last executing test programs:

1.249653745s ago: executing program 0 (id=1822):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x6, 0x15}]}, {0x0, [0x61, 0x2e, 0x0, 0x61, 0x61]}}, 0x0, 0x2b, 0x0, 0x1, 0x7}, 0x20)
r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14, 0x800)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x2f0c, 0x1, 0x0, 0x401}, {0x1, 0x2, 0x0, 0x9}]}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x38, 0x8, 0x20, 0x0, {0xb}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}]}, 0x28}}, 0x40010)

1.24919736s ago: executing program 0 (id=1823):
r0 = socket(0x2b, 0x1, 0x1)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x1400, r1, 0x8, 0xffffffff, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x10000, 0x27}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x78c, 0x33, @data_frame={@msdu=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x8}, @broadcast, @device_a, @device_b, {0x9, 0xc}, @device_b, @void, @value=@ver_80211n={0x0, 0x7f, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, @random="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"}}, @NL80211_ATTR_FRAME={0x184, 0x33, @data_frame={@msdu=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x6}, @broadcast, @device_b, @device_a, {0x4, 0x80}}, @random="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"}}, @NL80211_ATTR_FRAME={0x1d3, 0x33, @mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xff}, @device_b, @device_b, @from_mac=@device_b, {0x5, 0x81}}, 0x800, @random, 0x24, @val={0x0, 0x6, @random="623fe6224b55"}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x48, 0x2, 0x1, 0x0, {0x0, 0x9, 0x0, 0x3e6, 0x0, 0x1, 0x1, 0x1}, 0x8, 0x1, 0x8}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0xff, 0x69}}, @void, [{0xdd, 0x51, "30a92d5b3b11c08d9bc13b050f952c0354b018503791890b7efa73a2b84e102f3e0e03ff7a6ad51bdf5f35fc909a16e8892694b8dc4c431caeb2a16482cc27f13b85a1e9fe11138701ac9095b7f170036d"}, {0xdd, 0x28, "942445c3c84104dafb116c404d8b3801ad5f5ae3bc9d252053958dd0cf2bc27cfb8bd9e2e393b9be"}, {0xdd, 0xf7, "1b7d9cd3d5802c8d7705ef5cb1895fb698dec762f23949fb9f8850b9b95bce304351b50d6537498fb7e18fb75b5f9924a5cd57bdd9af99ab4f33ad986192bcf6d130b82abbf8cb6c7cbc716aaee6beeb67e4c2e4371a87c64375a1cdb882dc3c1ed245a2f17f833eabfcd2e8fb75ca2982f996fa8506b02357ffd8ac78ba883fbdce73bcb49857575a6b27db7cb1143175da7e61baf4cc2212657c14d49848a0a1244b14b74473ed1a0246b903df9c6fa021e651b725f7d9452ba81c79e1f690e2fc842564a95a944b8864f28b162c960010d9c89d812ecc2eed97c2d404d45b6ec7d9d9dfaaf2bd2d72eacd2f89f15fe87740f52fe5aa"}]}}, @NL80211_ATTR_FRAME={0x516, 0x33, @data_frame={@a_msdu=@type10={{0x0, 0x2, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7f}, @random="b5f3027a469b", @broadcast, @initial, {0x4, 0x9}, "", @value={0x1, 0x0, 0x2, 0x1, 0x3}, @value=@ver_80211n={0x0, 0xd, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x18, 0x33, @ctrl_frame=@bar={{}, {0x9}, @device_b, @device_b, @compressed={{0x0, 0x0, 0x1, 0x0, 0xa}, {0x0, 0x6}}}}, @NL80211_ATTR_FRAME={0x3a0, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @random="35aa1732ba27", {0x3, 0x4}, "", @void, @value=@ver_80211n={0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, @a_msdu=[{@device_a, @device_b, 0xe8, "b069b602b552d3e01818f7c1311a73fb71eb39918b050a007d0da095578798d5930f81afbd57309a473d8b6c53dea408f5d5f336702f1c1604486e14a13a4639635b87c63bfd4c382020f257c6b63784c79b7d989516250060dba063d661dbb99df8e0186ad8c249516ac570a92cc02b2c30482f5c39a5f7ec151766f54efd7459d44bee373b752e9aee778e36e114d75fe94f9adf545eb076ce113d23821883249559a7bd47e284bdbf08e254b52c74578671acb41787a35525534e4e266b83c05e0dbcf870d38b7957b7993702d4eeedef6e19b458f4c2b41d5e3228e976adb4e698df961beefe"}, {@broadcast, @device_b, 0xe3, "9aa66ceb8fd191714f7012703747d518d956521c4149da02dfa19dbf875d1ddfff8d44a0ccc992f5c0616a3497dad263e298356f1cea3660155211ff099b5961e5a0ec37c30dd28a89443445ad56285b234e2662b90a89259a50503b0311b8cc8a0e277441053e9e1b3517e7bbbb70cb43f113bce106af68f0210cf0556c604b2ee0e3cd07842d3196b0adf75ef2f24c9571272a9aac96429a243166d5d27e6c33e54c4b99c7240b0007402fee6b51839337c434a34693d0a7259ab928647eab5e798d267e1061c9860f2a15459ba7ace7f2e5238201810b40c043474ab52f3709684b"}, {@device_a, @device_a, 0xa4, "7b0bdae31f869b148bb5d6350d90482b70bd8638dbe63d613b7d1d02f72f55fc24eda6af1c08d63af4808a8bd1829fbf90d5f69289cd3ddb898ac9bad8e5aefd732999ddc131ddd41422250d3d0667210c0ec28586bfe6aeec1572c100579364f5057f00f70ac3375a32775dd9e04dde42278acce07b586e5b164b9bf1b380e6dc84cb37f3ed5170f34e28f6d7def708f3f1ef152fffb27ca1e5b6ec84a81a983b6efa22"}, {@broadcast, @broadcast, 0xd2, "c7b676dc8834ea89c74af435e95f462b3a7a1cff8de30772b73b35af44e71fa67a1eafa7208d60094d3f604fe1c31839cbbc8bd021df28e7cd25fa95c8c8540d3a322a1e5f28cca248587b800b0c50d9a81d1154ca30de44e6b82f5d621c248607dca500f262dcb680087d0dfd294b6dc9ad95f7dfe30bc51b37aea9f77a85bd95a0278c89fdb96ccf2a6ddc11b88faaacfee257f44c74a75d99e7af218b2aaff64d7b37f36af6e4fd245718e8770b17f713fa2c7481d664038539a41e18d7d68c2075e7f072fa11f47d330965a6d2009e63"}]}}]}, 0x1400}, 0x1, 0x0, 0x0, 0x1}, 0x850)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0xfffffe2f)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x80000001, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)

818.438906ms ago: executing program 1 (id=1833):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) (async)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x440, 0x4)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10)

818.083777ms ago: executing program 1 (id=1834):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x7}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xba}]}, &(0x7f0000000100)='GPL\x00', 0x4}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)

817.651197ms ago: executing program 1 (id=1835):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000180)=0x17, 0x4)

761.981391ms ago: executing program 1 (id=1836):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0x0, 0x4}, 0x3) (async)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0x0, 0x4}, 0x3)
close(r3)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
getsockopt(r1, 0x5, 0x4927d52a, &(0x7f0000000280)=""/4096, &(0x7f0000000140)=0x1000)
bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r4, 0x0, {0x1, 0xff, 0x4}}, 0x18)
sendmsg$can_j1939(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x1d, r4, 0x2, {0x1, 0x1, 0x1}, 0x1}, 0x18, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x20004000)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'erspan0\x00', r4, 0x7, 0x8000, 0x0, 0xac9, {{0xf, 0x4, 0x2, 0x0, 0x3c, 0x68, 0x0, 0xf8, 0x29, 0x0, @empty, @local, {[@ssrr={0x89, 0x1b, 0x45, [@dev={0xac, 0x14, 0x14, 0x16}, @multicast2, @private=0xa010101, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @generic={0x44, 0xc, "b04fc8f00e2b3a5f4415"}, @noop]}}}}})
sendmsg$nl_generic(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x14, 0x38, 0x1, 0x70bd2c, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804)

701.029997ms ago: executing program 1 (id=1837):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0x5, 0x7})

692.073043ms ago: executing program 1 (id=1838):
socket$nl_route(0x10, 0x3, 0x0)
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r1], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4)
preadv(r6, &(0x7f0000000100), 0xa, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x0, 0x7ffffffc}, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014})
r7 = socket$netlink(0x10, 0x3, 0x6)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='rxrpc_rx_ack\x00', r8, 0x0, 0xfffffffffffffffd}, 0x18)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="0100000000000000000001000000050005004000000005000600070000000800030001000000"], 0x2c}}, 0x0)
r11 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r11, &(0x7f0000000100)={0xa, 0x4e1f, 0x2, @empty, 0x10001}, 0x1c)
writev(r7, 0x0, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0500000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0016000900460f78e025a1b3d4eba8c5ff5fe80d000073183ecf012404beaaab8752dc38dfb6000078290000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r12, @ANYBLOB="00000000004d2df5cd080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000006fdf8067feed6fd9f8c5156c0f3bc3c52bac12f92c212cc9957653badcb6dbb2d0dbd6f876b5"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

392.919266ms ago: executing program 0 (id=1845):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000240)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x1c, r2, 0xc01, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1}, {0x0, 0x400, 0x2be, 0x4f19}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8)
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xe, 0x10}, {0xd}, {0xe, 0x7}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xd}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
shutdown(r7, 0x0)
setsockopt$sock_int(r7, 0x1, 0x2a, &(0x7f0000000000)=0xf24d, 0x4)
recvmmsg(r7, &(0x7f0000008880), 0x45b, 0x2, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000280012800b0001006d61637365630000180002800c0004000300000100c2800008000500ffffffff08000500", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)

320.376191ms ago: executing program 0 (id=1847):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='cdg\x00', 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x10, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) (async)
unshare(0x2040400)
pipe(&(0x7f00000045c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000015c0)='5', 0x1}], 0x1, 0x7)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6)

317.86637ms ago: executing program 0 (id=1849):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x7}, 0x1c)
connect$inet6(r2, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r6=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r5, @ANYBLOB="05000000000000000000010000000600060000000000c40c0880e400008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100000000000000000000000000000000000000000000000000000000000000000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c0800030000000000240002005da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e0003008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0600050000000000d002098058000080060001000200000008000200ac1e00010500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff05000300000000007c000080060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200000000000500030000000000dc000080060001000a0000001400020000000000000000000000ffffac1414aa05000300000000000600010002000000080002000000000005000300000000000600010002000000080002007f0000010500030000000000060001000200000008000200000000000500030000000000060001000200000008000200e00000010500030000000000060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1e0001050003000000000094000080060001000a00000014000200fc0200000000000000000000000000000500030000000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000200000008000200e00000010500030000000000060001000200000008000200ac1414bb0500030000000000060001000200000008000200ffffffff050003000000000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200ff020000000000000000000000000001050003000000000064000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a5499400008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c080003000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002000000000000000000000000000000d807008000030980f4000080060001000a00000014000200000000000000000000000000000000000500030000000000060001000a00000014000200fc0000000000000000000000000000000500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200ac1e00010500030000000000060001000200000008000200e000000105000300000000000600010002000000080002007f0000010500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000a00000014000200fc01000000000000000000000000000005000300000000004c000080060001000200000008000200ac1414bb0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414bb05000300000000000c010080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300000000000600010002000000080002000000000005000300000000000600010002000000080002007f0000010500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e00000010500030000000000060001000a00000014000200fc0100000000000000000000000000000500030000000000940000800600010002000000080002000000000005000300000000000600010002000000080002000000000005000300000000000600010002000000080002007f0000010500030000000000060001000200000008000200e00000020500030000000000060001000200000008000200ac1414000500030000000000060001000200000008000200ac14140005000300000000001c000080060001000200000008000200ffffffff0500030000000000080003000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221d0004000a0000000000000000000000000000000000ffffac1e0001000000001c04098094000080060001000a0000001400020000000000000000000000ffffac1414bb0500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fe880000000000000000000000000001050003000000000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414bb0500030000000000060001000a0000001400020000000000000000000000ffffe00000020500030000000000ac000080060001000200000008000200000000000500030000000000060001000a00000014000200fe80000000000000000000000000000005000300000000000600010002000000080002007f0000010500030000000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200e0000001050003000000000064000080060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414000500030000000000f4000080060001000200000008000200000000000500030000000000060001000a00000014000200200100000000000000000000000000000500030000000000060001000a00000014000200fc0200000000000000000000000000000500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000200000008000200ac1414aa0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414000500030000000000060001000a00000014000200200100000000000000000000000000020500030000000000a0000080060001000a00000014000200fc0000000000000000000000000000000500030000000000060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000200000008000200ac14140005000300000000007c000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000000500030000000000060001000200000008000200e00000010500030000000000060001000a00000014000200fe8000000000000000000000000000bb050003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b2400020055fbc2635cc801d67c589cc98f3cf65074dffe0886750dec83be49fbf628e1dc240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e0c0000800800030000000000060006000000000008000100", @ANYRES32=r6, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r7=>0x0})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000400), &(0x7f00000004c0), 0x2}, 0x20)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e21, 0x4000000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2}, 0x1c)
r9 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r9, &(0x7f0000001200)=[{&(0x7f0000000080)}], 0x1)
socket$key(0xf, 0x3, 0x2)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, 0x0, 0x20000000)
unshare(0x22020400)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000c00)={0x2, {{0x2, 0x0, @rand_addr=0x64010101}}, 0x0, 0xa, [{{0x2, 0x2, @remote}}, {{0x2, 0x0, @local}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x0, @loopback}}, {{0x2, 0x80, @empty}}, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x2, @loopback}}, {{0x2, 0x4e22, @remote}}]}, 0x590)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@ip_tos_int={{0x14}}, @ip_retopts={{0x10, 0x110, 0xb}}], 0x28}, 0x0)
unshare(0x24020400)
r10 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_udp_int(r10, 0x11, 0x0, &(0x7f0000000300)=0x6, 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000027c0)=ANY=[@ANYBLOB="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"], 0x13c0}}, 0x0)

251.377835ms ago: executing program 2 (id=1850):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000000)="0a000000010001", 0x7)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r4, 0x400448cc, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x2)
sendmsg$nl_generic(r2, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x14, 0x38, 0x1, 0x70bd2c, 0x25dfdbfd, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x8805)

