ff56ef655dcd1f91234faa0095e640dae030805d40c032", 0xcb}, {&(0x7f0000000080)="582ae797d4", 0x5}], 0x2, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24000000}], 0x1, 0x40)
sendmmsg$inet6(r0, &(0x7f0000000e80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000380)="31249d", 0x3}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x280}}, {{&(0x7f0000000300)={0xa, 0x4e22, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000000}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000840)="c04dac56", 0x4}], 0x1}}, {{&(0x7f0000000c00)={0xa, 0x4e23, 0x6, @private1, 0x1ff}, 0x1c, &(0x7f0000000e40)=[{&(0x7f0000000c40)="dd769117", 0x4}], 0x1}}], 0x3, 0x40048d1)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8)

519.856116ms ago: executing program 0 (id=4362):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x80000001, 0x4)

445.42328ms ago: executing program 2 (id=4363):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100feffffff0000000001000000100007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00050073193c99a8772efb0c0002"], 0x3c}}, 0x20000000)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x80000001, 0x4)

444.805806ms ago: executing program 0 (id=4364):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@empty, @in=@local, 0xfffd, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3c}, {0x2, 0xfffffffffffffffc, 0x6, 0x0, 0x2, 0x4, 0x1}, {0x40000000020, 0x40000000, 0xfffffffffffffffd, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private0, 0x0, 0x2b}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3503, 0x0, 0x3, 0x0, 0x4d}}, 0xe8)
sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x40040d4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x2d, 0x9, 0x70bd27, 0x0, {0x5}, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@loopback={0x200000000000000}}]}, 0x28}}, 0x84)

314.816912ms ago: executing program 0 (id=4365):
bpf$ITER_CREATE(0x21, &(0x7f0000000dc0)={0xffffffffffffffff, 0x300}, 0x8)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newsa={0x13c, 0x10, 0x413, 0x70bd29, 0x0, {{@in=@empty, @in=@private=0xa010100, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x80, 0x3b}, {@in=@private=0xa010102, 0x0, 0x32}, @in=@multicast1, {0x3ff, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x80000, 0x81}, {0x3, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80020}, 0x100000, 0x4000, 0xa, 0x0, 0x81, 0x68}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0)

314.500389ms ago: executing program 2 (id=4366):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
unshare(0x22020600)
r2 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00'})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000240)=0xe8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="b3006080e06c1c2f4ebea2800dbac73ebc18f33a0c60451155a0bcdb8be82843c4cf078c6f876b888a95570f8de7d815ea994c4a5428e98d211b81006859cb0d2e3878a33f842c053371eb6835f70f91110d42152bde2faa5c7e7b1da9317e4fff448d724c9309a32ff904e152b1f9526ffac97f7ea10a36f2ab9db71d155602fa134e7290b06467cfdb24dd19b57e1b6655958ccfe54ca898c00593f3f5001292c8358becf98e0c3df2193d920000d123c8c1477fbd4278c45033d6aa1b99f53658b8d0e56b647de539efad1330"], 0x304}, 0x1, 0x0, 0x0, 0xc000}, 0xc844)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x60, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x60}}, 0x0)
ioctl$VHOST_VDPA_GET_CONFIG(r4, 0x4004af61, &(0x7f0000000180)={0x0, 0x96, ""/150})

314.142044ms ago: executing program 0 (id=4367):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0x8e}, {&(0x7f0000002140)=""/4096, 0x1000}], 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000180)={0x2f, @multicast1, 0x4e22, 0x2, 'lc\x00', 0x1c, 0x6, 0x43}, 0x2c)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="2405e1856e124b8a35d60df7cdebff53803fc8f7b2ea4ba33f0a12d549c96786fb8a528e76cd4e4e999a02a74b2b74ab1d1b87705188650792135c6ea55cb38771398024421e36f730af96bb7998a1a8ea60b8d2adeb3451fd82dbbf42dd3aa53c2d4fcc7ddd7ad65142d9612b376b247accf7d482446869d75420d5123d418ee1368bd578d6dbe032f54fd07563e8c5f70e1311d595acde6467e6a2532375ddcd53d53baf0837e64f682980749c046295abe078e06e77b4319d6e9598b11a3baed4ed66ad40c66d796c8d58c7ba9488ab31a2dd4a66657b928e", @ANYRES8=r6, @ANYRES16=r9, @ANYRES32=r5], 0x128}, 0x0)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
close(r9)
r11 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_int(r11, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})

261.919852ms ago: executing program 2 (id=4369):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='| 1:', @ANYRESOCT], 0xa)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r4=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="850000006c0000007b00000000000000270000000a0000009500000000000000ed5f0be3755142ae31484cd0115bab2d0589e8ab9f429b60317312f13bd708a35c0670c61fc97c4551f58ae3bbfb9f1d97582f15f3922a3c39716ebdd3c864aec6bc39f3bf389d21e614314b44d3a320471dc33ceec91a1512761160808845c885e7e75118ae8702a167ce7d0ca850e435f105f4c7702c8505fc4669acef909579390b1a6795fae716b04fba77244be06160107ab2a3a30645bbec6570170c1d362e6d6209fa0809ffbcc48bfa0175374dc3"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d0001000000000000ec000007000000", @ANYRES32=r4, @ANYBLOB="000096000a0002"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)={0x14, r6, 0x8c24381a3d4a0b6f, 0x0, 0x0, {0x2f}}, 0x14}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x4)
bind$unix(r2, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
write(r7, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29)

261.52546ms ago: executing program 1 (id=4370):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ppoll(&(0x7f00000002c0)=[{r1, 0x2000, 0x300}, {0xffffffffffffffff, 0x8}, {r1, 0x4}, {r0, 0x100}], 0x4, &(0x7f00000005c0)={0x77359400}, &(0x7f0000000600)={[0x3]}, 0x8)

254.158598ms ago: executing program 2 (id=4371):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="effdffff", @ANYRES16=r1, @ANYBLOB="f1e6ffffffff000000001300000008000300", @ANYRES32=r2, @ANYBLOB="040013000600129204000000060d1000fa0000000a000600ffffffffffa8bdc05a00"/45], 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)

175.291812ms ago: executing program 1 (id=4372):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000000))

173.62944ms ago: executing program 2 (id=4373):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$isdn(0x22, 0x3, 0x25)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000012c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@private0}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8)
r2 = gettid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000013c0)={<r3=>0x0, 0x0, <r4=>0x0}, &(0x7f0000001400)=0xc)
r5 = accept4$x25(0xffffffffffffffff, &(0x7f0000001440)={0x9, @remote}, &(0x7f0000001480)=0x12, 0x800)
r6 = accept$inet6(0xffffffffffffffff, &(0x7f00000014c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000001500)=0x1c)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r9, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg(r9, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)='%', 0x1}], 0x1}}], 0x1, 0x44810)
shutdown(r9, 0x0)
recvmmsg(r9, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
pipe(&(0x7f0000001540)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001580)={<r13=>0x0, <r14=>0x0}, &(0x7f00000015c0)=0xc)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002180)={{{@in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e20, 0x4, 0x4e24, 0x76c, 0xa, 0x100, 0x20, 0x73, 0x0, r15}, {0x8000000000000000, 0x7, 0x8, 0x466, 0x9, 0x4, 0x0, 0x2}, {0x7f, 0x1000, 0x5, 0x6}, 0x8, 0x6e6bb1, 0x2, 0x1, 0x2, 0x1}, {{@in6=@local, 0x4d2, 0x3c}, 0xa, @in=@local, 0x0, 0x1, 0x0, 0x7, 0x7, 0x8, 0x3}}, 0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001600)={0x0, 0x0, <r16=>0x0}, &(0x7f0000001640)=0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001680)={<r17=>0x0, 0x0, <r18=>0x0}, &(0x7f00000016c0)=0xc)
r19 = getuid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001700)={0x0, 0x0, <r20=>0x0}, &(0x7f0000001740)=0xc)
r21 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$netlink(0x10, 0x3, 0x8)
sendmsg$netlink(r0, &(0x7f0000001880)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0), 0x0, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r1, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, r4}}}, @rights={{0x30, 0x1, 0x1, [r5, r6, r7, r8, r9, r10, r11, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r13, r15, r16}}}, @cred={{0x1c, 0x1, 0x2, {r17, r19, r4}}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r20}}}, @cred={{0x1c, 0x1, 0x2, {r13, r19, r20}}}, @rights={{0x38, 0x1, 0x1, [r7, r9, r7, r21, 0xffffffffffffffff, r10, r11, r12, r12, r10]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0x0, r18}}}], 0x148}, 0x40040)
r22 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r22, 0x4008af00, &(0x7f0000000040)=0x1d)

85.079972ms ago: executing program 1 (id=4374):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001200030200"/56, @ANYRES32=0x0, @ANYBLOB="814b00000000000000000000000000002100010008081c000a"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x4008af60, &(0x7f0000000180)={0x0, 0x96, ""/150})

79.751298ms ago: executing program 1 (id=4375):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x4008af25, &(0x7f0000000040)={0x0, 0x9e, ""/158})
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000240)=0x8000000)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000180)={0x0, <r1=>0x0}}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0x33b9}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0xb9d1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000000c000940b3d32c2d00000c00000007000000040000000000001304000000002e5f5f2e2f00"], 0x0, 0x2b, 0x0, 0x1}, 0x28)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={r1, 0x0, 0x10}, 0xc)

3.115303ms ago: executing program 1 (id=4376):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', <r4=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x11, 0x6, @broadcast}, 0x10) (async)
ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000080)='veth0_to_bond\x00')
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0xffea, &(0x7f00000001c0)={&(0x7f0000001b00)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050) (async)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
unshare(0x22020600) (async)
unshare(0x2a020400)
sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000140)=ANY=[@ANYRES16=r4, @ANYRESOCT=r2, @ANYRESDEC=r3], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x30}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r7, 0x27, 0x36, 0x0, &(0x7f0000000880)="f8ad1dcc02cb29dcc8003200810066a286ddc6617f503e7457188353133a3d4070574ac945c1be1c9b296e268bd0fabb3a4ba7534035", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) (async)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x600, 0xe8, 0x320, 0x440, 0x440, 0xe8, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, &(0x7f0000000000), {[{{@ipv6={@local, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0xff000000, 0xa348fa5a8cffd889], 'vcan0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x4, 0x1, 0x3, 0x6a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x644, 0x7f, @ipv6=@mcast2, 0x4e22}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x101, 0xffffffff, 0xffffffff, 0xffffffff], [0xffff7f, 0xff000000, 0x0, 0xff], 'veth0_vlan\x00', '\x00', {}, {0xff}, 0x3a, 0xf7, 0x4, 0x18}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x28, 0x1, 0x7fff}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3d}, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xa02529c283c5d53b, 0xff000000, 0xffffffff], [0xffffffff, 0xff0000ff, 0xffffff00], 'vlan0\x00', 'veth1\x00', {}, {0xff}, 0x84, 0x4, 0x1, 0x14}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x5, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xd}, @private0, [0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 'nicvf0\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x2c, 0xfb, 0x4}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x32}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [0x0, 0x0, 0x1fffffffe], [0xff000000, 0xffffffff, 0xffffff00, 0xffffff00], 'veth1_to_hsr\x00', 'erspan0\x00', {}, {0xff}, 0x87, 0x9, 0x3, 0x44}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x2c, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660)
r9 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108)
ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0xc094}], 0x2000000000000073, 0x0, 0x0, 0xffffffffffffff3a)
setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e20, 0x4, @mcast2, 0x6}}, {{0xa, 0x4e21, 0x4e11, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}}}, 0x108) (async)
getsockopt$inet6_buf(r9, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) (async)
getsockopt$sock_buf(r6, 0x1, 0x1f, 0x0, &(0x7f0000001000)=0x1e) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x34, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xab}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0)

472.871µs ago: executing program 2 (id=4377):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x46c, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x4, 0x9}, {}, {0xe, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x43c, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_ct={0x2c, 0x11, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}, @TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0xab, 0x7, 0x0, 0x6, 0x100, 0x7a, 0x8, 0xff, 0x0, 0x0, 0x47, 0x10000, 0x5, 0x2, 0xec, 0x5, 0x88b, 0x3, 0x8, 0xfffffff8, 0x7, 0xceff, 0x1, 0xae42, 0x94, 0x9, 0x4dd8, 0xffffffff, 0x8, 0x20ce, 0x7, 0x9, 0x4, 0x3, 0x36222594, 0x6, 0x3, 0x9, 0x80, 0x7, 0x7ff, 0x9, 0x8, 0x9, 0x9c18, 0x5, 0x4, 0xffffffcf, 0x20000000, 0x0, 0x5, 0x7fffffff, 0x3, 0x1, 0x80, 0xffffffff, 0x5, 0x4, 0x1, 0x80, 0x2, 0xfff, 0x9, 0x100, 0x2, 0x1, 0x4ea4, 0x7, 0x8, 0x2, 0x5, 0x6, 0x4, 0x7, 0x9, 0x0, 0x1, 0x897, 0x3, 0xf555, 0x81, 0x3, 0xf, 0xfffffff9, 0xffffff7f, 0x3, 0x5e8, 0x8, 0x7e, 0xa1b4, 0x0, 0x3, 0x10000, 0x5, 0x8000, 0x1ff, 0x7, 0xa, 0x6, 0x6, 0x421, 0x5, 0x5, 0xff, 0x9, 0x0, 0x5, 0x9b8e, 0x0, 0xaf8c, 0x1e, 0x1, 0x9, 0x8b9, 0x7, 0x7, 0x2, 0x8, 0x7, 0xba8e, 0x5, 0x7b, 0x6c6, 0x5, 0x9, 0x9, 0x7fffffff, 0x1a8e, 0x8, 0x3, 0x6, 0xa, 0x4, 0x8, 0xfff, 0xf, 0x1000, 0x2, 0x6, 0x101, 0x1, 0x7, 0xe, 0xe00, 0x80000001, 0x80000000, 0xf, 0x6, 0x2, 0xfff, 0x0, 0x7, 0xfffffe00, 0x8, 0x9ab2, 0x8, 0xfffffff8, 0x8000, 0x1e, 0x1004, 0x6, 0xfffffffa, 0x8, 0xe, 0x800, 0x0, 0x8000, 0x3, 0x400, 0xfffff800, 0x1, 0x9, 0x10000, 0x101, 0xf, 0x8, 0x7fffffff, 0x7, 0x2, 0x4, 0x5, 0x2, 0x7, 0xfa, 0x2, 0x7, 0x9, 0x2f, 0x7, 0x5, 0x1, 0x590, 0x5, 0x10, 0x1, 0x4, 0x2, 0x3ff, 0x55, 0x5, 0xf, 0xa, 0x8, 0x6, 0x7fff, 0x0, 0x7, 0xffffffff, 0xfff, 0xfffffff7, 0x0, 0xb0, 0x81, 0x5152, 0x7fffffff, 0x7fffffff, 0x6, 0xff, 0x2, 0xfffffffd, 0x2, 0x7ff, 0x8, 0xba, 0x5, 0x1, 0x8000, 0xecf, 0x2, 0x4000000, 0x400, 0xc9db, 0x0, 0x3, 0x8ed, 0x34, 0x1, 0x81, 0x8, 0x7ff, 0x21a, 0x401, 0x0, 0xfffe000, 0x1, 0x9, 0xfff, 0x1, 0x1, 0x3, 0x10000, 0x800, 0x4, 0x7ffffffe, 0x7]}]}]}}]}, 0x46c}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="110725bd7000fbdbc12504e10000"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1)

