last executing test programs:

2.11031437s ago: executing program 0 (id=2897):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0x1, 0xfff, 0xb})
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xa}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x1)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180))
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f00000001c0)=[0x3, 0x1], 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', <r3=>0x0})
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x6, '\x00', r3, r4, 0x3, 0x4, 0x1}, 0x50)
listen(r0, 0x1)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_EXPECT_NAT={0x80, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3f}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x48045}, 0x8000014)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0xf503, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = accept(r5, &(0x7f0000000480)=@ethernet={0x0, @broadcast}, &(0x7f0000000500)=0x80)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r1, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xb4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xa9, 0x5, "53b27dbdeebbfd35f001ccbb4a829565c6b1c3ba988534117cb53218268278764b42bd4e6e8c391da4b4e8842f800b5ce006d69d52fbe3fec93a5c62d3df85110253697754846bb491ae5e617c48b122b221cd6091f0f23086167abb3671ec935bfdb3952ff5aee56658ee8a9210fca41e2388ee4927cc14465f4a18f60d05995698e5f6e0d5976fa00b8a190f3e73da614e649fb246b02756384ae1d2f1b11c3ed7998bcb"}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r2)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xc0, r7, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc438}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xef6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4a7fcba7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20020048}, 0xc001)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'gre0\x00', <r8=>0x0})
syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r6)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r9, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xa}, @ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004010}, 0x4800)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000d80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x244, r1, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x200080c0}, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x11008010}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, r10, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000040)
sendmsg$alg(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000f00)="7e53cc83b6af2d3a8f1d985decd1fd34038aecb5c60b077a9a46163864825d535ed70373575bf395009645ffebb6524813fdc13a8f04cb983aead5acf7dc3d39cc25defe565f4921f3e8aa60f92274a021db5fdfa30a73d1c1f07ae524c71a6d30ddf9a4f8c34f1ae6c21911d37c14b0bac3405c75aea4cedafe05a38a92786c2fdbb91e7e62d645bf4994457ceba57067ddc1ad68200a6a46055808634d69", 0x9f}, {&(0x7f0000000fc0)="70f5bff235f0e3178a0a0d545306ba72623dfc99a57a82b428d27fce09757dc892decae69c08d71c5505009e98693c45069ab2df1926f175f38af5d208016b18f6f73679985f2ee41a9ef5aece36f46ad66085c911aa86d7c5b55cfb0b10314196f56c7e9832b8add4b9d08b24652b09668ea81a57f2a0483f99d812fdb1bfb4dde61bb86055987aa4c5dae0ae558fa949b5cd7e5e7fb09acc83fe51aa2bf7852328a3e109e48a6045ddfaa27a4bd0bc0b46d77c0593b353b7f56c718fc12afaa72c3f3542afe00346bad4bbc10b38922df068c7f28e821c789a0e04e20b86e7dc09e2b781ba05", 0xe7}], 0x2, &(0x7f0000001100)=[@assoc={0x18}, @op={0x18}, @iv={0xc0, 0x117, 0x2, 0xac, "912c48f91a50e6b2e9cc8cc0b9ba74ef1c9a611ce5ec627924b52f578daa5579d8831e45df7a40d2fa7de95cc8976b39e7cf209384160a5703459dea542c62dd85d1713a8c2c632627b7fa353cb2e18b6ea102e1bbd2b8d9fc8b19c0cb3234bc42b7ac6602fd16e3417b60245826e07167ec50f9e668ebbaa1908dde6cf1acefab3f7b836d114cd026a19743fdc2a6d87f26e9e0b412bedb37bf1d12986e9c6e1892f977501fb31525cf9a70"}, @assoc={0x18, 0x117, 0x4, 0xc2}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x108, 0x117, 0x2, 0xf0, "9722ee555a41f99e9c3fc2f604b794b14cb0a4c769a6924b16af6d3747afdcf6f63bab3d320e1fe23b05854b5c5cf224c71b6450604cf50848216c0dae50bba5db212797c480ae16c2a0fd80a2cbd07257f1256a6dba72c211c97096338b7b646a01be2836531d4073c8adf2a6a7911792ea569a5a9035031356f2980197726a3f8b59b20cf145e51121c4ffc09aecab71cb4d5cdffd9340e7d51f1b40a6f9e7e47705504a25aa9f4af14b0bf5bc164c474cc401b909b788467e78f9cad3a89499396b1f035ce6b44c805b737a74c8c945b1401a1bd64d91d7c053765c23b31bcb0a1cbbe9b67ed7d22ef597aaf89d80"}, @assoc={0x18, 0x117, 0x4, 0x91}], 0x258, 0x20040000}, 0x600c840)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001400), r0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000001500)={&(0x7f00000013c0), 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x54, r11, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40800)
r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000001580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x3c, r12, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x20, 0x17, {0x17, 0x29c, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}}}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8000)

2.10929876s ago: executing program 1 (id=2898):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40008}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x1a}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0x40, 0xfffffffffffffff0}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async)
r1 = socket(0x10, 0x3, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r1], 0x40}}, 0x0) (async)
ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0)

2.027422241s ago: executing program 0 (id=2899):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000001ac0)={'vcan0\x00', 0x6})
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000009000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000bff9a3299648e7fdd7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000180), &(0x7f0000000100)=r1}, 0x20)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES32], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x8840)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6d02001190780003"], 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth0_virt_wifi\x00', &(0x7f0000000280)=@ethtool_stats={0x1d, 0x2, [0xe04, 0x8001]}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000006800e90a00030000000000040005000000000000d3c522516f33a300000000ca9b440c3ff17db1cb1e207f55c9f7245e30c34124879a32f735092b7c03b0871d4b2f097833e98a8446c7593f9b4c7deb95024e88252ea0b9d6c32831b373e8e815e291433453324b7fbc9c33ce2da23eb074b9c92687ac1b4a6a9009b91b756938c7aa015b57b6824eb2f236207ebe32b6e7046c961b"], 0x1c}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800490400000000000014000a100000000000000100000008001e0001000000"], 0x24}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x10, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0, 0xffffffff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.198595188s ago: executing program 1 (id=2908):
socket(0x11, 0x800000003, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x558, 0x0, 0x0, 0x1a8, 0x3d8, 0x1a8, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x70}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz1\x00'}}]}, @TTL={0x28}}, {{@uncond, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={{0x40}}, @common=@ah={{0x30}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'pim6reg0\x00', 'erspan0\x00'}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b8)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000880)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000001100)=ANY=[@ANYBLOB="1800000000000000000000000000000071122a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
r4 = accept4(r3, 0x0, 0x0, 0x80800)
sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x9}], 0x18, 0x40084}], 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="050000000000ec00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000500"/28], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x17, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="00000000ff0700001860000005000000000000000600000018000000fdffffff00000000ff0f0000"], &(0x7f0000000700)='GPL\x00', 0x9, 0xf1, &(0x7f0000000740)=""/241, 0x40f00, 0xb, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x0, 0x9}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0x8, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b00)=[0xffffffffffffffff], &(0x7f0000000b40), 0x10, 0x2}, 0x94)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@nested={0x4, 0x4}]}, 0x18}}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r7, 0x6, 0xd, &(0x7f0000000000)="bc", 0x1)
setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000080), 0x4)
setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000080), 0x4)
sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r6)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000600)=0x681, 0x4)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r8=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r8, 0x2, 0x6}, 0x10)
socket$packet(0x11, 0x3, 0x300)

1.197512215s ago: executing program 0 (id=2909):
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffff1, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x749}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000500050040000000050006000300000008000300010000002352bd93d9bce10c9950773caf0b1ed0e9f2a3975b8bc6"], 0x2c}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
close(r0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r4, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe)
listen(r4, 0x44)
setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000280)=0x1, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0xe, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000842}, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180))

1.098675416s ago: executing program 0 (id=2911):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'})
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x1d, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10)
unshare(0x2c060000)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a3100000000050001"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300010029bd7000fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="d45006000200000024001a802000028014"], 0x44}, 0x1, 0x0, 0x0, 0x8081}, 0x20040000)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x224e, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
sendmsg$nl_crypto(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xf0}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000040000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xe, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB="7e88a4fca523948cd00667cfedf09bb045da06cb06ee9d70d144f98f6e41e035ce7067f712e31690d9040affe3bfe37b7fe74ab37b9aeb5f7d7f11292da35a", @ANYRES16=r5, @ANYRES64=r6, @ANYBLOB="f21e2a97dea7d3cc72846b273550efcdd9aca15306a622217e9f874a583f7d5c840e874bc496decc566080e364f0fdfcedd44c3a2064c003afab72f9866592297e967a6bd8c8fe2d5ecc191c10b640abe58cae2cf523b6eb872fd9f422e73f1d23e3a68599092b86966b911ea9345b510c7c85dc74ea6503dfe1c7a94034c46ea71797fb1266aefb61efd2a20a35a708d6a1a2d7023216", @ANYRESOCT=r9], 0x5c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
socket$inet6_sctp(0xa, 0x1, 0x84)

886.322301ms ago: executing program 0 (id=2914):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f3030a7d3f408004a00003c0003000302059078ac1414000a0101004408f57000007fff070909b173380000010000004e240000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6100000090780003"], 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, <r2=>0x0, <r3=>0x0}, &(0x7f0000000400)=0xfffffffffffffefa)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x24000046)
openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000010c0)=ANY=[@ANYBLOB="dc1000003a00040027bd7000fddbdf250c00580000000000", @ANYRES32=r0, @ANYBLOB="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"], 0x10dc}], 0x1, &(0x7f0000000480)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2, r3}}}, @rights={{0x30, 0x1, 0x1, [r4, r0, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}}], 0x70, 0x50}, 0x200400c4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r8, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r9, 0x5421, &(0x7f0000000100)=0x100000001)
setsockopt$inet_tcp_int(r9, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4)
r10 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$sock_int(r10, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4)
setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000040)=0x98c, 0x4)
sendmmsg$inet6(r10, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
recvfrom(r10, 0x0, 0x0, 0x40016300, 0x0, 0x0)
connect$inet(r9, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10)
close(r9)

885.688897ms ago: executing program 1 (id=2915):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
shutdown(0xffffffffffffffff, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9)
bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
socket$inet6(0xa, 0x80002, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$kcm(0xa, 0x5, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r3], 0x38}}, 0x10)
r5 = socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x34}}, 0x0)

548.473308ms ago: executing program 1 (id=2918):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x8, [@ptr={0x9, 0x0, 0x0, 0x2, 0x1}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x6e, 0x0, 0x3d, 0x5}, @struct={0x1, 0x5, 0x0, 0x4, 0x1, 0x2, [{0x7, 0x3, 0x40}, {0xf, 0x8, 0x7}, {0xa, 0x0, 0x8}, {0xd, 0x2, 0x1}, {0x7, 0x1, 0x10}]}, @float={0x7, 0x0, 0x0, 0x10, 0xdf7cc10fbbc614f5}]}, {0x0, [0x30, 0x2e, 0x30, 0x30, 0x5f, 0x0]}}, &(0x7f0000000440)=""/75, 0x90, 0x4b, 0x0, 0x9, 0x10000}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000600)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x13, 0x4, 0x40008, 0x2, 0x10, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x50)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$FIOCLEX(r3, 0x5451)
r6 = socket(0xa, 0x3, 0x2)
setsockopt$inet6_int(r6, 0x29, 0x9, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000080)={'team0\x00', <r7=>0x0})
sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004061}, 0xc0b0)
r8 = socket$netlink(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r9 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r9, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r10, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040040}, 0x40)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x60, r5, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', <r12=>0x0})
r13 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r2, <r14=>0xffffffffffffffff}, 0x4)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x2010, r14, 0x47e71000)
sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000b0000000000060002404e22000008000500", @ANYRES32=r12], 0x4c}}, 0x20000004)

388.753509ms ago: executing program 2 (id=2920):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000020000103000000000000000180000000000000001a0000000c000c400000000000000003"], 0x28}}, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf0200000000000085000000cc000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x6c, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}]}}}, @IFLA_LINK={0x8}]}, 0x6c}}, 0x0)

268.874089ms ago: executing program 2 (id=2921):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}, 0x6}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="300000000000000029000000320000000002000000000000c910fc0021a15e0413"], 0x30}}], 0x1, 0x4c0c0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000090400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000002c001280110001006272696467655f736c61766500000000140005800800250007000000050028"], 0x4c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r5 = epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100))
shutdown(r6, 0x0)
epoll_wait(r5, &(0x7f0000000000)=[{}], 0x1, 0x101)
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)={0x2000200b})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_TTL={0x5, 0x8, 0x5}]}}}]}, 0x40}}, 0x20000080)

268.10177ms ago: executing program 1 (id=2922):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x9d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x6, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x240400c0}, 0x4048811)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x6, 0xb}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc)
readv(r0, &(0x7f0000002540)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x241, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0xf)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0xc, 0x2}]}]}]}}]}, 0x60}}, 0x0)
write$cgroup_subtree(r0, &(0x7f00000001c0)={[{0x2b, 'cpu'}, {0x2b, 'memory'}, {0x2b, 'pids'}, {0x2b, 'net_prio'}, {0x2d, 'pids'}, {0x2d, 'freezer'}, {0x2b, 'freezer'}, {0x2d, 'cpuset'}, {0x2d, 'devices'}, {0x2b, 'pids'}]}, 0x4c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x44000005)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="200000005e00010000000000000000000c000000010000000600008004000180"], 0x20}], 0x1}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r10, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000040)={0x14, 0x14, 0x1, 0x0, 0x0, {0x1e}}, 0x14}}, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)

159.104667ms ago: executing program 1 (id=2923):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x3, 0x1, 0xe01, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x800}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x102}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x10}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
socket$kcm(0x29, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9141, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000140000000004000400000c001680050009000100000008001700ffffffff00"/48], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x80)
sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)={0x1c, r5, 0x10, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c8c4}, 0x20000000)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
socket$unix(0x1, 0x1, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdfffd00000000000000008500000041000000850000002a00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x11, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r8)
sendmsg$NL80211_CMD_REQ_SET_REG(r8, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="a9ff74eea8ff682a697297765359df0df966919472336b102a8dd5be59efa31ebe956859553bc407a172fe79e0433ac26b9fffb38b8bdbc7ca0b139e0e0af5a17a1d80968dbc171a0c5a0dc523492a587576fcf153", @ANYRES16=r9, @ANYBLOB="010025bd7000fcdbdf251b000000340022800c0000800800020000000100240000800800050000000000080004000300000008000600070000000800070002000000"], 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x804)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000840)={<r10=>0x0, @private, @broadcast}, &(0x7f00000006c0)=0xc)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newqdisc={0x4c, 0x24, 0x0, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xd, 0x3}, {0xe, 0x7}, {0xfff1, 0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @qdisc_kind_options=@q_qfg={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x4c}}, 0x40004)
r11 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000740)={@in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0x0, 0x0, 0x1d, 0x0, "26e16a7d1ff239cf9f1f0e7523d7c57eef31658662f242186c6e3a7a1b7f4fef05069680ee1694fab45972129a9992753774309bffb4445b8d5b5c9f2a3ecc40e44d835ea0ac04c4d092fa4982676053"}, 0xd8)
sendmsg$inet_sctp(r11, &(0x7f0000000700)={&(0x7f00000001c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)='N', 0x1}, {&(0x7f0000000300)="0baaf36eb348782bbafc35e697f51d80c06e1275ba5e1a6b85582237f14ecbf6830467b425566b185156a5e191e36b81a4732ec026f25f9bfa9918b8ee5fcf3e24d961407d4b9149ad119950ed38529aac218f29b0a0139107d30b7047a952b79c028b72def84d7e0d4ae1fa7d3254", 0x6f}], 0x2, 0x0, 0x0, 0x804c040}, 0x0)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r11, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'})

109.244722ms ago: executing program 2 (id=2924):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f0000000040))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e640000000034000280050001000400000005001600"], 0xc3}, 0x1, 0x100000000000000}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x607}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x9}]}}}]}, 0x3c}}, 0x0)

108.632809ms ago: executing program 2 (id=2925):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
close(0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r2}, 0x38) (async)
r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000100), 0x1003, r5}, 0x38) (async, rerun: 32)
r6 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @empty}, 0x3ff, 0x0, 0x2}}, 0x2e)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r9) (async)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@private2, @in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6=@private0}}, &(0x7f0000000340)=0xe8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000000203010200000000000005000000000f080004400000000008000340000001000000001e080001000300001e090002000000000600"/72], 0x48}}, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'ipvlan0\x00'}) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x24004004) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