250.636263ms ago: executing program 0 (id=1851):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000100)=0xbdda, 0x4)
getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000080))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg(r2, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1000000000000000140100000200000042ff426a0fb78dcab3c20d95c1c949341c2c3b392b42982d9d4c33fa55b113d6399939c635c063ae9a4be4c49ba8d9e744fa025c673e2fe03515f3d387915d5b64eeb85fdff258abeb4ae9a0dd11fb237ffe2dd8fd70d701a62bf29ac0f1417cf3e834b6e8710c04ca8c8076a2c7e5dd5e6f018691d79d7f76f31366fbadd7a0826c07da869e968cec5be8de0e5858280aeb004181694e61ee29bab80d3e5a450a3152e3d7088d174c2a5e0d8f582f725c651cabe595"], 0x10}, 0x0)
socket$unix(0x1, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c)
getsockopt$inet6_int(r4, 0x29, 0x10, 0x0, &(0x7f0000000200))
r5 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r5, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @remote, 0x9}, 0x1c)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000007c0)="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", 0xff)
sendmsg(r5, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r6, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10)
r7 = openat$cgroup_ro(r1, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r7, &(0x7f0000000080)={0x80000002})
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000180)={<r8=>r6, 0xffffffffffffffff, 0x4, 0x1})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r8)
write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a)
sendfile(r6, r7, 0x0, 0xffffffff000)
recvmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x40000033, 0x0)

170.253916ms ago: executing program 2 (id=1852):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10)
getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x4, 0x0, 0x8, 0x3e, 0x9, 0xe8, 0xa0, 0x4, 0x3, 0x0, 0x3, 0x6, 0x1}, 0xe)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000140)={0x0, 'macsec0\x00', {0x2}, 0xf})
setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000240)={r4, 0x7}, 0x8)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES64=r6, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES32=r6], 0x14}, 0x1, 0x0, 0x0, 0x340000c0}, 0x11)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$inet6(0xa, 0x805, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) (async)
getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
shutdown(r3, 0x0) (async)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x4, 0x0, 0x8, 0x3e, 0x9, 0xe8, 0xa0, 0x4, 0x3, 0x0, 0x3, 0x6, 0x1}, 0xe) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000140)={0x0, 'macsec0\x00', {0x2}, 0xf}) (async)
setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000240)={r4, 0x7}, 0x8) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r6, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES64=r6, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES32=r6], 0x14}, 0x1, 0x0, 0x0, 0x340000c0}, 0x11) (async)

169.342331ms ago: executing program 2 (id=1853):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703010000000000000000000000040014000d000a000d0000009ee517d34460bc24eab5561662251e0900949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4000040)
socket(0xa, 0x3, 0x3a) (async)
socket(0xa, 0x3, 0x3a)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) (async)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x80000)
accept4(r5, 0x0, 0x0, 0x0) (async)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$inet6(r6, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x500, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000)
r7 = socket$netlink(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4) (async)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c000280050001000000"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894)
socket(0x10, 0x803, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000) (async)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x2a, 0x0, 0x1}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x2a, 0x0, 0x1}, 0x28)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, 0x0, 0x0) (async)
sendmsg$kcm(r8, 0x0, 0x0)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)

61.692065ms ago: executing program 2 (id=1854):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) (async)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async, rerun: 32)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async, rerun: 32)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x30, 0x0, &(0x7f0000000040))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) (async, rerun: 64)
r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
r3 = socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 64)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="200000002d00012026bd7000fcdbdf25040000000c001a000900000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x2406c089}, 0x20000000) (async)
getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000007000020000000000000000000009500"/32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100007}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) (async, rerun: 32)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000003800010310bd7000ffdbdf250d"], 0x14}, 0x1, 0x0, 0x0, 0x8004000}, 0x40) (async, rerun: 32)
r7 = socket(0xa, 0x3, 0x87)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bond0\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@local, 0x40, r8})
ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x8936, &(0x7f0000000000))
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
r10 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r10, 0x65, 0x4, 0x0, 0x0) (async)
unshare(0x22020400) (async, rerun: 64)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000000)={r9, 0x0, 0x0}, 0x20) (async, rerun: 64)
sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001800090400000000fddbdf250a0000000000f9240000049c03071e0001000000080017004e234e236c7421a965dc0e558f6d7c8371d432241ed2927f681ea5c14b3603016db3423688484e340d0cd7e8295fef9e016c158d36284cf21c12f77a9d151ad2390913c0c0d84df8cf74e33a7f1612023b8768bda48abebd1bb83084ce74d39f3007c4e200005538142cf3d3ddb47d9a82b3bb753d6a9a4c04cf43a63c555b6f7641fadcbb62c08278902322cc1c8baa1daef79578709657ae26b67205a75c2149be4901a2ed3a493f80230a39000000000000"], 0x2c}}, 0x0) (async)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000a4000000000000000000000053330587faca9eac51eedf3b4608a40f3252a2f6b2f37af2e9c247bbff579e25", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b019f0000000000b7080000959700007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000c400000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
syz_emit_ethernet(0xa2, &(0x7f00000006c0)=ANY=[], 0x0) (async, rerun: 32)
sendmsg$NL80211_CMD_SET_CHANNEL(r7, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="08f12cbd7000ffdbdf2541000000070000000800a000000005001801170000120800270002000000050019010b000800000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x2000}, 0x40001)

2.042482ms ago: executing program 2 (id=1855):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cubic\x00', 0x6)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x10, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6)