0s ago: executing program 1 (id=4378):
r0 = socket$inet(0x2, 0x2, 0x2000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="44010000100001000000000800000000ac1e00010000000000000000000000000000000000000000000000000000000000000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000000000000000010000000090000000000000000000000000000000200010000000000a7a6608e3ef19cea5851494c000000004800010073686132353600"/252], 0x144}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000013c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0x7fff, 0x7f, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x5, 0x1, 0x3, 0xfd}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x1, 0xfffffffd, 0x0, 0x1bb, 0x4}}]}}}]}, 0x94}}, 0x0)
syz_emit_ethernet(0xfc1, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfb3, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "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"}}}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r6)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r7, 0xc03, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000000)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000000bb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000002100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x80)
r11 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r11, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f30216000000001c00000000000002001b0008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000040005800a000400aaaaaaaaaabb000008000300030000000a0006"], 0x68}}, 0x0)
write$tun(r12, &(0x7f0000000700)={@val={0x0, 0xf9}, @val={0x0, 0x1, 0x5, 0x6, 0x7d}, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x4}, {0x8100, 0x3, 0x0, 0x1}}, {@ipv6={0x86dd, @udp={0x9, 0x6, "a98103", 0xd9, 0x11, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, {[@srh={0x73, 0x12, 0x4, 0x9, 0x2, 0x28, 0x9f1, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, @private2, @empty, @ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, @private2]}], {0x4e20, 0x4e20, 0x41, 0x0, @opaque="4ad97af2d5ef3bc60e00f045bce21eeb1a19b60016f98cfbe36f91245575f315846e4252c621b8e44950edbd55ecc527c49c1908c996ec98ce"}}}}}}}, 0x125)

kernel console output (not intermixed with test programs):