9.250286ms ago: executing program 2 (id=2926):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x80002, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(0xffffffffffffffff, 0xfffffffc)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000002000000140001800500020001000000080006001a000000ac1afd026a9745490ac1758bc85b1d92a2ccc04b6d1b0c7430666feca990374af90b00493fed1e6e281042644e22f1e2d0a7e7272f15c396779b"], 0x28}, 0x1, 0x0, 0x0, 0xff0f0000}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="ae1e020000000000"], 0x20}}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})

7.388549ms ago: executing program 0 (id=2927):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r0 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x10000, @private2}, {0xa, 0x0, 0x0, @dev, 0x20000}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c)
unshare(0x6a040000)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f00000004c0)='cgroup.controllers\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r4 = socket(0x5, 0x3, 0x2000008)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0xffffffffffffff58, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0)
close(r2)
connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
setsockopt(0xffffffffffffffff, 0x84, 0x7d, &(0x7f00000002c0)="aa8e0cf56164be5b", 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="000224bd7000fbdbdf250200000005003d000600008008000b01"], 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20040000)
bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
socket$inet_icmp(0x2, 0x2, 0x1)

0s ago: executing program 2 (id=2928):
r0 = socket$inet6(0xa, 0xa, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x2, 0x20000000004, 0x10001, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff}, {0x0, 0x4, 0x3, 0x2}, 0x7, 0x0, 0x1, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x3}}, 0xe8)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000440)={0x2, 0xe20, @empty}, 0x10)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0, 0x1}, &(0x7f0000000140)=0x8)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f00000002c0)=0x100000b5, 0x4)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000001c0)=ANY=[@ANYBLOB="120000008f07e3c981626f03d55b251faee145c8ce4b", @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x88081, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="98000000", @ANYRES16=0x0, @ANYBLOB="040026bd7000fddbdf251400000008000f00b60000000500180000000000080011000300000008000a000900000008000f008102000008001600400000000800020007000000080016000e00000008000a00ff7f00003c0001801400020076657468305f746f5f7465616d000000140002006261746164765f736c6176655f310000080003000300000008000100", @ANYRESDEC=r4, @ANYBLOB="000003e11cff08e75ae83de2114bfdb11c9cdf2e9feeb4eff82a7b9d096f4d21a701c736746374bae243ed3bb247208ea48d43232e681e180705b0eeab44104979951d4559bb57e214ee4de0068aed196ca5859586e4369eebfcabb59f18da9817d4092fc65f853d9160661fd2511c23ec20b895b63b7dc4098f"], 0x98}, 0x1, 0x0, 0x0, 0x24000080}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x2004e0c4)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50)
socket$packet(0x11, 0x3, 0x300)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)

kernel console output (not intermixed with test programs):