0s ago: executing program 2 (id=1856):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32)
close(0x4) (async, rerun: 32)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, 0x0)
unshare(0x6a040000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) (async)
socket(0x8, 0x3, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006911bc00000000008510000002000000850800008b00000095000000000000009500a50500000000699b43160164f7d8c18db44ce3cf122c2d74e3c1b081c16865a27cd49574c26244542623f02a5e19f2aba86f807a3b25c228c3cae180920fc8dba13064e95243659a6a2355e361a2d17b47c4f7044cc168d2a93340ecbce95e922dcf4259932d2d25198c032df2700688ffbbf0d97ccecea92abf074d8dd932426e7dd470472a9b80bfa515d611ef8e7b18b5bcfc5f7b3bcf89bd8b88c9351c1ab6f92bf13a5bc2c7d1fd1c1b148404f8d416483603c238ef00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) (async)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000000c0)=0x41004, 0x4) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000040)=0xffbffffc, 0x4)
setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f0000000000)=0x6, 0x4) (async)
recvmmsg(r4, &(0x7f0000002900)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x45833af92e4b39ff, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0xfffffffffffffe96)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:27324' (ED25519) to the list of known hosts.
syzkaller login: [   48.132353][ T5839] cgroup: Unknown subsys name 'net'
[   48.237782][ T5839] cgroup: Unknown subsys name 'cpuset'
[   48.241706][ T5839] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.176079][ T5839] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.895882][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.899204][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.902410][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.916298][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.920120][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.945994][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.949287][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.951942][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.954969][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.957952][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.967587][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.975215][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.978551][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.981649][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.984568][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.087760][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   54.118198][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   54.144914][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.147699][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.150081][ T5852] bridge_slave_0: entered allmulticast mode
[   54.152634][ T5852] bridge_slave_0: entered promiscuous mode
[   54.155945][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.158366][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.160772][ T5852] bridge_slave_1: entered allmulticast mode
[   54.163234][ T5852] bridge_slave_1: entered promiscuous mode
[   54.203822][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.208805][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.263826][ T5852] team0: Port device team_slave_0 added
[   54.267152][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.270179][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.273229][ T5847] bridge_slave_0: entered allmulticast mode
[   54.276876][ T5847] bridge_slave_0: entered promiscuous mode
[   54.281274][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.284097][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.287939][ T5847] bridge_slave_1: entered allmulticast mode
[   54.291382][ T5847] bridge_slave_1: entered promiscuous mode
[   54.299538][ T5852] team0: Port device team_slave_1 added
[   54.339866][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.344178][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.347665][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.358345][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.365520][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.369651][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.380159][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.387344][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.396122][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   54.433909][ T5847] team0: Port device team_slave_0 added
[   54.453387][ T5847] team0: Port device team_slave_1 added
[   54.459262][ T5852] hsr_slave_0: entered promiscuous mode
[   54.462525][ T5852] hsr_slave_1: entered promiscuous mode
[   54.509336][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.512277][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.522692][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.527665][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.529859][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.538996][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.552388][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.555219][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.558657][ T5855] bridge_slave_0: entered allmulticast mode
[   54.562160][ T5855] bridge_slave_0: entered promiscuous mode
[   54.587014][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.590019][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.593126][ T5855] bridge_slave_1: entered allmulticast mode
[   54.597456][ T5855] bridge_slave_1: entered promiscuous mode
[   54.621471][ T5847] hsr_slave_0: entered promiscuous mode
[   54.624068][ T5847] hsr_slave_1: entered promiscuous mode
[   54.627155][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   54.629816][ T5847] Cannot create hsr debugfs directory
[   54.649520][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.670319][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.714258][ T5855] team0: Port device team_slave_0 added
[   54.727324][ T5855] team0: Port device team_slave_1 added
[   54.763855][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.767649][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.777848][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.788779][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.791028][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.799691][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.860881][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.869281][ T5855] hsr_slave_0: entered promiscuous mode
[   54.872654][ T5855] hsr_slave_1: entered promiscuous mode
[   54.875612][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   54.879020][ T5855] Cannot create hsr debugfs directory
[   54.886436][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.893589][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.905481][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.969703][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.976659][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.997211][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.012093][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.023354][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.026490][ T5852] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.029567][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.031932][ T5852] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.078902][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.090125][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.095491][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.100692][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.105000][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.109618][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.184641][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.215394][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   55.221291][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.228680][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.231049][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.239850][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.242802][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.250636][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.263268][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   55.278289][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   55.290125][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.293105][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.307432][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.310453][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.314867][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.318085][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.334081][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.337273][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.475608][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.522040][ T5852] veth0_vlan: entered promiscuous mode
[   55.530680][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.535248][ T5852] veth1_vlan: entered promiscuous mode
[   55.539917][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.570842][ T5852] veth0_macvtap: entered promiscuous mode
[   55.581701][ T5852] veth1_macvtap: entered promiscuous mode
[   55.607465][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.617449][ T5847] veth0_vlan: entered promiscuous mode
[   55.622274][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.632660][ T5873] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.639775][ T5873] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.644628][ T5855] veth0_vlan: entered promiscuous mode
[   55.650140][ T5847] veth1_vlan: entered promiscuous mode
[   55.654187][ T5873] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.659801][ T5873] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.683887][ T5855] veth1_vlan: entered promiscuous mode
[   55.704254][ T5847] veth0_macvtap: entered promiscuous mode
[   55.723000][ T5847] veth1_macvtap: entered promiscuous mode
[   55.743497][ T5855] veth0_macvtap: entered promiscuous mode
[   55.749033][ T5855] veth1_macvtap: entered promiscuous mode
[   55.757352][  T957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.760056][  T957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.763672][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.773610][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.780012][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.785181][ T5859] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.796762][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.799746][ T5859] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.811054][ T5859] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.814076][ T5859] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.816219][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.819919][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.832142][ T5859] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.844942][ T5859] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.849504][ T5859] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.859077][ T5859] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.877831][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.922990][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.926655][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.949546][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.952439][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.958571][ T5912] netlink: 'syz.1.2': attribute type 26 has an invalid length.
[   55.969160][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.975951][ T5238] Bluetooth: hci1: command tx timeout
[   55.978144][ T5238] Bluetooth: hci0: command tx timeout
[   55.981632][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.984679][  T957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.989001][  T957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.055998][ T5238] Bluetooth: hci2: command tx timeout
[   56.073699][ T5918] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET)
[   56.088878][ T5918] syzkaller1: entered promiscuous mode
[   56.090923][ T5918] syzkaller1: entered allmulticast mode
[   57.375912][ T5983] netlink: 60 bytes leftover after parsing attributes in process `syz.2.22'.
[   57.449769][ T5988] _Z`Ԁ@: entered promiscuous mode
[   57.457378][ T5989] netlink: 32 bytes leftover after parsing attributes in process `syz.0.24'.
[   57.457390][ T5988] netlink: 32 bytes leftover after parsing attributes in process `syz.0.24'.
[   57.572677][ T5998] Zero length message leads to an empty skb
[   57.650389][ T6004] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   57.697788][ T6008] netlink: 828 bytes leftover after parsing attributes in process `syz.0.30'.
[   57.789777][ T6018] netlink: 88 bytes leftover after parsing attributes in process `syz.1.35'.
[   57.841665][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'.
[   57.920406][ T6040] tun0: tun_chr_ioctl cmd 1074025675
[   57.922682][ T6040] tun0: persist enabled
[   57.924716][ T6040] tun0: tun_chr_ioctl cmd 1074025675
[   57.927228][ T6040] tun0: persist enabled
[   57.931500][ T6040] bridge0: entered promiscuous mode
[   57.933387][ T6040] vlan2: entered promiscuous mode
[   57.940984][ T6040] bridge0: port 3(vlan2) entered blocking state
[   57.943542][ T6040] bridge0: port 3(vlan2) entered disabled state
[   57.946142][ T6040] vlan2: entered allmulticast mode
[   57.947800][ T6040] bridge0: entered allmulticast mode
[   57.950764][ T6040] vlan2: left allmulticast mode
[   57.953799][ T6040] bridge0: left allmulticast mode
[   58.008260][ T6055] warning: `syz.1.44' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.055838][ T5238] Bluetooth: hci0: command tx timeout
[   58.058245][ T5848] Bluetooth: hci1: command tx timeout
[   58.108090][ T6066] geneve2: entered promiscuous mode
[   58.136828][ T5238] Bluetooth: hci2: command tx timeout
[   58.164589][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.52'.
[   58.263477][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.56'.
[   58.268692][ T6097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.56'.
[   58.563384][ T6130] netlink: 'syz.2.64': attribute type 4 has an invalid length.
[   58.567573][ T6130] netlink: 17 bytes leftover after parsing attributes in process `syz.2.64'.
[   59.441706][ T6159] netlink: 'syz.1.75': attribute type 4 has an invalid length.
[   59.448037][ T6159] netlink: 'syz.1.75': attribute type 4 has an invalid length.
[   59.535536][ T6164] netlink: 'syz.1.76': attribute type 1 has an invalid length.
[   59.572007][ T6164] bond1: (slave geneve2): making interface the new active one
[   59.586970][ T6164] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   59.591183][ T5877] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[   59.596625][ T5877] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[   59.602334][ T5877] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[   59.605375][ T5877] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[   59.852000][ T6198] tun1: tun_chr_ioctl cmd 1074025675
[   59.853985][ T6198] tun1: persist enabled
[   59.857223][ T6198] tun1: tun_chr_ioctl cmd 1074025675
[   59.859144][ T6198] tun1: persist enabled
[   60.087085][ T6219] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   60.136064][ T5238] Bluetooth: hci0: command tx timeout
[   60.136483][ T5848] Bluetooth: hci1: command tx timeout
[   60.216975][ T5848] Bluetooth: hci2: command tx timeout
[   60.607840][ T6250] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.611343][ T6250] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[   60.658305][ T6250] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.662860][ T6250] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[   60.725602][ T6250] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.729619][ T6250] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[   60.782054][ T6250] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.785604][ T6250] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[   60.868914][ T5877] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[   60.871982][ T5877] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   60.885151][ T5877] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[   60.888702][ T5877] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   60.900730][ T5877] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[   60.903812][ T5877] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   60.912619][ T5877] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[   60.915393][ T5877] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   61.008250][ T6261] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   61.123487][ T6273] tun0: tun_chr_ioctl cmd 1074025675