port 1(bridge_slave_0) entered forwarding state
[   69.217963][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.225853][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.228759][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.289151][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   69.308035][ T2164] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.311006][ T2164] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.337604][ T2164] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.340739][ T2164] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.346000][   T54] Bluetooth: hci2: command tx timeout
[   69.364460][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   69.493126][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.560276][ T5846] veth0_vlan: entered promiscuous mode
[   69.569087][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.578363][ T5846] veth1_vlan: entered promiscuous mode
[   69.599925][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.628777][ T5846] veth0_macvtap: entered promiscuous mode
[   69.648109][ T5846] veth1_macvtap: entered promiscuous mode
[   69.671101][ T5850] veth0_vlan: entered promiscuous mode
[   69.680017][ T5853] veth0_vlan: entered promiscuous mode
[   69.686861][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.696965][ T5850] veth1_vlan: entered promiscuous mode
[   69.705325][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.709472][ T5853] veth1_vlan: entered promiscuous mode
[   69.733508][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.737258][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.740903][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.748298][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.793512][ T5853] veth0_macvtap: entered promiscuous mode
[   69.796494][ T5850] veth0_macvtap: entered promiscuous mode
[   69.810407][ T5850] veth1_macvtap: entered promiscuous mode
[   69.818623][ T5853] veth1_macvtap: entered promiscuous mode
[   69.856699][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.864529][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.884191][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.888402][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.897451][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.898830][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.900617][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.915056][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.933006][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.940420][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.990485][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.992200][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.997573][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.002239][ T5873] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.014835][ T5873] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.033189][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.042862][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.045559][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.084280][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   70.122700][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.125769][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.154218][ T3628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.157119][ T3628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.202679][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.205057][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.522737][ T5932] trusted_key: syz.0.10 sent an empty control message without MSG_MORE.
[   70.753887][ T5945] Illegal XDP return value 4294967274 on prog  (id 4) dev N/A, expect packet loss!
[   71.087384][ T5966] netlink: 32 bytes leftover after parsing attributes in process `syz.1.22'.
[   71.091215][ T5966] tipc: Invalid UDP bearer configuration
[   71.091243][ T5966] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   71.162467][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22'.
[   71.253099][   T54] Bluetooth: hci1: command tx timeout
[   71.255250][   T54] Bluetooth: hci0: command tx timeout
[   71.413780][ T5235] Bluetooth: hci2: command tx timeout
[   71.514965][ T5981] tipc: Started in network mode
[   71.517603][ T5981] tipc: Node identity 12dbe3230b3a, cluster identity 4711
[   71.524784][ T5981] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.533049][ T5980] tipc: Disabling bearer <eth:syzkaller0>
[   71.738805][ T5994] netlink: 51 bytes leftover after parsing attributes in process `syz.2.33'.
[   71.823430][ T6000] netlink: 'syz.0.36': attribute type 15 has an invalid length.
[   72.337351][ T6034] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[   72.430348][ T6041] netlink: 'syz.0.55': attribute type 10 has an invalid length.
[   72.460027][ T6041] team0: Port device dummy0 added
[   73.055507][ T6054] warning: `syz.2.60' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   73.077137][ T6055] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[   73.341820][ T5235] Bluetooth: hci0: command tx timeout
[   73.346139][   T54] Bluetooth: hci1: command tx timeout
[   73.492825][   T54] Bluetooth: hci2: command tx timeout
[   73.635059][ T6078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.348798][ T6096] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   74.420820][    T9] IPVS: starting estimator thread 0...
[   74.450919][ T6104] netlink: 300 bytes leftover after parsing attributes in process `syz.1.79'.
[   74.522353][ T6102] IPVS: using max 61 ests per chain, 146400 per kthread
[   74.673467][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'.
[   74.677138][ T6116] netlink: 15 bytes leftover after parsing attributes in process `syz.0.84'.
[   75.247584][ T6150] IPv4: Oversized IP packet from 127.202.26.0
[   75.415200][   T54] Bluetooth: hci0: command tx timeout
[   75.415239][ T5235] Bluetooth: hci1: command tx timeout
[   75.552966][ T6165] lo speed is unknown, defaulting to 1000
[   75.555518][ T6165] lo speed is unknown, defaulting to 1000
[   75.559268][ T6165] lo speed is unknown, defaulting to 1000
[   75.567931][ T6165] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   75.583914][   T54] Bluetooth: hci2: command tx timeout
[   75.605911][ T6165] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   75.619214][ T6170] Zero length message leads to an empty skb
[   75.666048][ T6165] lo speed is unknown, defaulting to 1000
[   75.693509][ T6165] lo speed is unknown, defaulting to 1000
[   75.713526][ T6165] lo speed is unknown, defaulting to 1000
[   75.899198][ T6185] netlink: 14 bytes leftover after parsing attributes in process `syz.2.112'.
[   76.119747][ T6198] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[   76.124330][ T6195] IPVS: stopping backup sync thread 6198 ...
[   76.134334][ T6199] netlink: 'syz.0.117': attribute type 9 has an invalid length.
[   76.137708][ T6199] netlink: 'syz.0.117': attribute type 6 has an invalid length.
[   76.146272][ T6195] netlink: 260 bytes leftover after parsing attributes in process `syz.2.116'.
[   76.177676][ T6195] netlink: 20 bytes leftover after parsing attributes in process `syz.2.116'.
[   76.189850][ T6195] netlink: 32 bytes leftover after parsing attributes in process `syz.2.116'.
[   76.297107][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   76.300283][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   76.920490][ T6224] syz.2.127 uses obsolete (PF_INET,SOCK_PACKET)
[   77.000962][ T6227] netlink: 20 bytes leftover after parsing attributes in process `syz.1.130'.
[   77.642944][ T6240] batadv0: entered promiscuous mode
[   77.646000][ T6240] vlan2: entered promiscuous mode
[   77.970288][ T6255] netlink: 'syz.1.143': attribute type 1 has an invalid length.
[   78.108641][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'.
[   78.204228][ T6273] netlink: 'syz.0.151': attribute type 1 has an invalid length.
[   78.207693][ T6273] netlink: 'syz.0.151': attribute type 3 has an invalid length.
[   78.221758][ T6273] netlink: 224 bytes leftover after parsing attributes in process `syz.0.151'.
[   78.722673][ T6302] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.726654][ T6302] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.752067][ T6302] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   78.934693][ T6318] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.985807][ T6319] lo: entered allmulticast mode
[   78.999712][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.170'.
[   79.003163][ T6318] bridge_slave_1: left allmulticast mode
[   79.005452][ T6318] bridge_slave_1: left promiscuous mode
[   79.008165][ T6318] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.100886][ T6318] bridge_slave_0: left allmulticast mode
[   79.104499][ T6318] bridge_slave_0: left promiscuous mode
[   79.108381][ T6318] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.223854][ T6310] lo: left allmulticast mode
[   79.383585][ T6329] Bluetooth: MGMT ver 1.23
[   79.407673][ T6333] netlink: 'syz.1.176': attribute type 1 has an invalid length.
[   79.480082][ T6335] netlink: 'syz.1.177': attribute type 11 has an invalid length.
[   79.688769][ T6352] netlink: 104 bytes leftover after parsing attributes in process `syz.1.183'.
[   79.735079][ T6356] netlink: 'syz.1.184': attribute type 96 has an invalid length.
[   79.967447][ T6371] netlink: 'syz.0.191': attribute type 8 has an invalid length.
[   80.015297][ T6373] netlink: 24 bytes leftover after parsing attributes in process `syz.1.190'.
[   80.495878][ T6400] lo speed is unknown, defaulting to 1000
[   81.133773][ T6409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.202'.
[   81.180240][ T6409] veth1: entered promiscuous mode
[   81.192763][ T6409] bridge1: entered promiscuous mode
[   81.198593][ T6409] hsr1: entered promiscuous mode
[   81.575387][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.211'.
[   81.583445][ T6427] bond_slave_0: entered promiscuous mode
[   81.585544][ T6427] bond_slave_1: entered promiscuous mode
[   81.587437][ T6427] macvlan2: entered promiscuous mode
[   81.589360][ T6427] bond0: entered promiscuous mode
[   81.595236][ T6427] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   82.615190][ T6369] Set syz1 is full, maxelem 65536 reached
[   82.669824][ T6445] netlink: 156 bytes leftover after parsing attributes in process `syz.1.219'.
[   82.688056][ T6445] netlink: 'syz.1.219': attribute type 3 has an invalid length.
[   83.677272][ T6507] sctp: [Deprecated]: syz.1.244 (pid 6507) Use of int in max_burst socket option deprecated.
[   83.677272][ T6507] Use struct sctp_assoc_value instead
[   83.900958][ T6519] rose0: entered promiscuous mode
[   84.313386][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.262'.
[   84.336337][ T6546] erspan0: entered promiscuous mode
[   84.338657][ T6546] macvtap1: entered promiscuous mode
[   84.340873][ T6546] macvtap1: entered allmulticast mode
[   84.350064][ T6546] erspan0: entered allmulticast mode
[   84.522080][ T6564] vcan0: tx drop: invalid sa for name 0x0000000010000000
[   84.833105][ T6570] veth0_to_bridge: entered promiscuous mode
[   84.837380][ T6569] veth0_to_bridge: left promiscuous mode
[   84.931817][ T5235] Bluetooth: hci2: command 0x0405 tx timeout
[   85.127092][ T6583] netlink: 'syz.0.278': attribute type 10 has an invalid length.
[   85.172757][ T6585] netlink: 44 bytes leftover after parsing attributes in process `syz.0.279'.
[   85.176989][ T6585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   85.312602][ T6589] lo speed is unknown, defaulting to 1000
[   85.610100][ T6603] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   85.629878][ T6603] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.635192][ T6603] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.784148][ T6609] Bluetooth: MGMT ver 1.23
[   86.547219][  T974] cfg80211: failed to load regulatory.db
[   87.249963][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.312'.
[   87.746777][ T6705] lo speed is unknown, defaulting to 1000
[   88.094123][ T6733] syz.1.340: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   88.099915][ T6733] CPU: 1 UID: 0 PID: 6733 Comm: syz.1.340 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[   88.099930][ T6733] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   88.099936][ T6733] Call Trace:
[   88.099942][ T6733]  <TASK>
[   88.099947][ T6733]  dump_stack_lvl+0x189/0x250
[   88.099967][ T6733]  ? __pfx_dump_stack_lvl+0x10/0x10
[   88.099979][ T6733]  ? __pfx__printk+0x10/0x10
[   88.099993][ T6733]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   88.100006][ T6733]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   88.100017][ T6733]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   88.100028][ T6733]  warn_alloc+0x214/0x310
[   88.100042][ T6733]  ? stack_depot_save_flags+0x41b/0x860
[   88.100053][ T6733]  ? __pfx_warn_alloc+0x10/0x10
[   88.100066][ T6733]  ? kasan_save_track+0x4f/0x80
[   88.100077][ T6733]  ? xskq_create+0x56/0x170
[   88.100088][ T6733]  ? xsk_init_queue+0xb0/0x110
[   88.100096][ T6733]  ? xsk_setsockopt+0x4dc/0x8d0
[   88.100104][ T6733]  ? do_sock_setsockopt+0x17c/0x1b0
[   88.100117][ T6733]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   88.100128][ T6733]  ? do_syscall_64+0xfa/0x3b0
[   88.100171][ T6733]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.100184][ T6733]  __vmalloc_node_range_noprof+0x125/0x12f0
[   88.100211][ T6733]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   88.100226][ T6733]  ? __kasan_kmalloc+0x93/0xb0
[   88.100239][ T6733]  vmalloc_user_noprof+0xad/0xf0
[   88.100252][ T6733]  ? xskq_create+0xbf/0x170
[   88.100262][ T6733]  xskq_create+0xbf/0x170
[   88.100273][ T6733]  xsk_init_queue+0xb0/0x110
[   88.100284][ T6733]  xsk_setsockopt+0x4dc/0x8d0
[   88.100294][ T6733]  ? __pfx_xsk_setsockopt+0x10/0x10
[   88.100302][ T6733]  ? __pfx_aa_sk_perm+0x10/0x10
[   88.100316][ T6733]  ? aa_sock_opt_perm+0xff/0x1b0
[   88.100328][ T6733]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   88.100338][ T6733]  ? __pfx_xsk_setsockopt+0x10/0x10
[   88.100347][ T6733]  do_sock_setsockopt+0x17c/0x1b0
[   88.100361][ T6733]  __x64_sys_setsockopt+0x13f/0x1b0
[   88.100375][ T6733]  do_syscall_64+0xfa/0x3b0
[   88.100385][ T6733]  ? lockdep_hardirqs_on+0x9c/0x150
[   88.100395][ T6733]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.100403][ T6733]  ? exc_page_fault+0x9f/0xf0
[   88.100413][ T6733]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.100422][ T6733] RIP: 0033:0x7fc43b78ebe9
[   88.100459][ T6733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   88.100468][ T6733] RSP: 002b:00007fc43c60b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   88.100483][ T6733] RAX: ffffffffffffffda RBX: 00007fc43b9b6090 RCX: 00007fc43b78ebe9
[   88.100494][ T6733] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[   88.100501][ T6733] RBP: 00007fc43b811e19 R08: 0000000000000004 R09: 0000000000000000
[   88.100510][ T6733] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   88.100518][ T6733] R13: 00007fc43b9b6128 R14: 00007fc43b9b6090 R15: 00007ffc7b7f2738
[   88.100541][ T6733]  </TASK>
[   88.100549][ T6733] Mem-Info:
[   88.214569][ T6733] active_anon:16677 inactive_anon:0 isolated_anon:0
[   88.214569][ T6733]  active_file:880 inactive_file:38213 isolated_file:0
[   88.214569][ T6733]  unevictable:1768 dirty:412 writeback:0
[   88.214569][ T6733]  slab_reclaimable:9332 slab_unreclaimable:53325
[   88.214569][ T6733]  mapped:18158 shmem:6529 pagetables:952
[   88.214569][ T6733]  sec_pagetables:0 bounce:0
[   88.214569][ T6733]  kernel_misc_reclaimable:0
[   88.214569][ T6733]  free:297611 free_pcp:13903 free_cma:0
[   88.233173][ T6733] Node 0 active_anon:48692kB inactive_anon:0kB active_file:2932kB inactive_file:131632kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:52076kB dirty:1444kB writeback:0kB shmem:14144kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7352kB pagetables:2408kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   88.247879][ T6733] Node 1 active_anon:18016kB inactive_anon:0kB active_file:588kB inactive_file:21220kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:20556kB dirty:204kB writeback:0kB shmem:11972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4184kB pagetables:1332kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   88.290458][ T6733] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   88.312803][ T6733] lowmem_reserve[]: 0 811 811 811 811
[   88.314805][ T6733] Node 0 DMA32 free:255212kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:47400kB inactive_anon:0kB active_file:2932kB inactive_file:131632kB unevictable:3536kB writepending:1444kB present:1556484kB managed:830996kB mlocked:0kB bounce:0kB free_pcp:25460kB local_pcp:4488kB free_cma:0kB
[   88.332560][ T6733] lowmem_reserve[]: 0 0 0 0 0
[   88.337050][ T6733] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   88.365710][ T6733] lowmem_reserve[]: 0 0 854 854 854
[   88.372310][ T6733] Node 1 Normal free:461252kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10740kB inactive_anon:0kB active_file:588kB inactive_file:21220kB unevictable:3536kB writepending:204kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:38948kB local_pcp:22600kB free_cma:0kB
[   88.394108][ T6733] lowmem_reserve[]: 0 0 0 0 0
[   88.399056][ T6733] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   88.407451][ T6733] Node 0 DMA32: 526*4kB (UM) 262*8kB (UME) 84*16kB (UME) 257*32kB (UME) 112*64kB (UME) 23*128kB (UM) 7*256kB (UM) 2*512kB (UE) 1*1024kB (U) 3*2048kB (UME) 56*4096kB (M) = 263240kB
[   88.423467][ T6733] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   88.430082][ T6733] Node 1 Normal: 282*4kB (UME) 366*8kB (UM) 298*16kB (UM) 143*32kB (U) 19*64kB (UE) 29*128kB (U) 4*256kB (UME) 1*512kB (U) 1*1024kB (E) 1*2048kB (E) 107*4096kB (M) = 461208kB
[   88.457055][ T6733] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   88.460900][ T6733] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   88.514489][ T6733] 42052 total pagecache pages
[   88.516459][ T6733] 0 pages in swap cache
[   88.518143][ T6733] Free swap  = 124996kB
[   88.519832][ T6733] Total swap = 124996kB
[   88.524890][ T6733] 786301 pages RAM
[   88.526466][ T6733] 0 pages HighMem/MovableOnly
[   88.528383][ T6733] 241320 pages reserved
[   88.530055][ T6733] 0 pages cma reserved
[   88.565047][ T6749] netlink: 32 bytes leftover after parsing attributes in process `syz.2.346'.
[   88.713931][ T6759] bond0: (slave vxlan0): Enslaving as an active interface with an up link
[   88.723227][ T5716] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   88.727384][ T5716] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   88.735449][ T5716] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   88.740566][ T5716] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   88.781515][ T6764] netlink: 168 bytes leftover after parsing attributes in process `syz.2.352'.
[   88.894359][ T6728] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   89.006965][ T6776] netdevsim netdevsim1 : renamed from netdevsim0 (while UP)
[   89.350492][ T6807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.374'.
[   89.355475][ T6802] lo speed is unknown, defaulting to 1000
[   89.409274][ T6805] lo speed is unknown, defaulting to 1000
[   89.617139][ T6817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.374'.
[   89.620244][ T6817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.374'.
[   90.078097][ T6837] netlink: 'syz.1.383': attribute type 1 has an invalid length.
[   90.091061][ T6837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.383'.
[   90.209868][ T6847] openvswitch: netlink: IP tunnel dst address not specified
[   90.781790][ T6865] netlink: 13 bytes leftover after parsing attributes in process `syz.1.396'.
[   91.085382][ T6884] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[   91.127627][ T6892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.409'.
[   91.160162][ T6896] netlink: 'syz.2.411': attribute type 2 has an invalid length.
[   91.449514][ T6919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.421'.
[   91.556149][ T6924] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.596982][ T6928] netlink: 'syz.2.425': attribute type 9 has an invalid length.
[   91.606729][ T6928] hsr0: entered promiscuous mode
[   91.609046][ T6928] macvlan3: entered promiscuous mode
[   91.614290][ T6928] macvlan3: entered allmulticast mode
[   91.616371][ T6928] hsr0: entered allmulticast mode
[   91.618301][ T6928] hsr_slave_0: entered allmulticast mode
[   91.620439][ T6928] hsr_slave_1: entered allmulticast mode
[   91.746531][ T6931] syz.0.427 (6931) used greatest stack depth: 20096 bytes left
[   92.033919][ T6961] sctp: [Deprecated]: syz.1.441 (pid 6961) Use of struct sctp_assoc_value in delayed_ack socket option.
[   92.033919][ T6961] Use struct sctp_sack_info instead
[   92.194429][ T6974] hsr0 (unregistering): left allmulticast mode
[   92.237436][ T6976] tipc: Started in network mode
[   92.239318][ T6976] tipc: Node identity f264aa723fbe, cluster identity 4711