multicast mode
[  232.465529][T12376] delete_channel: no stack
[  232.470732][T12379] bond1: option mode: unable to set because the bond device is up
[  232.536389][T12383] tipc: Resetting bearer <eth:syzkaller0>
[  232.549904][T12383] tipc: Disabling bearer <eth:syzkaller0>
[  232.679999][T12387] tipc: Resetting bearer <ib:team0>
[  232.710826][T12387] batman_adv: batadv0: Interface deactivated: ip6gretap0
[  233.091448][T12409] 8021q: adding VLAN 0 to HW filter on device bond1
[  233.190293][T12415] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (255)
[  233.246290][T12419] vlan5: entered promiscuous mode
[  233.255537][T12418] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  233.258561][T12418] syzkaller0: entered promiscuous mode
[  233.260363][T12418] syzkaller0: entered allmulticast mode
[  233.276506][T12418] tipc: Resetting bearer <eth:syzkaller0>
[  233.279382][T12416] tipc: Resetting bearer <eth:syzkaller0>
[  233.287266][T12416] tipc: Disabling bearer <eth:syzkaller0>
[  233.457055][T12431] bond1: option mode: unable to set because the bond device is up
[  233.590493][T12443] lo speed is unknown, defaulting to 1000
[  233.916657][T12456] vlan3: entered promiscuous mode
[  233.918903][T12456] vlan3: entered allmulticast mode
[  233.920524][T12456] hsr_slave_1: entered allmulticast mode
[  234.019971][T12463] netlink: 'syz.2.1882': attribute type 83 has an invalid length.
[  234.316628][T12474] 8021q: adding VLAN 0 to HW filter on device batadv0
[  234.320549][T12474] batadv0: entered promiscuous mode
[  234.326673][T12474] team0: Failed to send port change of device batadv0 via netlink (err -105)
[  234.330659][T12474] team0: Failed to send options change via netlink (err -105)
[  234.334092][T12474] team0: Port device batadv0 added
[  234.423179][T12478] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  234.426520][T12478] syzkaller0: entered promiscuous mode
[  234.428740][T12478] syzkaller0: entered allmulticast mode
[  234.438297][T12478] tipc: Resetting bearer <eth:syzkaller0>
[  234.458371][T12478] tipc: Disabling bearer <eth:syzkaller0>
[  234.640504][T12489] netlink: 'syz.1.1890': attribute type 7 has an invalid length.
[  234.650411][T12489] netlink: 'syz.1.1890': attribute type 2 has an invalid length.
[  234.721080][T12491] __nla_validate_parse: 13 callbacks suppressed
[  234.721095][T12491] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1889'.
[  234.726447][T12495] bridge37: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  234.890986][T12511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1892'.
[  234.899217][T12511] netlink: 428 bytes leftover after parsing attributes in process `syz.0.1892'.
[  234.905245][T12511] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1892'.
[  235.060400][T12517] 8021q: adding VLAN 0 to HW filter on device bond18
[  235.069017][T12517] vlan5: entered promiscuous mode
[  235.070778][T12517] bond18: entered promiscuous mode
[  235.075479][T12517] vlan5: entered allmulticast mode
[  235.077605][T12517] bond18: entered allmulticast mode
[  235.095003][T12517] bond18: (slave gretap3): making interface the new active one
[  235.097963][T12517] gretap3: entered promiscuous mode
[  235.100254][T12517] gretap3: entered allmulticast mode
[  235.104618][T12517] bond18: (slave gretap3): Enslaving as an active interface with an up link
[  235.150525][T12521] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1897'.
[  235.215181][T12523] bond0: (slave rose0): Enslaving as an active interface with an up link
[  235.480563][T12533] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1901'.
[  235.488067][T12533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1901'.
[  235.651762][T12535] lo speed is unknown, defaulting to 1000
[  235.689683][T12538] batman_adv: batadv0: Removing interface: ip6gretap0
[  235.694376][T12538] bond16: (slave gretap4): Releasing active interface
[  235.697170][T12538] gretap4: left allmulticast mode
[  235.820315][T12543] erspan0: left allmulticast mode
[  235.837824][T12543] D: left promiscuous mode
[  235.839502][T12543] D: left allmulticast mode
[  235.842087][T12543] bridge30: left allmulticast mode
[  235.877337][T12546] bond1: option mode: unable to set because the bond device is up
[  235.891171][T12548] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  235.997028][T12562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1909'.
[  236.083051][T12570] validate_nla: 1 callbacks suppressed
[  236.083063][T12570] netlink: 'syz.1.1912': attribute type 1 has an invalid length.
[  236.087188][T12567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1911'.
[  236.111620][T12570] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  237.723267][T12582] lo speed is unknown, defaulting to 1000
[  237.767131][T12595] bond1: option mode: unable to set because the bond device is up
[  237.806920][T12597] bond0: entered promiscuous mode
[  237.815075][T12597] bond0: left promiscuous mode
[  237.858938][T12602] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  238.116338][T12610] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1918'.
[  238.266248][T12613] macvlan5: entered allmulticast mode
[  238.268495][T12613] veth1_vlan: entered allmulticast mode
[  238.278937][T12613] veth1_vlan: left allmulticast mode
[  238.336945][T12614] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  238.660970][T12617] netlink: 'syz.2.1920': attribute type 2 has an invalid length.
[  238.757395][T12628] bond1: option mode: unable to set because the bond device is up
[  238.907157][T12635] netlink: 'syz.0.1926': attribute type 10 has an invalid length.
[  238.941670][T12636] nbd: nbd2 already in use
[  239.025396][T12641] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.046396][T12644] tipc: Disabling bearer <eth:syzkaller0>
[  239.088065][T12638] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  239.106200][T12638] netlink: 'syz.1.1927': attribute type 13 has an invalid length.
[  239.109560][T12638] netlink: 'syz.1.1927': attribute type 11 has an invalid length.
[  239.130763][T12649] bond1: option mode: unable to set because the bond device is up
[  239.518354][T12684] netlink: 'syz.0.1938': attribute type 10 has an invalid length.
[  239.763505][T12691] __nla_validate_parse: 10 callbacks suppressed
[  239.763523][T12691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1941'.
[  239.872748][T12694] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1942'.
[  240.018359][T12696] bond0: entered promiscuous mode
[  240.029426][T12696] bond0: left promiscuous mode
[  240.054564][T12697] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  240.212122][T12706] netlink: 'syz.2.1946': attribute type 9 has an invalid length.
[  240.647156][T12731] netlink: 'syz.2.1951': attribute type 1 has an invalid length.
[  240.649749][T12731] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1951'.
[  240.784035][T12736] lo speed is unknown, defaulting to 1000
[  240.848488][T12740] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1954'.
[  240.897224][T12742] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  240.899698][T12742] syzkaller0: entered promiscuous mode
[  240.901482][T12742] syzkaller0: entered allmulticast mode
[  241.007778][T12742] tipc: Resetting bearer <eth:syzkaller0>
[  241.012464][T12741] tipc: Resetting bearer <eth:syzkaller0>
[  241.038666][T12741] tipc: Disabling bearer <eth:syzkaller0>
[  241.075116][T12752] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  241.086285][T12752] syzkaller0: entered promiscuous mode
[  241.088201][T12752] syzkaller0: entered allmulticast mode
[  241.132066][T12758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1960'.
[  241.149621][T12752] tipc: Resetting bearer <eth:syzkaller0>
[  241.155161][T12751] tipc: Resetting bearer <eth:syzkaller0>
[  241.168224][T12751] tipc: Disabling bearer <eth:syzkaller0>
[  241.294867][T12764] 8021q: adding VLAN 0 to HW filter on device bond1
[  241.375471][T12757] sit0: left promiscuous mode
[  241.408291][T12757] tipc: Resetting bearer <eth:team0>
[  241.410094][T12757] team0: left promiscuous mode
[  241.412569][T12757] batadv0: left promiscuous mode
[  241.455475][T12774] netlink: 'syz.1.1964': attribute type 16 has an invalid length.
[  241.458707][T12774] netlink: 'syz.1.1964': attribute type 17 has an invalid length.
[  241.478088][T12757] vlan0: left promiscuous mode
[  241.508936][T12757] vlan3: left promiscuous mode
[  241.511180][T12757] vlan3: left allmulticast mode
[  241.515079][T12757] hsr_slave_1: left allmulticast mode
[  241.541391][T12771] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  241.545414][T12771] netlink: 'syz.0.1963': attribute type 10 has an invalid length.
[  241.548581][T12771] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1963'.
[  241.818392][T12801] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode
[  241.828145][T12801] bond18: (slave gretap3): Releasing active interface
[  241.830863][T12801] gretap3: left promiscuous mode
[  241.839726][T12801] gretap3: left allmulticast mode
[  241.850612][T12801] netlink: 'syz.0.1969': attribute type 10 has an invalid length.
[  241.859520][T12801] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  241.863657][T12801] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  241.990834][T12814] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1972'.
[  242.066087][T12819] netlink: 'syz.1.1974': attribute type 1 has an invalid length.
[  242.068980][T12819] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1974'.
[  242.138001][T12823] netlink: 'syz.1.1975': attribute type 1 has an invalid length.
[  242.297495][T12829] netlink: 'syz.1.1978': attribute type 4 has an invalid length.
[  242.300382][T12829] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.1978'.
[  242.311568][T12829] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1978'.
[  242.621154][T12846] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  242.626372][T12846] CPU: 0 UID: 0 PID: 12846 Comm: syz.1.1984 Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[  242.626396][T12846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  242.626405][T12846] Call Trace:
[  242.626412][T12846]  <TASK>
[  242.626419][T12846]  dump_stack_lvl+0x189/0x250
[  242.626446][T12846]  ? __pfx_dump_stack_lvl+0x10/0x10
[  242.626460][T12846]  ? __pfx__printk+0x10/0x10
[  242.626478][T12846]  ? kernfs_path_from_node+0x2c/0x260
[  242.626494][T12846]  ? kernfs_path_from_node+0x2c/0x260
[  242.626507][T12846]  ? kernfs_path_from_node+0x2c/0x260
[  242.626523][T12846]  ? kernfs_path_from_node+0x22c/0x260
[  242.626537][T12846]  ? kernfs_path_from_node+0x2c/0x260
[  242.626554][T12846]  sysfs_warn_dup+0x8e/0xa0
[  242.626569][T12846]  sysfs_do_create_link_sd+0xc0/0x110
[  242.626585][T12846]  device_add_class_symlinks+0x1cf/0x240
[  242.626606][T12846]  device_add+0x475/0xb50
[  242.626625][T12846]  wiphy_register+0x1ba6/0x28d0
[  242.626658][T12846]  ? __pfx_wiphy_register+0x10/0x10
[  242.626675][T12846]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  242.626696][T12846]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  242.626715][T12846]  ieee80211_register_hw+0x3425/0x4080
[  242.626743][T12846]  ? ieee80211_register_hw+0x1491/0x4080
[  242.626764][T12846]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  242.626781][T12846]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  242.626806][T12846]  ? __hrtimer_setup+0x187/0x210
[  242.626825][T12846]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  242.626855][T12846]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  242.626897][T12846]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  242.626913][T12846]  ? trace_kmalloc+0x1f/0xd0
[  242.626930][T12846]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  242.626949][T12846]  ? kstrndup+0xbf/0x160
[  242.626972][T12846]  hwsim_new_radio_nl+0xea4/0x1b10
[  242.626992][T12846]  ? __pfx___nla_validate_parse+0x10/0x10
[  242.627020][T12846]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  242.627048][T12846]  ? __nla_parse+0x40/0x60
[  242.627065][T12846]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  242.627088][T12846]  genl_family_rcv_msg_doit+0x215/0x300
[  242.627108][T12846]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  242.627134][T12846]  ? bpf_lsm_capable+0x9/0x20
[  242.627152][T12846]  ? security_capable+0x7e/0x2e0
[  242.627176][T12846]  genl_rcv_msg+0x60e/0x790
[  242.627221][T12846]  ? __pfx_genl_rcv_msg+0x10/0x10
[  242.627236][T12846]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  242.627266][T12846]  netlink_rcv_skb+0x208/0x470
[  242.627284][T12846]  ? __lock_acquire+0xab9/0xd20
[  242.627303][T12846]  ? __pfx_genl_rcv_msg+0x10/0x10
[  242.627319][T12846]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  242.627353][T12846]  ? down_read+0x1ad/0x2e0
[  242.627367][T12846]  genl_rcv+0x28/0x40
[  242.627380][T12846]  netlink_unicast+0x82f/0x9e0
[  242.627403][T12846]  ? __pfx_netlink_unicast+0x10/0x10
[  242.627422][T12846]  ? netlink_sendmsg+0x642/0xb30
[  242.627438][T12846]  ? skb_put+0x11b/0x210
[  242.627454][T12846]  netlink_sendmsg+0x805/0xb30
[  242.627481][T12846]  ? __pfx_netlink_sendmsg+0x10/0x10
[  242.627502][T12846]  ? aa_sock_msg_perm+0x94/0x160
[  242.627520][T12846]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  242.627535][T12846]  ? __pfx_netlink_sendmsg+0x10/0x10
[  242.627554][T12846]  __sock_sendmsg+0x21c/0x270
[  242.627574][T12846]  ____sys_sendmsg+0x505/0x830
[  242.627591][T12846]  ? __pfx_____sys_sendmsg+0x10/0x10
[  242.627613][T12846]  ? import_iovec+0x74/0xa0
[  242.627634][T12846]  ___sys_sendmsg+0x21f/0x2a0
[  242.627649][T12846]  ? __pfx____sys_sendmsg+0x10/0x10
[  242.627693][T12846]  ? __fget_files+0x2a/0x420
[  242.627706][T12846]  ? __fget_files+0x3a0/0x420
[  242.627727][T12846]  __x64_sys_sendmsg+0x19b/0x260
[  242.627743][T12846]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  242.627766][T12846]  ? rcu_is_watching+0x15/0xb0
[  242.627790][T12846]  ? do_syscall_64+0xbe/0x3b0
[  242.627812][T12846]  do_syscall_64+0xfa/0x3b0
[  242.627829][T12846]  ? lockdep_hardirqs_on+0x9c/0x150
[  242.627851][T12846]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.627865][T12846]  ? exc_page_fault+0x9f/0xf0
[  242.627883][T12846]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.627896][T12846] RIP: 0033:0x7f92d038ebe9
[  242.627909][T12846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  242.627920][T12846] RSP: 002b:00007f92d1213038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  242.627937][T12846] RAX: ffffffffffffffda RBX: 00007f92d05b6090 RCX: 00007f92d038ebe9
[  242.627947][T12846] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000d
[  242.627955][T12846] RBP: 00007f92d0411e19 R08: 0000000000000000 R09: 0000000000000000
[  242.627963][T12846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  242.627971][T12846] R13: 00007f92d05b6128 R14: 00007f92d05b6090 R15: 00007ffd6606f358
[  242.627994][T12846]  </TASK>
[  242.914689][   T33] audit: type=1800 audit(1755160693.618:3): pid=12855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1987" name="memory.events" dev="tmpfs" ino=3250 res=0 errno=0
[  242.923852][   T33] audit: type=1804 audit(1755160693.618:4): pid=12855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1987" name="/newroot/632/memory.events" dev="tmpfs" ino=3250 res=1 errno=0
[  243.115233][T12873] rdma_op ffff8881232341f0 conn xmit_rdma 0000000000000000
[  243.336261][T12886] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  243.339637][T12886] syzkaller0: entered promiscuous mode
[  243.341773][T12886] syzkaller0: entered allmulticast mode
[  243.341910][T12887] netlink: 'syz.0.1994': attribute type 1 has an invalid length.
[  243.367318][T12887] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR
[  243.372275][T12886] tipc: Resetting bearer <eth:syzkaller0>
[  243.381162][T12885] tipc: Resetting bearer <eth:syzkaller0>
[  243.415870][T12885] tipc: Disabling bearer <eth:syzkaller0>
[  243.508133][T12900] nbd: nbd0 already in use
[  243.655716][T12904] nbd: device at index 0 is going down
[  244.117758][T12941] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  244.121168][T12941] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  244.204287][T12951] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  244.207760][T12951] syzkaller0: entered promiscuous mode
[  244.210105][T12951] syzkaller0: entered allmulticast mode
[  244.224095][T12951] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  244.238587][T12951] tipc: Resetting bearer <eth:syzkaller0>
[  244.241707][T12949] tipc: Resetting bearer <eth:syzkaller0>
[  244.253087][T12949] tipc: Disabling bearer <eth:syzkaller0>
[  244.348743][T12959] netlink: 'syz.1.2012': attribute type 4 has an invalid length.
[  244.395780][T12961] netlink: 'syz.2.2014': attribute type 1 has an invalid length.
[  244.525249][T12973] bond24: (slave bridge48): Releasing active interface
[  244.530731][T12973] team0: Port device batadv0 removed
[  244.775726][T13003] vlan4: entered promiscuous mode
[  244.778102][T13003] team0: entered promiscuous mode
[  244.893646][T13015] __nla_validate_parse: 15 callbacks suppressed
[  244.893666][T13015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2026'.
[  244.932007][T13018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2028'.
[  244.936506][T13018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2028'.
[  245.034800][T13026] batman_adv: batadv0: Adding interface: macvlan4
[  245.037003][T13026] batman_adv: batadv0: The MTU of interface macvlan4 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  245.046596][T13026] batman_adv: batadv0: Interface activated: macvlan4
[  245.078007][T13036] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  245.093623][T13036] syzkaller0: entered promiscuous mode
[  245.095945][T13036] syzkaller0: entered allmulticast mode
[  245.131518][T13036] tipc: Resetting bearer <eth:syzkaller0>
[  245.138284][T13035] tipc: Resetting bearer <eth:syzkaller0>
[  245.173536][T13039] nbd: nbd1 already in use
[  245.173819][T13035] tipc: Disabling bearer <eth:syzkaller0>
[  245.281653][T13049] openvswitch: netlink: Message has 4 unknown bytes.
[  245.283430][T13044] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2036'.
[  245.284691][T13049] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  245.298784][T13048] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2038'.
[  245.317827][T13048] syz_tun: entered promiscuous mode
[  245.338355][T13048] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  245.546395][T13060] lo speed is unknown, defaulting to 1000
[  245.549067][T13062] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2043'.
[  245.697565][T13071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2044'.
[  245.821108][T13074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2045'.
[  245.833143][T13074] bridge33: the hash_elasticity option has been deprecated and is always 16
[  245.848826][   T47] IPVS: starting estimator thread 0...
[  245.932800][T13076] IPVS: using max 62 ests per chain, 148800 per kthread
[  246.089171][T13083] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2048'.
[  246.204082][ T5843] IPVS: stop unused estimator thread 0...
[  246.277668][T13092] batman_adv: batadv0: Interface deactivated: macvlan4
[  246.310543][T13098] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  246.314365][T13098] bond0: (slave lo): refused to change device type
[  246.325405][T13098] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2052'.