[   61.125499][ T6273] tun0: persist enabled
[   61.133612][ T6273] tun0: tun_chr_ioctl cmd 1074025675
[   61.138642][ T6273] tun0: persist enabled
[   61.183638][ T6281] tun1: tun_chr_ioctl cmd 1074025675
[   61.185861][ T6281] tun1: persist enabled
[   61.190138][ T6281] tun1: tun_chr_ioctl cmd 1074025675
[   61.192254][ T6281] tun1: persist enabled
[   61.528530][ T6315] syzkaller0: entered promiscuous mode
[   61.530834][ T6315] syzkaller0: entered allmulticast mode
[   61.546639][ T6315] tipc: Started in network mode
[   61.548583][ T6315] tipc: Node identity , cluster identity 4711
[   61.551125][ T6315] tipc: Failed to obtain node identity
[   61.553273][ T6315] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   62.215964][ T5848] Bluetooth: hci1: command tx timeout
[   62.216946][ T5238] Bluetooth: hci0: command tx timeout
[   62.295887][ T5238] Bluetooth: hci2: command tx timeout
[   62.926476][ T6366] __nla_validate_parse: 19 callbacks suppressed
[   62.926491][ T6366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.135'.
[   62.944283][ T6366] tun2: tun_chr_ioctl cmd 1074025675
[   62.954922][ T6366] tun2: persist enabled
[   63.012483][ T6369] tun2: tun_chr_ioctl cmd 1074025675
[   63.014610][ T6369] tun2: persist enabled
[   63.186554][ T6377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.137'.
[   63.818567][ T6387] openvswitch: netlink: Message has 4 unknown bytes.
[   63.821212][ T6387] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.872049][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.142'.
[   64.122300][ T6404] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.219357][ T6404] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.272136][ T6404] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.283077][ T6416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'.
[   64.289997][ T6416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.149'.
[   64.322666][ T6404] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.560146][ T5877] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.574604][ T5877] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.584049][ T5877] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.592050][ T5877] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.612426][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.156'.
[   64.623204][ T6440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.156'.
[   65.004344][ T6465] netlink: 76 bytes leftover after parsing attributes in process `syz.1.163'.
[   65.199471][ T6474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.166'.
[   65.234321][ T6477] smc: net device bond0 applied user defined pnetid SYZ2
[   65.253380][ T6479] veth1_vlan: mtu less than device minimum
[   65.330507][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.169'.
[   65.414757][ T6494] netlink: zone id is out of range
[   65.417532][ T6494] netlink: zone id is out of range
[   65.419284][ T6494] netlink: zone id is out of range
[   65.427455][ T6494] netlink: zone id is out of range
[   65.429141][ T6494] netlink: zone id is out of range
[   65.430916][ T6494] netlink: zone id is out of range
[   65.432656][ T6494] netlink: zone id is out of range
[   66.609770][ T6520] tun3: tun_chr_ioctl cmd 1074025675
[   66.611689][ T6520] tun3: persist enabled
[   66.613233][ T6520] tun3: tun_chr_ioctl cmd 1074025675
[   66.615033][ T6520] tun3: persist enabled
[   66.960692][ T6559] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   67.017221][ T6564] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.112660][ T6569] netlink: 'syz.1.195': attribute type 1 has an invalid length.
[   67.123342][ T6569] 8021q: adding VLAN 0 to HW filter on device bond2
[   67.133096][ T6569] 8021q: adding VLAN 0 to HW filter on device bond2
[   67.135602][ T6569] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   67.141178][ T6569] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   67.185256][ T6571] veth3: entered promiscuous mode
[   67.191248][ T6569] erspan0: entered allmulticast mode
[   67.269204][ T6577] bridge_slave_0: left allmulticast mode
[   67.271710][ T6577] bridge_slave_0: left promiscuous mode
[   67.274174][ T6577] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.280348][ T6577] bridge_slave_1: left allmulticast mode
[   67.282472][ T6577] bridge_slave_1: left promiscuous mode
[   67.284993][ T6577] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.291698][ T6577] bond0: (slave bond_slave_0): Releasing backup interface
[   67.296270][ T6577] bond0: (slave bond_slave_1): Releasing backup interface
[   67.302408][ T6577] team0: Port device team_slave_0 removed
[   67.308697][ T6577] team0: Port device team_slave_1 removed
[   67.311109][ T6577] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.313992][ T6577] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.318412][ T6577] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.320942][ T6577] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.329185][ T6577] bond1: (slave geneve2): Releasing active interface
[   67.338323][ T5873] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[   67.340961][ T5873] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[   67.343916][ T5873] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[   67.348586][ T5873] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[   68.324083][ T6643] __nla_validate_parse: 76 callbacks suppressed
[   68.324105][ T6643] netlink: 100 bytes leftover after parsing attributes in process `syz.2.214'.
[   68.339053][ T6643] netlink: 100 bytes leftover after parsing attributes in process `syz.2.214'.
[   68.409562][ T6650] IPv6: sit1: Disabled Multicast RS
[   68.461377][ T6659] netlink: 16 bytes leftover after parsing attributes in process `syz.1.219'.
[   68.466032][ T6659] netlink: 16 bytes leftover after parsing attributes in process `syz.1.219'.
[   68.562000][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.220'.
[   68.646508][ T6670] netlink: 180 bytes leftover after parsing attributes in process `syz.1.224'.
[   68.679559][ T6672] netlink: 'syz.0.225': attribute type 21 has an invalid length.
[   68.682549][ T6672] netlink: 128 bytes leftover after parsing attributes in process `syz.0.225'.
[   68.695032][ T6672] netlink: 3 bytes leftover after parsing attributes in process `syz.0.225'.
[   68.795010][ T6687] netlink: 20 bytes leftover after parsing attributes in process `syz.2.230'.
[   68.816992][ T6679] tipc: Started in network mode
[   68.818650][ T6679] tipc: Node identity b6e815c7894b, cluster identity 4711
[   68.821371][ T6679] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.824493][ T6687] netlink: 'syz.2.230': attribute type 3 has an invalid length.
[   68.829356][ T6687] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.230'.
[   68.829575][ T6678] tipc: Resetting bearer <eth:syzkaller0>
[   68.871914][ T6678] tipc: Disabling bearer <eth:syzkaller0>
[   69.077747][ T6711] ip6gretap0: entered promiscuous mode
[   70.130598][ T6790] tun4: tun_chr_ioctl cmd 1074025675
[   70.132441][ T6790] tun4: persist enabled
[   70.135036][ T6790] tun4: tun_chr_ioctl cmd 1074025675
[   70.139024][ T6790] tun4: persist enabled
[   70.141954][ T6791] tun4: tun_chr_ioctl cmd 1074025675
[   70.144733][ T6791] tun4: persist enabled
[   70.180358][ T6797] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   70.252258][ T6797] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   70.348572][ T6797] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   70.381604][ T6797] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   70.459582][ T5873] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.471542][ T5873] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.480056][ T5873] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.490015][ T5873] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.546040][ T6813] tun5: tun_chr_ioctl cmd 1074025675
[   70.548417][ T6813] tun5: persist enabled
[   70.561420][ T6813] tun5: tun_chr_ioctl cmd 1074025675
[   70.563840][ T6813] tun5: persist enabled
[   70.810692][ T6829] netlink: 'syz.0.271': attribute type 9 has an invalid length.
[   71.177657][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   71.464475][ T6885] tun6: tun_chr_ioctl cmd 1074025675
[   71.466538][ T6885] tun6: persist enabled
[   71.468481][ T6885] tun6: tun_chr_ioctl cmd 1074025675
[   71.470378][ T6885] tun6: persist enabled
[   71.989927][ T6901] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[   72.004755][ T6901] net_ratelimit: 8 callbacks suppressed
[   72.004775][ T6901] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   72.293092][ T6915] netlink: 'syz.2.299': attribute type 4 has an invalid length.
[   72.313289][ T6915] netlink: 'syz.2.299': attribute type 4 has an invalid length.
[   72.324617][ T6917] syzkaller0: entered promiscuous mode
[   72.335888][ T6917] syzkaller0: entered allmulticast mode
[   73.392325][ T6992] netlink: 'syz.0.319': attribute type 1 has an invalid length.
[   73.406768][ T6992] 8021q: adding VLAN 0 to HW filter on device bond1
[   73.429975][ T6992] vlan2: entered promiscuous mode
[   73.432162][ T6992] bond1: entered promiscuous mode
[   73.434630][ T6992] vlan2: entered allmulticast mode
[   73.436809][ T6992] bond1: entered allmulticast mode
[   73.446194][ T6992] bond1: (slave gretap1): making interface the new active one
[   73.448974][ T6992] gretap1: entered promiscuous mode
[   73.451111][ T6992] gretap1: entered allmulticast mode
[   73.454224][ T6992] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   73.510042][ T7000] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.618914][ T7012] __nla_validate_parse: 30 callbacks suppressed
[   73.618936][ T7012] netlink: 88 bytes leftover after parsing attributes in process `syz.1.327'.
[   73.650393][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.325'.
[   73.662763][ T7009] netlink: 16 bytes leftover after parsing attributes in process `syz.0.325'.
[   74.054464][ T7024] netlink: 36 bytes leftover after parsing attributes in process `syz.1.332'.
[   74.058626][ T7025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.331'.
[   74.093262][ T7029] netlink: 20 bytes leftover after parsing attributes in process `syz.1.335'.
[   74.098860][ T7029] netlink: 20 bytes leftover after parsing attributes in process `syz.1.335'.
[   74.102216][ T7029] netlink: 20 bytes leftover after parsing attributes in process `syz.1.335'.
[   74.105585][ T7029] netlink: 20 bytes leftover after parsing attributes in process `syz.1.335'.
[   74.109430][ T7029] netlink: 20 bytes leftover after parsing attributes in process `syz.1.335'.
[   74.213330][ T7046] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   74.570879][ T7077] tipc: Started in network mode
[   74.572564][ T7077] tipc: Node identity ac14142f, cluster identity 4711
[   74.585169][ T7077] tipc: New replicast peer: 0.0.0.0
[   74.587774][ T7077] tipc: Enabled bearer <udp:syz2>, priority 10
[   74.590445][ T7079] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[   74.591352][ T7077] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[   74.808394][ T7095] tun0: tun_chr_ioctl cmd 1074025675
[   74.811421][ T7095] tun0: persist enabled
[   74.813644][ T7096] tun0: tun_chr_ioctl cmd 1074025675
[   74.816159][ T7096] tun0: persist enabled
[   75.218918][ T7120] syzkaller0: entered promiscuous mode
[   75.220808][ T7120] syzkaller0: entered allmulticast mode
[   75.227797][ T7119] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.267487][ T7120] tipc: Resetting bearer <eth:syzkaller0>
[   75.279903][ T7120] tipc: Disabling bearer <eth:syzkaller0>
[   75.587469][ T7140] netlink: 'syz.2.366': attribute type 12 has an invalid length.
[   75.632093][ T7142] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   75.765312][ T7141] delete_channel: no stack
[   76.266394][   T10] tipc: Node number set to 2886997039
[   76.774248][ T7219] netlink: 'syz.0.388': attribute type 74 has an invalid length.
[   76.919250][ T7222] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.923102][ T7222] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.982714][ T7222] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.991349][ T7222] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.060489][ T7222] geneve2: left promiscuous mode
[   77.070456][ T7222] vlan2: left promiscuous mode
[   77.072557][ T7222] bond1: left promiscuous mode
[   77.074152][ T7222] gretap1: left promiscuous mode
[   77.082769][ T7222] vlan2: left allmulticast mode
[   77.084549][ T7222] bond1: left allmulticast mode
[   77.087134][ T7222] gretap1: left allmulticast mode
[   77.112252][ T5877] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.123870][ T5877] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.131108][ T5877] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.139948][ T5877] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.943980][ T7275] netlink: 'syz.0.404': attribute type 1 has an invalid length.
[   77.956696][ T7275] netlink: 'syz.0.404': attribute type 1 has an invalid length.
[   77.961721][ T7275] netlink: 'syz.0.404': attribute type 1 has an invalid length.
[   77.964236][ T7275] netlink: 'syz.0.404': attribute type 1 has an invalid length.
[   77.969549][ T7275] netlink: 'syz.0.404': attribute type 1 has an invalid length.
[   77.974240][ T7275] netlink: 'syz.0.404': attribute type 1 has an invalid length.
[   77.980712][ T7275] netlink: 'syz.0.404': attribute type 1 has an invalid length.
[   77.984129][ T7275] netlink: 'syz.0.404': attribute type 1 has an invalid length.
[   77.989162][ T7275] netlink: 'syz.0.404': attribute type 1 has an invalid length.
[   77.993008][ T7275] netlink: 'syz.0.404': attribute type 1 has an invalid length.
[   78.204407][ T7291] syzkaller0: entered allmulticast mode
[   78.237079][ T7291] syzkaller0 (unregistering): left allmulticast mode
[   78.642453][ T7307] tun2: tun_chr_ioctl cmd 1074025675
[   78.645382][ T7307] tun2: persist enabled
[   78.649483][ T7307] tun2: tun_chr_ioctl cmd 1074025675
[   78.652016][ T7307] tun2: persist enabled
[   78.701715][ T7314] __nla_validate_parse: 28 callbacks suppressed
[   78.701736][ T7314] netlink: 32 bytes leftover after parsing attributes in process `syz.1.418'.
[   79.123905][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'.
[   79.132780][ T7343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.428'.
[   79.169205][ T7347] openvswitch: netlink: IP tunnel dst address not specified
[   79.190168][ T7349] netlink: 68 bytes leftover after parsing attributes in process `syz.0.431'.
[   79.328128][ T7362] tun7: tun_chr_ioctl cmd 1074025675
[   79.329939][ T7362] tun7: persist enabled
[   79.333785][ T7362] tun7: tun_chr_ioctl cmd 1074025675
[   79.335606][ T7362] tun7: persist enabled
[   79.341764][ T7362] netlink: 24 bytes leftover after parsing attributes in process `syz.1.435'.
[   80.440956][ T7407] openvswitch: netlink: Actions may not be safe on all matching packets
[   80.521273][ T7415] tun8: tun_chr_ioctl cmd 1074025675
[   80.523161][ T7415] tun8: persist enabled
[   80.524979][ T7415] tun8: tun_chr_ioctl cmd 1074025675
[   80.527669][ T7415] tun8: persist enabled
[   80.635148][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.453'.
[   80.640126][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.453'.
[   80.648228][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.453'.
[   80.711662][ T7435] netlink: 312 bytes leftover after parsing attributes in process `syz.2.456'.
[   80.767788][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'.
[   81.160278][ T7478] tun3: tun_chr_ioctl cmd 1074025675
[   81.162245][ T7478] tun3: persist enabled
[   81.164674][ T7477] tun3: tun_chr_ioctl cmd 1074025673
[   81.169504][ T7479] tun3: tun_chr_ioctl cmd 1074025675
[   81.171257][ T7479] tun3: persist enabled
[   81.172887][ T7478] tun3: tun_chr_ioctl cmd 1074025675
[   81.174704][ T7478] tun3: persist enabled
[   81.423230][    T9] cfg80211: failed to load regulatory.db
[   81.499937][ T7503] tipc: Started in network mode
[   81.502099][ T7503] tipc: Node identity 7e6496ab43bc, cluster identity 4711
[   81.508641][ T7503] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.569939][ T7512] tipc: Resetting bearer <eth:syzkaller0>
[   81.677152][ T7502] tipc: Disabling bearer <eth:syzkaller0>
[   81.691171][ T7532] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.917143][ T7567] batman_adv: batadv0: Adding interface: dummy0
[   81.919411][ T7567] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.929283][ T7567] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[   81.952357][ T7563] batman_adv: batadv0: Adding interface: ip6gretap1
[   81.955028][ T7563] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.969788][ T7563] batman_adv: batadv0: Interface activated: ip6gretap1
[   82.177756][ T7596] tun4: tun_chr_ioctl cmd 1074025675