[   92.242776][ T6976] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.246352][ T6976] syzkaller0: entered promiscuous mode
[   92.248772][ T6976] syzkaller0: entered allmulticast mode
[   92.264821][ T6976] tipc: Resetting bearer <eth:syzkaller0>
[   92.268817][ T6975] tipc: Resetting bearer <eth:syzkaller0>
[   92.296694][ T6975] tipc: Disabling bearer <eth:syzkaller0>
[   92.346719][ T6985] raw_sendmsg: syz.2.452 forgot to set AF_INET. Fix it!
[   92.822107][ T6992] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.840058][ T6992] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.062656][ T6992] bond0: left promiscuous mode
[   93.064803][ T6992] bond_slave_0: left promiscuous mode
[   93.067313][ T6992] bond_slave_1: left promiscuous mode
[   93.075836][ T6992] erspan0: left allmulticast mode
[   93.084599][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.091643][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.101326][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.105074][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.181261][   T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   93.530082][ T7026] __nla_validate_parse: 3 callbacks suppressed
[   93.530103][ T7026] netlink: 48 bytes leftover after parsing attributes in process `syz.2.468'.
[   93.536514][ T7026] netlink: 48 bytes leftover after parsing attributes in process `syz.2.468'.
[   93.540060][ T7026] netlink: 20 bytes leftover after parsing attributes in process `syz.2.468'.
[   93.617022][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.470'.
[   93.724389][   T24] lo speed is unknown, defaulting to 1000
[   94.158769][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.484'.
[   94.214050][ T7066] pim6reg: entered allmulticast mode
[   94.227017][ T7066] pim6reg: left allmulticast mode
[   94.499068][ T7089] netlink: 40 bytes leftover after parsing attributes in process `syz.2.496'.
[   94.634583][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.502'.
[   94.666094][ T7105] netlink: 40 bytes leftover after parsing attributes in process `syz.1.503'.
[   95.987686][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.532'.
[   97.852955][ T7290] netlink: 'syz.0.579': attribute type 3 has an invalid length.
[   98.536383][ T7345] netlink: 24 bytes leftover after parsing attributes in process `syz.2.604'.
[  100.021080][ T7459] ieee802154 phy0 wpan0: encryption failed: -22
[  100.213655][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.665'.
[  100.399719][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.671'.
[  100.405954][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.671'.
[  100.409496][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.671'.
[  100.463315][ T7490] netlink: 'syz.2.672': attribute type 1 has an invalid length.
[  100.466446][ T7490] netlink: 144 bytes leftover after parsing attributes in process `syz.2.672'.
[  100.469965][ T7490] netlink: 28 bytes leftover after parsing attributes in process `syz.2.672'.
[  100.470941][   T33] audit: type=1107 audit(1755268901.875:2): pid=7491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  100.580204][ T7498] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  100.894353][ T7526] netlink: 60 bytes leftover after parsing attributes in process `syz.1.688'.
[  101.398553][ T7561] netlink: 'syz.2.703': attribute type 1 has an invalid length.
[  101.402723][ T7561] netlink: 224 bytes leftover after parsing attributes in process `syz.2.703'.
[  101.870953][ T7598] _Z`Ԁ@: entered promiscuous mode
[  101.883392][ T7598] netlink: 28 bytes leftover after parsing attributes in process `syz.2.720'.
[  101.890507][ T7598] netlink: 'syz.2.720': attribute type 4 has an invalid length.
[  101.901056][ T7598] netlink: 'syz.2.720': attribute type 4 has an invalid length.
[  101.977866][ T7606] lo speed is unknown, defaulting to 1000
[  101.982712][   T33] audit: type=1800 audit(1755268903.395:3): pid=7608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.725" name="memory.events" dev="tmpfs" ino=1341 res=0 errno=0
[  102.002960][   T33] audit: type=1804 audit(1755268903.395:4): pid=7608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.725" name="/newroot/262/memory.events" dev="tmpfs" ino=1341 res=1 errno=0
[  102.769712][ T7670] tipc: Started in network mode
[  102.778082][ T7670] tipc: Node identity , cluster identity 4711
[  102.783571][ T7670] tipc: Failed to obtain node identity
[  102.785639][ T7670] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  104.145479][ T7768] __nla_validate_parse: 3 callbacks suppressed
[  104.145501][ T7768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.787'.
[  104.416498][ T7790] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  104.755586][ T7811] veth3: entered promiscuous mode
[  105.012071][ T7831] netlink: 24 bytes leftover after parsing attributes in process `syz.1.816'.
[  105.655969][ T7861] netlink: 'syz.2.828': attribute type 13 has an invalid length.
[  105.659286][ T7861] netlink: 'syz.2.828': attribute type 17 has an invalid length.
[  105.683035][ T7861] erspan0: left promiscuous mode
[  105.727169][ T7861] 8021q: adding VLAN 0 to HW filter on device team0
[  105.735552][ T7861] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  105.762783][ T7862] lo speed is unknown, defaulting to 1000
[  105.809501][ T7861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.875099][ T7861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.225576][ T7871] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  106.335399][ T7875] vlan2: entered promiscuous mode
[  106.337577][ T7875] geneve0: entered promiscuous mode
[  106.653094][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.837'.
[  106.656716][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.837'.
[  106.934163][ T7861] syz.2.828 (7861) used greatest stack depth: 18880 bytes left
[  107.298712][   T10] IPVS: starting estimator thread 0...
[  107.391563][ T7915] IPVS: using max 54 ests per chain, 129600 per kthread
[  107.939730][ T7934] ip6erspan0: entered allmulticast mode
[  108.168636][ T7945] netlink: 36 bytes leftover after parsing attributes in process `syz.2.862'.
[  108.290924][ T7948] xfrm1: entered allmulticast mode
[  108.480921][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.484521][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.545583][ T7956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.663860][ T7967] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  108.907552][ T7982] netlink: 'syz.1.878': attribute type 4 has an invalid length.
[  108.910161][ T7982] netlink: 24 bytes leftover after parsing attributes in process `syz.1.878'.
[  109.468112][ T8012] IPv6: addrconf: prefix option has invalid lifetime
[  109.567693][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.895'.
[  110.016817][ T8055] netlink: 'syz.0.908': attribute type 27 has an invalid length.
[  110.143164][ T8063] netlink: 96 bytes leftover after parsing attributes in process `syz.1.912'.
[  110.483565][ T8083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.923'.
[  110.532813][ T8083] bridge4: port 1(veth3) entered blocking state
[  110.534975][ T8083] bridge4: port 1(veth3) entered disabled state
[  110.543666][ T8083] veth3: entered allmulticast mode
[  110.547359][ T8083] veth3: entered promiscuous mode
[  110.585290][ T8087] bridge4: port 2(veth0_to_bond) entered blocking state
[  110.588250][ T8087] bridge4: port 2(veth0_to_bond) entered disabled state
[  110.591058][ T8087] veth0_to_bond: entered allmulticast mode
[  110.616212][ T8087] veth0_to_bond: entered promiscuous mode
[  110.640890][ T8083] vlan2: entered allmulticast mode
[  110.661297][ T8083] veth1: entered allmulticast mode
[  110.663122][ T8083] bridge4: port 3(vlan2) entered blocking state
[  110.665649][ T8083] bridge4: port 3(vlan2) entered disabled state
[  110.679327][ T8083] vlan2: entered promiscuous mode
[  110.906427][ T8105] tap0: tun_chr_ioctl cmd 1074025677
[  110.908703][ T8105] tap0: linktype set to 776
[  112.836566][ T8167] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  112.944324][ T8173] lo speed is unknown, defaulting to 1000
[  113.082357][ T8179] netlink: 36 bytes leftover after parsing attributes in process `syz.0.963'.
[  113.818214][ T8212] lo speed is unknown, defaulting to 1000
[  113.887472][ T8214] netlink: 20 bytes leftover after parsing attributes in process `syz.2.976'.
[  113.895694][ T8214] netlink: 20 bytes leftover after parsing attributes in process `syz.2.976'.
[  114.597013][ T8252] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  114.761045][ T8258] ieee802154 phy0 wpan0: encryption failed: -22
[  114.966099][ T8265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.999'.
[  115.343844][ T8270] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1000'.
[  115.983371][    C1] IPv4: Oversized IP packet from 127.0.0.1
[  116.000352][ T8313] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.005295][ T8313] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.146095][ T8313] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.150071][ T8313] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.187772][ T8326] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.200327][ T8326] syzkaller0: entered promiscuous mode
[  116.203038][ T8326] syzkaller0: entered allmulticast mode
[  116.223614][ T8313] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.227726][ T8313] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.262721][ T8326] tipc: Resetting bearer <eth:syzkaller0>
[  116.269338][ T8325] tipc: Resetting bearer <eth:syzkaller0>
[  116.287841][ T8325] tipc: Disabling bearer <eth:syzkaller0>
[  116.331434][ T8313] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.335543][ T8313] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.464491][ T5716] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  116.467785][ T5716] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.513680][ T5716] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  116.517083][ T5716] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.527783][ T5716] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  116.532716][ T5716] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.535579][ T8343] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.537906][ T5716] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  116.541923][ T5716] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.547302][ T8343] syzkaller0: entered promiscuous mode
[  116.550028][ T8343] syzkaller0: entered allmulticast mode
[  116.580855][ T8343] tipc: Resetting bearer <eth:syzkaller0>
[  116.595526][ T8342] tipc: Resetting bearer <eth:syzkaller0>
[  116.609688][ T8342] tipc: Disabling bearer <eth:syzkaller0>
[  117.219844][ T8404] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1063'.
[  117.273198][ T8408] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1064'.
[  117.277901][ T8408] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1064'.
[  117.354779][ T8416] netlink: 'syz.2.1067': attribute type 1 has an invalid length.
[  117.357940][ T8416] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1067'.
[  117.631063][ T8430] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1075'.
[  117.634875][ T8430] bond0: option min_links: invalid value (18446744072019614533)
[  117.638030][ T8430] bond0: option min_links: allowed values 0 - 2147483647
[  117.788812][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1078'.
[  118.079201][ T8460] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  118.385774][ T8494] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1100'.
[  118.394484][ T8494] tc_dump_action: action bad kind
[  118.418458][ T8492] lo speed is unknown, defaulting to 1000
[  118.805415][ T8529] batadv1: entered allmulticast mode
[  118.808118][ T8529] 8021q: adding VLAN 0 to HW filter on device batadv1
[  119.367840][ T8560] netlink: 'syz.0.1128': attribute type 1 has an invalid length.
[  119.417351][ T8560] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[  119.422736][ T8560] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  119.434648][ T8560] bond1: (slave vti0): making interface the new active one
[  119.439976][ T8560] bond1: (slave vti0): Enslaving as an active interface with an up link
[  119.669193][ T8569] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1130'.
[  121.046296][ T8634] __nla_validate_parse: 1 callbacks suppressed
[  121.046313][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1159'.
[  121.224536][ T8642] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16)
[  121.228639][ T8642] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  121.509108][ T8652] Bluetooth: hci1: Opcode 0x080f failed: -4
[  121.513589][ T5295] udevd[5295]: worker [6680] terminated by signal 33 (Unknown signal 33)
[  122.558030][ T8720] wg1: entered promiscuous mode
[  122.560140][ T8720] wg1: entered allmulticast mode
[  122.616212][ T8726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1201'.
[  122.740484][ T8733] veth0_to_team: entered promiscuous mode
[  123.090099][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1211'.
[  123.168095][ T8750] pim6reg: entered allmulticast mode
[  123.186485][ T8752] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1213'.
[  123.190233][ T8750] pim6reg: left allmulticast mode
[  123.199126][ T8752] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.583078][   T54] Bluetooth: hci1: command 0x080f tx timeout
[  124.047236][ T8789] netlink: 'syz.0.1226': attribute type 4 has an invalid length.
[  124.315167][   T54] Bluetooth: hci2: link tx timeout
[  124.317715][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.323567][   T54] Bluetooth: hci2: link tx timeout
[  124.325636][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.334379][   T54] Bluetooth: hci2: link tx timeout
[  124.337568][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.466687][ T8805] netlink: 'syz.2.1233': attribute type 1 has an invalid length.
[  124.475982][ T8805] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1233'.
[  125.273087][ T8829] netlink: 'syz.1.1244': attribute type 1 has an invalid length.
[  125.360919][ T8840] pimreg: entered allmulticast mode
[  125.363595][ T8840] pimreg: left allmulticast mode
[  125.394684][ T8845] netlink: 'syz.2.1252': attribute type 6 has an invalid length.
[  125.397381][ T8845] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1252'.
[  125.783506][ T8882] netlink: 'syz.1.1269': attribute type 39 has an invalid length.
[  126.040153][ T8898] bond0: (slave gretap0): Opening slave failed
[  126.333838][ T8928] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1290'.
[  126.374507][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  126.416298][ T8937] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1293'.
[  126.539647][ T8946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1298'.
[  126.548340][ T8946] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  126.671956][ T8958] netlink: 'syz.0.1303': attribute type 29 has an invalid length.
[  126.674657][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1303'.
[  126.800670][ T8963] bond2: entered promiscuous mode
[  126.803337][ T8963] bond2: entered allmulticast mode
[  126.807477][ T8963] 8021q: adding VLAN 0 to HW filter on device bond2
[  127.703675][ T9008] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  127.709546][ T9008] macsec1: entered allmulticast mode
[  127.715894][ T9008] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  127.720997][ T9008] batman_adv: batadv0: Adding interface: macsec1
[  127.724270][ T9008] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.734893][ T9008] batman_adv: batadv0: Interface activated: macsec1
[  127.988182][ T9029] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1337'.
[  128.000051][ T9029] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1337'.
[  128.061934][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1338'.
[  128.476342][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1345'.
[  128.584113][ T9057] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.590075][ T9057] syzkaller0: entered promiscuous mode
[  128.593469][ T9057] syzkaller0: entered allmulticast mode
[  128.622266][ T9057] tipc: Resetting bearer <eth:syzkaller0>
[  128.627372][ T9055] tipc: Resetting bearer <eth:syzkaller0>
[  128.643187][ T9055] tipc: Disabling bearer <eth:syzkaller0>
[  128.926043][ T9065] sctp: [Deprecated]: syz.1.1350 (pid 9065) Use of struct sctp_assoc_value in delayed_ack socket option.
[  128.926043][ T9065] Use struct sctp_sack_info instead
[  129.132229][ T9069] veth0_to_bond: entered allmulticast mode
[  129.830821][ T9108] lo speed is unknown, defaulting to 1000
[  130.520704][ T9162] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-tlb(5)
[  130.585961][ T9167] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1396'.
[  131.185826][ T9221] netlink: 'syz.0.1422': attribute type 1 has an invalid length.
[  131.805517][ T9257] netlink: 'syz.1.1439': attribute type 7 has an invalid length.
[  131.808876][ T9257] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1439'.
[  132.215593][ T9283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1451'.
[  132.252489][ T9287] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1454'.
[  132.303271][ T9287] team0: Port device team_slave_0 removed
[  132.626705][ T9324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1470'.
[  133.565459][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1498'.
[  133.635910][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1501'.
[  133.750476][ T9414] netlink: 'syz.0.1507': attribute type 1 has an invalid length.
[  133.889847][ T9424] syzkaller0: entered promiscuous mode
[  133.901214][ T9424] syzkaller0: entered allmulticast mode
[  134.026954][ T9434] sctp: [Deprecated]: syz.1.1517 (pid 9434) Use of int in maxseg socket option.
[  134.026954][ T9434] Use struct sctp_assoc_value instead
[  134.164214][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1522'.
[  134.359052][ T9444] veth0_to_bond: left allmulticast mode
[  134.396307][ T9444] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.413906][ T9444] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  134.460897][ T9402] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  134.515349][ T9450] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1524'.
[  134.621498][ T9444] xfrm1: left allmulticast mode
[  134.628116][ T9444] batman_adv: batadv0: Interface deactivated: macsec1
[  134.632351][ T9444] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  134.635155][ T9444] macsec1: left allmulticast mode
[  134.643142][   T10] lo speed is unknown, defaulting to 1000
[  134.646417][ T5716] netdevsim netdevsim1 : unset [1, 0] type 2 family 0 port 6081 - 0
[  134.650043][ T5716] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.655005][ T5716] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.655969][   T10] syz2: Port: 1 Link DOWN
[  134.658712][ T5716] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.718707][ T9453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1525'.
[  134.890853][ T9471] netlink: 'syz.2.1533': attribute type 21 has an invalid length.
[  134.896641][ T9471] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1533'.
[  134.989617][ T9479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  136.260904][ T9571] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.270199][ T9571] syzkaller0: entered promiscuous mode
[  136.276395][ T9571] syzkaller0: entered allmulticast mode
[  136.304696][ T9571] tipc: Resetting bearer <eth:syzkaller0>
[  136.310647][ T9570] tipc: Resetting bearer <eth:syzkaller0>
[  136.326433][ T9570] tipc: Disabling bearer <eth:syzkaller0>
[  136.831719][ T9617] __nla_validate_parse: 4 callbacks suppressed
[  136.831730][ T9617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1604'.
[  136.998399][ T9631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1612'.
[  137.002259][ T9631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1612'.
[  137.074361][ T9639] netlink: 'syz.2.1615': attribute type 21 has an invalid length.
[  137.077160][ T9639] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1615'.
[  137.080424][ T9639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1615'.
[  137.107222][ T9643] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1617'.
[  137.343366][ T9663] lo speed is unknown, defaulting to 1000
[  137.744759][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  137.778792][ T9693] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.795731][ T9693] tipc: Resetting bearer <eth:syzkaller0>
[  138.017135][ T9703] bridge6: entered promiscuous mode
[  138.051991][ T9705] Bluetooth: MGMT ver 1.23
[  138.142909][ T9713] lo speed is unknown, defaulting to 1000
[  138.675191][ T9731] netlink: 'syz.0.1654': attribute type 10 has an invalid length.
[  138.678281][ T9731] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1654'.
[  138.703928][ T9731] team0: Port device geneve0 added
[  138.803988][   T24] tipc: Node number set to 434234147
[  140.005048][ T9767] netlink: 'syz.2.1669': attribute type 2 has an invalid length.
[  140.017112][ T9767] : entered promiscuous mode