[  246.355612][T13100] bond0: (slave syz_tun): Releasing backup interface
[  246.448134][T13109] nbd: device at index 1 is going down
[  246.587841][T13121] nbd: device at index 1 is going down
[  246.651141][T13127] nbd: must specify at least one socket
[  246.742563][ T5211] Bluetooth: hci2: command 0x0405 tx timeout
[  246.995431][T13142] validate_nla: 4 callbacks suppressed
[  246.995453][T13142] netlink: 'syz.1.2063': attribute type 7 has an invalid length.
[  247.000719][T13142] netlink: 'syz.1.2063': attribute type 8 has an invalid length.
[  247.044202][T13148] netlink: 'syz.1.2064': attribute type 1 has an invalid length.
[  247.097929][T13151] lo speed is unknown, defaulting to 1000
[  247.148083][T13153] pim6reg: entered allmulticast mode
[  247.151915][T13153] pim6reg: left allmulticast mode
[  247.164250][T13152] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  247.502020][T13155] 8021q: adding VLAN 0 to HW filter on device bond22
[  247.777995][T13174] netlink: 'syz.2.2069': attribute type 1 has an invalid length.
[  247.866006][T13174] 8021q: adding VLAN 0 to HW filter on device bond30
[  247.930954][T13174] veth7: entered promiscuous mode
[  247.936310][T13174] bond30: (slave veth7): Enslaving as an active interface with a down link
[  247.949085][T13178] veth0: entered promiscuous mode
[  247.975102][T13177] erspan0: entered allmulticast mode
[  247.991123][T13176] veth0: left promiscuous mode
[  248.107151][T13190] nbd: must specify at least one socket
[  248.233762][T13199] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  248.253909][T13199] syzkaller0: entered promiscuous mode
[  248.256094][T13199] syzkaller0: entered allmulticast mode
[  248.278099][T13197] lo speed is unknown, defaulting to 1000
[  248.326557][T13199] tipc: Resetting bearer <eth:syzkaller0>
[  248.354009][T13198] tipc: Resetting bearer <eth:syzkaller0>
[  248.427391][T13198] tipc: Disabling bearer <eth:syzkaller0>
[  248.669924][T13212] lo speed is unknown, defaulting to 1000
[  249.058684][T13226] netlink: 'syz.1.2082': attribute type 2 has an invalid length.
[  249.662981][T13234] bond30: (slave veth7): Releasing active interface
[  249.940416][T13242] netlink: 'syz.1.2086': attribute type 1 has an invalid length.
[  249.943901][T13242] __nla_validate_parse: 13 callbacks suppressed
[  249.943914][T13242] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2086'.
[  249.951779][T13242] 8021q: adding VLAN 0 to HW filter on device bond1
[  250.391551][T13261] batadv_slave_0: entered promiscuous mode
[  250.571042][T13274] netlink: 'syz.2.2093': attribute type 1 has an invalid length.
[  250.690998][T13279] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2094'.
[  250.702162][T13279] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  250.813797][T13285] nbd: nbd2 already in use
[  250.816765][T11365] block nbd2: NBD_DISCONNECT
[  251.224779][T13260] batadv_slave_0: left promiscuous mode
[  251.514264][T13291] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2098'.
[  251.692016][T13297] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  251.698095][T13302] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2099'.
[  251.705671][T13297] syzkaller0: entered promiscuous mode
[  251.707475][T13297] syzkaller0: entered allmulticast mode
[  251.721815][T13297] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  251.743746][T13297] tipc: Resetting bearer <eth:syzkaller0>
[  251.747826][T13296] tipc: Resetting bearer <eth:syzkaller0>
[  251.771308][T13296] tipc: Disabling bearer <eth:syzkaller0>
[  251.850352][T13309] netlink: 'syz.0.2103': attribute type 1 has an invalid length.
[  251.853713][T13309] netlink: 'syz.0.2103': attribute type 11 has an invalid length.
[  251.856727][T13309] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2103'.
[  251.858878][T13311] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2104'.
[  252.260402][T13351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2115'.
[  252.275064][T13351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2115'.
[  252.389011][T13363] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2120'.
[  252.486919][T13370] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2122'.
[  252.725107][T13390] netlink: 'syz.1.2128': attribute type 1 has an invalid length.
[  252.760865][T13390] 8021q: adding VLAN 0 to HW filter on device bond23
[  252.891014][T13390] 8021q: adding VLAN 0 to HW filter on device bond23
[  252.893662][T13390] bond23: (slave vxcan1): The slave device specified does not support setting the MAC address
[  252.900153][T13390] bond23: (slave vxcan1): Error -95 calling set_mac_address
[  252.948498][T13403] veth13: entered promiscuous mode
[  252.953806][T13403] bond23: (slave veth13): Enslaving as an active interface with a down link
[  252.959398][T13403] erspan0: entered allmulticast mode
[  253.634177][T13414] netlink: 'syz.2.2132': attribute type 1 has an invalid length.
[  253.881680][T13430] netlink: 'syz.1.2136': attribute type 4 has an invalid length.
[  253.885799][T13430] netlink: 'syz.1.2136': attribute type 17 has an invalid length.
[  254.036961][T13440] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  254.040445][T13440] syzkaller0: entered promiscuous mode
[  254.043628][T13440] syzkaller0: entered allmulticast mode
[  254.055565][T13440] bond0: down delay (5) is not a multiple of miimon (100), value rounded to 0 ms
[  254.059239][T13440] bond0: option all_slaves_active: invalid value (7)
[  254.124776][T13439] tipc: Resetting bearer <eth:syzkaller0>
[  254.141331][T13439] tipc: Disabling bearer <eth:syzkaller0>
[  254.661189][T13458] hsr_slave_1 (unregistering): left promiscuous mode
[  254.674752][T13461] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  254.679757][T13461] mac80211_hwsim hwsim8 wlan1: left allmulticast mode
[  254.691519][T13461] vlan5: left promiscuous mode
[  254.693755][T13461] bond18: left promiscuous mode
[  254.695944][T13461] vlan5: left allmulticast mode
[  254.698145][T13461] bond18: left allmulticast mode
[  254.824379][T13473] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  254.884817][T13478] netlink: 'syz.2.2149': attribute type 1 has an invalid length.
[  254.929174][T13481] 8021q: adding VLAN 0 to HW filter on device bond1
[  254.989649][T13484] netlink: 'syz.2.2151': attribute type 1 has an invalid length.
[  254.993454][T13484] __nla_validate_parse: 11 callbacks suppressed
[  254.993472][T13484] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2151'.
[  255.116943][T13488] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2153'.
[  255.139958][T13491] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2154'.
[  255.199452][T13488] gretap0: left promiscuous mode
[  255.204015][T13488] erspan0: left allmulticast mode
[  255.223520][T13488] syz_tun: left promiscuous mode
[  255.244812][T13488] 8021q: adding VLAN 0 to HW filter on device team0
[  255.248174][T13488] tipc: Resetting bearer <eth:team0>
[  255.253027][T13488] tipc: Resetting bearer <eth:team0>
[  255.301272][T13488] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  255.315508][T13488] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  255.455530][T13510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2158'.
[  255.460179][T13510] netlink: 'syz.2.2158': attribute type 10 has an invalid length.
[  255.484871][T13512] netlink: 'syz.1.2159': attribute type 1 has an invalid length.
[  255.487880][T13512] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2159'.
[  255.657839][T13517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2161'.
[  255.662144][T13518] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2161'.
[  255.739239][T13527] lo speed is unknown, defaulting to 1000
[  255.747815][T13528] syzkaller1: entered promiscuous mode
[  255.750103][T13528] syzkaller1: entered allmulticast mode
[  255.758428][T13528] netlink: 'syz.1.2163': attribute type 3 has an invalid length.
[  255.761480][T13528] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2163'.
[  255.768719][T13528] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  255.821693][T13533] netlink: 'syz.0.2166': attribute type 7 has an invalid length.
[  255.828883][T13533] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2166'.
[  256.657192][T13541] bond1: option mode: unable to set because the bond device is up
[  256.676531][T13543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2170'.
[  256.797661][T13547] lo speed is unknown, defaulting to 1000
[  256.853232][T13551] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8
[  256.872085][T13553] bridge39: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  256.901459][T13554] bridge40: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  257.290145][T13571] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  257.304526][T13571] syzkaller0: entered promiscuous mode
[  257.306813][T13571] syzkaller0: entered allmulticast mode
[  257.344040][T13571] tipc: Resetting bearer <eth:syzkaller0>
[  257.349076][T13570] tipc: Resetting bearer <eth:syzkaller0>
[  257.384342][T13570] tipc: Disabling bearer <eth:syzkaller0>
[  257.479306][T13575] tipc: Resetting bearer <eth:team0>
[  257.598718][T13575] veth7: left promiscuous mode
[  257.781162][T13588] validate_nla: 7 callbacks suppressed
[  257.781182][T13588] netlink: 'syz.0.2182': attribute type 13 has an invalid length.
[  257.799536][T13588] netlink: 'syz.0.2182': attribute type 17 has an invalid length.
[  257.804904][T13590] bridge0: entered promiscuous mode
[  257.928593][T13588] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  257.933976][T13588] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  257.944227][T13588] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  257.952712][   T47] lo speed is unknown, defaulting to 1000
[  257.961598][   T47] syz0: Port: 1 Link ACTIVE
[  257.982029][   T47] lo speed is unknown, defaulting to 1000
[  257.993768][T13594] lo speed is unknown, defaulting to 1000
[  258.109943][T13604] ip6tnl4: entered promiscuous mode
[  258.112136][T13604] ip6tnl4: entered allmulticast mode
[  258.118250][T13604] team0: Device ip6tnl4 is up. Set it down before adding it as a team port
[  258.268854][T13607] lo speed is unknown, defaulting to 1000
[  258.973324][T13623] 8021q: adding VLAN 0 to HW filter on device batadv1
[  258.977918][T13623] team0: Failed to send port change of device batadv1 via netlink (err -105)
[  258.981789][T13623] team0: Failed to send options change via netlink (err -105)
[  259.013740][T13623] team0: Port device batadv1 added
[  259.250386][T13643] netlink: 'syz.0.2199': attribute type 12 has an invalid length.
[  259.565079][T13657] netlink: 'syz.1.2201': attribute type 1 has an invalid length.
[  260.106382][T13661] __nla_validate_parse: 15 callbacks suppressed
[  260.106396][T13661] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2204'.
[  260.131572][T13661] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2204'.
[  260.234699][T13663] IPVS: length: 163 != 8
[  260.361834][T13671] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2207'.
[  260.408179][T13673] netlink: 'syz.0.2208': attribute type 10 has an invalid length.
[  261.008033][T13684] netlink: 'syz.2.2212': attribute type 11 has an invalid length.
[  261.090973][T13690] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2214'.
[  261.168949][T13697] netlink: 'syz.2.2217': attribute type 4 has an invalid length.
[  261.171329][T13697] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2217'.
[  261.178746][T13697] : renamed from bond0
[  261.311795][T13703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2219'.
[  261.370202][T13710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2219'.
[  261.396844][T13712] netlink: 'syz.0.2220': attribute type 21 has an invalid length.
[  261.400621][T13712] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2220'.
[  261.409433][T13712] netlink: 'syz.0.2220': attribute type 5 has an invalid length.
[  261.412986][T13712] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2220'.
[  261.468992][T13713] netlink: 'syz.0.2220': attribute type 13 has an invalid length.
[  261.474336][T13713] netlink: 'syz.0.2220': attribute type 17 has an invalid length.
[  261.487288][T13713] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  261.517810][T13719] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2222'.
[  261.564702][T13723] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  261.770690][T13732] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  262.145507][T13757] gretap0: entered promiscuous mode
[  262.213430][T13752] nbd2: detected capacity change from 0 to 63
[  262.220600][   T57] block nbd2: Receive control failed (result -32)
[  262.224821][T11364] block nbd2: Send control failed (result -32)
[  262.229459][T11364] block nbd2: Request send failed, requeueing
[  262.239688][   T25] block nbd2: Dead connection, failed to find a fallback
[  262.242600][   T25] block nbd2: shutting down sockets
[  262.245146][   T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  262.248938][   T25] Buffer I/O error on dev nbd2, logical block 0, async page read
[  262.252795][T11364] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  262.259137][T11364] Buffer I/O error on dev nbd2, logical block 1, async page read
[  262.269678][T11364] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  262.277165][T11364] Buffer I/O error on dev nbd2, logical block 2, async page read
[  262.281481][T11364] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  262.288009][T11364] Buffer I/O error on dev nbd2, logical block 3, async page read
[  262.297217][T11364] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  262.302512][T11364] Buffer I/O error on dev nbd2, logical block 0, async page read
[  262.303097][T13757] 0{X: renamed from gretap0
[  262.305629][T11364] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  262.311600][T11364] Buffer I/O error on dev nbd2, logical block 1, async page read
[  262.320528][T13757] 0{X: left promiscuous mode
[  262.320550][T11364] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  262.323089][T13757] 0{X: entered allmulticast mode
[  262.326120][T11364] Buffer I/O error on dev nbd2, logical block 2, async page read
[  262.331380][T11364] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  262.338438][T11364] Buffer I/O error on dev nbd2, logical block 3, async page read
[  262.341702][T11364] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  262.347026][T11364] Buffer I/O error on dev nbd2, logical block 0, async page read
[  262.350200][T11364] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  262.358678][T11364] Buffer I/O error on dev nbd2, logical block 1, async page read
[  262.364415][T13757] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  262.369984][T11364] ldm_validate_partition_table(): Disk read failed.
[  262.388378][T11364] Dev nbd2: unable to read RDB block 0
[  262.400210][T11364]  nbd2: unable to read partition table
[  262.422189][T11364] ldm_validate_partition_table(): Disk read failed.
[  262.428059][T11364] Dev nbd2: unable to read RDB block 0
[  262.437477][T11364]  nbd2: unable to read partition table
[  262.535773][T13778] bridge41: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  263.712907][T13822] sctp: [Deprecated]: syz.1.2247 (pid 13822) Use of int in maxseg socket option.
[  263.712907][T13822] Use struct sctp_assoc_value instead
[  263.874444][T13835] nbd: nbd1 already in use
[  263.879650][T13829] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  263.885619][T13829] syzkaller0: entered promiscuous mode
[  263.887886][T13829] syzkaller0: entered allmulticast mode
[  263.967360][T13842] tipc: Resetting bearer <eth:syzkaller0>
[  264.020122][T13828] tipc: Resetting bearer <eth:syzkaller0>
[  264.048790][T13828] tipc: Disabling bearer <eth:syzkaller0>
[  264.256939][T13863] lo speed is unknown, defaulting to 1000
[  264.298439][T13871] netlink: 'syz.0.2258': attribute type 10 has an invalid length.
[  264.301868][T13871] netlink: 'syz.0.2258': attribute type 10 has an invalid length.
[  264.305332][T13871] netlink: 'syz.0.2258': attribute type 10 has an invalid length.
[  264.308332][T13871] netlink: 'syz.0.2258': attribute type 10 has an invalid length.
[  264.310941][T13871] netlink: 'syz.0.2258': attribute type 10 has an invalid length.
[  264.315457][T13871] netlink: 'syz.0.2258': attribute type 10 has an invalid length.
[  264.317996][T13871] netlink: 'syz.0.2258': attribute type 10 has an invalid length.
[  264.320544][T13871] netlink: 'syz.0.2258': attribute type 10 has an invalid length.
[  264.323240][T13871] netlink: 'syz.0.2258': attribute type 10 has an invalid length.
[  264.325782][T13871] netlink: 'syz.0.2258': attribute type 10 has an invalid length.
[  264.427710][T13871] lo speed is unknown, defaulting to 1000
[  264.983525][T13877] nbd: nbd2 already in use
[  264.985468][T13877] nbd: nbd2 already in use
[  265.019037][T13879] bridge50: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  265.144853][T13886] __nla_validate_parse: 16 callbacks suppressed
[  265.144868][T13886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2260'.
[  265.161954][T13888] 8021q: adding VLAN 0 to HW filter on device bond1
[  265.165118][T13886] netlink: 428 bytes leftover after parsing attributes in process `syz.2.2260'.
[  265.171366][T13886] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2260'.
[  265.283744][T13903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2264'.
[  265.473326][T13913] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2269'.
[  265.542245][T13920] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2270'.
[  265.601972][T13930] netdevsim0: entered allmulticast mode
[  265.682113][T13936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2275'.
[  265.686603][T13936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2275'.
[  265.745599][T13934] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2274'.
[  265.750919][T13934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2274'.
[  265.900601][T13944] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  265.907149][T13943] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  266.499870][T13961] rdma_rxe: rxe_newlink: failed to add lo
[  266.515806][T13961] 0{X: left allmulticast mode
[  266.518721][T13961] erspan0: left allmulticast mode
[  266.534591][T13961] 8021q: adding VLAN 0 to HW filter on device team0
[  266.538173][T13961] tipc: Resetting bearer <ib:team0>
[  266.540693][T13961] tipc: Resetting bearer <ib:team0>
[  266.548294][T13963] nbd: nbd2 already in use
[  266.550507][T13963] nbd: nbd2 already in use
[  266.554807][T13961] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  266.875686][T13979] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  267.004141][T13979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  267.016344][T13977] lo speed is unknown, defaulting to 1000
[  267.069496][T13980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  267.585394][T13987] nbd: nbd2 already in use
[  267.592863][T13987] nbd: nbd2 already in use
[  267.727758][T14000] lo speed is unknown, defaulting to 1000
[  267.747848][T14002] bond0: entered promiscuous mode
[  267.749748][T14002] 8021q: adding VLAN 0 to HW filter on device bond0
[  267.773019][T14002] bond0: (slave bridge51): making interface the new active one
[  267.775377][T14002] bridge51: entered promiscuous mode
[  267.777440][T14002] bond0: (slave bridge51): Enslaving as an active interface with an up link
[  267.862690][ T5818] Bluetooth: hci2: command 0x0405 tx timeout