[   82.186819][ T7596] tun4: persist enabled
[   82.193241][ T7596] tun4: tun_chr_ioctl cmd 1074025675
[   82.195082][ T7596] tun4: persist enabled
[   82.313572][ T7607] pimreg: entered allmulticast mode
[   83.399818][ T7641] Bluetooth: MGMT ver 1.23
[   83.413936][ T7641] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   83.614837][ T7655] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   83.675521][    C1] Illegal XDP return value 16128 on prog  (id 135) dev lo, expect packet loss!
[   83.727765][ T7661] wireguard0: entered promiscuous mode
[   83.730425][ T7661] wireguard0: entered allmulticast mode
[   83.801559][ T7673] __nla_validate_parse: 24 callbacks suppressed
[   83.801584][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.524'.
[   83.821002][ T7677] tun9: tun_chr_ioctl cmd 1074025675
[   83.823080][ T7677] tun9: persist enabled
[   83.824902][ T7677] tun9: tun_chr_ioctl cmd 1074025675
[   83.829859][ T7677] tun9: persist enabled
[   83.831860][ T7678] tun9: tun_chr_ioctl cmd 1074025675
[   83.833791][ T7678] tun9: persist enabled
[   83.835387][ T7678] netlink: 32 bytes leftover after parsing attributes in process `syz.1.525'.
[   83.842926][ T7677] netlink: 32 bytes leftover after parsing attributes in process `syz.1.525'.
[   83.869002][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.524'.
[   83.983382][ T7692] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   84.169780][ T7704] validate_nla: 4 callbacks suppressed
[   84.169913][ T7704] netlink: 'syz.1.532': attribute type 10 has an invalid length.
[   84.178095][ T7704] netlink: 40 bytes leftover after parsing attributes in process `syz.1.532'.
[   84.181890][ T7704] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   84.530758][ T7712] sch_tbf: burst 127 is lower than device tunl0 mtu (1480) !
[   84.570498][ T7712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.535'.
[   84.574838][ T7712] team0: No ports can be present during mode change
[   84.631349][ T7709] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[   84.688735][ T7710] sctp: [Deprecated]: syz.1.534 (pid 7710) Use of int in maxseg socket option.
[   84.688735][ T7710] Use struct sctp_assoc_value instead
[   84.782677][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'.
[   84.898332][ T7746] netlink: 56 bytes leftover after parsing attributes in process `syz.0.543'.
[   84.944031][ T7748] netlink: 'syz.2.544': attribute type 7 has an invalid length.
[   84.948908][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.544'.
[   85.053765][ T7762] netlink: 'syz.2.547': attribute type 13 has an invalid length.
[   85.060119][ T7762] netlink: 'syz.2.547': attribute type 17 has an invalid length.
[   85.131994][ T7762] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   85.184261][ T7762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.547'.
[   85.192249][ T7762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.200088][ T7762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.478251][ T5877] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   85.481882][ T5877] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   85.485442][ T5877] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   85.490023][ T5877] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   87.445471][ T7880] tun1: tun_chr_ioctl cmd 1074025675
[   87.447388][ T7880] tun1: persist enabled
[   87.448901][ T7879] tun1: tun_chr_ioctl cmd 1074025675
[   87.451100][ T7879] tun1: persist enabled
[   87.472454][ T7883] unknown channel width for channel at 909000KHz?
[   88.190085][ T7926] netlink: 'syz.1.601': attribute type 1 has an invalid length.
[   88.751865][ T7945] netlink: 'syz.2.606': attribute type 5 has an invalid length.
[   88.754884][ T7945] netlink: 'syz.2.606': attribute type 7 has an invalid length.
[   88.761879][ T7945] : entered promiscuous mode
[   88.829539][ T7950] __nla_validate_parse: 13 callbacks suppressed
[   88.829558][ T7950] netlink: 20 bytes leftover after parsing attributes in process `syz.2.608'.
[   88.839280][ T7950] netlink: 32 bytes leftover after parsing attributes in process `syz.2.608'.
[   88.844787][ T7950] netlink: 34 bytes leftover after parsing attributes in process `syz.2.608'.
[   88.954677][ T7956] netlink: 16 bytes leftover after parsing attributes in process `syz.0.609'.
[   88.960430][ T7956] netlink: 48 bytes leftover after parsing attributes in process `syz.0.609'.
[   89.252533][ T7984] netlink: 'syz.0.616': attribute type 3 has an invalid length.
[   90.364679][ T8037] netlink: 24 bytes leftover after parsing attributes in process `syz.0.631'.
[   90.394798][ T8039] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.458102][ T8041] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   90.477254][ T8039] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.541747][ T8039] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.550068][ T8043] netlink: 176 bytes leftover after parsing attributes in process `syz.1.634'.
[   90.553779][ T8043] ip6gretap0: entered promiscuous mode
[   90.562889][ T8043] netlink: 176 bytes leftover after parsing attributes in process `syz.1.634'.
[   90.609446][ T8039] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.667296][ T5873] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.678533][ T5873] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.693559][ T5873] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.705977][ T5873] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.752267][ T8050] netlink: 'syz.2.637': attribute type 31 has an invalid length.
[   90.892576][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.638'.
[   90.929116][ T8055] netlink: 16 bytes leftover after parsing attributes in process `syz.2.638'.
[   91.037303][ T8064] IPv6: NLM_F_CREATE should be specified when creating new route
[   91.300902][ T8091] tun5: tun_chr_ioctl cmd 1074025673
[   91.303578][ T8092] tun5: tun_chr_ioctl cmd 1074025675
[   91.305578][ T8092] tun5: persist enabled
[   91.307449][ T8095] openvswitch: netlink: Message has 16 unknown bytes.
[   91.308442][ T8091] tun5: tun_chr_ioctl cmd 1074025675
[   91.313467][ T8091] tun5: persist enabled
[   91.533208][ T8121] tun2: tun_chr_ioctl cmd 1074025675
[   91.535172][ T8121] tun2: persist enabled
[   91.537558][ T8121] tun2: tun_chr_ioctl cmd 1074025675
[   91.539668][ T8121] tun2: persist enabled
[   91.541404][ T8120] tun2: tun_chr_ioctl cmd 1074025673
[   91.857200][ T8175] tipc: Invalid UDP bearer configuration
[   91.857229][ T8175] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   91.878303][ T8181] netlink: 'syz.1.671': attribute type 4 has an invalid length.
[   92.077488][ T8209] netlink: 'syz.0.678': attribute type 2 has an invalid length.
[   92.340243][ T8243] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   92.368885][ T8246] syzkaller0: entered promiscuous mode
[   92.371512][ T8246] syzkaller0: entered allmulticast mode
[   93.458276][ T8267] netlink: 'syz.1.696': attribute type 2 has an invalid length.
[   94.033702][ T8294] IPVS: set_ctl: invalid protocol: 58 172.30.0.1:20004
[   94.101049][ T8298] __nla_validate_parse: 26 callbacks suppressed
[   94.101066][ T8298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.706'.
[   94.117512][ T8298] netlink: 'syz.0.706': attribute type 3 has an invalid length.
[   94.332861][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.709'.
[   94.402861][ T8310] delete_channel: no stack
[   95.105297][ T8362] netlink: 'syz.2.721': attribute type 11 has an invalid length.
[   95.116906][ T8362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.721'.
[   95.121248][ T8362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.721'.
[   95.237229][ T8377] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.725'.
[   95.297886][ T8381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'.
[   95.313713][ T8379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.726'.
[   95.331890][ T8384] netlink: 144 bytes leftover after parsing attributes in process `syz.2.728'.
[   95.337200][ T8384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.728'.
[   95.341677][ T8384] netlink: 56 bytes leftover after parsing attributes in process `syz.2.728'.
[   95.526674][ T8404] tun6: tun_chr_ioctl cmd 1074025675
[   95.528981][ T8404] tun6: persist enabled
[   95.530771][ T8405] tun6: tun_chr_ioctl cmd 1074025675
[   95.533039][ T8405] tun6: persist enabled
[   95.535054][ T8404] tun6: tun_chr_ioctl cmd 1074025675
[   95.537464][ T8404] tun6: persist enabled
[   96.611774][ T8433] tun7: tun_chr_ioctl cmd 1074025675
[   96.613733][ T8433] tun7: persist enabled
[   96.615494][ T8433] tun7: tun_chr_ioctl cmd 1074025675
[   96.618602][ T8433] tun7: persist enabled
[   96.661167][ T8436] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.675230][ T8436] syzkaller0: entered promiscuous mode
[   96.685944][ T8436] syzkaller0: entered allmulticast mode
[   96.693087][ T8436] tipc: Resetting bearer <eth:syzkaller0>
[   96.834358][ T8443] tipc: Resetting bearer <eth:syzkaller0>
[   96.838302][ T8443] tipc: Disabling bearer <eth:syzkaller0>
[   96.927888][ T8448] netlink: 'syz.2.749': attribute type 1 has an invalid length.
[   97.627439][ T8494] openvswitch: netlink: VXLAN extension 2 out of range max 1
[   97.781858][    T9] IPVS: starting estimator thread 0...
[   97.865985][ T8504] IPVS: using max 92 ests per chain, 220800 per kthread
[   98.179807][ T8523] bridge_slave_0: left allmulticast mode
[   98.182117][ T8523] bridge_slave_0: left promiscuous mode
[   98.184145][ T8523] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.189757][ T8523] bridge_slave_1: left allmulticast mode
[   98.191660][ T8523] bridge_slave_1: left promiscuous mode
[   98.194033][ T8523] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.202023][ T8523] bond0: (slave bond_slave_0): Releasing backup interface
[   98.207856][ T8523] bond0: (slave bond_slave_1): Releasing backup interface
[   98.216838][ T8523] team0: Port device team_slave_0 removed
[   98.222543][ T8523] team0: Port device team_slave_1 removed
[   98.225035][ T8523] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.228982][ T8523] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.234211][ T8523] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.237667][ T8523] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.257446][ T8525] team0: Failed to send options change via netlink (err -105)
[   98.260507][ T8525] team0: Mode changed to "loadbalance"
[   98.408556][ T8532] sctp: [Deprecated]: syz.2.778 (pid 8532) Use of int in maxseg socket option.
[   98.408556][ T8532] Use struct sctp_assoc_value instead
[   99.155368][ T8570] __nla_validate_parse: 13 callbacks suppressed
[   99.155392][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.792'.
[   99.230565][ T8575] pim6reg1: entered promiscuous mode
[   99.233218][ T8575] pim6reg1: entered allmulticast mode
[   99.398824][ T8589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.800'.
[   99.402035][ T8589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.800'.
[   99.405370][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'.
[   99.412433][ T8589] Bluetooth: MGMT ver 1.23
[   99.419559][ T8583] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.798'.
[   99.581168][ T8594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.802'.
[   99.622406][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.803'.
[   99.645078][ T8601] netlink: 16 bytes leftover after parsing attributes in process `syz.1.803'.
[   99.763957][ T8609] netlink: 16 bytes leftover after parsing attributes in process `syz.1.807'.
[  100.007836][ T8622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.812'.
[  100.033445][ T8623] tun3: tun_chr_ioctl cmd 1074025675
[  100.035355][ T8623] tun3: persist enabled
[  100.037529][ T8623] tun3: tun_chr_ioctl cmd 1074025675
[  100.039576][ T8623] tun3: persist enabled
[  100.900414][ T8675] netlink: 'syz.0.826': attribute type 2 has an invalid length.
[  100.952536][ T8679] tun9: tun_chr_ioctl cmd 1074025675
[  100.954596][ T8679] tun9: persist enabled
[  100.957257][ T8679] tun9: tun_chr_ioctl cmd 1074025675
[  100.959652][ T8679] tun9: persist enabled
[  100.961891][ T8679] tun9: tun_chr_ioctl cmd 1074025675
[  100.965287][ T8679] tun9: persist enabled
[  100.971331][ T8680] tun9: tun_chr_ioctl cmd 1074025675
[  100.973521][ T8680] tun9: persist enabled
[  100.974796][ T8681] can: request_module (can-proto-0) failed.
[  100.977671][ T8679] tun9: tun_chr_ioctl cmd 1074025675
[  100.977693][ T8679] tun9: persist enabled
[  100.977785][ T8679] tun9: tun_chr_ioctl cmd 1074025675
[  100.977796][ T8679] tun9: persist enabled
[  100.977841][ T8679] tun9: tun_chr_ioctl cmd 1074025675
[  100.977850][ T8679] tun9: persist enabled
[  100.977894][ T8679] tun9: tun_chr_ioctl cmd 1074025675
[  100.977903][ T8679] tun9: persist enabled
[  100.977948][ T8679] tun9: tun_chr_ioctl cmd 1074025675
[  100.977957][ T8679] tun9: persist enabled
[  100.977999][ T8679] tun9: tun_chr_ioctl cmd 1074025675
[  100.978008][ T8679] tun9: persist enabled
[  100.978052][ T8679] tun9: tun_chr_ioctl cmd 1074025675
[  100.978061][ T8679] tun9: persist enabled
[  100.978134][ T8679] tun9: tun_chr_ioctl cmd 1074025675
[  100.978145][ T8679] tun9: persist enabled
[  100.978218][ T8679] tun9: tun_chr_ioctl cmd 1074025675
[  100.978227][ T8679] tun9: persist enabled
[  100.978273][ T8679] tun9: tun_chr_ioctl cmd 1074025675
[  100.978282][ T8679] tun9: persist enabled
[  100.978326][ T8679] tun9: tun_chr_ioctl cmd 1074025675
[  100.978335][ T8679] tun9: persist enabled
[  100.978380][ T8679] tun9: tun_chr_ioctl cmd 1074025675
[  100.978389][ T8679] tun9: persist enabled
[  100.978457][ T8679] tun9: tun_chr_ioctl cmd 1074025675
[  100.978466][ T8679] tun9: persist enabled
[  100.978510][ T8679] tun9: tun_chr_ioctl cmd 1074025675
[  100.978518][ T8679] tun9: persist enabled
[  100.978563][ T8679] tun9: tun_chr_ioctl cmd 1074025675
[  101.036808][ T8679] tun9: persist enabled
[  101.038856][ T8679] tun9: tun_chr_ioctl cmd 1074025675
[  101.041194][ T8679] tun9: persist enabled
[  101.043629][ T8680] tun9: tun_chr_ioctl cmd 1074025675
[  101.048143][ T8680] tun9: persist enabled
[  101.050056][ T8679] tun9: tun_chr_ioctl cmd 1074025675
[  101.052479][ T8679] tun9: persist enabled
[  101.054635][ T8681] tun9: tun_chr_ioctl cmd 1074025678
[  101.177868][ T8688] syzkaller0: entered promiscuous mode
[  101.180554][ T8688] syzkaller0: entered allmulticast mode
[  101.831405][ T8737] tun4: tun_chr_ioctl cmd 1074025675
[  101.833583][ T8737] tun4: persist enabled
[  101.837335][ T8737] tun4: tun_chr_ioctl cmd 1074025675
[  101.839563][ T8737] tun4: persist enabled
[  101.894771][ T8741] only policy match revision 0 supported
[  101.894789][ T8741] unable to load match
[  102.120734][ T8766] tun10: tun_chr_ioctl cmd 1074025675
[  102.122606][ T8766] tun10: persist enabled
[  102.775560][    T9] IPVS: starting estimator thread 0...
[  102.865770][ T8797] IPVS: using max 69 ests per chain, 165600 per kthread
[  103.091816][ T8808] sctp: [Deprecated]: syz.0.866 (pid 8808) Use of struct sctp_assoc_value in delayed_ack socket option.
[  103.091816][ T8808] Use struct sctp_sack_info instead
[  103.100927][ T8807] sctp: [Deprecated]: syz.0.866 (pid 8807) Use of struct sctp_assoc_value in delayed_ack socket option.
[  103.100927][ T8807] Use struct sctp_sack_info instead
[  103.372300][ T8817] C: renamed from lo (while UP)
[  103.375079][ T8817] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  103.417769][ T5238] Bluetooth: hci2: command tx timeout
[  103.554021][ T8825] netlink: 'syz.2.872': attribute type 3 has an invalid length.
[  104.682317][ T8869] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.691349][ T8869] syzkaller0: entered promiscuous mode
[  104.693273][ T8869] syzkaller0: entered allmulticast mode
[  104.699020][ T8869] tipc: Resetting bearer <eth:syzkaller0>
[  104.711116][ T8867] tipc: Resetting bearer <eth:syzkaller0>
[  104.715116][ T8867] tipc: Disabling bearer <eth:syzkaller0>
[  104.818413][ T8881] tun11: tun_chr_ioctl cmd 1074025675
[  104.820200][ T8881] tun11: persist enabled
[  104.834798][ T8881] tun11: tun_chr_ioctl cmd 1074025675
[  104.838801][ T8881] tun11: persist enabled
[  104.847577][ T8881] __nla_validate_parse: 32 callbacks suppressed
[  104.847594][ T8881] netlink: 44 bytes leftover after parsing attributes in process `syz.2.890'.
[  104.852955][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.890'.
[  104.864188][ T8881] Bluetooth: MGMT ver 1.23
[  105.051434][ T8889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.892'.
[  105.062221][ T8889] pim6reg: entered allmulticast mode
[  105.069306][ T8889] pim6reg: left allmulticast mode
[  105.688461][ T8909] tun10: tun_chr_ioctl cmd 1074025675
[  105.690294][ T8909] tun10: persist enabled
[  105.692813][ T8909] tun10: tun_chr_ioctl cmd 1074025675
[  105.694751][ T8909] tun10: persist enabled