[  140.128122][ T9775] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1674'.
[  140.627044][ T9798] ip6tnl3: entered promiscuous mode
[  140.629225][ T9798] ip6tnl3: entered allmulticast mode
[  140.903280][ T9814] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1691'.
[  140.906361][ T9814] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1691'.
[  141.268187][ T9833] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.270779][ T9833] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  141.306889][  T974] lo speed is unknown, defaulting to 1000
[  141.308762][  T974] syz2: Port: 1 Link ACTIVE
[  141.646628][ T9868] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  141.649981][ T9868] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  142.695502][ T9912] __nla_validate_parse: 5 callbacks suppressed
[  142.695530][ T9912] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1736'.
[  142.800508][ T9920] netlink: 'syz.2.1740': attribute type 1 has an invalid length.
[  142.804312][ T9920] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1740'.
[  142.940633][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1744'.
[  143.044662][ T9938] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  144.037701][ T9986] lo speed is unknown, defaulting to 1000
[  144.328117][T10011] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1779'.
[  144.513044][   T24] lo speed is unknown, defaulting to 1000
[  144.515510][   T24] syz2: Port: 1 Link DOWN
[  144.610127][T10033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1789'.
[  144.772768][T10052] syz_tun: entered allmulticast mode
[  145.586593][T10090] ieee802154 phy1 wpan1: encryption failed: -90
[  145.933038][T10108] netlink: 'syz.1.1823': attribute type 3 has an invalid length.
[  146.268614][T10136] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1833'.
[  146.594142][T10151] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  146.711949][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1847'.
[  147.153746][T10197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1861'.
[  147.199811][T10199] netlink: 'syz.2.1862': attribute type 12 has an invalid length.
[  147.927145][T10248] batman_adv: batadv0: Adding interface: ip6gretap1
[  147.929312][T10248] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.938102][T10248] batman_adv: batadv0: Interface activated: ip6gretap1
[  148.774367][T10278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1896'.
[  148.803701][T10281] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073701165882)
[  148.807312][T10281] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  149.035547][T10296] ..@: renamed from bond_slave_0
[  149.207004][T10310] netlink: 'syz.1.1910': attribute type 32 has an invalid length.
[  149.517691][T10335] IPVS: Scheduler module ip_vs_sip not found
[  149.522665][T10335] IPVS: length: 8 != 446622349272
[  149.617901][T10344] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  149.676075][T10347] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7)
[  149.852256][T10362] netlink: 'syz.0.1935': attribute type 4 has an invalid length.
[  149.864518][T10364] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1936'.
[  149.866155][T10362] netlink: 'syz.0.1935': attribute type 4 has an invalid length.
[  149.933683][T10367] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1935'.
[  150.108052][T10379] nbd: socks must be embedded in a SOCK_ITEM attr
[  150.155356][T10385] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1946'.
[  150.366094][T10408] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1957'.
[  150.593436][T10428] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1966'.
[  150.598235][T10428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1966'.
[  150.603291][T10428] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1966'.
[  150.606180][T10428] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1966'.
[  150.626458][T10430] lo speed is unknown, defaulting to 1000
[  151.413603][T10464] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1982'.
[  152.296225][T10516] lo speed is unknown, defaulting to 1000
[  152.346586][T10519] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  152.415778][T10520] lo speed is unknown, defaulting to 1000
[  153.409951][T10599] netlink: 'syz.2.2041': attribute type 1 has an invalid length.
[  153.536687][T10610] ieee802154 phy1 wpan1: encryption failed: -22
[  153.608196][T10618] netlink: 'syz.0.2050': attribute type 12 has an invalid length.
[  153.614419][T10618] netlink: 'syz.0.2050': attribute type 29 has an invalid length.
[  153.955801][T10643] netlink: 'syz.2.2061': attribute type 2 has an invalid length.
[  153.958939][T10643] __nla_validate_parse: 9 callbacks suppressed
[  153.958953][T10643] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2061'.
[  154.068717][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2067'.
[  154.267381][T10670] : entered promiscuous mode
[  154.316979][T10676] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2076'.
[  154.468195][T10685] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2080'.
[  154.479265][T10685] bond0: entered promiscuous mode
[  154.479311][T10687] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2081'.
[  154.484486][T10685] bond_slave_0: entered promiscuous mode
[  154.488446][T10685] bond_slave_1: entered promiscuous mode
[  154.490886][T10685] vxlan0: entered promiscuous mode
[  154.497740][T10685] bond0: left promiscuous mode
[  154.499725][T10685] bond_slave_0: left promiscuous mode
[  154.503802][T10685] bond_slave_1: left promiscuous mode
[  154.506330][T10685] vxlan0: left promiscuous mode
[  154.826777][T10713] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2093'.
[  154.835298][T10713] batadv_slave_1: entered promiscuous mode
[  154.840266][T10713] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.011554][ T5235] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  155.694948][T10754] netlink: 'syz.2.2113': attribute type 10 has an invalid length.
[  155.701079][T10754] 8021q: adding VLAN 0 to HW filter on device team0
[  155.707130][T10754] bond0: (slave team0): Enslaving as an active interface with an up link
[  155.971995][T10784] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2125'.
[  156.173164][T10795] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2131'.
[  156.425157][T10815] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2140'.
[  156.678080][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2149'.
[  156.685551][T10834] netlink: 'syz.1.2149': attribute type 1 has an invalid length.
[  156.689325][T10834] netlink: 'syz.1.2149': attribute type 2 has an invalid length.
[  156.873770][T10849] ip6erspan0: entered promiscuous mode
[  157.203326][T10880] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  157.246471][T10881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  157.676497][T10911] x9: renamed from bridge_slave_0
[  157.779140][T10918] pim6reg: entered allmulticast mode
[  157.787163][T10918] pim6reg: left allmulticast mode
[  157.897412][T10926] sctp: [Deprecated]: syz.2.2191 (pid 10926) Use of struct sctp_assoc_value in delayed_ack socket option.
[  157.897412][T10926] Use struct sctp_sack_info instead
[  158.006502][T10935] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  158.010002][T10935] batadv_slave_1: left promiscuous mode
[  158.017257][T10935] ip6erspan0: left promiscuous mode
[  158.408989][T10957] netlink: 'syz.1.2202': attribute type 3 has an invalid length.
[  158.695110][T10973] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.759631][T11001] __nla_validate_parse: 3 callbacks suppressed
[  159.759644][T11001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2221'.
[  159.765895][T11001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2221'.
[  159.769934][T11001] netlink: 'syz.1.2221': attribute type 1 has an invalid length.
[  159.775178][T11001] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2221'.
[  159.812260][T11001] nbd: socks must be embedded in a SOCK_ITEM attr
[  159.815027][T11001] block nbd0: shutting down sockets
[  159.882713][T11005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2223'.
[  160.070987][T11013] A link change request failed with some changes committed already. Interface 1x9 may have been left with an inconsistent configuration, please check.
[  160.081887][T11013] A link change request failed with some changes committed already. Interface 1x9 may have been left with an inconsistent configuration, please check.
[  161.265228][T11087] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2255'.
[  161.493468][T11091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2257'.
[  162.224002][T11152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2281'.
[  162.410950][T11162] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2286'.
[  162.780287][ T9451] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 8472 - 0
[  162.783403][ T9451] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  162.794585][ T5716] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  162.802007][ T9451] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  162.821904][T11196] netlink: 'syz.0.2302': attribute type 83 has an invalid length.
[  162.837265][T11200] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2304'.
[  162.881623][T11202] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2305'.
[  163.127742][T11216] IPVS: persistence engine module ip_vs_pe_ not found
[  163.845128][T11269] netlink: 'syz.1.2337': attribute type 39 has an invalid length.
[  164.226633][   T10] hid-generic 0005:16C0:5505.0001: item fetching failed at offset 0/2
[  164.232335][   T10] hid-generic 0005:16C0:5505.0001: probe with driver hid-generic failed with error -22
[  164.320164][T11311] batman_adv: batadv0: Adding interface: ipvlan2
[  164.327683][T11311] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.345444][T11311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.351216][T11311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.355143][T11311] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  164.787340][T11346] lo speed is unknown, defaulting to 1000
[  164.807219][T11354] __nla_validate_parse: 5 callbacks suppressed
[  164.807235][T11354] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.2376'.
[  165.525535][T11411] syzkaller0: entered promiscuous mode
[  165.527899][T11411] syzkaller0: entered allmulticast mode
[  165.539783][T11411] macsec1: entered promiscuous mode
[  165.676822][T11416] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2404'.
[  165.680774][T11416] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  165.736973][T11423] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2406'.
[  165.962851][T11437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2414'.
[  166.881625][T11455] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2422'.
[  167.203714][T11472] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2430'.
[  167.227851][T11472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2430'.
[  167.245670][T11476] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2432'.
[  167.249264][T11476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2432'.
[  167.958800][T11516] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.384716][T11557] lo speed is unknown, defaulting to 1000
[  168.424094][T11566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2471'.
[  168.643478][ T5716] netdevsim netdevsim1 : unset [0, 0] type 1 family 0 port 8472 - 0
[  168.646929][ T5716] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  168.650271][ T5716] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  168.663545][ T5716] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  169.278010][T11592] erspan0: entered promiscuous mode
[  169.283271][T11592] batman_adv: batadv0: Adding interface: macvlan3
[  169.286004][T11592] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.312406][T11592] batman_adv: batadv0: Interface activated: macvlan3
[  170.022879][T11621] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  170.442615][T11639] __nla_validate_parse: 3 callbacks suppressed
[  170.442633][T11639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2500'.
[  170.548798][T11645] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  170.555736][T11645] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  170.658740][T11652] netlink: 'syz.2.2507': attribute type 1 has an invalid length.
[  170.662108][T11652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2507'.
[  170.727033][T11657] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2509'.
[  170.763049][T11660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2510'.
[  170.955339][T11670] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2515'.
[  170.975502][T11672] vlan0: entered promiscuous mode
[  172.038074][T11712] lo speed is unknown, defaulting to 1000
[  172.075188][  T791] IPVS: starting estimator thread 0...
[  172.182306][T11717] IPVS: using max 61 ests per chain, 146400 per kthread
[  172.427357][T11738] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2544'.
[  172.494782][T11743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2546'.
[  172.767392][T11750] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  172.773577][T11750] netlink: 'syz.1.2549': attribute type 4 has an invalid length.
[  173.359710][T11763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2554'.
[  173.947121][T11796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2568'.
[  174.075243][T11798] lo speed is unknown, defaulting to 1000
[  174.247523][T11814] openvswitch: netlink: Message has 4 unknown bytes.
[  174.250381][T11814] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.585309][T11841] sctp: [Deprecated]: syz.1.2586 (pid 11841) Use of int in max_burst socket option.
[  174.585309][T11841] Use struct sctp_assoc_value instead
[  175.044144][T11866] netlink: 'syz.2.2595': attribute type 13 has an invalid length.
[  175.051324][T11866] netlink: 'syz.2.2595': attribute type 17 has an invalid length.
[  175.071406][T11866] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  175.139653][T11866] lo speed is unknown, defaulting to 1000
[  175.187113][T11874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2595'.
[  175.223368][T11874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  175.350064][T11879] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.354770][T11879] syzkaller0: entered promiscuous mode
[  175.356665][T11879] syzkaller0: entered allmulticast mode
[  175.405438][T11879] tipc: Resetting bearer <eth:syzkaller0>
[  175.408521][T11878] tipc: Resetting bearer <eth:syzkaller0>
[  175.424912][T11878] tipc: Disabling bearer <eth:syzkaller0>
[  176.279938][T11914] syzkaller0: entered promiscuous mode
[  176.282416][T11914] syzkaller0: entered allmulticast mode
[  177.236278][T11927] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2624'.
[  177.751410][T11937] netlink: 'syz.1.2629': attribute type 12 has an invalid length.
[  177.785864][T11940] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2630'.
[  177.794677][T11935] syzkaller0: entered promiscuous mode
[  177.796930][T11935] syzkaller0: entered allmulticast mode
[  179.354436][T11960] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2641'.
[  179.357294][T11960] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2641'.
[  179.572292][T11976] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  179.577720][T11976] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  179.582578][T11976] bond0: (slave ipvlan3): Error -95 calling set_mac_address
[  179.736583][T11987] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.741788][T11987] syzkaller0: entered promiscuous mode
[  179.751512][T11987] syzkaller0: entered allmulticast mode
[  179.767295][T11987] tipc: Resetting bearer <eth:syzkaller0>
[  179.772876][T11985] tipc: Resetting bearer <eth:syzkaller0>
[  179.784045][T11985] tipc: Disabling bearer <eth:syzkaller0>
[  180.198832][T12019] netlink: 'syz.0.2668': attribute type 1 has an invalid length.
[  180.508850][T12047] netlink: 'syz.2.2682': attribute type 17 has an invalid length.
[  180.540489][T12048] team0: Device gtp0 is of different type
[  181.045168][T12089] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2698'.
[  181.052101][T12089] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2698'.
[  181.108312][T12096] !: renamed from dummy0
[  181.360052][T12108] lo speed is unknown, defaulting to 1000
[  181.370617][T12113] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2705'.
[  181.375754][T12113] unsupported nla_type 65024
[  181.599068][ T5716] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  181.613470][ T5716] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  181.628682][ T5716] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  181.638200][ T5716] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  182.724827][T12190] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2722'.
[  182.784426][T12192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2723'.
[  183.687619][T12233] netlink: 'syz.2.2741': attribute type 4 has an invalid length.
[  183.697726][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2742'.
[  183.714764][T12233] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2741'.
[  183.719905][T12233] nbd: couldn't find a device at index 0
[  183.784657][T12240] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2741'.
[  185.158773][T12303] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2769'.
[  185.163067][T12303] netlink: 'syz.2.2769': attribute type 32 has an invalid length.
[  185.168487][T12303] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  185.453630][T12321] netlink: 'syz.2.2777': attribute type 39 has an invalid length.
[  185.707099][T12344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2789'.
[  185.750523][   T33] audit: type=1800 audit(1755268987.155:5): pid=12340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2784" name="cgroup.controllers" dev="tmpfs" ino=4530 res=0 errno=0
[  185.767394][T12346] macvtap2: entered allmulticast mode
[  185.770193][T12346] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  185.777785][T12346] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  185.841769][T12348] 8021q: adding VLAN 0 to HW filter on device bond1
[  185.856169][T12352] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  185.862002][T12352] bond1: (slave macvlan3): Enslaving as a backup interface with an up link
[  185.932156][ T5716] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  185.941862][ T5716] bond1: (slave macvlan3): link status up again after 0 ms
[  185.944380][ T5716] bond1: (slave macvlan3): failed to get link speed/duplex
[  186.052221][ T5716] bond1: (slave macvlan3): failed to get link speed/duplex
[  186.054675][ T5716] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  186.060285][T12370] netlink: 'syz.1.2801': attribute type 1 has an invalid length.
[  186.064602][T12370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2801'.
[  186.162038][ T5716] bond1: (slave macvlan3): failed to get link speed/duplex
[  186.214039][T12385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2807'.
[  186.224783][T12387] pim6reg1: entered promiscuous mode
[  186.226675][T12387] pim6reg1: entered allmulticast mode
[  186.271780][ T5716] bond1: (slave macvlan3): failed to get link speed/duplex
[  186.382122][   T13] bond1: (slave macvlan3): failed to get link speed/duplex
[  186.491394][   T13] bond1: (slave macvlan3): failed to get link speed/duplex
[  186.500727][T12402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2814'.
[  186.601999][   T13] bond1: (slave macvlan3): failed to get link speed/duplex
[  187.894107][T12481] syzkaller0: Caught tx_queue_len zero misconfig
[  188.284098][T12521] netlink: 'syz.2.2869': attribute type 1 has an invalid length.
[  188.288716][T12521] netlink: 'syz.2.2869': attribute type 3 has an invalid length.
[  188.295130][T12521] netlink: 'syz.2.2869': attribute type 1 has an invalid length.
[  188.298144][T12521] __nla_validate_parse: 3 callbacks suppressed
[  188.298155][T12521] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2869'.
[  188.306822][T12521] NCSI netlink: No device for ifindex 0
[  188.829027][T12544] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2880'.
[  188.835299][T12544] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2880'.
[  189.104425][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2884'.
[  189.218907][T12558] bridge_slave_1: left allmulticast mode
[  189.233428][T12570] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2890'.
[  189.236622][T12558] bridge_slave_1: left promiscuous mode
[  189.240529][T12558] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.253822][T12558] bridge_slave_0: left allmulticast mode
[  189.255591][T12558] bridge_slave_0: left promiscuous mode
[  189.257568][T12558] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.258261][T12572] netlink: 'syz.1.2892': attribute type 21 has an invalid length.
[  189.358914][T12572] netlink: 'syz.1.2892': attribute type 1 has an invalid length.
[  189.361618][T12572] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2892'.