[  268.040646][T14015] syzkaller0: entered promiscuous mode
[  268.045932][T14015] syzkaller0: entered allmulticast mode
[  268.256982][T14022] bridge34: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  268.389916][T14026] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  268.636802][T14035] IPv6: NLM_F_REPLACE set, but no existing node found!
[  268.648495][T14037] batman_adv: batadv0: Removing interface: macvlan4
[  269.715180][T14080] tipc: Disabling bearer <eth:team0>
[  269.800555][T14083] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  269.932122][T14103] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  269.938490][T14098] bond0: (slave bridge51): Releasing backup interface
[  269.941270][T14098] bridge51: left promiscuous mode
[  269.962162][T14101] tipc: Resetting bearer <eth:syzkaller0>
[  269.966319][T14100] tipc: Disabling bearer <eth:syzkaller0>
[  270.188062][T14109] nbd: device at index 0 is going down
[  270.244964][T14114] x9: renamed from bridge_slave_0 (while UP)
[  270.255712][T14114] validate_nla: 31 callbacks suppressed
[  270.255727][T14114] netlink: 'syz.0.2318': attribute type 5 has an invalid length.
[  270.544856][T14122] netlink: 'syz.1.2320': attribute type 28 has an invalid length.
[  270.547824][T14122] __nla_validate_parse: 22 callbacks suppressed
[  270.547838][T14122] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2320'.
[  270.728437][T14128] netlink: 'syz.2.2322': attribute type 10 has an invalid length.
[  270.731472][T14128] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2322'.
[  270.787990][T14137] nbd: nbd2 already in use
[  270.790583][T14137] nbd: nbd2 already in use
[  270.796940][T14138] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2323'.
[  270.811353][T14138] vlan6: entered promiscuous mode
[  270.891527][T14140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2325'.
[  270.900077][T14138] syzkaller0: entered promiscuous mode
[  270.902107][T14138] syzkaller0: entered allmulticast mode
[  270.929306][T14144] netlink: 'syz.2.2326': attribute type 1 has an invalid length.
[  270.958250][T14144] 8021q: adding VLAN 0 to HW filter on device bond31
[  271.049160][T14149] IPVS: set_ctl: invalid protocol: 59 100.1.1.0:20004
[  271.111752][T14151] netlink: 'syz.1.2329': attribute type 1 has an invalid length.
[  271.136434][T14151] 8021q: adding VLAN 0 to HW filter on device bond26
[  271.369943][T14171] bond1: option mode: unable to set because the bond device is up
[  271.528094][T14184] lo speed is unknown, defaulting to 1000
[  271.729545][T14195] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  271.731907][T14195] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  272.111152][T14201] 8021q: adding VLAN 0 to HW filter on device bond1
[  272.141587][T14198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  272.256089][T14208] netlink: 'syz.2.2344': attribute type 28 has an invalid length.
[  272.258702][T14208] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2344'.
[  272.396634][T14215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2346'.
[  272.400299][T14215] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2346'.
[  272.542688][T14221] pim6reg1: entered promiscuous mode
[  272.544980][T14221] pim6reg1: entered allmulticast mode
[  272.571347][T14224] bond1: option mode: unable to set because the bond device is up
[  272.626965][T14226] bridge0: failed insert local address into bridge forwarding table
[  272.639378][T14228] netlink: 'syz.0.2351': attribute type 1 has an invalid length.
[  272.669969][T14228] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2351'.
[  272.675633][T14228] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2351'.
[  272.680166][T14228] 8021q: adding VLAN 0 to HW filter on device bond19
[  272.806868][T14247] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2356'.
[  272.810367][T14247] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  272.842208][T14239] netlink: 'syz.1.2355': attribute type 2 has an invalid length.
[  272.866725][T14239] `: entered promiscuous mode
[  272.897171][T14255] 8021q: adding VLAN 0 to HW filter on device bond2
[  272.910009][T14254] nbd: nbd2 already in use
[  272.912236][T14254] nbd: nbd2 already in use
[  272.960411][T14259] netlink: 'syz.2.2360': attribute type 28 has an invalid length.
[  273.009054][T14261] syzkaller0: entered promiscuous mode
[  273.011264][T14261] syzkaller0: entered allmulticast mode
[  273.202161][T14271] bond0: left promiscuous mode
[  273.307459][T14273] netlink: 'syz.0.2365': attribute type 10 has an invalid length.
[  273.366351][T14276] bond2: option mode: unable to set because the bond device is up
[  273.516455][T14280] nbd: device at index 0 is going down
[  273.618837][T14284] IPv6: sit4: Disabled Multicast RS
[  273.725022][T14292] x9: entered allmulticast mode
[  273.810310][T14296] rdma_rxe: rxe_newlink: failed to add lo
[  273.902245][T14296] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  273.908448][T14296] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  273.914080][T14300] bond2: option mode: unable to set because the bond device is up
[  273.967948][T14308] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  273.970903][T14308] syzkaller0: entered promiscuous mode
[  273.975291][T14308] syzkaller0: entered allmulticast mode
[  273.990029][T14307] tipc: Resetting bearer <eth:syzkaller0>
[  274.005209][T14307] tipc: Disabling bearer <eth:syzkaller0>
[  274.248262][T14326] 8021q: adding VLAN 0 to HW filter on device bond1
[  274.323916][T14330] pimreg: entered allmulticast mode
[  274.326611][T14330] pimreg: left allmulticast mode
[  274.756455][T14344] bond1: option mode: unable to set because the bond device is up
[  274.844715][T14346] delete_channel: no stack
[  275.043635][T14360] veth8: entered promiscuous mode
[  275.045433][T14360] veth8: entered allmulticast mode
[  275.362134][T14346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  275.384266][T14388] validate_nla: 7 callbacks suppressed
[  275.384278][T14388] netlink: 'syz.1.2401': attribute type 28 has an invalid length.
[  275.720337][T14412] lo speed is unknown, defaulting to 1000
[  275.985581][T14412] __nla_validate_parse: 24 callbacks suppressed
[  275.985608][T14412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2407'.
[  276.042593][T14420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2408'.
[  276.056154][T14420] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  276.059823][T14420] syzkaller0: entered promiscuous mode
[  276.064581][T14420] syzkaller0: entered allmulticast mode
[  276.073538][T14413] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2407'.
[  276.115754][T14419] tipc: Resetting bearer <eth:syzkaller0>
[  276.136218][T14419] tipc: Disabling bearer <eth:syzkaller0>
[  276.273398][T14433] netlink: 'syz.1.2411': attribute type 83 has an invalid length.
[  276.448124][T14446] netlink: 'syz.1.2414': attribute type 10 has an invalid length.
[  276.451344][T14446] team0: Device ipvlan1 failed to enter team mode
[  276.457476][T14446] team0: Device ipvlan1 failed to enter team mode
[  276.515887][T14452] netlink: 'syz.1.2416': attribute type 1 has an invalid length.
[  276.543851][T14452] 8021q: adding VLAN 0 to HW filter on device bond27
[  276.559427][T14452] bond27: (slave ip6gretap1): making interface the new active one
[  276.563865][T14452] bond27: (slave ip6gretap1): Enslaving as an active interface with an up link
[  276.585916][T14452] veth17: entered promiscuous mode
[  276.591846][T14452] bond27: (slave veth17): Enslaving as an active interface with a down link
[  276.597483][T14452] erspan0: entered allmulticast mode
[  276.645461][T14457] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2418'.
[  276.680244][T14459] nbd: nbd2 already in use
[  276.880567][T14474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2422'.
[  276.940472][ T5843] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  276.949277][ T5843] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  276.958369][ T5843] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  276.961645][ T5843] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  277.041686][T14477] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  277.151340][T14485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2424'.
[  277.213630][T14491] nbd: nbd2 already in use
[  277.236061][T14489] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  277.491617][T14509] netlink: 'syz.2.2432': attribute type 28 has an invalid length.
[  277.494713][T14509] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2432'.
[  277.714176][T14521] lo speed is unknown, defaulting to 1000
[  277.901586][T14521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2435'.
[  278.136167][T14530] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2436'.
[  278.139879][T14530] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2436'.
[  278.340649][T14532] netlink: 'syz.0.2437': attribute type 1 has an invalid length.
[  278.377083][T14532] 8021q: adding VLAN 0 to HW filter on device bond20
[  278.417594][T14532] bond20: entered promiscuous mode
[  278.508897][T14537] netlink: 'syz.0.2439': attribute type 10 has an invalid length.
[  278.714498][T14546] syzkaller0: tun_chr_ioctl cmd 2164298801
[  278.768467][   T13] syzkaller0: tun_net_xmit 76
[  278.770781][   T13] syzkaller0: tun_net_xmit 48
[  278.773175][T14546] syzkaller0: create flow: hash 2431652968 index 1
[  278.792824][  T788] syzkaller0: tun_net_xmit 76
[  278.850558][T14560] netlink: 'syz.1.2446': attribute type 1 has an invalid length.
[  278.862594][  T788] syzkaller0: tun_net_xmit 76
[  278.878583][T14553] syzkaller0: delete flow: hash 2431652968 index 1
[  280.214017][T14560] workqueue: Failed to create a rescuer kthread for wq "bond28": -EINTR
[  280.237460][T14568] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  280.251751][T14568] tipc: Disabling bearer <eth:syzkaller0>
[  280.319397][T14572] IPVS: Scheduler module ip_vs_sip not found
[  280.341669][T14572] netlink: 'syz.2.2448': attribute type 12 has an invalid length.
[  280.378053][T14580] bridge0: failed insert local address into bridge forwarding table
[  280.418167][T14578] netlink: 'syz.1.2450': attribute type 1 has an invalid length.
[  280.421410][T14577] netlink: 'syz.1.2450': attribute type 1 has an invalid length.
[  280.497556][T14581] netlink: 'syz.1.2450': attribute type 11 has an invalid length.
[  280.497973][T14578] netlink: 'syz.1.2450': attribute type 11 has an invalid length.
[  280.545680][T14593] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  280.548354][T14594] syzkaller0: entered promiscuous mode
[  280.550218][T14594] syzkaller0: entered allmulticast mode
[  280.577530][T14593] tipc: Resetting bearer <eth:syzkaller0>
[  280.584472][T14592] tipc: Resetting bearer <eth:syzkaller0>
[  280.596081][T14592] tipc: Disabling bearer <eth:syzkaller0>
[  280.938071][T14620] tipc: Resetting bearer <ib:team0>
[  280.944852][T14620] bond23: (slave veth13): Releasing active interface
[  280.950486][T14620] team0: Port device batadv1 removed
[  280.955366][T14620] bond27: (slave ip6gretap1): Releasing active interface
[  280.958185][T14620] bond27: (slave ip6gretap1): the permanent HWaddr of slave - 92:8b:48:a0:6b:d2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  280.970925][T14620] bond27: (slave veth17): Releasing active interface
[  281.428050][T14622] __nla_validate_parse: 2 callbacks suppressed
[  281.428061][T14622] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2463'.
[  281.433692][T14622] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2463'.
[  281.570400][T14627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  281.698752][T14636] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  281.701320][T14636] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  281.706152][T14636] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  281.708998][T14636] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2468'.
[  281.766482][T14647] netlink: 'syz.2.2469': attribute type 7 has an invalid length.
[  281.815065][T14646] netlink: 'syz.1.2471': attribute type 28 has an invalid length.
[  281.818203][T14646] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2471'.
[  281.886374][T14657] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  281.915938][T14657] tipc: Resetting bearer <eth:syzkaller0>
[  281.980655][T14664] netlink: 'syz.1.2477': attribute type 14 has an invalid length.
[  281.997128][T14664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2477'.
[  282.010224][T14664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2477'.
[  282.094326][T14669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2478'.
[  282.178178][T14677] netlink: 'syz.1.2479': attribute type 1 has an invalid length.
[  282.237221][T14677] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2479'.
[  282.320956][T14679] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  282.439983][T14689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2482'.
[  282.448709][T14689] macsec0: entered promiscuous mode
[  282.450478][T14689] macvlan1: entered promiscuous mode
[  282.456087][T14689] macvlan1: left promiscuous mode
[  282.818457][T14709] lo speed is unknown, defaulting to 1000
[  283.109987][T14714] lo speed is unknown, defaulting to 1000
[  283.146187][T14712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2486'.
[  283.280817][T14719] rdma_rxe: rxe_newlink: failed to add lo
[  283.284841][T14720] rdma_rxe: rxe_newlink: failed to add lo
[  283.296808][T14720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  283.667765][T14745] tipc: Resetting bearer <ib:team0>
[  284.070407][T14767] netlink: 'syz.0.2499': attribute type 12 has an invalid length.
[  284.452618][ T5848] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  284.455535][ T5848] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  284.459100][ T5848] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  284.462161][ T5848] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  284.536659][ T5848] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  284.540230][ T5848] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  284.543003][ T5848] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  284.550016][ T5848] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  285.059947][T14803] sctp: [Deprecated]: syz.0.2512 (pid 14803) Use of int in max_burst socket option deprecated.
[  285.059947][T14803] Use struct sctp_assoc_value instead
[  285.135725][T14809] netlink: 'syz.0.2514': attribute type 17 has an invalid length.
[  285.140041][T14809] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  285.157985][T14809] tipc: Resetting bearer <ib:ip_vti0>
[  285.169149][T14809] x9: left allmulticast mode
[  285.189040][T14809] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  285.191982][T14809] netdevsim0: left allmulticast mode
[  285.200104][T14809] bond20: left promiscuous mode
[  285.210003][ T5867] lo speed is unknown, defaulting to 1000
[  285.217039][ T5867] syz0: Port: 1 Link DOWN
[  285.218565][ T5867] lo speed is unknown, defaulting to 1000
[  285.254979][T14814] lo speed is unknown, defaulting to 1000
[  285.333886][T14817] tipc: Resetting bearer <ib:team0>
[  285.538153][T14823] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  285.540643][T14823] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  285.630582][T14830] pimreg: entered allmulticast mode
[  285.813959][T14841] siw: device registration error -23
[  285.836951][T14843] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  286.036595][T14858] netlink: 'syz.0.2528': attribute type 2 has an invalid length.
[  286.046637][T14858] k*]: entered promiscuous mode
[  286.058628][T14861] netlink: 'syz.1.2529': attribute type 8 has an invalid length.
[  286.066187][T14866] netlink: 'syz.1.2529': attribute type 8 has an invalid length.
[  286.178893][T14877] sctp: [Deprecated]: syz.1.2534 (pid 14877) Use of int in maxseg socket option.
[  286.178893][T14877] Use struct sctp_assoc_value instead
[  286.280697][T14872] hsr_slave_1 (unregistering): left promiscuous mode
[  286.408698][T14882] tipc: Resetting bearer <ib:team0>
[  286.436763][ T5843] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  286.439716][ T5843] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  286.443198][ T5848] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  286.446074][ T5848] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  287.268745][T14913] netlink: 'syz.0.2541': attribute type 7 has an invalid length.
[  287.271367][T14913] __nla_validate_parse: 20 callbacks suppressed
[  287.271376][T14913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2541'.
[  287.281883][T14903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2540'.
[  298.500459][T14896] bond0 (unregistering): Released all slaves
[  298.679717][T14922] syzkaller1: entered promiscuous mode
[  298.681511][T14922] syzkaller1: entered allmulticast mode
[  298.750359][T14931] netlink: 'syz.1.2546': attribute type 28 has an invalid length.
[  298.755892][T14931] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2546'.
[  298.860266][T14935] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2545'.
[  299.048598][T14937] lo speed is unknown, defaulting to 1000
[  299.366805][T14946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2549'.
[  299.499085][T14950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2550'.
[  299.556527][T14955] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  299.639051][T14961] macsec0: entered promiscuous mode
[  299.640748][T14961] ip6gretap0: entered promiscuous mode
[  299.642867][T14961] macsec0: entered allmulticast mode
[  299.644528][T14961] ip6gretap0: entered allmulticast mode
[  300.280603][T14966] netlink: 'syz.0.2553': attribute type 5 has an invalid length.
[  300.283990][T14966] netlink: 'syz.0.2553': attribute type 7 has an invalid length.
[  300.291144][T14966] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2553'.
[  300.591180][T14969] netlink: 'syz.2.2554': attribute type 21 has an invalid length.
[  300.595096][T14969] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2554'.
[  300.635914][T14971] syzkaller0: entered promiscuous mode
[  300.638220][T14971] syzkaller0: entered allmulticast mode
[  300.765267][T14975] nbd: nbd2 already in use
[  300.767529][T14975] nbd: nbd2 already in use
[  301.138618][T14986] netlink: 'syz.0.2559': attribute type 1 has an invalid length.
[  301.146389][T14986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2559'.
[  301.187711][T14986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2559'.
[  301.274414][T14992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2560'.
[  301.298537][T14992] 8021q: adding VLAN 0 to HW filter on device bond21
[  301.311230][T14992] xfrm1: entered promiscuous mode
[  301.313808][T14992] xfrm1: entered allmulticast mode
[  301.321472][T14992] 8021q: adding VLAN 0 to HW filter on device bond21
[  301.325010][T14992] bond21: (slave xfrm1): The slave device specified does not support setting the MAC address
[  301.329471][T14992] bond21: (slave xfrm1): Error -95 calling set_mac_address
[  301.616915][T15009] nbd: device at index 0 is going down
[  301.680756][T15013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2565'.
[  301.965055][T15039] nbd: device at index 1 is going down
[  302.059567][T15043] lo speed is unknown, defaulting to 1000
[  302.245736][T15048] netlink: 'syz.0.2574': attribute type 1 has an invalid length.
[  302.313236][T15048] bond22: (slave vti0): The slave device specified does not support setting the MAC address