[  105.697468][ T8909] netlink: 24 bytes leftover after parsing attributes in process `syz.1.896'.
[  105.701841][ T8909] netlink: 48 bytes leftover after parsing attributes in process `syz.1.896'.
[  105.778562][ T8921] netlink: 'syz.0.900': attribute type 1 has an invalid length.
[  105.785056][ T8921] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  105.786003][ T8920] netlink: 'syz.0.900': attribute type 26 has an invalid length.
[  106.004861][ T8932] netlink: 'syz.0.902': attribute type 10 has an invalid length.
[  106.011852][ T8932] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  106.022794][ T8932] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  106.089961][ T8940] netlink: 32 bytes leftover after parsing attributes in process `syz.2.903'.
[  106.096280][ T8940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.903'.
[  106.106578][ T8938] netlink: 32 bytes leftover after parsing attributes in process `syz.2.903'.
[  106.119541][ T8938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.903'.
[  106.128683][ T8940] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.131998][ T8938] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  106.136704][ T8940] veth0_to_bridge: entered promiscuous mode
[  106.139542][ T8940] veth0_to_bridge: entered allmulticast mode
[  106.228933][ T8935] tipc: Disabling bearer <eth:syzkaller0>
[  106.320366][ T8952] syzkaller1: entered promiscuous mode
[  106.322963][ T8952] syzkaller1: entered allmulticast mode
[  107.359065][ T8982] netlink: 224 bytes leftover after parsing attributes in process `syz.0.917'.
[  107.410444][ T8986] netlink: 'syz.2.918': attribute type 4 has an invalid length.
[  107.483708][ T8993] tun5: tun_chr_ioctl cmd 1074025675
[  107.485959][ T8993] tun5: persist enabled
[  107.487842][ T8993] tun5: tun_chr_ioctl cmd 1074025675
[  107.489935][ T8993] tun5: persist enabled
[  107.670704][ T9010] tun6: tun_chr_ioctl cmd 1074025675
[  107.673204][ T9010] tun6: persist enabled
[  107.676254][ T9010] tun6: tun_chr_ioctl cmd 1074025675
[  107.680709][ T9010] tun6: persist enabled
[  107.690552][ T9010] syzkaller0: entered allmulticast mode
[  107.967789][ T9048] netlink: 'syz.0.936': attribute type 303 has an invalid length.
[  107.971671][ T9044] netlink: 'syz.0.936': attribute type 303 has an invalid length.
[  107.976765][ T9043] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  107.980706][ T9043] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  108.864673][ T9115] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  109.010956][ T9133] syzkaller1: entered promiscuous mode
[  109.013259][ T9133] syzkaller1: entered allmulticast mode
[  109.019355][ T9132] tap0: tun_chr_ioctl cmd 1074812118
[  109.174774][ T9147] tun11: tun_chr_ioctl cmd 1074025675
[  109.177340][ T9147] tun11: persist enabled
[  109.179180][ T9147] tun11: tun_chr_ioctl cmd 1074025675
[  109.180967][ T9147] tun11: persist enabled
[  109.265394][ T9159] netlink: 'syz.2.964': attribute type 1 has an invalid length.
[  109.268228][ T9157] lo speed is unknown, defaulting to 1000
[  109.270422][ T9157] lo speed is unknown, defaulting to 1000
[  109.278884][ T9159] 8021q: adding VLAN 0 to HW filter on device bond2
[  109.281678][ T9157] lo speed is unknown, defaulting to 1000
[  109.285002][ T9157] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  109.290201][ T9157] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  109.290357][ T9159] bond2: (slave geneve2): making interface the new active one
[  109.296898][ T9159] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  109.300797][ T9157] lo speed is unknown, defaulting to 1000
[  109.303119][ T9157] lo speed is unknown, defaulting to 1000
[  109.305405][ T9157] lo speed is unknown, defaulting to 1000
[  109.311159][ T9157] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.313682][ T9157] veth0_to_bridge: entered promiscuous mode
[  109.316033][ T9157] veth0_to_bridge: entered allmulticast mode
[  109.320370][ T9156] tipc: Disabling bearer <eth:syzkaller0>
[  109.328553][ T9162] pimreg3: entered allmulticast mode
[  109.371465][ T9167] bond5: entered promiscuous mode
[  109.373471][ T9167] bond5: entered allmulticast mode
[  109.376031][ T9167] 8021q: adding VLAN 0 to HW filter on device bond5
[  109.645416][ T9192] sctp: [Deprecated]: syz.2.974 (pid 9192) Use of int in max_burst socket option.
[  109.645416][ T9192] Use struct sctp_assoc_value instead
[  109.873456][ T9215] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  110.022743][ T9249] __nla_validate_parse: 23 callbacks suppressed
[  110.022757][ T9249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.985'.
[  110.033442][ T9243] lo speed is unknown, defaulting to 1000
[  110.057914][ T9236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.985'.
[  110.368887][ T9263] netlink: 20 bytes leftover after parsing attributes in process `syz.0.991'.
[  110.388613][ T9263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.991'.
[  110.435090][ T9273] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20004
[  110.469342][ T9281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.996'.
[  110.477091][ T9279] netlink: 'syz.0.996': attribute type 2 has an invalid length.
[  110.486157][ T9279] netlink: 1184 bytes leftover after parsing attributes in process `syz.0.996'.
[  110.495550][ T9275] netlink: 136 bytes leftover after parsing attributes in process `syz.2.995'.
[  110.643202][ T9298] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1000'.
[  110.646764][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1000'.
[  110.716891][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1001'.
[  111.125137][ T9336] lo speed is unknown, defaulting to 1000
[  111.820310][ T9371] geneve3: entered promiscuous mode
[  112.004676][ T9377] Can't find ip_set type hash:net,por
[  112.142402][ T9384] tun7: tun_chr_ioctl cmd 1074025675
[  112.144973][ T9384] tun7: persist enabled
[  112.146922][ T9384] tun7: tun_chr_ioctl cmd 1074025675
[  112.148646][ T9384] tun7: persist enabled
[  112.402202][ T9402] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.409240][ T9402] syzkaller0: entered promiscuous mode
[  112.411356][ T9402] syzkaller0: entered allmulticast mode
[  112.422701][ T9404] netlink: 'syz.0.1036': attribute type 1 has an invalid length.
[  112.426357][ T9404] netlink: 'syz.0.1036': attribute type 2 has an invalid length.
[  112.429072][ T9399] tipc: Resetting bearer <eth:syzkaller0>
[  112.434487][ T9399] tipc: Disabling bearer <eth:syzkaller0>
[  112.461746][ T9412] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  112.553780][ T9425] lo speed is unknown, defaulting to 1000
[  112.723888][ T9456] tun12: tun_chr_ioctl cmd 1074025675
[  112.726708][ T9456] tun12: persist enabled
[  112.728727][ T9456] tun12: tun_chr_ioctl cmd 1074025675
[  112.746600][ T9456] tun12: persist enabled
[  112.857859][ T9471] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96
[  112.937025][ T9490] syzkaller1: entered promiscuous mode
[  112.939544][ T9490] syzkaller1: entered allmulticast mode
[  112.952348][ T9490] netlink: 'syz.0.1063': attribute type 1 has an invalid length.
[  112.954332][ T9492] netlink: 'syz.1.1064': attribute type 3 has an invalid length.
[  112.957035][ T9490] netlink: 'syz.0.1063': attribute type 6 has an invalid length.
[  112.961334][ T9492] netlink: 'syz.1.1064': attribute type 3 has an invalid length.
[  113.005473][ T9500] trusted_key: syz.1.1066 sent an empty control message without MSG_MORE.
[  113.014170][ T9500] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  113.023177][ T9500] bridge2: entered promiscuous mode
[  113.025942][ T9500] bridge2: entered allmulticast mode
[  113.029449][ T9500] team0: Port device bridge2 added
[  113.078596][ T9509] veth3: entered promiscuous mode
[  113.135404][ T9518] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  113.217278][   T33] audit: type=1800 audit(1756473869.499:2): pid=9519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1072" name="memory.events" dev="tmpfs" ino=1607 res=0 errno=0
[  113.229322][ T9521] lo speed is unknown, defaulting to 1000
[  113.378714][ T9546] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  113.572366][ T9570] lo speed is unknown, defaulting to 1000
[  113.691902][ T9585] lo speed is unknown, defaulting to 1000
[  114.489068][ T9605] lo speed is unknown, defaulting to 1000
[  114.651851][ T9621] tun12: tun_chr_ioctl cmd 1074025675
[  114.654059][ T9621] tun12: persist enabled
[  114.657292][ T9621] tun12: tun_chr_ioctl cmd 1074025675
[  114.659590][ T9621] tun12: persist enabled
[  115.469867][ T9638] __nla_validate_parse: 30 callbacks suppressed
[  115.469888][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1109'.
[  115.486017][ T9638] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1109'.
[  115.509918][ T9636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1108'.
[  115.516846][ T9636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1108'.
[  115.554158][ T9644] netlink: 'syz.0.1112': attribute type 1 has an invalid length.
[  115.557583][ T9644] NCSI netlink: No device for ifindex 0
[  115.599280][ T9646] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1113'.
[  115.602665][ T9646] netlink: 'syz.1.1113': attribute type 1 has an invalid length.
[  115.607230][ T9646] netlink: 'syz.1.1113': attribute type 2 has an invalid length.
[  115.611421][ T9646] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1113'.
[  115.619393][ T9648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1114'.
[  115.624225][ T9646] syzkaller0: entered promiscuous mode
[  115.626292][ T9646] syzkaller0: entered allmulticast mode
[  115.684802][ T9663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1119'.
[  115.689893][ T9663] netlink: 'syz.0.1119': attribute type 1 has an invalid length.
[  115.715514][ T9663] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1119'.
[  115.719919][ T9663] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  115.726756][ T9663] netlink: 'syz.0.1119': attribute type 83 has an invalid length.
[  115.735309][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1119'.
[  115.760308][ T9670] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  115.805424][ T9680] tun13: tun_chr_ioctl cmd 1074025675
[  115.810618][ T9680] tun13: persist enabled
[  115.857305][ T9689] netlink: 'syz.0.1128': attribute type 1 has an invalid length.
[  115.860561][ T9689] netlink: 'syz.0.1128': attribute type 4 has an invalid length.
[  116.396691][ T9729] lo speed is unknown, defaulting to 1000
[  116.430006][ T9729] netlink: 'syz.2.1139': attribute type 10 has an invalid length.
[  116.880213][ T9772] lo speed is unknown, defaulting to 1000
[  117.037277][ T9779] tun13: tun_chr_ioctl cmd 1074025675
[  117.040262][ T9779] tun13: persist enabled
[  117.103931][ T9785] veth5: entered promiscuous mode
[  117.215491][ T9788] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.225158][ T9788] syzkaller0: entered promiscuous mode
[  117.227147][ T9788] syzkaller0: entered allmulticast mode
[  117.233868][ T9787] tipc: Resetting bearer <eth:syzkaller0>
[  117.238815][ T9787] tipc: Disabling bearer <eth:syzkaller0>
[  117.443809][ T9799] block nbd1: not configured, cannot reconfigure
[  117.610200][ T9821] tun8: tun_chr_ioctl cmd 1074025675
[  117.612663][ T9821] tun8: persist enabled
[  117.615275][ T9821] tun8: tun_chr_ioctl cmd 1074025675
[  117.618430][ T9821] tun8: persist enabled
[  117.803277][ T9854] tun14: tun_chr_ioctl cmd 1074025675
[  117.805549][ T9854] tun14: persist enabled
[  117.809131][ T9854] tun14: tun_chr_ioctl cmd 1074025675
[  117.812278][ T9854] tun14: persist enabled
[  117.820026][ T9854] tun14: tun_chr_ioctl cmd 35108
[  117.867059][ T9860] lo speed is unknown, defaulting to 1000
[  117.873841][ T9857] lo speed is unknown, defaulting to 1000
[  117.967412][ T9867] IPVS: Unknown mcast interface: nicvf0
[  117.971174][ T9868] IPVS: Unknown mcast interface: nicvf0
[  119.049013][ T9917] 8021q: adding VLAN 0 to HW filter on device bond6
[  119.061467][ T9917] macvlan2: entered promiscuous mode
[  119.063894][ T9917] macvlan2: entered allmulticast mode
[  119.067658][ T9917] bond6: entered promiscuous mode
[  119.070218][ T9917] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  119.074138][ T9917] bond6: left promiscuous mode
[  119.220004][ T9933] tun15: tun_chr_ioctl cmd 1074025675
[  119.222899][ T9933] tun15: persist enabled
[  119.224879][ T9933] tun15: tun_chr_ioctl cmd 1074025675
[  119.227125][ T9933] tun15: persist enabled
[  119.449658][ T9956] tun16: tun_chr_ioctl cmd 1074025675
[  119.452188][ T9956] tun16: persist enabled
[  119.454114][ T9959] tun16: tun_chr_ioctl cmd 1074025675
[  119.457767][ T9959] tun16: persist enabled
[  119.459965][ T9956] tun16: tun_chr_ioctl cmd 1074025675
[  119.462166][ T9956] tun16: persist enabled
[  119.714927][ T9988] tun14: tun_chr_ioctl cmd 1074025675
[  119.717615][ T9988] tun14: persist enabled
[  119.720406][ T9988] tun14: tun_chr_ioctl cmd 1074025675
[  119.722992][ T9988] tun14: persist enabled
[  120.044646][T10006] tun15: tun_chr_ioctl cmd 1074025675
[  120.049750][T10006] tun15: persist enabled
[  120.052013][T10006] tun15: tun_chr_ioctl cmd 1074025675
[  120.054311][T10006] tun15: persist enabled
[  120.290462][T10016] lo speed is unknown, defaulting to 1000
[  120.331385][T10020] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6_vti0, syncid = 1, id = 0
[  120.500369][T10025] lo speed is unknown, defaulting to 1000
[  120.519785][T10028] __nla_validate_parse: 43 callbacks suppressed
[  120.519816][T10028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1225'.
[  120.534276][T10028] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1225'.
[  120.621760][T10042] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1228'.
[  120.626424][T10042] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  120.702977][T10057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1231'.
[  120.712038][T10057] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1231'.
[  120.867818][T10084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'.
[  120.880953][T10087] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1242'.
[  120.884064][T10087] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1242'.
[  120.888161][T10087] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1242'.
[  120.944493][T10092] lo speed is unknown, defaulting to 1000
[  121.007293][T10099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1245'.
[  121.009093][T10105] netlink: 'syz.2.1247': attribute type 13 has an invalid length.
[  121.075962][T10110] tun16: tun_chr_ioctl cmd 1074025675
[  121.077957][T10110] tun16: persist enabled
[  121.081127][T10110] tun16: tun_chr_ioctl cmd 1074025675
[  121.083432][T10110] tun16: persist enabled
[  121.135293][T10121] netlink: 'syz.0.1252': attribute type 16 has an invalid length.
[  121.140191][T10121] netlink: 'syz.0.1252': attribute type 17 has an invalid length.
[  121.168342][T10121] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.171962][T10121] 8021q: adding VLAN 0 to HW filter on device team0
[  121.174892][T10121] batman_adv: batadv0: Interface activated: dummy0
[  121.178542][T10121] batadv0: mtu less than device minimum
[  121.180713][T10121] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  121.184567][T10121] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  121.188629][T10121] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  121.192952][T10121] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  121.197840][T10121] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  121.202522][T10121] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  121.207342][T10121] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  121.211355][T10121] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  121.653581][T10167] pim6reg1: entered promiscuous mode
[  121.655414][T10167] pim6reg1: entered allmulticast mode
[  122.215533][T10188] netlink: 'syz.1.1272': attribute type 1 has an invalid length.
[  122.302854][T10198] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  122.306985][T10198] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  122.397664][T10207] team0: Device C is loopback device. Loopback devices can't be added as a team port
[  122.540194][T10209] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  122.565891][T10228] 8021q: VLANs not supported on sit0
[  122.791543][T10263] lo speed is unknown, defaulting to 1000
[  122.964288][T10286] lo speed is unknown, defaulting to 1000
[  123.807477][T10353] lo speed is unknown, defaulting to 1000
[  124.152186][T10388] tun10: tun_chr_ioctl cmd 1074025675
[  124.157447][T10388] tun10: persist enabled
[  124.162582][T10388] tun10: tun_chr_ioctl cmd 1074025675
[  124.164367][T10388] tun10: persist enabled
[  125.468098][T10469] tun17: tun_chr_ioctl cmd 1074025675
[  125.470204][T10469] tun17: persist enabled