[  189.697934][T12610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2909'.
[  189.837114][T12622] netlink: 'syz.1.2915': attribute type 10 has an invalid length.
[  189.844282][T12622] team0: Port device 0! added
[  190.981371][ T5716] net_ratelimit: 36 callbacks suppressed
[  190.981433][ T5716] bond1: (slave macvlan3): failed to get link speed/duplex
[  191.016046][   T54] Bluetooth: hci1: command 0x080f tx timeout
[  191.093754][ T5716] bond1: (slave macvlan3): failed to get link speed/duplex
[  191.103522][T12676] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2934'.
[  191.128208][T12676] team0: Port device 0! removed
[  191.130383][T12676] x9: left allmulticast mode
[  191.132471][T12676] x9: left promiscuous mode
[  191.134830][T12676] bridge0: port 1(1x9) entered disabled state
[  191.140308][T12676] bridge_slave_1: left allmulticast mode
[  191.147741][T12676] bridge_slave_1: left promiscuous mode
[  191.150217][T12676] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.170986][T12676] bond0: (slave bond_slave_0): Releasing backup interface
[  191.186600][T12676] bond0: (slave bond_slave_1): Releasing backup interface
[  191.197068][T12676] team0: Port device team_slave_0 removed
[  191.206929][T12676] team0: Port device team_slave_1 removed
[  191.209348][T12676] batman_adv: batadv0: Removing interface: batadv_slave_0
[  191.224598][T12676] batman_adv: batadv0: Removing interface: batadv_slave_1
[  191.233722][T12687] netlink: 'syz.1.2934': attribute type 16 has an invalid length.
[  191.238356][T12676] batman_adv: batadv0: Removing interface: macsec1
[  191.243340][T12676] bond1: (slave macvlan3): Removing an active aggregator
[  191.249322][T12676] bond1: (slave macvlan3): Releasing backup interface
[  191.258751][T12680] team0: Mode changed to "broadcast"
[  191.275755][T12676] tipc: Enabled bearer <eth:team0>, priority 0
[  191.334178][T12694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2940'.
[  191.345188][T12694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2940'.
[  191.465835][T12707] : renamed from bond_slave_0 (while UP)
[  191.687484][T12732] netlink: 'syz.0.2959': attribute type 20 has an invalid length.
[  192.064831][T12763] sctp: [Deprecated]: syz.0.2972 (pid 12763) Use of struct sctp_assoc_value in delayed_ack socket option.
[  192.064831][T12763] Use struct sctp_sack_info instead
[  192.258436][T12773] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  192.284154][   T10] tipc: Node number set to 3453659762
[  192.417049][T12722] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  192.578889][T12792] IPv4: Oversized IP packet from 127.202.26.0
[  192.974437][T12823] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  194.027502][T12863] __nla_validate_parse: 5 callbacks suppressed
[  194.027608][T12863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3014'.
[  194.904339][T12925] sctp: [Deprecated]: syz.0.3044 (pid 12925) Use of int in maxseg socket option.
[  194.904339][T12925] Use struct sctp_assoc_value instead
[  195.425198][T12949] dummy0: Device is already in use.
[  195.459076][T12951] vlan3: entered promiscuous mode
[  195.461432][T12951] macvtap0: entered promiscuous mode
[  196.207023][T13023] netlink: 'syz.1.3092': attribute type 5 has an invalid length.
[  196.395488][T13039] syzkaller1: entered promiscuous mode
[  196.398039][T13039] syzkaller1: entered allmulticast mode
[  196.734893][T13053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3106'.
[  196.738607][T13053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3106'.
[  196.946475][T13062] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  196.959942][T13062] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3110'.
[  197.345553][T13080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3117'.
[  197.678127][T13110] sctp: [Deprecated]: syz.1.3129 (pid 13110) Use of struct sctp_assoc_value in delayed_ack socket option.
[  197.678127][T13110] Use struct sctp_sack_info instead
[  198.142592][T13141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3144'.
[  198.369916][T13150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3148'.
[  198.411489][T13147] lo speed is unknown, defaulting to 1000
[  198.534387][T13159] netem: incorrect gi model size
[  198.536397][T13159] netem: change failed
[  198.629659][T13167] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3154'.
[  198.638100][T13167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3154'.
[  198.642137][T13167] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3154'.
[  198.646631][T13167] netlink: 'syz.1.3154': attribute type 3 has an invalid length.
[  198.649954][T13167] netlink: 'syz.1.3154': attribute type 2 has an invalid length.
[  198.659414][T13167] netlink: 'syz.1.3154': attribute type 2 has an invalid length.
[  198.724559][T13174] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  199.226976][T13205] __nla_validate_parse: 2 callbacks suppressed
[  199.226997][T13205] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3175'.
[  199.239770][T13207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3174'.
[  199.351278][T13218] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  200.047820][T13251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3194'.
[  200.055801][T13251] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3194'.
[  200.059523][T13251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3194'.
[  200.067117][T13251] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3194'.
[  200.070830][T13251] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3194'.
[  200.203099][T13255] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.3196'.
[  200.734541][T13274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  201.126470][T13284] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3209'.
[  201.432269][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803ae4bc00: rx timeout, send abort
[  201.437844][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803ae4b400: rx timeout, send abort
[  201.443024][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803ae4bc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  201.450213][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803ae4b400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  201.483406][T13306] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  201.996987][T13317] lec:lec_atm_close: lec0: Shut down!
[  202.396398][T13349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3236'.
[  202.405888][T13349] pim6reg: entered allmulticast mode
[  202.409018][T13349] pim6reg: left allmulticast mode
[  202.724218][T13369] erspan0: entered promiscuous mode
[  202.726639][T13369] macvtap1: entered promiscuous mode
[  202.729049][T13369] macvtap1: entered allmulticast mode
[  202.732770][T13369] erspan0: entered allmulticast mode
[  203.171741][ T5235] Bluetooth: hci2: command 0x0405 tx timeout
[  203.850833][   T33] audit: type=1800 audit(1755269005.255:6): pid=13397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3259" name="blkio.bfq.time_recursive" dev="tmpfs" ino=5387 res=0 errno=0
[  204.476179][T13439] __nla_validate_parse: 1 callbacks suppressed
[  204.476193][T13439] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3276'.
[  204.484648][T13439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  204.527664][T13443] netlink: 'syz.2.3278': attribute type 6 has an invalid length.
[  204.561787][T13445] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3279'.
[  204.607124][T13449] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  204.840752][T13471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3285'.
[  205.179503][T13495] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  205.303959][T13499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3297'.
[  205.999959][T13510] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3301'.
[  206.640445][T13573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3330'.
[  206.644376][T13573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3330'.
[  206.708019][T13577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3332'.
[  206.812619][T13586] netlink: 'syz.0.3335': attribute type 2 has an invalid length.
[  206.996860][T13604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3343'.
[  208.364520][T13657] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.396923][T13659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3362'.
[  209.189849][T13684] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  210.499818][T13774] lo speed is unknown, defaulting to 1000
[  211.253303][T13827] __nla_validate_parse: 1 callbacks suppressed
[  211.253322][T13827] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3433'.
[  211.359906][T13833] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3435'.
[  211.443242][T13844] netlink: 'syz.2.3442': attribute type 11 has an invalid length.
[  211.518111][T13849] bond0: (slave vxlan1): Enslaving as an active interface with an up link
[  211.746615][T13871] netlink: 'syz.0.3453': attribute type 5 has an invalid length.
[  211.749380][T13871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3453'.
[  211.849682][T13877] tipc: Started in network mode
[  211.852898][T13877] tipc: Node identity 4e15fe84c332, cluster identity 4711
[  211.856158][T13877] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  211.856235][T13878] syz.0.3455: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null)
[  211.859323][T13877] syzkaller0: entered promiscuous mode
[  211.867897][T13878] ,cpuset=/,mems_allowed=0-1
[  211.869536][T13878] CPU: 1 UID: 0 PID: 13878 Comm: syz.0.3455 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  211.869557][T13878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  211.869568][T13878] Call Trace:
[  211.869574][T13878]  <TASK>
[  211.869580][T13878]  dump_stack_lvl+0x189/0x250
[  211.869604][T13878]  ? __pfx_dump_stack_lvl+0x10/0x10
[  211.869615][T13878]  ? __pfx__printk+0x10/0x10
[  211.869629][T13878]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  211.869642][T13878]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  211.869654][T13878]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  211.869665][T13878]  warn_alloc+0x214/0x310
[  211.869680][T13878]  ? stack_depot_save_flags+0x40/0x860
[  211.869693][T13878]  ? __pfx_warn_alloc+0x10/0x10
[  211.869707][T13878]  ? kasan_save_track+0x4f/0x80
[  211.869717][T13878]  ? xskq_create+0x56/0x170
[  211.869728][T13878]  ? xsk_init_queue+0xb0/0x110
[  211.869736][T13878]  ? xsk_setsockopt+0x4dc/0x8d0
[  211.869744][T13878]  ? do_sock_setsockopt+0x17c/0x1b0
[  211.869781][T13878]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  211.869793][T13878]  ? do_syscall_64+0xfa/0x3b0
[  211.869806][T13878]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.869819][T13878]  __vmalloc_node_range_noprof+0x125/0x12f0
[  211.869847][T13878]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  211.869862][T13878]  ? __kasan_kmalloc+0x93/0xb0
[  211.869876][T13878]  vmalloc_user_noprof+0xad/0xf0
[  211.869894][T13878]  ? xskq_create+0xbf/0x170
[  211.869909][T13878]  xskq_create+0xbf/0x170
[  211.869925][T13878]  xsk_init_queue+0xb0/0x110
[  211.869936][T13878]  xsk_setsockopt+0x4dc/0x8d0
[  211.869946][T13878]  ? __pfx_xsk_setsockopt+0x10/0x10
[  211.869955][T13878]  ? __pfx_aa_sk_perm+0x10/0x10
[  211.869968][T13878]  ? aa_sock_opt_perm+0xff/0x1b0
[  211.869981][T13878]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  211.869991][T13878]  ? __pfx_xsk_setsockopt+0x10/0x10
[  211.870001][T13878]  do_sock_setsockopt+0x17c/0x1b0
[  211.870015][T13878]  __x64_sys_setsockopt+0x13f/0x1b0
[  211.870029][T13878]  do_syscall_64+0xfa/0x3b0
[  211.870040][T13878]  ? lockdep_hardirqs_on+0x9c/0x150
[  211.870050][T13878]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.870058][T13878]  ? exc_page_fault+0x9f/0xf0
[  211.870069][T13878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.870077][T13878] RIP: 0033:0x7fa65358ebe9
[  211.870087][T13878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  211.870095][T13878] RSP: 002b:00007fa654442038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  211.870105][T13878] RAX: ffffffffffffffda RBX: 00007fa6537b6090 RCX: 00007fa65358ebe9
[  211.870112][T13878] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  211.870117][T13878] RBP: 00007fa653611e19 R08: 0000000000000004 R09: 0000000000000000
[  211.870123][T13878] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  211.870128][T13878] R13: 00007fa6537b6128 R14: 00007fa6537b6090 R15: 00007ffe6d71af78
[  211.870143][T13878]  </TASK>
[  211.870147][T13878] Mem-Info:
[  211.871340][T13877] syzkaller0: entered allmulticast mode
[  211.875362][T13878] active_anon:12660 inactive_anon:0 isolated_anon:0
[  211.875362][T13878]  active_file:995 inactive_file:38264 isolated_file:0
[  211.875362][T13878]  unevictable:1768 dirty:129 writeback:0
[  211.875362][T13878]  slab_reclaimable:9781 slab_unreclaimable:54970
[  211.875362][T13878]  mapped:18039 shmem:2533 pagetables:944
[  211.875362][T13878]  sec_pagetables:0 bounce:0
[  211.875362][T13878]  kernel_misc_reclaimable:0
[  211.875362][T13878]  free:279521 free_pcp:29734 free_cma:0
[  211.992500][T13878] Node 0 active_anon:40092kB inactive_anon:0kB active_file:3076kB inactive_file:131688kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:51360kB dirty:196kB writeback:0kB shmem:5336kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7388kB pagetables:2544kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  212.004799][T13878] Node 1 active_anon:10548kB inactive_anon:0kB active_file:904kB inactive_file:21368kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:20796kB dirty:320kB writeback:0kB shmem:4796kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3888kB pagetables:1232kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  212.014345][T13878] Node 0 DMA free:14732kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:628kB local_pcp:376kB free_cma:0kB
[  212.018583][T13881] tipc: Resetting bearer <eth:syzkaller0>
[  212.023032][T13878] lowmem_reserve[]: 0 811 811 811 811
[  212.023064][T13878] Node 0 DMA32 free:226344kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40092kB inactive_anon:0kB active_file:3076kB inactive_file:131688kB unevictable:3536kB writepending:196kB present:1556484kB managed:830996kB mlocked:0kB bounce:0kB free_pcp:55596kB local_pcp:17972kB free_cma:0kB
[  212.023093][T13878] lowmem_reserve[]: 0 0 0 0 0
[  212.023113][T13878] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  212.023139][T13878] lowmem_reserve[]: 0 0 854 854 854
[  212.023157][T13878] Node 1 Normal free:418392kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10548kB inactive_anon:0kB active_file:904kB inactive_file:21368kB unevictable:3536kB writepending:320kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:62452kB local_pcp:45548kB free_cma:0kB
[  212.023181][T13878] lowmem_reserve[]: 0 0 0 0 0
[  212.023198][T13878] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 1*128kB (M) 1*256kB (M) 2*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 2*4096kB (U) = 14732kB
[  212.062919][T13876] tipc: Resetting bearer <eth:syzkaller0>
[  212.067870][T13878] Node 0 DMA32: 366*4kB (UM) 258*8kB (UME) 484*16kB (UME) 103*32kB (UME) 62*64kB (UME) 137*128kB (UME) 79*256kB (UME) 40*512kB (UME) 18*1024kB (UME) 4*2048kB (M) 30*4096kB (UM) = 226280kB
[  212.076594][T13878] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  212.082804][T13878] Node 1 Normal: 580*4kB (U) 441*8kB (UE) 336*16kB (UME) 4*32kB (UME) 184*64kB (U) 70*128kB (UM) 25*256kB (UME) 18*512kB (UM) 16*1024kB (UM) 9*2048kB (UME) 82*4096kB (UM) = 418392kB
[  212.089707][T13878] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  212.093438][T13878] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  212.097022][T13878] 41792 total pagecache pages
[  212.098892][T13878] 0 pages in swap cache
[  212.100449][T13878] Free swap  = 124996kB
[  212.102303][T13878] Total swap = 124996kB
[  212.103947][T13878] 786301 pages RAM
[  212.105275][T13878] 0 pages HighMem/MovableOnly
[  212.107003][T13878] 241320 pages reserved
[  212.108483][T13878] 0 pages cma reserved
[  212.110489][T13876] tipc: Disabling bearer <eth:syzkaller0>
[  212.235978][T13887] netlink: 'syz.0.3460': attribute type 10 has an invalid length.
[  212.248628][T13887] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  212.629123][T13911] lo speed is unknown, defaulting to 1000
[  212.703980][T13920] netlink: 'syz.0.3473': attribute type 5 has an invalid length.
[  213.151636][T13954] netlink: 1360 bytes leftover after parsing attributes in process `syz.0.3488'.
[  213.154769][T13954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3488'.
[  213.386815][T13966] lo speed is unknown, defaulting to 1000
[  213.746282][T13996] netlink: 'syz.1.3504': attribute type 3 has an invalid length.
[  213.748741][T13996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3504'.
[  214.017397][T14019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3515'.
[  214.766488][T14019] hsr_slave_1 (unregistering): left promiscuous mode
[  214.827417][T14025] syzkaller0: tun_chr_ioctl cmd 1074025677
[  214.829992][T14025] syzkaller0: linktype set to 1
[  215.654073][T14077] openvswitch: netlink: Missing key (keys=40, expected=80)
[  215.754461][T14083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3543'.
[  216.025390][T14105] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  216.116189][T14111] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3554'.
[  216.270559][T14127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3562'.
[  216.483074][T14134] nbd0: detected capacity change from 0 to 63
[  216.487850][T14143] block nbd0: Receive control failed (result -32)
[  216.945868][T14181] lo speed is unknown, defaulting to 1000
[  217.339269][T14192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3590'.
[  218.139594][T14247] netlink: 788 bytes leftover after parsing attributes in process `syz.2.3617'.
[  218.363398][T14271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3627'.
[  218.697234][T14295] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.3636'.
[  218.758667][T14299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3638'.
[  219.115510][T14325] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3649'.
[  219.416459][T14347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3657'.
[  219.420699][T14347] hsr_slave_0: left promiscuous mode
[  219.425968][T14347] hsr_slave_1: left promiscuous mode
[  219.647345][T14365] netlink: 'syz.0.3666': attribute type 3 has an invalid length.
[  219.699086][T14371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3669'.
[  219.996120][T14388] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3677'.
[  220.232094][T14410] netlink: 'syz.1.3687': attribute type 1 has an invalid length.
[  220.256750][T14410] 8021q: adding VLAN 0 to HW filter on device bond2
[  220.275661][T14410] vlan2: entered allmulticast mode
[  220.277501][T14410] macvtap0: entered allmulticast mode
[  220.280659][T14410] bond2: (slave vlan2): Opening slave failed
[  220.542788][T14432] netlink: 'syz.0.3698': attribute type 5 has an invalid length.
[  221.625830][T14514] gtp0: entered promiscuous mode
[  221.628027][T14514] gtp0: entered allmulticast mode
[  221.679926][T14516] __nla_validate_parse: 2 callbacks suppressed
[  221.679988][T14516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3738'.
[  221.690084][T14516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3738'.
[  221.695217][T14516] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3738'.
[  221.904183][T14522] tipc: Resetting bearer <eth:syzkaller0>
[  221.906993][T14522] tipc: Resetting bearer <eth:syzkaller0>
[  222.744494][T14564] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3760'.
[  222.921943][T14575] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001
[  223.400301][T14584] netlink: 'syz.0.3769': attribute type 16 has an invalid length.
[  223.407191][T14584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3769'.
[  223.746490][T14597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3775'.
[  223.830050][T14602] netlink: 'syz.1.3777': attribute type 3 has an invalid length.
[  223.978832][T14608] pim6reg: entered allmulticast mode
[  223.995656][T14608] pim6reg: left allmulticast mode
[  224.054003][T14612] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  224.126009][T14620] lo speed is unknown, defaulting to 1000
[  224.153642][T14624] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3786'.
[  224.293254][T14625] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3784'.
[  224.296803][T14625] netlink: 'syz.2.3784': attribute type 13 has an invalid length.
[  224.299335][T14625] netlink: 'syz.2.3784': attribute type 17 has an invalid length.
[  224.343989][T14625] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  224.360319][T14632] lo speed is unknown, defaulting to 1000
[  224.506533][T14639] lo speed is unknown, defaulting to 1000
[  224.542313][T14643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3790'.
[  224.594547][T14643] 8021q: adding VLAN 0 to HW filter on device bond2
[  224.620409][T14646] 8021q: adding VLAN 0 to HW filter on device bond2