[  302.316579][T15048] bond22: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  302.321400][T15048] bond22: (slave vti0): making interface the new active one
[  302.325143][T15048] bond22: (slave vti0): Enslaving as an active interface with an up link
[  302.398936][T15051] netlink: 'syz.0.2575': attribute type 7 has an invalid length.
[  302.401768][T15051] netlink: 'syz.0.2575': attribute type 8 has an invalid length.
[  302.560508][T15072] lo speed is unknown, defaulting to 1000
[  302.694740][T15079] netlink: 'syz.1.2581': attribute type 28 has an invalid length.
[  302.769664][T15083] bridge0: port 1(ipvlan3) entered blocking state
[  302.771875][T15083] bridge0: port 1(ipvlan3) entered disabled state
[  302.775633][T15083] ipvlan3: entered allmulticast mode
[  302.777929][T15083] bridge0: entered allmulticast mode
[  302.780881][T15083] ipvlan3: left allmulticast mode
[  302.786697][T15083] bridge0: left allmulticast mode
[  303.012437][T15107] lo speed is unknown, defaulting to 1000
[  303.497687][T15124] tipc: Disabling bearer <ib:team0>
[  303.734985][T15147] bond22: (slave vti0): Releasing backup interface
[  303.752868][T15143] nbd: device at index 1 is going down
[  303.759616][T15141] netlink: 'syz.0.2595': attribute type 11 has an invalid length.
[  303.864843][T15155] __nla_validate_parse: 11 callbacks suppressed
[  303.864859][T15155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2598'.
[  303.870151][T15155] chnl_net:caif_netlink_parms(): no params data found
[  303.928960][T15156] netlink: 'syz.0.2598': attribute type 28 has an invalid length.
[  303.932277][T15156] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2598'.
[  303.981476][T15158] syzkaller0: entered promiscuous mode
[  303.988982][T15158] syzkaller0: entered allmulticast mode
[  304.233441][T15176] netlink: 'syz.0.2601': attribute type 1 has an invalid length.
[  304.240721][T15176] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2601'.
[  304.245412][T15176] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2601'.
[  304.906607][T15178] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  305.000971][T15180] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2605'.
[  305.036956][T15190] netlink: 'syz.0.2607': attribute type 12 has an invalid length.
[  305.039031][T15185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2606'.
[  305.039420][T15190] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.2607'.
[  305.043132][T15185] veth1: entered promiscuous mode
[  305.046888][T15185] netlink: 'syz.2.2606': attribute type 1 has an invalid length.
[  305.049285][T15185] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2606'.
[  305.052076][T15185] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  305.142677][T15202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2610'.
[  305.193857][T15207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2611'.
[  305.218111][T15211] netlink: 'syz.2.2613': attribute type 1 has an invalid length.
[  305.230530][T15214] netlink: 'syz.1.2614': attribute type 2 has an invalid length.
[  305.240430][T15211] 8021q: adding VLAN 0 to HW filter on device bond32
[  305.247921][T15214] netlink: 'syz.1.2614': attribute type 1 has an invalid length.
[  305.270635][T15214] 8021q: VLANs not supported on ip6_vti0
[  305.283122][T15217] netlink: 'syz.0.2615': attribute type 10 has an invalid length.
[  305.314713][T15224] syzkaller0: entered promiscuous mode
[  305.316765][T15224] syzkaller0: entered allmulticast mode
[  305.473841][T15241] pim6reg: entered allmulticast mode
[  305.489745][T15241] 8021q: adding VLAN 0 to HW filter on device bond33
[  305.510643][T15241] pim6reg: left allmulticast mode
[  305.563554][T15241] lo speed is unknown, defaulting to 1000
[  305.664263][T15245] netlink: 'syz.2.2621': attribute type 5 has an invalid length.
[  305.667280][T15245] netlink: 'syz.2.2621': attribute type 6 has an invalid length.
[  305.991645][T15256] lo speed is unknown, defaulting to 1000
[  306.297654][ T5818] Bluetooth: hci2: link tx timeout
[  306.299862][ T5818] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  306.303829][ T5211] Bluetooth: hci2: link tx timeout
[  306.305527][ T5211] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  306.309668][   T55] Bluetooth: hci2: link tx timeout
[  306.311535][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  306.314002][   T55] Bluetooth: hci2: link tx timeout
[  306.315533][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  306.317857][   T55] Bluetooth: hci2: link tx timeout
[  306.319600][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  306.321961][   T55] Bluetooth: hci2: link tx timeout
[  306.323634][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  306.326065][   T55] Bluetooth: hci2: link tx timeout
[  306.327591][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  306.330265][   T55] Bluetooth: hci2: link tx timeout
[  306.333700][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  306.336491][   T55] Bluetooth: hci2: link tx timeout
[  306.338033][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  306.340773][   T55] Bluetooth: hci2: link tx timeout
[  306.345187][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  306.347685][   T55] Bluetooth: hci2: link tx timeout
[  306.349395][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  306.353609][   T55] Bluetooth: hci2: link tx timeout
[  306.355185][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  306.357587][   T55] Bluetooth: hci2: link tx timeout
[  306.359336][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  306.361936][   T55] Bluetooth: hci2: link tx timeout
[  306.363798][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  306.366474][   T55] Bluetooth: hci2: link tx timeout
[  306.368006][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  306.370866][   T55] Bluetooth: hci2: link tx timeout
[  306.372660][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  306.383734][   T55] Bluetooth: hci2: link tx timeout
[  306.385344][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  306.387693][   T55] Bluetooth: hci2: link tx timeout
[  306.389200][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  306.585297][T15274] hsr0: entered promiscuous mode
[  306.591214][T15274] hsr_slave_0: left promiscuous mode
[  306.604619][T15274] hsr0 (unregistering): left promiscuous mode
[  306.697677][T15276] 8021q: adding VLAN 0 to HW filter on device bond0
[  306.711907][T15276] bond0: (slave geneve6): making interface the new active one
[  306.716838][T15276] bond0: (slave geneve6): Enslaving as an active interface with an up link
[  306.719997][ T5843] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  306.723733][ T5843] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  306.727122][ T5843] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  306.729802][ T5843] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  307.131556][T15303] lo speed is unknown, defaulting to 1000
[  307.297713][T15313] veth11: entered promiscuous mode
[  307.601553][T15321] 8021q: adding VLAN 0 to HW filter on device bond2
[  307.762810][T15328] pim6reg: entered allmulticast mode
[  307.784748][T15328] pim6reg: left allmulticast mode
[  307.887551][T15339] pim6reg1: entered promiscuous mode
[  307.892421][T15339] pim6reg1: entered allmulticast mode
[  307.961238][T15346] ip6tnl5: entered promiscuous mode
[  307.963767][T15346] ip6tnl5: entered allmulticast mode
[  308.101737][T15353] lo: entered allmulticast mode
[  308.107434][T15347] lo: left allmulticast mode
[  308.151361][T15364] smc: net device bond0 applied user defined pnetid SYZ2
[  308.201530][T15367] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  308.210898][T15368] syzkaller0: entered promiscuous mode
[  308.222439][T15368] syzkaller0: entered allmulticast mode
[  308.245859][T15366] tipc: Resetting bearer <eth:syzkaller0>
[  308.286278][T15366] tipc: Disabling bearer <eth:syzkaller0>
[  308.342979][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  308.426186][T15379] 8021q: adding VLAN 0 to HW filter on device bond28
[  308.446057][T15379] bond28: (slave veth19): Enslaving as an active interface with a down link
[  308.587890][T15400] lo speed is unknown, defaulting to 1000
[  308.989090][T15414] lo speed is unknown, defaulting to 1000
[  309.059450][T15415] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9
[  309.300897][T15423] syzkaller0: entered promiscuous mode
[  309.305730][T15423] syzkaller0: entered allmulticast mode
[  309.559106][T15430] __nla_validate_parse: 27 callbacks suppressed
[  309.559122][T15430] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2669'.
[  309.702933][T15436] validate_nla: 7 callbacks suppressed
[  309.703036][T15436] netlink: 'syz.2.2669': attribute type 16 has an invalid length.
[  309.707257][T15436] netlink: 'syz.2.2669': attribute type 17 has an invalid length.
[  309.750995][T15436] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  309.757204][T15436] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  310.009097][T15444] netlink: 'syz.1.2671': attribute type 1 has an invalid length.
[  310.045517][T15444] 8021q: adding VLAN 0 to HW filter on device bond29
[  310.062137][T15444] ipvlan3: entered allmulticast mode
[  310.069450][T15444] bond29: entered allmulticast mode
[  310.355353][T15447] netlink: 'syz.0.2672': attribute type 1 has an invalid length.
[  310.396791][T15447] 8021q: adding VLAN 0 to HW filter on device bond23
[  310.407120][T15447] ipvlan5: entered allmulticast mode
[  310.409019][T15447] bond23: entered allmulticast mode
[  310.453714][T15454] netlink: 'syz.0.2675': attribute type 1 has an invalid length.
[  310.489333][T15454] bond24: (slave vxcan1): The slave device specified does not support setting the MAC address
[  310.496135][T15454] bond24: (slave vxcan1): Error -95 calling set_mac_address
[  310.528111][T15452] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2674'.
[  310.538143][T15458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2675'.
[  310.618439][T15463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2676'.
[  310.780730][T15472] ip6gretap0: left allmulticast mode
[  310.824465][   T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  310.827958][   T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  310.831180][   T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  310.842744][   T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  310.851418][T15471] lo speed is unknown, defaulting to 1000
[  311.169070][T15494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2684'.
[  311.177349][T15494] 8021q: adding VLAN 0 to HW filter on device bond1
[  311.516254][T15515] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2689'.
[  311.559952][T15514] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2689'.
[  311.659853][T15521] netlink: 'syz.1.2690': attribute type 1 has an invalid length.
[  311.664808][T15521] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2690'.
[  311.806733][T15525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2691'.
[  311.879487][T15543] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2693'.
[  311.927840][T15543] lo speed is unknown, defaulting to 1000
[  312.025964][T15546] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  312.113656][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  312.116575][   T12] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  312.120985][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  312.144791][   T12] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  312.148363][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  312.151713][   T12] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  312.175590][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  312.178254][   T12] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  312.239249][T15559] lo speed is unknown, defaulting to 1000
[  312.719119][T15593] netlink: 'syz.1.2703': attribute type 1 has an invalid length.
[  312.781604][T15593] 8021q: adding VLAN 0 to HW filter on device bond30
[  312.829624][T15606] netlink: 'syz.0.2705': attribute type 1 has an invalid length.
[  313.081714][T15626] lo speed is unknown, defaulting to 1000
[  313.207253][T15636] veth13: entered promiscuous mode
[  313.210527][T15638] netlink: 'syz.1.2713': attribute type 27 has an invalid length.
[  313.219503][T15636] bridge6: port 1(veth13) entered blocking state
[  313.221569][T15636] bridge6: port 1(veth13) entered disabled state
[  313.227677][T15636] veth13: entered allmulticast mode
[  313.280627][T15645] netlink: 'syz.1.2714': attribute type 8 has an invalid length.
[  313.409053][T15649] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  313.411946][T15649] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  313.988048][T15685] lo speed is unknown, defaulting to 1000
[  314.067932][T15695] veth13: left allmulticast mode
[  314.069708][T15695] bridge6: port 1(veth13) entered disabled state
[  314.855206][T15717] __nla_validate_parse: 6 callbacks suppressed
[  314.855220][T15717] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2726'.
[  314.997882][T15721] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2727'.
[  315.001579][T15721] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2727'.
[  315.006485][T15721] netlink: 'syz.2.2727': attribute type 4 has an invalid length.
[  315.255055][T15742] netlink: 'syz.1.2731': attribute type 1 has an invalid length.
[  315.289861][T15742] 8021q: adding VLAN 0 to HW filter on device bond32
[  315.293500][T15742] bond31: (slave bond32): making interface the new active one
[  315.295978][T15742] bond31: (slave bond32): Enslaving as an active interface with an up link
[  315.371004][T15752] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  315.446146][T15756] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  315.591754][T15758] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2737'.
[  315.613600][T15758] bond33: entered promiscuous mode
[  315.615694][T15758] bond33: entered allmulticast mode
[  315.618065][T15758] 8021q: adding VLAN 0 to HW filter on device bond33
[  316.090545][T15773] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2741'.
[  316.094610][T15773] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2741'.
[  316.476459][T15802] netlink: 'syz.2.2750': attribute type 1 has an invalid length.
[  316.508016][T15805] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2751'.
[  316.511085][T15805] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2751'.
[  316.613297][T15809] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  316.617813][T15809] syzkaller0: entered promiscuous mode
[  316.620328][T15809] syzkaller0: entered allmulticast mode
[  316.647349][T15810] netlink: 12328 bytes leftover after parsing attributes in process `syz.1.2752'.
[  316.663427][T15808] tipc: Resetting bearer <eth:syzkaller0>
[  316.676394][T15808] tipc: Disabling bearer <eth:syzkaller0>
[  316.856503][T15818] tunl0: entered promiscuous mode
[  316.858627][T15818] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  316.907695][T15818] lo speed is unknown, defaulting to 1000
[  317.618068][T15842] netlink: 'syz.2.2759': attribute type 11 has an invalid length.
[  317.649103][T15841] netlink: 'syz.0.2760': attribute type 30 has an invalid length.
[  317.765229][T15849] netlink: 'syz.0.2761': attribute type 13 has an invalid length.
[  317.768896][T15849] netlink: 'syz.0.2761': attribute type 17 has an invalid length.
[  317.843603][T15849] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  317.856833][T15849] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  317.861823][T15851] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2761'.
[  317.865084][   T47] lo speed is unknown, defaulting to 1000
[  317.879313][   T47] syz0: Port: 1 Link ACTIVE
[  317.885201][   T47] lo speed is unknown, defaulting to 1000
[  317.918133][T15849] lo speed is unknown, defaulting to 1000
[  317.965548][T15851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  318.434767][T15854] vlan6: entered promiscuous mode
[  318.650530][T15863] netlink: 'syz.2.2766': attribute type 1 has an invalid length.
[  318.670754][T15863] 8021q: adding VLAN 0 to HW filter on device bond35
[  318.763435][T15863] 8021q: adding VLAN 0 to HW filter on device bond35
[  318.770779][T15863] bond35: (slave vcan0): The slave device specified does not support setting the MAC address
[  318.778110][T15863] bond35: (slave vcan0): Error -95 calling set_mac_address
[  318.810141][T15870] macvlan0: entered promiscuous mode
[  318.811936][T15870] macvlan0: entered allmulticast mode
[  318.826799][T15870] bond35: entered promiscuous mode
[  318.829249][T15870] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  318.846011][T15870] bond35: left promiscuous mode
[  318.962138][T15880] netlink: 'syz.0.2768': attribute type 1 has an invalid length.
[  318.964972][T15877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  318.971330][T15878] netlink: 'syz.1.2769': attribute type 1 has an invalid length.
[  318.997849][T15880] 8021q: adding VLAN 0 to HW filter on device bond26
[  319.016941][T15878] 8021q: adding VLAN 0 to HW filter on device bond34
[  319.020826][T15878] netlink: 'syz.1.2769': attribute type 1 has an invalid length.
[  319.048238][T15878] 8021q: adding VLAN 0 to HW filter on device bond35
[  319.052003][T15880] 0{X: renamed from gretap0
[  319.060200][T15880] 0{X: entered allmulticast mode
[  319.064350][T15880] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  319.089925][T15878] 8021q: adding VLAN 0 to HW filter on device bond36
[  319.133035][T15878] 8021q: adding VLAN 0 to HW filter on device bond37
[  319.156325][T15878] 8021q: adding VLAN 0 to HW filter on device bond38
[  319.176204][T15878] 8021q: adding VLAN 0 to HW filter on device bond39
[  319.200498][T15878] 8021q: adding VLAN 0 to HW filter on device bond40
[  319.235181][T15878] 8021q: adding VLAN 0 to HW filter on device bond41
[  319.262982][T15878] 8021q: adding VLAN 0 to HW filter on device bond42
[  319.284885][T15878] 8021q: adding VLAN 0 to HW filter on device bond43
[  319.306525][T15878] 8021q: adding VLAN 0 to HW filter on device bond44
[  319.315678][T15903] bridge42: the hash_elasticity option has been deprecated and is always 16
[  319.393173][T15878] 8021q: adding VLAN 0 to HW filter on device bond45
[  319.500805][T15878] 8021q: adding VLAN 0 to HW filter on device bond46
[  319.540222][T15878] 8021q: adding VLAN 0 to HW filter on device bond47
[  319.585662][T15878] 8021q: adding VLAN 0 to HW filter on device bond48
[  319.616440][T15878] 8021q: adding VLAN 0 to HW filter on device bond49
[  319.659510][T15878] 8021q: adding VLAN 0 to HW filter on device bond50
[  319.683563][T15878] 8021q: adding VLAN 0 to HW filter on device bond51
[  319.687017][T15920] lo speed is unknown, defaulting to 1000
[  319.721818][T15878] 8021q: adding VLAN 0 to HW filter on device bond52
[  319.735405][ T5867] lo speed is unknown, defaulting to 1000
[  319.740676][ T5867] lo speed is unknown, defaulting to 1000
[  319.768592][T15878] 8021q: adding VLAN 0 to HW filter on device bond53
[  319.771581][    T9] lo speed is unknown, defaulting to 1000
[  319.813671][T15878] 8021q: adding VLAN 0 to HW filter on device bond54
[  319.818695][T15925] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma?
[  320.008492][T15939] __nla_validate_parse: 14 callbacks suppressed
[  320.008506][T15939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2778'.