[  125.472464][T10467] tun17: tun_chr_ioctl cmd 1074025675
[  125.474196][T10467] tun17: persist enabled
[  125.650341][T10493] net_ratelimit: 14 callbacks suppressed
[  125.650403][T10493] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  125.752488][T10495] __nla_validate_parse: 60 callbacks suppressed
[  125.752515][T10495] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1356'.
[  125.814481][T10503] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1359'.
[  125.978708][T10524] lo speed is unknown, defaulting to 1000
[  125.981778][T10524] lo speed is unknown, defaulting to 1000
[  125.984609][T10524] lo speed is unknown, defaulting to 1000
[  126.064848][T10535] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  126.086123][T10537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1371'.
[  126.100445][T10537] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1371'.
[  126.117589][T10524] infiniband syz0: set active
[  126.122113][ T5853] lo speed is unknown, defaulting to 1000
[  126.132495][T10524] infiniband syz0: added lo
[  126.155795][T10524] RDS/IB: syz0: added
[  126.157960][T10524] smc: adding ib device syz0 with port count 1
[  126.158106][T10539] tun18: tun_chr_ioctl cmd 1074025675
[  126.160115][T10524] smc:    ib device syz0 port 1 has pnetid 
[  126.165492][T10539] tun18: persist enabled
[  126.169962][   T24] lo speed is unknown, defaulting to 1000
[  126.170591][T10539] tun18: tun_chr_ioctl cmd 1074025675
[  126.173829][T10539] tun18: persist enabled
[  126.175461][T10524] lo speed is unknown, defaulting to 1000
[  126.253227][T10524] lo speed is unknown, defaulting to 1000
[  126.306757][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1376'.
[  126.317361][T10549] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1376'.
[  126.325939][T10524] lo speed is unknown, defaulting to 1000
[  126.382723][T10560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1378'.
[  126.424472][T10565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1382'.
[  126.468692][T10571] tun17: tun_chr_ioctl cmd 1074025673
[  126.471369][T10567] syzkaller1: entered promiscuous mode
[  126.473179][T10567] syzkaller1: entered allmulticast mode
[  126.476571][T10572] tun17: tun_chr_ioctl cmd 1074025675
[  126.478570][T10572] tun17: persist enabled
[  126.480672][T10572] tun17: tun_chr_ioctl cmd 1074025675
[  126.483105][T10572] tun17: persist enabled
[  126.484645][T10571] tun17: tun_chr_ioctl cmd 1074025675
[  126.490979][T10571] tun17: persist enabled
[  126.708769][T10581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1383'.
[  126.907997][T10600] syzkaller1: tun_chr_ioctl cmd 1074025677
[  126.910329][T10600] syzkaller1: linktype set to 6
[  126.915455][T10600] syzkaller1: tun_chr_ioctl cmd 2147767520
[  127.093817][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1395'.
[  127.185221][T10632] tun19: tun_chr_ioctl cmd 1074025675
[  127.188944][T10632] tun19: persist enabled
[  127.191022][T10632] tun19: tun_chr_ioctl cmd 1074025675
[  127.200553][T10632] tun19: persist enabled
[  127.236058][T10638] netlink: zone id is out of range
[  127.237916][T10638] netlink: zone id is out of range
[  127.240051][T10638] netlink: zone id is out of range
[  127.242217][T10638] netlink: zone id is out of range
[  127.296183][T10646] tun20: tun_chr_ioctl cmd 1074025675
[  127.298154][T10646] tun20: persist enabled
[  127.301732][T10646] tun20: tun_chr_ioctl cmd 1074025675
[  127.303955][T10646] tun20: persist enabled
[  127.312432][T10638] netlink: set zone limit has 4 unknown bytes
[  127.319427][T10647] netlink: del zone limit has 4 unknown bytes
[  127.380173][T10654] netlink: 'syz.1.1408': attribute type 1 has an invalid length.
[  127.412345][T10662] netlink: 'syz.1.1410': attribute type 9 has an invalid length.
[  127.570270][T10686] netlink: 'syz.2.1416': attribute type 1 has an invalid length.
[  127.604077][T10686] 8021q: adding VLAN 0 to HW filter on device bond4
[  127.609668][T10686] bond3: (slave bond4): making interface the new active one
[  127.612934][T10686] bond3: (slave bond4): Enslaving as an active interface with an up link
[  127.621752][T10686] bond3: (slave gretap2): Enslaving as a backup interface with an up link
[  127.627935][T10686] 8021q: adding VLAN 0 to HW filter on device bond3
[  127.659693][T10690] lo speed is unknown, defaulting to 1000
[  127.662343][T10690] lo speed is unknown, defaulting to 1000
[  128.016844][T10715] netlink: 'syz.2.1426': attribute type 21 has an invalid length.
[  128.019597][T10715] netlink: 'syz.2.1426': attribute type 4 has an invalid length.
[  128.058679][T10717] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.091077][T10719] ieee802154 phy0 wpan0: encryption failed: -22
[  128.370539][T10751] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.395512][T10751] syzkaller0: entered promiscuous mode
[  128.398133][T10751] syzkaller0: entered allmulticast mode
[  128.415972][T10747] tipc: Resetting bearer <eth:syzkaller0>
[  128.477122][T10747] tipc: Disabling bearer <eth:syzkaller0>
[  129.090238][T10806] batadv_slave_1: entered promiscuous mode
[  129.108343][T10805] batadv_slave_1: left promiscuous mode
[  129.748769][T10838] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.751593][T10838] syzkaller0: entered promiscuous mode
[  129.753347][T10838] syzkaller0: entered allmulticast mode
[  129.764855][T10839] netlink: 'syz.1.1461': attribute type 13 has an invalid length.
[  129.765275][T10838] tipc: Resetting bearer <eth:syzkaller0>
[  129.767693][T10839] netlink: 'syz.1.1461': attribute type 17 has an invalid length.
[  129.786065][T10839] erspan0: left allmulticast mode
[  129.820094][T10839] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  129.825470][   T47] lo speed is unknown, defaulting to 1000
[  129.829272][T10837] tipc: Resetting bearer <eth:syzkaller0>
[  129.835364][T10837] tipc: Disabling bearer <eth:syzkaller0>
[  129.842268][T10840] lo speed is unknown, defaulting to 1000
[  129.844538][T10840] lo speed is unknown, defaulting to 1000
[  129.886191][T10839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  130.031949][T10851] tun11: tun_chr_ioctl cmd 1074025675
[  130.034110][T10851] tun11: persist enabled
[  130.036454][T10851] tun11: tun_chr_ioctl cmd 1074025675
[  130.042519][T10851] tun11: persist enabled
[  130.055410][T10851] lo speed is unknown, defaulting to 1000
[  130.060791][T10851] lo speed is unknown, defaulting to 1000
[  130.169021][T10863] delete_channel: no stack
[  130.499515][T10894] lo speed is unknown, defaulting to 1000
[  130.502662][T10894] lo speed is unknown, defaulting to 1000
[  130.863753][T10936] lo speed is unknown, defaulting to 1000
[  130.867407][T10936] lo speed is unknown, defaulting to 1000
[  130.995207][T10951] __nla_validate_parse: 29 callbacks suppressed
[  130.995225][T10951] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1495'.
[  131.020070][T10952] syzkaller0: entered promiscuous mode
[  131.023523][T10952] syzkaller0: entered allmulticast mode
[  131.028492][T10948] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.031422][T10954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1497'.
[  131.036245][T10951] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  131.055170][T10952] tipc: Resetting bearer <eth:syzkaller0>
[  131.064344][T10952] tipc: Disabling bearer <eth:syzkaller0>
[  131.118509][T10956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1498'.
[  131.199344][T10973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1503'.
[  131.927995][T10992] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1508'.
[  132.128584][T10999] tun21: tun_chr_ioctl cmd 1074025675
[  132.130523][T10999] tun21: persist enabled
[  132.132639][T10999] tun21: tun_chr_ioctl cmd 1074025675
[  132.134580][T10999] tun21: persist enabled
[  132.285501][T11005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1514'.
[  132.460602][T11019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1516'.
[  132.618535][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  133.313446][T11039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1525'.
[  133.320684][T11039] tipc: Enabling of bearer <et:g> rejected, media not registered
[  133.341357][T11042] tun12: tun_chr_ioctl cmd 1074025675
[  133.343181][T11042] tun12: persist enabled
[  133.345172][T11042] tun12: tun_chr_ioctl cmd 1074025675
[  133.349294][T11042] tun12: persist enabled
[  133.359482][T11042] tun12: tun_chr_ioctl cmd 1074025675
[  133.361424][T11042] tun12: persist enabled
[  133.432838][T11040] syzkaller1: entered promiscuous mode
[  133.435158][T11040] syzkaller1: entered allmulticast mode
[  133.712840][T11063] pimreg: tun_chr_ioctl cmd 1074812118
[  133.717856][T11063] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1532'.
[  133.727857][T11063] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1532'.
[  133.731191][T11063] 8021q: VLANs not supported on xfrm0
[  133.881303][T11070] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  134.385050][T11103] pimreg: left allmulticast mode
[  134.451592][T11106] lo speed is unknown, defaulting to 1000
[  134.453922][T11106] lo speed is unknown, defaulting to 1000
[  134.456192][ T5848] Bluetooth: hci2: command 0x0405 tx timeout
[  135.341899][T11152] netlink: 'syz.1.1558': attribute type 1 has an invalid length.
[  135.352475][T11152] 8021q: adding VLAN 0 to HW filter on device bond7
[  135.360224][T11152] bond7: (slave geneve3): making interface the new active one
[  135.363378][T11152] bond7: (slave geneve3): Enslaving as an active interface with an up link
[  135.509222][T11166] lo speed is unknown, defaulting to 1000
[  135.512148][T11166] lo speed is unknown, defaulting to 1000
[  135.612819][T11174] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  135.660395][T11176] tun18: tun_chr_ioctl cmd 1074025675
[  135.662681][T11176] tun18: persist enabled
[  135.669784][T11177] tun18: tun_chr_ioctl cmd 1074025675
[  135.672043][T11177] tun18: persist enabled
[  135.954189][T11197] tun13: tun_chr_ioctl cmd 1074025675
[  135.958277][T11197] tun13: persist enabled
[  135.960715][T11197] tun13: tun_chr_ioctl cmd 1074025675
[  135.963230][T11197] tun13: persist enabled
[  136.051134][T11201] __nla_validate_parse: 15 callbacks suppressed
[  136.051153][T11201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1573'.
[  136.064206][T11201] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1573'.
[  136.114149][T11208] netlink: 'syz.2.1575': attribute type 15 has an invalid length.
[  136.115249][T11206] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  136.143575][T11211] netlink: 'syz.2.1577': attribute type 3 has an invalid length.
[  136.146548][T11211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1577'.
[  136.250696][T11225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1583'.
[  136.254560][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1583'.
[  136.262709][T11224] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1583'.
[  136.266152][T11225] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1583'.
[  136.344722][T11228] batman_adv: batadv0: Interface deactivated: dummy0
[  136.352079][T11228] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  136.357568][T11228] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  136.361921][T11228] veth3: left promiscuous mode
[  136.369222][    T9] lo speed is unknown, defaulting to 1000
[  136.371818][    T9] syz0: Port: 1 Link DOWN
[  136.373545][    T9] lo speed is unknown, defaulting to 1000
[  136.653124][T11246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1588'.
[  136.798305][T11257] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1594'.
[  136.801983][T11257] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1594'.
[  136.880126][T11270] netlink: 'syz.0.1597': attribute type 1 has an invalid length.
[  136.883237][T11270] netlink: 'syz.0.1597': attribute type 1 has an invalid length.
[  136.886630][T11270] netlink: 'syz.0.1597': attribute type 1 has an invalid length.
[  136.962543][T11277] syzkaller0: entered promiscuous mode
[  136.968436][T11277] syzkaller0: entered allmulticast mode
[  136.974772][T11277] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  136.980413][T11277] tun15: tun_chr_ioctl cmd 1074025675
[  136.982665][T11277] tun15: persist enabled
[  136.984599][T11277] tun15: tun_chr_ioctl cmd 1074025675
[  136.987517][T11277] tun15: persist enabled
[  137.113865][T11287] syzkaller0: entered promiscuous mode
[  137.116817][T11287] syzkaller0: entered allmulticast mode
[  138.101859][T11380] smc: net device bond0 applied user defined pnetid SYZ2
[  138.206382][T11397] tun22: tun_chr_ioctl cmd 1074025675
[  138.208606][T11397] tun22: persist enabled
[  138.210282][T11396] tun22: tun_chr_ioctl cmd 1074025675
[  138.212881][T11396] tun22: persist enabled
[  138.214961][T11397] tun22: tun_chr_ioctl cmd 1074025675
[  138.220291][T11397] tun22: persist enabled
[  138.277366][T11399] lo speed is unknown, defaulting to 1000
[  138.280527][T11399] lo speed is unknown, defaulting to 1000
[  138.441437][T11407] lo speed is unknown, defaulting to 1000
[  138.448641][T11407] lo speed is unknown, defaulting to 1000
[  138.484618][T11412] netlink: 'syz.2.1637': attribute type 5 has an invalid length.
[  139.580615][T11430] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  139.689753][T11463] ieee802154 phy0 wpan0: encryption failed: -22
[  139.790581][T11471] lo speed is unknown, defaulting to 1000
[  139.792897][T11471] lo speed is unknown, defaulting to 1000
[  139.836293][T11476] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.870208][T11509] netlink: 'syz.1.1668': attribute type 83 has an invalid length.
[  140.927928][T11517] tun23: tun_chr_ioctl cmd 1074025675
[  140.929750][T11517] tun23: persist enabled
[  140.933606][T11517] tun23: tun_chr_ioctl cmd 1074025675
[  140.935531][T11517] tun23: persist enabled
[  141.060160][T11548] __nla_validate_parse: 48 callbacks suppressed
[  141.060174][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1679'.
[  141.072055][T11545] lo speed is unknown, defaulting to 1000
[  141.074514][T11545] lo speed is unknown, defaulting to 1000
[  141.093347][T11544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1678'.
[  141.112047][T11544] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1678'.
[  141.117532][T11551] sock: sock_timestamping_bind_phc: sock not bind to device
[  141.149017][T11551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1677'.
[  141.159195][T11554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1681'.
[  141.170842][T11554] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1681'.
[  141.254612][T11565] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1685'.
[  142.077826][T11597] nft_compat: unsupported protocol 0
[  142.177640][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1698'.
[  142.186997][T11607] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1698'.
[  142.209990][T11615] sctp: [Deprecated]: syz.2.1700 (pid 11615) Use of struct sctp_assoc_value in delayed_ack socket option.
[  142.209990][T11615] Use struct sctp_sack_info instead
[  142.298631][T11618] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1701'.
[  142.302837][T11631] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  142.307026][T11631] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  142.434945][T11650] tun19: tun_chr_ioctl cmd 1074025675
[  142.437467][T11650] tun19: persist enabled
[  142.439696][T11650] tun19: tun_chr_ioctl cmd 1074025675
[  142.441970][T11650] tun19: persist enabled
[  142.444118][T11649] tun19: tun_chr_ioctl cmd 1074025673
[  142.534775][T11659] smc: removing ib device syz0
[  142.891339][T11703] tun24: tun_chr_ioctl cmd 1074025675
[  142.893495][T11703] tun24: persist enabled
[  142.897047][T11703] tun24: tun_chr_ioctl cmd 1074025675
[  142.898969][T11703] tun24: persist enabled
[  143.045439][T11727] lo speed is unknown, defaulting to 1000
[  143.224234][T11752] tun16: tun_chr_ioctl cmd 1074025675
[  143.227450][T11752] tun16: persist enabled
[  143.229851][T11752] tun16: tun_chr_ioctl cmd 1074025675
[  143.232296][T11752] tun16: persist enabled
[  176.815332][T11763] lo speed is unknown, defaulting to 1000
[  176.964785][T11783] __nla_validate_parse: 10 callbacks suppressed
[  176.964800][T11783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1752'.
[  176.973305][T11773] lo speed is unknown, defaulting to 1000
[  177.054439][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1755'.
[  177.078276][T11793] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1755'.
[  177.146434][T11809] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  177.153637][T11810] xfrm0: entered promiscuous mode
[  177.155375][T11810] xfrm0: entered allmulticast mode
[  177.156308][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1760'.
[  177.201155][T11815] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1762'.