[  224.623337][T14646] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address
[  224.628139][T14646] bond2: (slave vxcan1): Error -95 calling set_mac_address
[  226.404352][T14674] netlink: 'syz.0.3802': attribute type 5 has an invalid length.
[  229.530478][T14686] syzkaller0: entered promiscuous mode
[  229.545590][T14686] syzkaller0: entered allmulticast mode
[  229.638093][T14698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3807'.
[  231.117888][T14705] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  231.121022][T14705] macvlan2: left promiscuous mode
[  231.124196][T14705] macvtap1: left promiscuous mode
[  231.125762][T14705] macvtap1: left allmulticast mode
[  231.128422][T14705] ip6erspan0: left allmulticast mode
[  231.134549][T14705] ip6tnl3: left promiscuous mode
[  231.136191][T14705] ip6tnl3: left allmulticast mode
[  231.140490][T14705] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  231.149436][T14705] batman_adv: batadv0: Interface deactivated: macvlan3
[  231.164791][T14705] gtp0: left promiscuous mode
[  231.166378][T14705] gtp0: left allmulticast mode
[  231.187949][T14712] team0: Port device dummy0 removed
[  231.197425][T14712] veth0_to_bond: left allmulticast mode
[  231.199809][T14712] veth0_to_bond: left promiscuous mode
[  231.202688][T14712] bridge4: port 2(veth0_to_bond) entered disabled state
[  231.207893][T14711] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3809'.
[  231.213896][T14712] bond0: (slave 5): Releasing backup interface
[  231.225711][T14712] bond0: (slave bond_slave_1): Releasing backup interface
[  231.242578][T14712] team0: Port device team_slave_0 removed
[  231.252341][T14712] team0: Port device team_slave_1 removed
[  231.255540][T14712] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  231.259283][T14712] batman_adv: batadv0: Removing interface: batadv_slave_0
[  231.259520][T14720] netlink: 'syz.0.3809': attribute type 10 has an invalid length.
[  231.266937][T14712] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  231.269812][T14712] batman_adv: batadv0: Removing interface: batadv_slave_1
[  231.286705][T14712] team0: Port device geneve0 removed
[  231.290513][T14712] bond0: (slave wlan1): Releasing backup interface
[  231.299714][T14712] tipc: Resetting bearer <eth:syzkaller0>
[  231.303875][T14712] bond0: (slave vxlan0): Releasing backup interface
[  231.314471][T14712] veth3: left allmulticast mode
[  231.316463][T14712] veth3: left promiscuous mode
[  231.318679][T14712] bridge4: port 1(veth3) entered disabled state
[  231.325619][T14712] vlan2: left promiscuous mode
[  231.329071][T14712] bridge4: port 3(vlan2) entered disabled state
[  231.339277][T14712] bond1: (slave vti0): Releasing backup interface
[  231.353826][T14712] batman_adv: batadv0: Removing interface: ipvlan2
[  231.360091][ T5873] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  231.369254][ T5873] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  231.424803][T14720] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  231.430814][ T5873] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  231.435091][T14724] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  231.438300][T14724] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  231.459477][ T5873] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  231.463828][ T5873] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  231.468984][ T5873] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  231.473274][ T5873] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  231.476619][ T5873] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  231.690079][T14744] vti0: entered promiscuous mode
[  231.749793][T14747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3818'.
[  231.768860][T14747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3818'.
[  231.801577][T14747] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  231.897168][T14754] openvswitch: netlink: Message has 24 unknown bytes.
[  231.899355][T14754] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.728149][T14782] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3830'.
[  232.832758][T14786] can: request_module (can-proto-0) failed.
[  233.338286][T14800] lo speed is unknown, defaulting to 1000
[  233.454606][T14813] netlink: 'syz.0.3845': attribute type 2 has an invalid length.
[  233.457757][T14813] netlink: 'syz.0.3845': attribute type 1 has an invalid length.
[  233.460719][T14815] netlink: 'syz.2.3839': attribute type 21 has an invalid length.
[  233.877115][T14837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3843'.
[  233.882610][T14837] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  233.885765][T14837] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  233.897352][T14837] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3843'.
[  233.902298][T14837] bond0: invalid ARP target 0.0.0.0 specified for addition
[  233.905783][T14837] bond0: option arp_ip_target: invalid value (0)
[  233.974457][T14842] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3846'.
[  233.988425][T14842] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  234.183217][T14858] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3852'.
[  234.187365][T14858] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3852'.
[  234.307034][T14862] sctp: [Deprecated]: syz.0.3854 (pid 14862) Use of struct sctp_assoc_value in delayed_ack socket option.
[  234.307034][T14862] Use struct sctp_sack_info instead
[  234.430456][T14868] lo speed is unknown, defaulting to 1000
[  234.608449][T14877] netlink: 'syz.2.3859': attribute type 1 has an invalid length.
[  234.629659][T14877] 8021q: adding VLAN 0 to HW filter on device bond3
[  234.643767][T14877] vlan0: entered allmulticast mode
[  234.645599][T14877] macvtap0: entered allmulticast mode
[  234.648133][T14877] bond3: (slave vlan0): Opening slave failed
[  235.029731][T14890] __nla_validate_parse: 1 callbacks suppressed
[  235.029753][T14890] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3863'.
[  235.043807][T14890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3863'.
[  235.424408][T14906] netlink: 'syz.1.3868': attribute type 2 has an invalid length.
[  235.426271][T14905] netlink: 'syz.1.3868': attribute type 2 has an invalid length.
[  235.497722][T14913] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3870'.
[  235.508207][T14913] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3870'.
[  235.711887][T14923] netlink: 'syz.1.3873': attribute type 1 has an invalid length.
[  235.715005][T14923] netlink: 'syz.1.3873': attribute type 2 has an invalid length.
[  235.837889][T14930] IPVS: set_ctl: invalid protocol: 8 172.20.20.187:0
[  235.843874][T14932] lo: MTU too low for tipc bearer
[  235.846728][T14932] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  235.910841][T14935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3876'.
[  235.916654][T14935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3876'.
[  235.925327][T14935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3876'.
[  235.929228][T14935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3876'.
[  235.934814][T14935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3876'.
[  235.939560][T14935] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  235.950139][T14933] netlink: 'syz.1.3874': attribute type 6 has an invalid length.
[  236.168215][T14948] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  236.226137][T14946] tipc: Disabling bearer <eth:syzkaller0>
[  236.437339][T14966] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3883'.
[  236.625965][T14974] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  236.710380][T14987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  236.717041][T14987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  236.723946][T14987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  236.755234][T14989] netlink: 'syz.1.3891': attribute type 1 has an invalid length.
[  236.900411][T14999] lo speed is unknown, defaulting to 1000
[  237.398196][T15037] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  237.860295][T15074] openvswitch: netlink: EtherType 0 is less than min 600
[  238.579841][T15115] validate_nla: 1 callbacks suppressed
[  238.579903][T15115] netlink: 'syz.1.3920': attribute type 3 has an invalid length.
[  239.274349][T15139] openvswitch: netlink: IPv4 tun info is not correct
[  239.361852][T15145] team0: entered promiscuous mode
[  239.494846][T15145] team0 (unregistering): left promiscuous mode
[  239.497362][T15145] tipc: Disabling bearer <eth:team0>
[  239.911978][T15163] netlink: 'syz.1.3936': attribute type 1 has an invalid length.
[  239.970305][T15164] gretap1: entered promiscuous mode
[  240.034517][T15170] __nla_validate_parse: 17 callbacks suppressed
[  240.034573][T15170] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3938'.
[  240.138787][T15184] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3941'.
[  240.301859][T15201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3946'.
[  240.484118][T15206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3947'.
[  240.488683][T15206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3947'.
[  240.620188][T15212] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3949'.
[  241.147433][T15231] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3955'.
[  241.199732][T15235] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3956'.
[  241.282213][T15242] netlink: 'syz.1.3957': attribute type 13 has an invalid length.
[  241.288146][T15242] netlink: 'syz.1.3957': attribute type 17 has an invalid length.
[  241.368717][T15242] 8021q: adding VLAN 0 to HW filter on device bond0
[  241.381464][T15242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  241.394188][  T974] lo speed is unknown, defaulting to 1000
[  241.394764][T15246] smc: net device bond0 applied user defined pnetid SYZ2
[  241.396573][  T974] syz2: Port: 1 Link ACTIVE
[  241.459355][T15242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  241.470267][T15242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  241.478019][T15257] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.489938][T15259] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3962'.
[  241.516048][T15257] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.539042][T15261] netlink: 'syz.2.3963': attribute type 13 has an invalid length.
[  241.545050][T15261] netlink: 'syz.2.3963': attribute type 17 has an invalid length.
[  241.570833][T15261] erspan0: left promiscuous mode
[  241.595221][T15261] 8021q: adding VLAN 0 to HW filter on device team0
[  241.599959][T15261] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  241.627540][T15257] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.632774][T15260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  241.665595][T15262] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3961'.
[  241.670607][T15257] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.737368][ T9451] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  241.748170][ T9451] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  241.764100][ T9451] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  241.774868][ T9451] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  242.620248][T15315] netlink: 'syz.1.3978': attribute type 2 has an invalid length.
[  242.625069][T15312] team0: Device sit2 is of different type
[  243.244474][T15352] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  243.248898][T15352] vlan3: entered promiscuous mode
[  243.251058][T15352] bond0: entered promiscuous mode
[  243.330583][T15354] syzkaller0: entered promiscuous mode
[  243.333173][T15354] syzkaller0: entered allmulticast mode
[  244.868734][T15368] netlink: 'syz.0.3998': attribute type 1 has an invalid length.
[  244.872664][T15369] netlink: 'syz.0.3998': attribute type 1 has an invalid length.
[  244.929779][T15383] netlink: 'syz.0.4002': attribute type 1 has an invalid length.
[  244.935505][T15383] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  245.048900][T15390] veth0_to_bond: entered allmulticast mode
[  245.056424][T15401] rose0: left promiscuous mode
[  245.096162][T15408] netlink: 'syz.2.4010': attribute type 1 has an invalid length.
[  245.098598][T15408] __nla_validate_parse: 10 callbacks suppressed
[  245.098606][T15408] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4010'.
[  245.108613][T15408] netlink: 'syz.2.4010': attribute type 4 has an invalid length.
[  245.240147][T15429] netlink: 'syz.2.4020': attribute type 1 has an invalid length.
[  245.261593][T15429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4020'.
[  245.328055][T15438] netlink: 'syz.1.4023': attribute type 2 has an invalid length.
[  245.364880][T15438] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4023'.
[  245.383253][T15441] netlink: 'syz.2.4026': attribute type 10 has an invalid length.
[  245.394815][T15441] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  245.416791][T15441] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  245.434507][T15441] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4026'.
[  245.457655][T15440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  245.488312][T15449] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  245.492842][T15449] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  245.522216][T15450] lo speed is unknown, defaulting to 1000
[  245.665337][T15458] netlink: 'syz.1.4031': attribute type 1 has an invalid length.
[  245.685688][T15458] 8021q: adding VLAN 0 to HW filter on device bond3
[  245.699007][T15458] bond3: (slave bridge4): making interface the new active one
[  245.703557][T15458] bond3: (slave bridge4): Enslaving as an active interface with an up link
[  245.714227][T15458] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  245.850696][T15461] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  245.896187][T15463] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4033'.
[  246.106299][T15467] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  246.133222][T15467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4035'.
[  246.164068][T15467] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  246.487178][T15495] IPv6: Can't replace route, no match found
[  246.683814][T15502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4047'.
[  246.698087][T15502] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4047'.
[  246.707452][T15506] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4048'.
[  246.846852][T15518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4053'.
[  246.925274][T15529] syzkaller0: entered promiscuous mode
[  246.927569][T15529] syzkaller0: entered allmulticast mode
[  248.430519][T15568] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  248.438101][T15568] bond0: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  248.443786][T15568] bond0: (slave ipvlan4): Error -95 calling set_mac_address
[  248.623345][T15585] netlink: 'syz.0.4075': attribute type 10 has an invalid length.
[  248.906489][T15595] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  248.921513][T15595] syzkaller0: left promiscuous mode
[  248.923897][T15595] syzkaller0: left allmulticast mode
[  248.929364][T15595] tipc: Resetting bearer <eth:syzkaller0>
[  248.950054][T15589] delete_channel: no stack
[  249.097611][T15602] veth1_to_batadv: entered promiscuous mode
[  249.441053][T15620] lo speed is unknown, defaulting to 1000
[  250.015125][T15652] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  250.275420][T15665] __nla_validate_parse: 17 callbacks suppressed
[  250.275434][T15665] netlink: 1260 bytes leftover after parsing attributes in process `syz.2.4100'.
[  250.331757][T15660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4100'.
[  250.530357][T15679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4106'.
[  250.579212][T15681] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4107'.
[  250.586939][T15681] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4107'.
[  250.910546][T15689] batman_adv: batadv0: Removing interface: batadv_slave_1
[  251.150326][T15696] netlink: 'syz.1.4114': attribute type 1 has an invalid length.
[  251.153521][T15696] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4114'.
[  251.224435][T15700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4115'.
[  251.685050][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4119'.
[  251.717311][T15713] netlink: 'syz.0.4120': attribute type 10 has an invalid length.
[  251.885001][T15717] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  252.089549][T15727] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4125'.
[  252.095356][T15727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4125'.
[  252.757246][T15769] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  252.827373][T15777] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  252.831690][T15777] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  252.958735][T15785] netlink: 'syz.2.4148': attribute type 1 has an invalid length.
[  253.154006][T15803] netlink: 'syz.2.4154': attribute type 1 has an invalid length.
[  253.186924][T15805] netlink: 'syz.2.4155': attribute type 10 has an invalid length.
[  253.239915][T15810] netlink: 'syz.2.4157': attribute type 1 has an invalid length.
[  253.267271][T15810] bond5: (slave geneve2): making interface the new active one
[  253.270360][T15810] bond5: (slave geneve2): Enslaving as an active interface with an up link
[  253.276390][ T9451] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  253.278939][ T9451] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  253.281781][ T9451] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  253.284439][ T9451] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  253.366463][T15817] netlink: 'syz.2.4159': attribute type 1 has an invalid length.
[  253.807660][T15845] bond0: (slave rose0): Error: Device can not be enslaved while up
[  254.347367][T15877] netlink: 'syz.0.4168': attribute type 1 has an invalid length.
[  254.805635][T15894] netlink: 'syz.1.4175': attribute type 1 has an invalid length.
[  254.894441][T15900] netlink: 'syz.1.4178': attribute type 10 has an invalid length.
[  254.929189][T15902] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  254.932533][T15902] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  255.475200][T15911] __nla_validate_parse: 16 callbacks suppressed
[  255.475219][T15911] netlink: 236 bytes leftover after parsing attributes in process `syz.0.4182'.
[  255.517543][T15911] erspan0: Device is already in use.
[  255.639936][T15914] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4183'.
[  255.822113][T15923] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4186'.
[  256.011082][T15927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4188'.
[  256.096267][T15939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4190'.
[  256.099694][T15939] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4190'.
[  256.108064][T15939] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4190'.
[  256.115594][T15939] netlink: 540 bytes leftover after parsing attributes in process `syz.1.4190'.
[  256.240102][T15948] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  256.244658][T15948] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  256.256792][T15949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4193'.
[  256.388908][T15963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4200'.
[  256.563174][T15986] validate_nla: 3 callbacks suppressed
[  256.563187][T15986] netlink: 'syz.1.4210': attribute type 1 has an invalid length.
[  256.601040][T15986] 8021q: adding VLAN 0 to HW filter on device bond5
[  256.606278][T15986] bond4: (slave bond5): making interface the new active one
[  256.609583][T15986] bond4: (slave bond5): Enslaving as an active interface with an up link
[  256.620337][T15986] bond4: (slave gretap1): Enslaving as a backup interface with an up link
[  256.627532][T15986] 8021q: adding VLAN 0 to HW filter on device bond4
[  257.145211][T16008] syzkaller1: entered promiscuous mode
[  257.147756][T16008] syzkaller1: entered allmulticast mode
[  257.463598][T16024] netlink: 'syz.1.4226': attribute type 2 has an invalid length.
[  257.484773][T16027] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[  257.510446][T16027] lo speed is unknown, defaulting to 1000
[  257.580755][T16032] netlink: 'syz.2.4227': attribute type 1 has an invalid length.
[  257.597403][T16035] smc: net device bond0 erased user defined pnetid SYZ2
[  257.648188][T16035] bond0 (unregistering): Released all slaves
[  258.067681][T16079] netlink: 'syz.2.4243': attribute type 1 has an invalid length.
[  258.077266][T16079] dvmrp8: entered allmulticast mode
[  258.358122][T16108] geneve2: entered promiscuous mode
[  258.361519][T16067] dvmrp8: left allmulticast mode
[  258.409927][T16111] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  258.446507][T16112] syzkaller0: entered promiscuous mode
[  258.448330][T16112] syzkaller0: entered allmulticast mode
[  259.761450][T16132] netlink: 'syz.2.4259': attribute type 1 has an invalid length.
[  259.778334][T16132] 8021q: adding VLAN 0 to HW filter on device bond6