[  320.027734][T15939] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2778'.
[  320.068531][T15940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2777'.
[  320.071315][T15940] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2777'.
[  320.326255][T15957] Unsupported ieee802154 address type: 0
[  320.379495][T15959] lo speed is unknown, defaulting to 1000
[  320.441155][T15966] validate_nla: 23 callbacks suppressed
[  320.441172][T15966] netlink: 'syz.2.2784': attribute type 20 has an invalid length.
[  320.708511][T15985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2788'.
[  320.711972][T15985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2788'.
[  320.727600][T15985] netlink: 'syz.2.2788': attribute type 20 has an invalid length.
[  320.854346][T15992] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  320.860615][T15992] tipc: Resetting bearer <eth:syzkaller0>
[  320.876099][T15991] tipc: Disabling bearer <eth:syzkaller0>
[  321.141456][T16010] netlink: 'syz.2.2795': attribute type 13 has an invalid length.
[  321.178972][T16010] netlink: 'syz.2.2795': attribute type 17 has an invalid length.
[  321.227307][T16010] tunl0: left promiscuous mode
[  321.331262][T16010] ip6gretap0: left promiscuous mode
[  321.576976][T16010] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  321.627345][T16010] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  321.794504][T16021] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  321.797133][T16021] tipc: Enabled bearer <udp:syz1>, priority 10
[  321.800640][T16021] netlink: 'syz.0.2798': attribute type 1 has an invalid length.
[  321.822202][T16023] bond0: (slave geneve6): Releasing active interface
[  321.831399][T16023] bond28: (slave veth19): Releasing active interface
[  321.836037][T16023] bond31: (slave bond32): Releasing backup interface
[  321.855022][T16026] lo speed is unknown, defaulting to 1000
[  321.899479][T16030] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  321.997392][T16036] bond2: option lacp_active: unable to set because the bond device is up
[  322.035719][T16039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2805'.
[  322.038597][T16039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2805'.
[  322.041864][T16039] netlink: 'syz.0.2805': attribute type 6 has an invalid length.
[  322.110620][T16046] lo: entered promiscuous mode
[  322.113774][T16046] tunl0: entered promiscuous mode
[  322.116546][T16046] gre0: entered promiscuous mode
[  322.118263][T16046] 0{X: entered promiscuous mode
[  322.120245][T16046] erspan0: entered promiscuous mode
[  322.122029][T16046] erspan0: left allmulticast mode
[  322.125566][T16046] ip_vti0: entered promiscuous mode
[  322.128863][T16046] ip6_vti0: entered promiscuous mode
[  322.131202][T16046] sit0: entered promiscuous mode
[  322.136215][T16046] ip6tnl0: entered promiscuous mode
[  322.137879][T16046] ip6gre0: entered promiscuous mode
[  322.140334][T16046] !: entered promiscuous mode
[  322.142962][T16046] nlmon0: entered promiscuous mode
[  322.144711][T16046] caif0: entered promiscuous mode
[  322.146348][T16046] veth0: entered promiscuous mode
[  322.148030][T16046] veth1: entered promiscuous mode
[  322.151308][T16046] wg0: entered promiscuous mode
[  322.154836][T16046] wg1: entered promiscuous mode
[  322.162936][T16046] wg2: entered promiscuous mode
[  322.164918][T16046] veth0_to_bridge: entered promiscuous mode
[  322.166818][T16046] bridge_slave_0: entered promiscuous mode
[  322.169291][T16046] veth1_to_bridge: entered promiscuous mode
[  322.171826][T16046] bridge_slave_1: entered promiscuous mode
[  322.174039][T16046] veth0_to_bond: entered promiscuous mode
[  322.176148][T16046] bond_slave_0: entered promiscuous mode
[  322.178181][T16046] veth0_to_team: entered promiscuous mode
[  322.180242][T16046] C: entered promiscuous mode
[  322.181796][T16046] veth1_to_team: entered promiscuous mode
[  322.183828][T16046] team_slave_1: entered promiscuous mode
[  322.185872][T16046] veth0_to_batadv: entered promiscuous mode
[  322.187751][T16046] batadv_slave_0: entered promiscuous mode
[  322.189585][T16046] xfrm0: entered promiscuous mode
[  322.191163][T16046] veth0_to_hsr: entered promiscuous mode
[  322.193245][T16046] hsr_slave_0: entered promiscuous mode
[  322.195160][T16046] vlan0: entered promiscuous mode
[  322.196885][T16046] vlan1: entered promiscuous mode
[  322.198548][T16046] macvlan0: entered promiscuous mode
[  322.200350][T16046] macvlan1: entered promiscuous mode
[  322.202148][T16046] ipvlan0: entered promiscuous mode
[  322.204266][T16046] ipvlan1: entered promiscuous mode
[  322.205961][T16046] geneve1: entered promiscuous mode
[  322.207610][T16046] mac80211_hwsim hwsim2 ": entered promiscuous mode
[  322.210210][T16046] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode
[  322.213511][T16046] bridge1: entered promiscuous mode
[  322.215197][T16046] bond1: entered promiscuous mode
[  322.216802][T16046] geneve2: entered promiscuous mode
[  322.218460][T16046] bridge2: entered promiscuous mode
[  322.220193][T16046] bond2: entered promiscuous mode
[  322.221811][T16046] bridge3: entered promiscuous mode
[  322.223663][T16046] bridge4: entered promiscuous mode
[  322.225297][T16046] bond3: entered promiscuous mode
[  322.226906][T16046] vxcan2: entered promiscuous mode
[  322.228534][T16046] vxcan3: entered promiscuous mode
[  322.230370][T16046] bridge5: entered promiscuous mode
[  322.232777][T16046] veth2: entered promiscuous mode
[  322.234459][T16046] veth3: entered promiscuous mode
[  322.236263][T16046] vxlan0: entered promiscuous mode
[  322.238382][T16046] pimreg3: entered promiscuous mode
[  322.240585][T16046] macvlan2: entered promiscuous mode
[  322.242642][T16046] bridge6: entered promiscuous mode
[  322.244749][T16046] geneve3: entered promiscuous mode
[  322.246478][T16046] geneve4: entered promiscuous mode
[  322.248482][T16046] ip6tnl1: entered promiscuous mode
[  322.250241][T16046] bond4: entered promiscuous mode
[  322.251836][T16046] bridge7: entered promiscuous mode
[  322.253918][T16046] sit1: entered promiscuous mode
[  322.255510][T16046] bridge8: entered promiscuous mode
[  322.257237][T16046] bond5: entered promiscuous mode
[  322.258926][T16046] vcan1: entered promiscuous mode
[  322.260529][T16046] vti60: entered promiscuous mode
[  322.262279][T16046] bridge9: entered promiscuous mode
[  322.264300][T16046] bridge10: entered promiscuous mode
[  322.266480][T16046] ipvlan2: entered promiscuous mode
[  322.268440][T16046] vxlan1: entered promiscuous mode
[  322.270514][T16046] macvlan3: entered promiscuous mode
[  322.272988][T16046] bond6: entered promiscuous mode
[  322.275180][T16046] wireguard0: entered promiscuous mode
[  322.277435][T16046] bridge11: entered promiscuous mode
[  322.279693][T16046] wireguard1: entered promiscuous mode
[  322.282043][T16046] bond7: entered promiscuous mode
[  322.284359][T16046] wireguard2: entered promiscuous mode
[  322.286750][T16046] wireguard3: entered promiscuous mode
[  322.289100][T16046] bond8: entered promiscuous mode
[  322.291238][T16046] gretap1: entered promiscuous mode
[  322.294008][T16046] vxlan2: entered promiscuous mode
[  322.296236][T16046] vxlan3: entered promiscuous mode
[  322.298399][T16046] veth4: entered promiscuous mode
[  322.300614][T16046] veth5: entered promiscuous mode
[  322.303045][T16046] bond9: entered promiscuous mode
[  322.305283][T16046] bond10: entered promiscuous mode
[  322.307610][T16046] veth6: entered promiscuous mode
[  322.309780][T16046] veth7: entered promiscuous mode
[  322.312009][T16046] bond11: entered promiscuous mode
[  322.314483][T16046] vlan2: entered promiscuous mode
[  322.316755][T16046] gretap2: entered promiscuous mode
[  322.318971][T16046] bridge12: entered promiscuous mode
[  322.321224][T16046] bridge13: entered promiscuous mode
[  322.323989][T16046] bridge14: entered promiscuous mode
[  322.326246][T16046] bridge15: entered promiscuous mode
[  322.328525][T16046] bridge16: entered promiscuous mode
[  322.330802][T16046] bridge17: entered promiscuous mode
[  322.333411][T16046] gre1: entered promiscuous mode
[  322.335724][T16046] bridge18: entered promiscuous mode
[  322.337960][T16046] syztnl0: entered promiscuous mode
[  322.340156][T16046] geneve5: entered promiscuous mode
[  322.343024][T16046] bridge19: entered promiscuous mode
[  322.345327][T16046] bridge20: entered promiscuous mode
[  322.347579][T16046] ip6erspan0: entered promiscuous mode
[  322.349859][T16046] bridge21: entered promiscuous mode
[  322.352103][T16046] bridge22: entered promiscuous mode
[  322.354666][T16046] vlan3: entered promiscuous mode
[  322.356943][T16046] bridge23: entered promiscuous mode
[  322.359195][T16046] bridge24: entered promiscuous mode
[  322.361456][T16046] veth8: entered promiscuous mode
[  322.363991][T16046] veth9: entered promiscuous mode
[  322.366209][T16046] vlan4: entered promiscuous mode
[  322.368608][T16046] bridge25: entered promiscuous mode
[  322.370872][T16046] bridge26: entered promiscuous mode
[  322.373396][T16046] gtp0: entered promiscuous mode
[  322.375515][T16046] bond12: entered promiscuous mode
[  322.377708][T16046] gretap3: entered promiscuous mode
[  322.379886][T16046] bond13: entered promiscuous mode
[  322.382014][T16046] bond14: entered promiscuous mode
[  322.384284][T16046] bond15: entered promiscuous mode
[  322.386426][T16046] bridge27: entered promiscuous mode
[  322.388657][T16046] gtp1: entered promiscuous mode
[  322.390754][T16046] vlan5: entered promiscuous mode
[  322.393323][T16046] bridge28: entered promiscuous mode
[  322.395580][T16046] D: entered promiscuous mode
[  322.398038][T16046] ip6gretap0: entered promiscuous mode
[  322.400302][T16046] gtp2: entered promiscuous mode
[  322.402493][T16046] bond16: entered promiscuous mode
[  322.404651][T16046] gretap4: entered promiscuous mode
[  322.406773][T16046] veth10: entered promiscuous mode
[  322.409237][T16046] veth11: entered promiscuous mode
[  322.411943][T16046] ipvlan4: entered promiscuous mode
[  322.414536][T16046] ipvlan5: entered promiscuous mode
[  322.417104][T16046] bond17: entered promiscuous mode
[  322.419260][T16046] bridge29: entered promiscuous mode
[  322.421500][T16046] bond18: entered promiscuous mode
[  322.425671][T16046] bond19: entered promiscuous mode
[  322.427849][T16046] bond20: entered promiscuous mode
[  322.430031][T16046] bridge30: entered promiscuous mode
[  322.432241][T16046] gre2: entered promiscuous mode
[  322.434681][T16046] bridge31: entered promiscuous mode
[  322.436893][T16046] erspan1: entered promiscuous mode
[  322.439049][T16046] sit2: entered promiscuous mode
[  322.441132][T16046] sit3: entered promiscuous mode
[  322.443363][T16046] bridge32: entered promiscuous mode
[  322.445568][T16046] sit4: entered promiscuous mode
[  322.447648][T16046] ip6gre1: entered promiscuous mode
[  322.449822][T16046] macvlan4: entered promiscuous mode
[  322.452050][T16046] gre3: entered promiscuous mode
[  322.454434][T16046] bond21: entered promiscuous mode
[  322.456643][T16046] bond22: entered promiscuous mode
[  322.458788][T16046] sit5: entered promiscuous mode
[  322.460995][T16046] bond23: entered promiscuous mode
[  322.463350][T16046] veth12: entered promiscuous mode
[  322.465672][T16046] bridge33: entered promiscuous mode
[  322.467919][T16046] batadv1: entered promiscuous mode
[  322.470126][T16046] netdevsim netdevsim1 eth0: entered promiscuous mode
[  322.473529][T16046] netdevsim netdevsim1 eth1: entered promiscuous mode
[  322.476378][T16046] netdevsim netdevsim1 eth2: entered promiscuous mode
[  322.479178][T16046] netdevsim netdevsim1 eth3: entered promiscuous mode
[  322.481940][T16046] bond24: entered promiscuous mode
[  322.484312][T16046] veth14: entered promiscuous mode
[  322.486519][T16046] veth15: entered promiscuous mode
[  322.488764][T16046] bridge34: entered promiscuous mode
[  322.491008][T16046] bond25: entered promiscuous mode
[  322.493442][T16046] bond26: entered promiscuous mode
[  322.495601][T16046] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  322.498336][T16046] bond27: entered promiscuous mode
[  322.500389][T16046] ip6gretap1: entered promiscuous mode
[  322.503076][T16046] veth16: entered promiscuous mode
[  322.505362][T16046] ipvlan6: entered promiscuous mode
[  322.507335][T16046] bridge35: entered promiscuous mode
[  322.509466][T16046] pimreg: entered promiscuous mode
[  322.511661][T16046] geneve0: entered promiscuous mode
[  322.514154][T16046] syztnl1: entered promiscuous mode
[  322.516349][T16046] bond0: entered promiscuous mode
[  322.518489][T16046] geneve6: entered promiscuous mode
[  322.520649][T16046] ipip0: entered promiscuous mode
[  322.523005][T16046] bond28: entered promiscuous mode
[  322.525141][T16046] veth18: entered promiscuous mode
[  322.527307][T16046] veth19: entered promiscuous mode
[  322.529425][T16046] bond29: entered promiscuous mode
[  322.531554][T16046] ipvlan3: entered promiscuous mode
[  322.533906][T16046] ipvlan3: left allmulticast mode
[  322.535912][T16046] bond29: left allmulticast mode
[  322.537971][T16046] bridge36: entered promiscuous mode
[  322.541056][T16046] bond30: entered promiscuous mode
[  322.544194][T16046] ip6gre2: entered promiscuous mode
[  322.546375][T16046] bridge37: entered promiscuous mode
[  322.548594][T16046] bond31: entered promiscuous mode
[  322.550721][T16046] bond32: entered promiscuous mode
[  322.553998][T16046] bond33: left allmulticast mode
[  322.556683][T16046] ipvlan7: entered promiscuous mode
[  322.559717][T16046] bond34: entered promiscuous mode
[  322.563522][T16046] bond35: entered promiscuous mode
[  322.568263][T16046] bond36: entered promiscuous mode
[  322.572039][T16046] bond37: entered promiscuous mode
[  322.576064][T16046] bond38: entered promiscuous mode
[  322.579413][T16046] bond39: entered promiscuous mode
[  322.584851][T16046] bond40: entered promiscuous mode
[  322.589265][T16046] bond41: entered promiscuous mode
[  322.592885][T16046] bond42: entered promiscuous mode
[  322.596174][T16046] bond43: entered promiscuous mode
[  322.599475][T16046] bond44: entered promiscuous mode
[  322.604838][T16046] bond45: entered promiscuous mode
[  322.608340][T16046] bond46: entered promiscuous mode
[  322.612800][T16046] bond47: entered promiscuous mode
[  322.616166][T16046] bond48: entered promiscuous mode
[  322.619479][T16046] bond49: entered promiscuous mode
[  322.624773][T16046] bond50: entered promiscuous mode
[  322.628160][T16046] bond51: entered promiscuous mode
[  322.631455][T16046] bond52: entered promiscuous mode
[  322.635401][T16046] bond53: entered promiscuous mode
[  322.638716][T16046] bond54: entered promiscuous mode
[  322.810419][T16060] netlink: 'syz.2.2810': attribute type 1 has an invalid length.
[  322.848739][T16060] 8021q: adding VLAN 0 to HW filter on device bond36
[  322.854458][T16064] bond1: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  322.863751][T16060] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2810'.
[  322.866944][T16066] lo speed is unknown, defaulting to 1000
[  322.959225][T16072] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2814'.
[  323.047721][T16078] gre0: left promiscuous mode
[  323.100174][T16084] syz.2.2815: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  323.109299][T16084] CPU: 1 UID: 0 PID: 16084 Comm: syz.2.2815 Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[  323.109328][T16084] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  323.109340][T16084] Call Trace:
[  323.109348][T16084]  <TASK>
[  323.109356][T16084]  dump_stack_lvl+0x189/0x250
[  323.109386][T16084]  ? __pfx_dump_stack_lvl+0x10/0x10
[  323.109404][T16084]  ? __pfx__printk+0x10/0x10
[  323.109426][T16084]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  323.109446][T16084]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  323.109465][T16084]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  323.109515][T16084]  warn_alloc+0x214/0x310
[  323.109533][T16084]  ? stack_depot_save_flags+0x40/0x900
[  323.109554][T16084]  ? __pfx_warn_alloc+0x10/0x10
[  323.109571][T16084]  ? kasan_save_track+0x4f/0x80
[  323.109594][T16084]  ? xskq_create+0x56/0x170
[  323.109617][T16084]  ? xsk_init_queue+0xb0/0x110
[  323.109635][T16084]  ? xsk_setsockopt+0x4dc/0x8d0
[  323.109652][T16084]  ? do_sock_setsockopt+0x17c/0x1b0
[  323.109666][T16084]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  323.109679][T16084]  ? do_syscall_64+0xfa/0x3b0
[  323.109699][T16084]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.109723][T16084]  __vmalloc_node_range_noprof+0x125/0x12f0
[  323.109764][T16084]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  323.109784][T16084]  ? __kasan_kmalloc+0x93/0xb0
[  323.109807][T16084]  vmalloc_user_noprof+0xad/0xf0
[  323.109822][T16084]  ? xskq_create+0xbf/0x170
[  323.109848][T16084]  xskq_create+0xbf/0x170
[  323.109873][T16084]  xsk_init_queue+0xb0/0x110
[  323.109897][T16084]  xsk_setsockopt+0x4dc/0x8d0
[  323.109919][T16084]  ? __pfx_xsk_setsockopt+0x10/0x10
[  323.109939][T16084]  ? __pfx_aa_sk_perm+0x10/0x10
[  323.109962][T16084]  ? aa_sock_opt_perm+0x74/0x110
[  323.109983][T16084]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  323.110001][T16084]  ? __pfx_xsk_setsockopt+0x10/0x10
[  323.110019][T16084]  do_sock_setsockopt+0x17c/0x1b0
[  323.110036][T16084]  __x64_sys_setsockopt+0x13f/0x1b0
[  323.110055][T16084]  do_syscall_64+0xfa/0x3b0
[  323.110075][T16084]  ? lockdep_hardirqs_on+0x9c/0x150
[  323.110097][T16084]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.110111][T16084]  ? exc_page_fault+0x9f/0xf0
[  323.110133][T16084]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.110147][T16084] RIP: 0033:0x7fcf78b8ebe9
[  323.110162][T16084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  323.110175][T16084] RSP: 002b:00007fcf79969038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  323.110194][T16084] RAX: ffffffffffffffda RBX: 00007fcf78db6090 RCX: 00007fcf78b8ebe9
[  323.110206][T16084] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  323.110216][T16084] RBP: 00007fcf78c11e19 R08: 0000000000000004 R09: 0000000000000000
[  323.110226][T16084] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  323.110236][T16084] R13: 00007fcf78db6128 R14: 00007fcf78db6090 R15: 00007ffecf2257e8
[  323.110263][T16084]  </TASK>
[  323.110270][T16084] Mem-Info:
[  323.186390][T16090] bond2: option coupled_control: unable to set because the bond device is up
[  323.187166][T16084] active_anon:5519 inactive_anon:0 isolated_anon:0
[  323.187166][T16084]  active_file:1634 inactive_file:38308 isolated_file:0
[  323.187166][T16084]  unevictable:1768 dirty:125 writeback:0
[  323.187166][T16084]  slab_reclaimable:10785 slab_unreclaimable:128770
[  323.187166][T16084]  mapped:18746 shmem:2421 pagetables:1053
[  323.187166][T16084]  sec_pagetables:0 bounce:0
[  323.187166][T16084]  kernel_misc_reclaimable:0
[  323.187166][T16084]  free:222250 free_pcp:15601 free_cma:0
[  323.256239][T16084] Node 0 active_anon:11828kB inactive_anon:0kB active_file:4644kB inactive_file:30576kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28928kB dirty:320kB writeback:0kB shmem:4864kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7300kB pagetables:2452kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  323.268632][T16084] Node 1 active_anon:10316kB inactive_anon:0kB active_file:1892kB inactive_file:122656kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46056kB dirty:180kB writeback:0kB shmem:4820kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8420kB pagetables:1828kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  323.279566][T16084] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  323.290170][T16084] lowmem_reserve[]: 0 814 814 814 814