[  177.240366][T11820] delete_channel: no stack
[  177.333802][T11830] netlink: 'syz.0.1766': attribute type 15 has an invalid length.
[  177.400984][T11837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1765'.
[  177.407421][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1768'.
[  177.459209][T11847] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1771'.
[  177.463598][T11848] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  177.713028][T11877] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1780'.
[  177.720550][T11877] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1780'.
[  177.925094][T11895] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  180.411382][T12019] tun25: tun_chr_ioctl cmd 1074025675
[  180.413195][T12019] tun25: persist enabled
[  180.414914][T12019] tun25: tun_chr_ioctl cmd 1074025675
[  180.417240][T12019] tun25: persist enabled
[  180.739299][T12047] lo speed is unknown, defaulting to 1000
[  180.768334][T12039] tun26: tun_chr_ioctl cmd 1074025675
[  180.770312][T12039] tun26: persist enabled
[  180.772221][T12039] tun26: tun_chr_ioctl cmd 1074025675
[  180.774137][T12039] tun26: persist enabled
[  180.776033][ T5238] Bluetooth: hci1: command 0x0406 tx timeout
[  181.046565][T12076] tun27: tun_chr_ioctl cmd 1074025675
[  181.049074][T12076] tun27: persist enabled
[  181.050822][T12076] tun27: tun_chr_ioctl cmd 1074025675
[  181.050888][T12078] netlink: 'syz.0.1845': attribute type 17 has an invalid length.
[  181.052678][T12076] tun27: persist enabled
[  181.079783][ T5873] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  181.083036][ T5873] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  181.087545][ T5873] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  181.090803][ T5873] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  181.249613][T12104] netlink: 'syz.2.1853': attribute type 10 has an invalid length.
[  181.253478][T12104] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  181.429817][T12116] lo speed is unknown, defaulting to 1000
[  181.480328][T12122] ==================================================================
[  181.483712][T12122] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x8af/0x1450
[  181.486997][T12122] Read of size 1 at addr ffff888113d5e2b0 by task syz.2.1857/12122
[  181.491263][T12122] 
[  181.492286][T12122] CPU: 0 UID: 0 PID: 12122 Comm: syz.2.1857 Not tainted syzkaller #0 PREEMPT(full) 
[  181.492306][T12122] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  181.492316][T12122] Call Trace:
[  181.492340][T12122]  <TASK>
[  181.492354][T12122]  dump_stack_lvl+0x189/0x250
[  181.492380][T12122]  ? __pfx_dump_stack_lvl+0x10/0x10
[  181.492397][T12122]  ? lock_release+0x4b/0x3e0
[  181.492451][T12122]  ? __virt_addr_valid+0x4a5/0x5c0
[  181.492471][T12122]  print_report+0xca/0x240
[  181.492484][T12122]  ? __xfrm_state_insert+0x8af/0x1450
[  181.492499][T12122]  kasan_report+0x118/0x150
[  181.492521][T12122]  ? __xfrm_state_insert+0x8af/0x1450
[  181.492538][T12122]  __xfrm_state_insert+0x8af/0x1450
[  181.492563][T12122]  ? xfrm_state_insert+0x44/0x60
[  181.492579][T12122]  xfrm_state_insert+0x54/0x60
[  181.492593][T12122]  ipcomp6_init_state+0x655/0x900
[  181.492611][T12122]  __xfrm_init_state+0xa76/0x13f0
[  181.492633][T12122]  ? __xfrm_init_state+0x7ef/0x13f0
[  181.492650][T12122]  xfrm_init_state+0x18/0xa0
[  181.492663][T12122]  pfkey_add+0x1d38/0x2e00
[  181.492683][T12122]  ? __pfx_pfkey_add+0x10/0x10
[  181.492695][T12122]  ? kmem_cache_free+0x18f/0x400
[  181.492720][T12122]  pfkey_sendmsg+0xbfe/0x1090
[  181.492736][T12122]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  181.492752][T12122]  ? plist_check_list+0x30f/0x330
[  181.492770][T12122]  ? aa_sock_msg_perm+0xf1/0x1d0
[  181.492784][T12122]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  181.492801][T12122]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  181.492813][T12122]  __sock_sendmsg+0x21c/0x270
[  181.492834][T12122]  ____sys_sendmsg+0x52d/0x830
[  181.492850][T12122]  ? __pfx_____sys_sendmsg+0x10/0x10
[  181.492874][T12122]  ? import_iovec+0x74/0xa0
[  181.492892][T12122]  ___sys_sendmsg+0x21f/0x2a0
[  181.492907][T12122]  ? __pfx____sys_sendmsg+0x10/0x10
[  181.492921][T12122]  ? __pfx_futex_wake_mark+0x10/0x10
[  181.492947][T12122]  ? __fget_files+0x2a/0x420
[  181.492966][T12122]  ? __fget_files+0x3a0/0x420
[  181.492988][T12122]  __sys_sendmmsg+0x227/0x430
[  181.493001][T12122]  ? __pfx___sys_sendmmsg+0x10/0x10
[  181.493012][T12122]  ? do_futex+0x333/0x420
[  181.493027][T12122]  ? fdget+0x184/0x1e0
[  181.493042][T12122]  ? __pfx___se_sys_futex+0x10/0x10
[  181.493056][T12122]  ? fd_install+0x30d/0x540
[  181.493077][T12122]  __x64_sys_sendmmsg+0xa0/0xc0
[  181.493091][T12122]  do_syscall_64+0xfa/0x3b0
[  181.493113][T12122]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.493126][T12122]  ? exc_page_fault+0x9f/0xf0
[  181.493142][T12122]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.493156][T12122] RIP: 0033:0x7fdd9f38ebe9
[  181.493171][T12122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  181.493184][T12122] RSP: 002b:00007fdd9d5ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  181.493202][T12122] RAX: ffffffffffffffda RBX: 00007fdd9f5b5fa0 RCX: 00007fdd9f38ebe9
[  181.493211][T12122] RDX: 000000000400008a RSI: 0000200000000180 RDI: 0000000000000006
[  181.493222][T12122] RBP: 00007fdd9f411e19 R08: 0000000000000000 R09: 0000000000000000
[  181.493230][T12122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  181.493237][T12122] R13: 00007fdd9f5b6038 R14: 00007fdd9f5b5fa0 R15: 00007ffe6b36da08
[  181.493254][T12122]  </TASK>
[  181.493262][T12122] 
[  181.596063][T12122] Allocated by task 10646:
[  181.597613][T12122]  kasan_save_track+0x3e/0x80
[  181.599096][T12122]  __kasan_slab_alloc+0x6c/0x80
[  181.600906][T12122]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  181.602555][T12122]  xfrm_state_alloc+0x24/0x2f0
[  181.604205][T12122]  __find_acq_core+0x8a7/0x1c00
[  181.606129][T12122]  xfrm_find_acq+0x78/0xa0
[  181.607523][T12122]  xfrm_alloc_userspi+0x6b3/0xc90
[  181.609049][T12122]  xfrm_user_rcv_msg+0x7a3/0xab0
[  181.610679][T12122]  netlink_rcv_skb+0x208/0x470
[  181.612486][T12122]  xfrm_netlink_rcv+0x79/0x90
[  181.614220][T12122]  netlink_unicast+0x82f/0x9e0
[  181.616038][T12122]  netlink_sendmsg+0x805/0xb30
[  181.617870][T12122]  __sock_sendmsg+0x21c/0x270
[  181.619656][T12122]  ____sys_sendmsg+0x505/0x830
[  181.621421][T12122]  ___sys_sendmsg+0x21f/0x2a0
[  181.623085][T12122]  __x64_sys_sendmsg+0x19b/0x260
[  181.624856][T12122]  do_syscall_64+0xfa/0x3b0
[  181.626375][T12122]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.628499][T12122] 
[  181.629221][T12122] Freed by task 24:
[  181.630601][T12122]  kasan_save_track+0x3e/0x80
[  181.632264][T12122]  kasan_save_free_info+0x46/0x50
[  181.633958][T12122]  __kasan_slab_free+0x5b/0x80
[  181.635451][T12122]  kmem_cache_free+0x18f/0x400
[  181.637091][T12122]  xfrm_state_gc_task+0x52d/0x6b0
[  181.638969][T12122]  process_scheduled_works+0xae1/0x17b0
[  181.641056][T12122]  worker_thread+0x8a0/0xda0
[  181.642823][T12122]  kthread+0x711/0x8a0
[  181.644454][T12122]  ret_from_fork+0x3fc/0x770
[  181.646086][T12122]  ret_from_fork_asm+0x1a/0x30
[  181.647853][T12122] 
[  181.648663][T12122] The buggy address belongs to the object at ffff888113d5df80
[  181.648663][T12122]  which belongs to the cache xfrm_state of size 928
[  181.653048][T12122] The buggy address is located 816 bytes inside of
[  181.653048][T12122]  freed 928-byte region [ffff888113d5df80, ffff888113d5e320)
[  181.657252][T12122] 
[  181.658020][T12122] The buggy address belongs to the physical page:
[  181.659981][T12122] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888113d5e400 pfn:0x113d5c
[  181.663061][T12122] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  181.665897][T12122] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  181.668219][T12122] page_type: f5(slab)
[  181.669568][T12122] raw: 057ff00000000040 ffff88801d6b4dc0 dead000000000122 0000000000000000
[  181.672589][T12122] raw: ffff888113d5e400 00000000800e0007 00000000f5000000 0000000000000000
[  181.675455][T12122] head: 057ff00000000040 ffff88801d6b4dc0 dead000000000122 0000000000000000
[  181.678043][T12122] head: ffff888113d5e400 00000000800e0007 00000000f5000000 0000000000000000
[  181.680751][T12122] head: 057ff00000000002 ffffea00044f5701 00000000ffffffff 00000000ffffffff
[  181.683597][T12122] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  181.686966][T12122] page dumped because: kasan: bad access detected
[  181.689234][T12122] page_owner tracks the page as allocated
[  181.691415][T12122] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6978, tgid 6977 (syz.0.318), ts 73281441226, free_ts 73241249515
[  181.697997][T12122]  post_alloc_hook+0x240/0x2a0
[  181.699547][T12122]  get_page_from_freelist+0x21e4/0x22c0
[  181.701288][T12122]  __alloc_frozen_pages_noprof+0x181/0x370
[  181.703166][T12122]  alloc_pages_mpol+0x232/0x4a0
[  181.704756][T12122]  allocate_slab+0x8a/0x370
[  181.706219][T12122]  ___slab_alloc+0xbeb/0x1410
[  181.707752][T12122]  kmem_cache_alloc_noprof+0x283/0x3c0
[  181.709492][T12122]  xfrm_state_alloc+0x24/0x2f0
[  181.711019][T12122]  xfrm_add_sa+0x17d1/0x4070
[  181.712486][T12122]  xfrm_user_rcv_msg+0x7a3/0xab0
[  181.714089][T12122]  netlink_rcv_skb+0x208/0x470
[  181.716127][T12122]  xfrm_netlink_rcv+0x79/0x90
[  181.717633][T12122]  netlink_unicast+0x82f/0x9e0
[  181.719224][T12122]  netlink_sendmsg+0x805/0xb30
[  181.720970][T12122]  __sock_sendmsg+0x21c/0x270
[  181.722810][T12122]  ____sys_sendmsg+0x505/0x830
[  181.724330][T12122] page last free pid 6973 tgid 6972 stack trace:
[  181.726266][T12122]  __free_frozen_pages+0xbc4/0xd30
[  181.728120][T12122]  stack_depot_save_flags+0x436/0x860
[  181.730162][T12122]  ref_tracker_free+0xfe/0x7d0
[  181.732056][T12122]  neigh_parms_release+0x19c/0x230
[  181.734073][T12122]  inetdev_event+0x7d5/0x15b0
[  181.735792][T12122]  notifier_call_chain+0x1b6/0x3e0
[  181.737584][T12122]  netif_set_mtu_ext+0x594/0x7d0
[  181.739192][T12122]  netif_set_mtu+0xa4/0x150
[  181.740629][T12122]  dev_set_mtu+0x126/0x260
[  181.742011][T12122]  dev_ioctl+0x7b4/0x1150
[  181.743352][T12122]  sock_do_ioctl+0x22c/0x300
[  181.745069][T12122]  sock_ioctl+0x576/0x790
[  181.746649][T12122]  __se_sys_ioctl+0xfc/0x170
[  181.748367][T12122]  do_syscall_64+0xfa/0x3b0
[  181.749954][T12122]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.752327][T12122] 
[  181.753330][T12122] Memory state around the buggy address:
[  181.755404][T12122]  ffff888113d5e180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  181.758351][T12122]  ffff888113d5e200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  181.761130][T12122] >ffff888113d5e280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  181.763700][T12122]                                      ^
[  181.765650][T12122]  ffff888113d5e300: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  181.768116][T12122]  ffff888113d5e380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  181.770888][T12122] ==================================================================
[  181.773648][T12122] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  181.776297][T12122] CPU: 0 UID: 0 PID: 12122 Comm: syz.2.1857 Not tainted syzkaller #0 PREEMPT(full) 
[  181.779291][T12122] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  181.782900][T12122] Call Trace:
[  181.784154][T12122]  <TASK>
[  181.785112][T12122]  dump_stack_lvl+0x99/0x250
[  181.786734][T12122]  ? __asan_memcpy+0x40/0x70
[  181.788212][T12122]  ? __pfx_dump_stack_lvl+0x10/0x10
[  181.790051][T12122]  ? __pfx__printk+0x10/0x10
[  181.791747][T12122]  vpanic+0x281/0x750
[  181.793168][T12122]  ? __pfx_vpanic+0x10/0x10
[  181.794619][T12122]  ? rcu_is_watching+0x15/0xb0
[  181.796080][T12122]  panic+0xb9/0xc0
[  181.797274][T12122]  ? __pfx_panic+0x10/0x10
[  181.798670][T12122]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  181.800483][T12122]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  181.802238][T12122]  ? __xfrm_state_insert+0x8af/0x1450
[  181.803865][T12122]  check_panic_on_warn+0x89/0xb0
[  181.805357][T12122]  ? __xfrm_state_insert+0x8af/0x1450
[  181.806961][T12122]  end_report+0x78/0x160
[  181.808274][T12122]  kasan_report+0x129/0x150
[  181.809666][T12122]  ? __xfrm_state_insert+0x8af/0x1450
[  181.811262][T12122]  __xfrm_state_insert+0x8af/0x1450
[  181.812878][T12122]  ? xfrm_state_insert+0x44/0x60
[  181.814450][T12122]  xfrm_state_insert+0x54/0x60
[  181.815946][T12122]  ipcomp6_init_state+0x655/0x900
[  181.817558][T12122]  __xfrm_init_state+0xa76/0x13f0
[  181.819286][T12122]  ? __xfrm_init_state+0x7ef/0x13f0
[  181.820905][T12122]  xfrm_init_state+0x18/0xa0
[  181.822412][T12122]  pfkey_add+0x1d38/0x2e00
[  181.824049][T12122]  ? __pfx_pfkey_add+0x10/0x10
[  181.825759][T12122]  ? kmem_cache_free+0x18f/0x400
[  181.827252][T12122]  pfkey_sendmsg+0xbfe/0x1090
[  181.828959][T12122]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  181.830813][T12122]  ? plist_check_list+0x30f/0x330
[  181.832735][T12122]  ? aa_sock_msg_perm+0xf1/0x1d0
[  181.834489][T12122]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  181.836145][T12122]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  181.837798][T12122]  __sock_sendmsg+0x21c/0x270
[  181.839564][T12122]  ____sys_sendmsg+0x52d/0x830
[  181.841159][T12122]  ? __pfx_____sys_sendmsg+0x10/0x10
[  181.842822][T12122]  ? import_iovec+0x74/0xa0
[  181.844317][T12122]  ___sys_sendmsg+0x21f/0x2a0
[  181.845896][T12122]  ? __pfx____sys_sendmsg+0x10/0x10
[  181.847497][T12122]  ? __pfx_futex_wake_mark+0x10/0x10
[  181.849272][T12122]  ? __fget_files+0x2a/0x420
[  181.850876][T12122]  ? __fget_files+0x3a0/0x420
[  181.852466][T12122]  __sys_sendmmsg+0x227/0x430
[  181.853970][T12122]  ? __pfx___sys_sendmmsg+0x10/0x10
[  181.855639][T12122]  ? do_futex+0x333/0x420
[  181.856971][T12122]  ? fdget+0x184/0x1e0
[  181.858275][T12122]  ? __pfx___se_sys_futex+0x10/0x10
[  181.860116][T12122]  ? fd_install+0x30d/0x540
[  181.861543][T12122]  __x64_sys_sendmmsg+0xa0/0xc0
[  181.863164][T12122]  do_syscall_64+0xfa/0x3b0
[  181.864927][T12122]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.866828][T12122]  ? exc_page_fault+0x9f/0xf0
[  181.868249][T12122]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.870289][T12122] RIP: 0033:0x7fdd9f38ebe9
[  181.871766][T12122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  181.878813][T12122] RSP: 002b:00007fdd9d5ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  181.882036][T12122] RAX: ffffffffffffffda RBX: 00007fdd9f5b5fa0 RCX: 00007fdd9f38ebe9
[  181.885089][T12122] RDX: 000000000400008a RSI: 0000200000000180 RDI: 0000000000000006
[  181.888121][T12122] RBP: 00007fdd9f411e19 R08: 0000000000000000 R09: 0000000000000000
[  181.891158][T12122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  181.894309][T12122] R13: 00007fdd9f5b6038 R14: 00007fdd9f5b5fa0 R15: 00007ffe6b36da08
[  181.897517][T12122]  </TASK>
[  181.899348][T12122] Kernel Offset: disabled
[  181.901061][T12122] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:25:37  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001223 RDI=0000000000001224 RBP=00000000000003f8 RSP=ffffc90007d66cb0
R8 =ffff888021770237 R9 =1ffff110042ee046 R10=dffffc0000000000 R11=ffffffff854f1e80
R12=dffffc0000000000 R13=ffffffff99afa8f7 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1efc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fdd9d5ee6c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fdd9d5edfc8 CR3=000000002ae4a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fdd9f587498 00007fdd9f587470 XMM03=00007fdd9f5874a8 00007fdd9f5874a0
XMM04=00007fdda00ed100 00007fdd9f587460 XMM05=00007fdd9f587478 00007fdd9f5874c0
XMM06=00007fdd9f5874b8 00007fdd9f5874b0 XMM07=00007fdd9f5874a8 00007fdd9f5874a0
XMM08=0000000000000000 00007fdd9f412ee7 XMM09=0000000000000000 00007fdd9f412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffc90007400000 RBX=1ffff110046d325a RCX=ffff8881000f8000 RDX=0000000000010000
RSI=ffff888023698000 RDI=0000000000000017 RBP=0000000000000080 RSP=ffffc900001e0dc0
R8 =ffffffff8fa38437 R9 =1ffffffff1f47086 R10=dffffc0000000000 R11=ffffffff8699c190
R12=dffffc0000000000 R13=ffff8880236992d0 R14=ffff888023698000 R15=dffffc0000000000
RIP=ffffffff8699c1d8 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055b7130c37e8 CR3=000000010f8ac000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0880041b80031b80 0426a00300080026
XMM02=0a10001b9003da52 1a42ad0a08088003 XMM03=0035800335800426 c00302100026b003
XMM04=d003260800359803 0208003590032010 XMM05=014080a1a8100004 1000258004010000
XMM06=0e08060801598600 080026f003000800 XMM07=26e00320100026d0 0326080035980302
XMM08=0800359003201000 35800335800426c0 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