[  259.789123][T16132] bond6: (slave ip6gretap2): making interface the new active one
[  259.792721][T16132] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link
[  259.807122][T16132] veth13: entered promiscuous mode
[  259.815202][T16132] bond6: (slave veth13): Enslaving as an active interface with a down link
[  259.991420][T16148] netlink: 'syz.2.4265': attribute type 1 has an invalid length.
[  260.008075][T16137] xfrm1: entered promiscuous mode
[  260.010067][T16137] xfrm1: entered allmulticast mode
[  260.092590][T16155] netlink: 'syz.0.4268': attribute type 10 has an invalid length.
[  260.120671][T16157] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  260.220118][T16161] netlink: del zone limit has 4 unknown bytes
[  260.290885][T16165] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  260.308481][T16165] bond0: (slave wlan1): Releasing backup interface
[  260.312523][T16165] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  260.315290][T16165] tipc: Resetting bearer <eth:syzkaller0>
[  260.359193][T16165] netlink: 'syz.0.4273': attribute type 10 has an invalid length.
[  260.362383][T16165] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  260.368980][T16165] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.374016][T16165] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  260.376673][T16165] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  260.384307][T16165] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  260.387527][T16165] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  260.815407][T16169] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.859030][T16169] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.921738][T16169] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.960719][T16177] __nla_validate_parse: 15 callbacks suppressed
[  260.960733][T16177] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4277'.
[  260.975896][T16169] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.060525][T15542] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  261.070378][ T9451] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.092906][ T9451] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.106799][ T9451] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.140064][T16185] bridge: RTM_NEWNEIGH with invalid state 0x8
[  261.390734][T16201] netlink: 'syz.0.4287': attribute type 1 has an invalid length.
[  261.437702][  T791] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  261.449166][  T791] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  261.465418][T16210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4290'.
[  261.469330][T16210] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  261.473985][T16210] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.490742][T16214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4291'.
[  261.505548][T16214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4291'.
[  261.509967][T16214] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4291'.
[  261.786028][T16239] netlink: 'syz.0.4299': attribute type 1 has an invalid length.
[  261.788845][T16239] netlink: 'syz.0.4299': attribute type 1 has an invalid length.
[  261.868889][T16236] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4300'.
[  261.872216][T16236] openvswitch: netlink: Flow actions attr not present in new flow.
[  261.878025][T16244] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4301'.
[  261.947631][T16239] netlink: 'syz.0.4299': attribute type 1 has an invalid length.
[  261.951960][T16248] netlink: 'syz.1.4302': attribute type 1 has an invalid length.
[  261.954382][T16248] netlink: 'syz.1.4302': attribute type 3 has an invalid length.
[  261.956946][T16248] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4302'.
[  261.971730][T16239] 8021q: adding VLAN 0 to HW filter on device bond3
[  261.980307][T16239] tipc: New replicast peer: 0.0.0.0
[  261.982466][T16239] tipc: Enabled bearer <udp:syz2>, priority 10
[  261.984705][T16239] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  262.069771][T16256] netem: change failed
[  262.092070][T16256] vlan3: entered allmulticast mode
[  262.094120][T16256] bridge0: entered allmulticast mode
[  263.114933][T16295] netlink: 'syz.0.4317': attribute type 1 has an invalid length.
[  263.117617][T16295] netlink: 'syz.0.4317': attribute type 1 has an invalid length.
[  263.129412][T16298] netlink: 161716 bytes leftover after parsing attributes in process `syz.2.4318'.
[  263.197072][T16301] team0: No ports can be present during mode change
[  263.232349][T16302] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4317'.
[  263.235558][T16302] netlink: 'syz.0.4317': attribute type 1 has an invalid length.
[  263.255312][T16302] 8021q: adding VLAN 0 to HW filter on device bond4
[  263.393069][T16323] sctp: [Deprecated]: syz.1.4325 (pid 16323) Use of int in max_burst socket option.
[  263.393069][T16323] Use struct sctp_assoc_value instead
[  263.408527][T16317] netlink: 'syz.0.4324': attribute type 10 has an invalid length.
[  263.414590][T16317] team0: Port device geneve0 added
[  263.475672][T16330] lo speed is unknown, defaulting to 1000
[  263.534234][T16333] lo speed is unknown, defaulting to 1000
[  264.245067][T16340] netlink: 'syz.1.4328': attribute type 4 has an invalid length.
[  264.255466][  T974] lo speed is unknown, defaulting to 1000
[  264.257913][  T791] lo speed is unknown, defaulting to 1000
[  264.358326][T16346] openvswitch: netlink: Missing key (keys=40, expected=100)
[  264.616361][T16357] lo speed is unknown, defaulting to 1000
[  264.754522][T16357] sock: sock_timestamping_bind_phc: sock not bind to device
[  265.353894][   T33] audit: type=1800 audit(1755269066.765:7): pid=16406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4347" name=449D06 dev="tmpfs" ino=7174 res=0 errno=0
[  265.751606][T16431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  265.767629][T16429] lo speed is unknown, defaulting to 1000
[  265.864317][T16429] syz.0.4355 (16429) used greatest stack depth: 18328 bytes left
[  265.996848][T16441] pim6reg1: entered promiscuous mode
[  265.998956][T16441] pim6reg1: entered allmulticast mode
[  266.097317][T16441] __nla_validate_parse: 10 callbacks suppressed
[  266.097331][T16441] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4357'.
[  266.133632][T16441] 8021q: adding VLAN 0 to HW filter on device bond5
[  266.138770][T16441] team0: Port device bond5 added
[  266.362043][T14143] block nbd2: Receive control failed (result -32)
[  266.453580][T16472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4369'.
[  266.456525][T16472] bridge_slave_1: default FDB implementation only supports local addresses
[  266.472401][T16473] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20002
[  266.659615][T16488] bridge5: entered promiscuous mode
[  266.662055][T16488] bridge5: entered allmulticast mode
[  266.757464][T16497] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4378'.
[  266.772250][T16497] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4378'.
[  266.785969][T16497] ==================================================================
[  266.789270][T16497] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  266.791775][T16497] Read of size 2 at addr ffff8880389ce542 by task syz.1.4378/16497
[  266.794769][T16497] 
[  266.796064][T16497] CPU: 0 UID: 0 PID: 16497 Comm: syz.1.4378 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  266.796079][T16497] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  266.796087][T16497] Call Trace:
[  266.796092][T16497]  <TASK>
[  266.796098][T16497]  dump_stack_lvl+0x189/0x250
[  266.796116][T16497]  ? __kasan_check_byte+0x12/0x40
[  266.796132][T16497]  ? __pfx_dump_stack_lvl+0x10/0x10
[  266.796166][T16497]  ? lock_release+0x4b/0x3e0
[  266.796183][T16497]  ? __virt_addr_valid+0x4a5/0x5c0
[  266.796195][T16497]  print_report+0xca/0x240
[  266.796205][T16497]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  266.796216][T16497]  kasan_report+0x118/0x150
[  266.796228][T16497]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  266.796242][T16497]  __xfrm_state_lookup+0x6ad/0x8d0
[  266.796256][T16497]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  266.796270][T16497]  xfrm_state_add+0x27d/0xc40
[  266.796285][T16497]  pfkey_add+0x1edd/0x2e00
[  266.796300][T16497]  ? __pfx_pfkey_add+0x10/0x10
[  266.796310][T16497]  ? kmem_cache_free+0x18f/0x400
[  266.796323][T16497]  pfkey_sendmsg+0xbfe/0x1090
[  266.796338][T16497]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  266.796354][T16497]  ? aa_sock_msg_perm+0xf1/0x1d0
[  266.796366][T16497]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  266.796376][T16497]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  266.796386][T16497]  __sock_sendmsg+0x21c/0x270
[  266.796398][T16497]  ____sys_sendmsg+0x505/0x830
[  266.796411][T16497]  ? __pfx_____sys_sendmsg+0x10/0x10
[  266.796425][T16497]  ? import_iovec+0x74/0xa0
[  266.796434][T16497]  ___sys_sendmsg+0x21f/0x2a0
[  266.796446][T16497]  ? __pfx____sys_sendmsg+0x10/0x10
[  266.796465][T16497]  ? __fget_files+0x2a/0x420
[  266.796476][T16497]  ? __fget_files+0x3a0/0x420
[  266.796490][T16497]  __x64_sys_sendmsg+0x19b/0x260
[  266.796502][T16497]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  266.796516][T16497]  ? rcu_is_watching+0x15/0xb0
[  266.796526][T16497]  ? do_syscall_64+0xbe/0x3b0
[  266.796538][T16497]  do_syscall_64+0xfa/0x3b0
[  266.796549][T16497]  ? lockdep_hardirqs_on+0x9c/0x150
[  266.796558][T16497]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.796567][T16497]  ? exc_page_fault+0x9f/0xf0
[  266.796577][T16497]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.796586][T16497] RIP: 0033:0x7fc43b78ebe9
[  266.796595][T16497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  266.796604][T16497] RSP: 002b:00007fc43c62c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  266.796614][T16497] RAX: ffffffffffffffda RBX: 00007fc43b9b5fa0 RCX: 00007fc43b78ebe9
[  266.796621][T16497] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000a
[  266.796626][T16497] RBP: 00007fc43b811e19 R08: 0000000000000000 R09: 0000000000000000
[  266.796632][T16497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  266.796637][T16497] R13: 00007fc43b9b6038 R14: 00007fc43b9b5fa0 R15: 00007ffc7b7f2738
[  266.796648][T16497]  </TASK>
[  266.796651][T16497] 
[  266.887693][T16497] Allocated by task 15923:
[  266.889063][T16497]  kasan_save_track+0x3e/0x80
[  266.890520][T16497]  __kasan_slab_alloc+0x6c/0x80
[  266.892016][T16497]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  266.893687][T16497]  xfrm_state_alloc+0x24/0x2f0
[  266.895177][T16497]  __find_acq_core+0x8a7/0x1c00
[  266.896667][T16497]  xfrm_find_acq+0x78/0xa0
[  266.898049][T16497]  xfrm_alloc_userspi+0x6b3/0xc90
[  266.899604][T16497]  xfrm_user_rcv_msg+0x7a3/0xab0
[  266.901118][T16497]  netlink_rcv_skb+0x208/0x470
[  266.902595][T16497]  xfrm_netlink_rcv+0x79/0x90
[  266.904031][T16497]  netlink_unicast+0x82f/0x9e0
[  266.905546][T16497]  netlink_sendmsg+0x805/0xb30
[  266.907047][T16497]  __sock_sendmsg+0x21c/0x270
[  266.908517][T16497]  ____sys_sendmsg+0x505/0x830
[  266.909995][T16497]  ___sys_sendmsg+0x21f/0x2a0
[  266.911504][T16497]  __x64_sys_sendmsg+0x19b/0x260
[  266.913042][T16497]  do_syscall_64+0xfa/0x3b0
[  266.914463][T16497]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.916274][T16497] 
[  266.917046][T16497] Freed by task 10:
[  266.918272][T16497]  kasan_save_track+0x3e/0x80
[  266.919728][T16497]  kasan_save_free_info+0x46/0x50
[  266.921286][T16497]  __kasan_slab_free+0x5b/0x80
[  266.922758][T16497]  kmem_cache_free+0x18f/0x400
[  266.924239][T16497]  xfrm_state_gc_task+0x52d/0x6b0
[  266.925805][T16497]  process_scheduled_works+0xae1/0x17b0
[  266.927508][T16497]  worker_thread+0x8a0/0xda0
[  266.928939][T16497]  kthread+0x711/0x8a0
[  266.930235][T16497]  ret_from_fork+0x3fc/0x770
[  266.931661][T16497]  ret_from_fork_asm+0x1a/0x30
[  266.933440][T16497] 
[  266.934396][T16497] The buggy address belongs to the object at ffff8880389ce400
[  266.934396][T16497]  which belongs to the cache xfrm_state of size 928
[  266.939883][T16497] The buggy address is located 322 bytes inside of
[  266.939883][T16497]  freed 928-byte region [ffff8880389ce400, ffff8880389ce7a0)
[  266.944175][T16497] 
[  266.944924][T16497] The buggy address belongs to the physical page:
[  266.946934][T16497] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880389cdf80 pfn:0x389cc
[  266.950046][T16497] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  266.952667][T16497] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  266.955302][T16497] page_type: f5(slab)
[  266.956906][T16497] raw: 00fff00000000040 ffff88801bf3dc80 dead000000000122 0000000000000000
[  266.960323][T16497] raw: ffff8880389cdf80 00000000800e0007 00000000f5000000 0000000000000000
[  266.963771][T16497] head: 00fff00000000040 ffff88801bf3dc80 dead000000000122 0000000000000000
[  266.967276][T16497] head: ffff8880389cdf80 00000000800e0007 00000000f5000000 0000000000000000
[  266.970717][T16497] head: 00fff00000000002 ffffea0000e27301 00000000ffffffff 00000000ffffffff
[  266.974165][T16497] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  266.977581][T16497] page dumped because: kasan: bad access detected
[  266.980556][T16497] page_owner tracks the page as allocated
[  266.982847][T16497] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 12103, tgid 12095 (syz.1.2702), ts 182129694051, free_ts 160685742632
[  266.990583][T16497]  post_alloc_hook+0x240/0x2a0
[  266.992444][T16497]  get_page_from_freelist+0x21e4/0x22c0
[  266.994222][T16497]  __alloc_frozen_pages_noprof+0x181/0x370
[  266.996036][T16497]  alloc_pages_mpol+0x232/0x4a0
[  266.998010][T16497]  allocate_slab+0x8a/0x370
[  266.999890][T16497]  ___slab_alloc+0xbeb/0x1410
[  267.001827][T16497]  kmem_cache_alloc_noprof+0x283/0x3c0
[  267.003931][T16497]  xfrm_state_alloc+0x24/0x2f0
[  267.005463][T16497]  xfrm_state_find+0x37d4/0x5400
[  267.007028][T16497]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  267.008938][T16497]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  267.010633][T16497]  xfrm_lookup_route+0x3c/0x1c0
[  267.012405][T16497]  udp_sendmsg+0x142e/0x2170
[  267.013935][T16497]  __sock_sendmsg+0x19c/0x270
[  267.015433][T16497]  ____sys_sendmsg+0x52d/0x830
[  267.016939][T16497]  ___sys_sendmsg+0x21f/0x2a0
[  267.018442][T16497] page last free pid 11072 tgid 11069 stack trace:
[  267.020715][T16497]  __free_frozen_pages+0xbc4/0xd30
[  267.022782][T16497]  __put_partials+0x156/0x1a0
[  267.024694][T16497]  put_cpu_partial+0x17c/0x250
[  267.026638][T16497]  __slab_free+0x2d5/0x3c0
[  267.028442][T16497]  qlist_free_all+0x97/0x140
[  267.030314][T16497]  kasan_quarantine_reduce+0x148/0x160
[  267.032510][T16497]  __kasan_slab_alloc+0x22/0x80
[  267.034637][T16497]  __kmalloc_cache_noprof+0x1be/0x3d0
[  267.036820][T16497]  sctp_datamsg_from_user+0x88/0xef0
[  267.038945][T16497]  sctp_sendmsg_to_asoc+0x1003/0x1810
[  267.040780][T16497]  sctp_sendmsg+0x1941/0x2810
[  267.042269][T16497]  __sock_sendmsg+0x19c/0x270
[  267.043753][T16497]  __sys_sendto+0x3bd/0x520
[  267.045504][T16497]  __x64_sys_sendto+0xde/0x100
[  267.047365][T16497]  do_syscall_64+0xfa/0x3b0
[  267.048759][T16497]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.050546][T16497] 
[  267.051306][T16497] Memory state around the buggy address:
[  267.053063][T16497]  ffff8880389ce400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  267.056240][T16497]  ffff8880389ce480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  267.059462][T16497] >ffff8880389ce500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  267.062689][T16497]                                            ^
[  267.065186][T16497]  ffff8880389ce580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  267.067970][T16497]  ffff8880389ce600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  267.070457][T16497] ==================================================================
[  267.073115][T16497] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  267.075372][T16497] CPU: 0 UID: 0 PID: 16497 Comm: syz.1.4378 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  267.079078][T16497] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  267.082261][T16497] Call Trace:
[  267.083307][T16497]  <TASK>
[  267.084233][T16497]  dump_stack_lvl+0x99/0x250
[  267.085689][T16497]  ? __asan_memcpy+0x40/0x70
[  267.087195][T16497]  ? __pfx_dump_stack_lvl+0x10/0x10
[  267.088827][T16497]  ? __pfx__printk+0x10/0x10
[  267.090340][T16497]  vpanic+0x281/0x750
[  267.091587][T16497]  ? __pfx_vpanic+0x10/0x10
[  267.092999][T16497]  ? irqentry_exit+0x74/0x90
[  267.094673][T16497]  panic+0xb9/0xc0
[  267.095897][T16497]  ? __pfx_panic+0x10/0x10
[  267.097337][T16497]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  267.099206][T16497]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  267.101064][T16497]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  267.102740][T16497]  check_panic_on_warn+0x89/0xb0
[  267.104312][T16497]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  267.105984][T16497]  end_report+0x78/0x160
[  267.107329][T16497]  kasan_report+0x129/0x150
[  267.108760][T16497]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  267.110429][T16497]  __xfrm_state_lookup+0x6ad/0x8d0
[  267.112057][T16497]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  267.113816][T16497]  xfrm_state_add+0x27d/0xc40
[  267.115310][T16497]  pfkey_add+0x1edd/0x2e00
[  267.116730][T16497]  ? __pfx_pfkey_add+0x10/0x10
[  267.118256][T16497]  ? kmem_cache_free+0x18f/0x400
[  267.119849][T16497]  pfkey_sendmsg+0xbfe/0x1090
[  267.121567][T16497]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  267.123189][T16497]  ? aa_sock_msg_perm+0xf1/0x1d0
[  267.124741][T16497]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  267.126431][T16497]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  267.128034][T16497]  __sock_sendmsg+0x21c/0x270
[  267.129514][T16497]  ____sys_sendmsg+0x505/0x830
[  267.131027][T16497]  ? __pfx_____sys_sendmsg+0x10/0x10
[  267.132779][T16497]  ? import_iovec+0x74/0xa0
[  267.134429][T16497]  ___sys_sendmsg+0x21f/0x2a0
[  267.135994][T16497]  ? __pfx____sys_sendmsg+0x10/0x10
[  267.137698][T16497]  ? __fget_files+0x2a/0x420
[  267.139478][T16497]  ? __fget_files+0x3a0/0x420
[  267.140992][T16497]  __x64_sys_sendmsg+0x19b/0x260
[  267.142555][T16497]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  267.144289][T16497]  ? rcu_is_watching+0x15/0xb0
[  267.145821][T16497]  ? do_syscall_64+0xbe/0x3b0
[  267.147352][T16497]  do_syscall_64+0xfa/0x3b0
[  267.148830][T16497]  ? lockdep_hardirqs_on+0x9c/0x150
[  267.150914][T16497]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.153296][T16497]  ? exc_page_fault+0x9f/0xf0
[  267.154867][T16497]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.156737][T16497] RIP: 0033:0x7fc43b78ebe9
[  267.158141][T16497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  267.164084][T16497] RSP: 002b:00007fc43c62c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  267.166724][T16497] RAX: ffffffffffffffda RBX: 00007fc43b9b5fa0 RCX: 00007fc43b78ebe9
[  267.169339][T16497] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000a
[  267.171808][T16497] RBP: 00007fc43b811e19 R08: 0000000000000000 R09: 0000000000000000
[  267.174463][T16497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  267.176910][T16497] R13: 00007fc43b9b6038 R14: 00007fc43b9b5fa0 R15: 00007ffc7b7f2738
[  267.179360][T16497]  </TASK>
[  267.180996][T16497] Kernel Offset: disabled
[  267.182370][T16497] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:44:28  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bd260 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000001715 RDI=0000000000001716 RBP=ffffffff99de9770 RSP=ffffc9000423ed30
R8 =ffff888020ea8237 R9 =1ffff110041d5046 R10=dffffc0000000000 R11=ffffffff854e7100
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e7177 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc43c62c6c0 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c386cac CR3=0000000121b4e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 000000316e616c77
XMM02=62049c748029684f e63708af3bd553cd XMM03=3b1ab198956e9d31 b4776ee078e0ab95
XMM04=8894bac7588d6c79 6dc640ad66edd4ae XMM05=8e927b65664adda2 31ab8894bac7588d
XMM06=6c796dc640ad66ed d4ae3b1ab198956e XMM07=9d31b4776ee078e0 ab9562049c748029
XMM08=684fe63708af3bd5 53cddd752353a2e6 XMM09=0000000000000000 00007fa653612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffff8881082a4338 RCX=cf1d07b35084c900 RDX=0000000000000000
RSI=ffffffff8be32660 RDI=ffffffff8be32620 RBP=ffffc900040ef6a8 RSP=ffffc900040ef508
R8 =ffff8881082a4347 R9 =1ffff11021054868 R10=dffffc0000000000 R11=ffffed1021054869
R12=1ffff11021054866 R13=ffffffff8213bfbe R14=ffff8881082a43a8 R15=ffff888120ef5e30
RIP=ffffffff819d6c4c RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f36374adba8 CR3=0000000121b46000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffff0000 0000000000000000
XMM02=ffff000000000000 ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