[  323.294507][T16084] Node 0 DMA32 free:186812kB boost:0kB min:33720kB low:42148kB high:50576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11828kB inactive_anon:0kB active_file:4644kB inactive_file:30576kB unevictable:3536kB writepending:320kB present:1556484kB managed:834028kB mlocked:0kB bounce:0kB free_pcp:27864kB local_pcp:16460kB free_cma:0kB
[  323.306492][T16084] lowmem_reserve[]: 0 0 0 0 0
[  323.308424][T16084] Node 1 DMA32 free:458492kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  323.318980][T16084] lowmem_reserve[]: 0 0 854 854 854
[  323.320869][T16084] Node 1 Normal free:228144kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10316kB inactive_anon:0kB active_file:1892kB inactive_file:122656kB unevictable:3536kB writepending:180kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:34988kB local_pcp:17920kB free_cma:0kB
[  323.332177][T16084] lowmem_reserve[]: 0 0 0 0 0
[  323.334608][T16084] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  323.339587][T16084] Node 0 DMA32: 1768*4kB (UM) 757*8kB (UME) 365*16kB (UME) 204*32kB (UME) 136*64kB (UME) 64*128kB (UME) 42*256kB (UM) 19*512kB (UM) 9*1024kB (UME) 2*2048kB (M) 27*4096kB (UM) = 186776kB
[  323.347269][T16084] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  323.359380][T16084] Node 1 Normal: 230*4kB (UME) 531*8kB (UME) 159*16kB (UM) 73*32kB (UME) 181*64kB (UM) 23*128kB (UME) 19*256kB (UME) 4*512kB (UM) 6*1024kB (U) 7*2048kB (UME) 43*4096kB (UM) = 228096kB
[  323.367411][T16084] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  323.371223][T16084] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  323.375185][T16084] 42363 total pagecache pages
[  323.377878][T16084] 0 pages in swap cache
[  323.380789][T16084] Free swap  = 124996kB
[  323.382931][T16084] Total swap = 124996kB
[  323.384700][T16084] 786301 pages RAM
[  323.386368][T16084] 0 pages HighMem/MovableOnly
[  323.388599][T16084] 240546 pages reserved
[  323.390550][T16084] 0 pages cma reserved
[  323.955155][T16103] syzkaller0: entered promiscuous mode
[  323.957596][T16103] syzkaller0: entered allmulticast mode
[  324.102274][T16108] lo speed is unknown, defaulting to 1000
[  324.154903][T16112] sch_tbf: burst 240 is lower than device lo mtu (11337746) !
[  324.297735][T16128] netlink: 'syz.2.2827': attribute type 1 has an invalid length.
[  324.420840][T16132] tap0: tun_chr_ioctl cmd 1074025677
[  324.438037][T16132] tap0: linktype set to 804
[  324.537613][T16135] veth11: entered allmulticast mode
[  324.598287][T16141] lo speed is unknown, defaulting to 1000
[  324.657704][T16144] netlink: 'syz.2.2831': attribute type 10 has an invalid length.
[  324.729605][T16147] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16)
[  324.734708][T16147] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  324.740762][T16147] netlink: 'syz.2.2832': attribute type 10 has an invalid length.
[  325.150060][T16173] __nla_validate_parse: 10 callbacks suppressed
[  325.150076][T16173] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2839'.
[  325.270795][T16176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2839'.
[  325.477743][T16189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2842'.
[  325.517774][T16189] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  325.530735][T16193] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  325.536070][T16193] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  325.594424][T16198] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  325.628075][T16202] lo: left promiscuous mode
[  325.630343][T16202] tunl0: left promiscuous mode
[  325.638435][T16202] erspan0: left promiscuous mode
[  325.640096][T16202] ip_vti0: left promiscuous mode
[  325.641729][T16202] ip6_vti0: left promiscuous mode
[  325.643783][T16202] sit0: left promiscuous mode
[  325.645337][T16202] ip6tnl0: left promiscuous mode
[  325.646916][T16202] ip6gre0: left promiscuous mode
[  325.648521][T16202] !: left promiscuous mode
[  325.650046][T16202] nlmon0: left promiscuous mode
[  325.652556][T16202] caif0: left promiscuous mode
[  325.655180][T16202] veth0: left promiscuous mode
[  325.656842][T16202] wg0: left promiscuous mode
[  325.658361][T16202] wg1: left promiscuous mode
[  325.659903][T16202] wg2: left promiscuous mode
[  325.661422][T16202] veth0_to_bridge: left promiscuous mode
[  325.664013][T16202] bridge_slave_0: left promiscuous mode
[  325.666420][T16202] veth1_to_bridge: left promiscuous mode
[  325.668245][T16202] bridge_slave_1: left promiscuous mode
[  325.670014][T16202] veth0_to_bond: left promiscuous mode
[  325.671788][T16202] bond_slave_0: left promiscuous mode
[  325.674790][T16202] veth0_to_team: left promiscuous mode
[  325.676850][T16202] C: left promiscuous mode
[  325.678956][T16202] veth1_to_team: left promiscuous mode
[  325.680766][T16202] team_slave_1: left promiscuous mode
[  325.684865][T16202] veth0_to_batadv: left promiscuous mode
[  325.686787][T16202] batadv_slave_0: left promiscuous mode
[  325.688569][T16202] xfrm0: left promiscuous mode
[  325.690153][T16202] veth0_to_hsr: left promiscuous mode
[  325.691891][T16202] hsr_slave_0: left promiscuous mode
[  325.697938][T16202] vlan0: left promiscuous mode
[  325.699893][T16202] vlan1: left promiscuous mode
[  325.701838][T16202] macvlan0: left promiscuous mode
[  325.704181][T16202] macvlan1: left promiscuous mode
[  325.706013][T16202] ipvlan0: left promiscuous mode
[  325.707860][T16202] ipvlan1: left promiscuous mode
[  325.709679][T16202] geneve1: left promiscuous mode
[  325.711749][T16202] mac80211_hwsim hwsim2 ": left promiscuous mode
[  325.714651][T16202] mac80211_hwsim hwsim4 wlan1: left promiscuous mode
[  325.717435][T16202] bridge1: left promiscuous mode
[  325.719375][T16202] bond1: left promiscuous mode
[  325.721165][T16202] geneve2: left promiscuous mode
[  325.723132][T16202] bridge2: left promiscuous mode
[  325.724877][T16202] bond2: left promiscuous mode
[  325.726664][T16202] bridge3: left promiscuous mode
[  325.728430][T16202] bridge4: left promiscuous mode
[  325.730322][T16202] bond3: left promiscuous mode
[  325.731971][T16202] vxcan2: left promiscuous mode
[  325.733841][T16202] vxcan3: left promiscuous mode
[  325.735528][T16202] bridge5: left promiscuous mode
[  325.737332][T16202] veth2: left promiscuous mode
[  325.739069][T16202] veth3: left promiscuous mode
[  325.740777][T16202] vxlan0: left promiscuous mode
[  325.742481][T16202] pimreg3: left promiscuous mode
[  325.744619][T16202] macvlan2: left promiscuous mode
[  325.746501][T16202] bridge6: left promiscuous mode
[  325.748292][T16202] geneve3: left promiscuous mode
[  325.750146][T16202] geneve4: left promiscuous mode
[  325.751938][T16202] ip6tnl1: left promiscuous mode
[  325.754389][T16202] bond4: left promiscuous mode
[  325.756740][T16202] bridge7: left promiscuous mode
[  325.758984][T16202] sit1: left promiscuous mode
[  325.762960][T16202] bridge8: left promiscuous mode
[  325.764961][T16202] bond5: left promiscuous mode
[  325.766706][T16202] vcan1: left promiscuous mode
[  325.768610][T16202] vti60: left promiscuous mode
[  325.770447][T16202] bridge9: left promiscuous mode
[  325.772201][T16202] bridge10: left promiscuous mode
[  325.775150][T16202] ipvlan2: left promiscuous mode
[  325.776896][T16202] vxlan1: left promiscuous mode
[  325.778574][T16202] macvlan3: left promiscuous mode
[  325.780428][T16202] bond6: left promiscuous mode
[  325.782100][T16202] wireguard0: left promiscuous mode
[  325.784495][T16202] bridge11: left promiscuous mode
[  325.786508][T16202] wireguard1: left promiscuous mode
[  325.788465][T16202] bond7: left promiscuous mode
[  325.790345][T16202] wireguard2: left promiscuous mode
[  325.792507][T16202] wireguard3: left promiscuous mode
[  325.794485][T16202] bond8: left promiscuous mode
[  325.796264][T16202] gretap1: left promiscuous mode
[  325.798138][T16202] vxlan2: left promiscuous mode
[  325.799986][T16202] vxlan3: left promiscuous mode
[  325.801720][T16202] veth4: left promiscuous mode
[  325.803807][T16202] veth5: left promiscuous mode
[  325.805575][T16202] bond9: left promiscuous mode
[  325.807309][T16202] bond10: left promiscuous mode
[  325.809172][T16202] veth6: left promiscuous mode
[  325.811007][T16202] veth7: left promiscuous mode
[  325.812988][T16202] vlan2: left promiscuous mode
[  325.814670][T16202] bond11: left promiscuous mode
[  325.816562][T16202] gretap2: left promiscuous mode
[  325.819201][T16211] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  325.819570][T16202] bridge12: left promiscuous mode
[  325.830619][T16202] bridge13: left promiscuous mode
[  325.832775][T16202] bridge14: left promiscuous mode
[  325.834791][T16202] bridge15: left promiscuous mode
[  325.836689][T16202] bridge16: left promiscuous mode
[  325.838595][T16202] bridge17: left promiscuous mode
[  325.840461][T16202] gre1: left promiscuous mode
[  325.842385][T16202] bridge18: left promiscuous mode
[  325.844259][T16202] syztnl0: left promiscuous mode
[  325.845960][T16202] geneve5: left promiscuous mode
[  325.847679][T16202] bridge19: left promiscuous mode
[  325.849454][T16202] bridge20: left promiscuous mode
[  325.851163][T16202] ip6erspan0: left promiscuous mode
[  325.853018][T16202] bridge21: left promiscuous mode
[  325.854758][T16202] bridge22: left promiscuous mode
[  325.856578][T16202] vlan3: left promiscuous mode
[  325.858433][T16202] bridge23: left promiscuous mode
[  325.860425][T16202] bridge24: left promiscuous mode
[  325.862346][T16202] veth8: left promiscuous mode
[  325.864384][T16202] veth9: left promiscuous mode
[  325.866166][T16202] vlan4: left promiscuous mode
[  325.867827][T16202] veth1: left promiscuous mode
[  325.869725][T16202] bridge25: left promiscuous mode
[  325.871557][T16202] bridge26: left promiscuous mode
[  325.875089][T16202] gtp0: left promiscuous mode
[  325.876763][T16202] bond12: left promiscuous mode
[  325.878438][T16202] gretap3: left promiscuous mode
[  325.880465][T16202] bond13: left promiscuous mode
[  325.882069][T16202] bond14: left promiscuous mode
[  325.884028][T16202] bond15: left promiscuous mode
[  325.885816][T16202] bridge27: left promiscuous mode
[  325.887693][T16202] gtp1: left promiscuous mode
[  325.889431][T16202] vlan5: left promiscuous mode
[  325.891152][T16202] 0{X: left promiscuous mode
[  325.893405][T16202] bridge28: left promiscuous mode
[  325.895344][T16202] D: left promiscuous mode
[  325.897001][T16202] ip6gretap0: left promiscuous mode
[  325.898944][T16202] gtp2: left promiscuous mode
[  325.900690][T16202] bond16: left promiscuous mode
[  325.902549][T16202] gretap4: left promiscuous mode
[  325.904371][T16202] veth10: left promiscuous mode
[  325.906202][T16202] veth11: left promiscuous mode
[  325.907930][T16202] ipvlan4: left promiscuous mode
[  325.909743][T16202] ipvlan5: left promiscuous mode
[  325.911544][T16202] bond17: left promiscuous mode
[  325.913414][T16202] bridge29: left promiscuous mode
[  325.915288][T16202] bond18: left promiscuous mode
[  325.916983][T16202] bond19: left promiscuous mode
[  325.918727][T16202] bond20: left promiscuous mode
[  325.920488][T16202] bridge30: left promiscuous mode
[  325.922266][T16202] gre2: left promiscuous mode
[  325.924138][T16202] bridge31: left promiscuous mode
[  325.926011][T16202] erspan1: left promiscuous mode
[  325.927763][T16202] sit2: left promiscuous mode
[  325.929548][T16202] sit3: left promiscuous mode
[  325.931247][T16202] bridge32: left promiscuous mode
[  325.933194][T16202] sit4: left promiscuous mode
[  325.934898][T16202] ip6gre1: left promiscuous mode
[  325.936758][T16202] macvlan4: left promiscuous mode
[  325.938588][T16202] gre3: left promiscuous mode
[  325.940394][T16202] bond21: left promiscuous mode
[  325.942139][T16202] bond22: left promiscuous mode
[  325.944146][T16202] sit5: left promiscuous mode
[  325.945955][T16202] bond23: left promiscuous mode
[  325.947715][T16202] veth12: left promiscuous mode
[  325.949528][T16202] veth13: left promiscuous mode
[  325.951330][T16202] bridge33: left promiscuous mode
[  325.953420][T16202] batadv1: left promiscuous mode
[  325.955315][T16202] netdevsim netdevsim1 eth0: left promiscuous mode
[  325.957662][T16202] netdevsim netdevsim1 eth1: left promiscuous mode
[  325.959903][T16202] netdevsim netdevsim1 eth2: left promiscuous mode
[  325.962237][T16202] netdevsim netdevsim1 eth3: left promiscuous mode
[  325.964532][T16202] bond24: left promiscuous mode
[  325.966545][T16202] veth14: left promiscuous mode
[  325.968745][T16202] veth15: left promiscuous mode
[  325.970591][T16202] bridge34: left promiscuous mode
[  325.972572][T16202] bond25: left promiscuous mode
[  325.974440][T16202] bond26: left promiscuous mode
[  325.976311][T16202] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  325.978834][T16202] bond27: left promiscuous mode
[  325.980574][T16202] ip6gretap1: left promiscuous mode
[  325.982468][T16202] veth16: left promiscuous mode
[  325.984358][T16202] veth17: left promiscuous mode
[  325.986559][T16202] ipvlan6: left promiscuous mode
[  325.988533][T16202] bridge35: left promiscuous mode
[  325.990411][T16202] pimreg: left promiscuous mode
[  325.992177][T16202] geneve0: left promiscuous mode
[  325.994261][T16202] syztnl1: left promiscuous mode
[  325.995994][T16202] bond0: left promiscuous mode
[  325.997606][T16202] geneve6: left promiscuous mode
[  325.999324][T16202] ipip0: left promiscuous mode
[  326.000924][T16202] bond28: left promiscuous mode
[  326.002775][T16202] veth18: left promiscuous mode
[  326.004489][T16202] veth19: left promiscuous mode
[  326.006662][T16202] bond29: left promiscuous mode
[  326.008452][T16202] ipvlan3: left promiscuous mode
[  326.010158][T16202] bridge36: left promiscuous mode
[  326.011807][T16202] bond30: left promiscuous mode
[  326.013555][T16202] ip6gre2: left promiscuous mode
[  326.015315][T16202] bridge37: left promiscuous mode
[  326.016995][T16202] bond31: left promiscuous mode
[  326.018593][T16202] bond32: left promiscuous mode
[  326.020219][T16202] bond33: left promiscuous mode
[  326.021899][T16202] ipvlan7: left promiscuous mode
[  326.025418][T16202] bond34: left promiscuous mode
[  326.027519][T16202] bond35: left promiscuous mode
[  326.029105][T16202] bond36: left promiscuous mode
[  326.030769][T16202] bond37: left promiscuous mode
[  326.032538][T16202] bond38: left promiscuous mode
[  326.034149][T16202] bond39: left promiscuous mode
[  326.035806][T16202] bond40: left promiscuous mode
[  326.037460][T16202] bond41: left promiscuous mode
[  326.039109][T16202] bond42: left promiscuous mode
[  326.040726][T16202] bond43: left promiscuous mode
[  326.042524][T16202] bond44: left promiscuous mode
[  326.044107][T16202] bond45: left promiscuous mode
[  326.046013][T16202] bond46: left promiscuous mode
[  326.047898][T16202] bond47: left promiscuous mode
[  326.049469][T16202] bond48: left promiscuous mode
[  326.051036][T16202] bond49: left promiscuous mode
[  326.052750][T16202] bond50: left promiscuous mode
[  326.054274][T16202] bond51: left promiscuous mode
[  326.055875][T16202] bond52: left promiscuous mode
[  326.057398][T16202] bond53: left promiscuous mode
[  326.058920][T16202] bond54: left promiscuous mode
[  326.087310][T16211] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  326.096773][T16209] lo speed is unknown, defaulting to 1000
[  326.215689][T16205] lo speed is unknown, defaulting to 1000
[  326.308062][T16227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2851'.
[  326.351206][T16227] bridge38: port 1(veth21) entered blocking state
[  326.353849][T16227] bridge38: port 1(veth21) entered disabled state
[  326.356075][T16227] veth21: entered allmulticast mode
[  326.359065][T16227] veth21: entered promiscuous mode
[  326.368721][T16227] bridge38: port 2(veth0_to_bond) entered blocking state
[  326.371199][T16227] bridge38: port 2(veth0_to_bond) entered disabled state
[  326.373600][T16227] veth0_to_bond: entered allmulticast mode
[  326.376949][T16227] veth0_to_bond: entered promiscuous mode
[  326.414611][T16229] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  326.418574][T16229] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  326.424482][T16229] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  326.649848][T16249] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2855'.
[  326.709799][T16238] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  326.742254][T16242] validate_nla: 2 callbacks suppressed
[  326.742274][T16242] netlink: 'syz.0.2856': attribute type 10 has an invalid length.
[  327.496897][T16284] netlink: 'syz.0.2858': attribute type 1 has an invalid length.
[  327.499797][T16284] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2858'.
[  327.594029][T16286] lo speed is unknown, defaulting to 1000
[  327.775584][T16293] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2863'.
[  328.184229][ T5211] Bluetooth: hci2: command 0x0405 tx timeout
[  328.314740][T16301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2865'.
[  331.019811][T16307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2866'.
[  331.031607][T16316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2867'.
[  331.036583][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  331.036646][T16307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2866'.
[  331.039112][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  331.056322][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  331.058917][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  331.065678][T16314] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2868'.
[  331.095616][T16314] 8021q: VLANs not supported on sit0
[  331.160820][T16320] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2869'.
[  331.172170][T16322] 8021q: adding VLAN 0 to HW filter on device bond1
[  331.264810][T16332] mac80211_hwsim hwsim13 wlan0: entered promiscuous mode
[  331.267156][T16332] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  331.298409][T16334] bridge0: port 1(erspan0) entered blocking state
[  331.300570][T16334] bridge0: port 1(erspan0) entered disabled state
[  331.302962][T16334] erspan0: entered allmulticast mode
[  331.305614][T16334] erspan0: left allmulticast mode
[  331.328247][T16332] lo speed is unknown, defaulting to 1000
[  331.466137][T16338] lo speed is unknown, defaulting to 1000
[  331.610284][T16343] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  331.631088][T16343] syzkaller0: entered promiscuous mode
[  331.633554][T16343] syzkaller0: entered allmulticast mode
[  331.656454][T16343] tipc: Resetting bearer <eth:syzkaller0>
[  331.661197][T16342] tipc: Resetting bearer <eth:syzkaller0>
[  331.682029][T16342] tipc: Disabling bearer <eth:syzkaller0>
[  331.894436][T16351] 8021q: adding VLAN 0 to HW filter on device bond1
[  331.906463][T16349] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2877'.
[  331.909548][T16349] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2877'.
[  331.948365][   T33] audit: type=1804 audit(1755160782.648:5): pid=16353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2879" name="/newroot/924/cgroup.controllers" dev="tmpfs" ino=4727 res=1 errno=0
[  331.949410][T16353] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2879'.
[  331.956462][   T33] audit: type=1800 audit(1755160782.648:6): pid=16353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2879" name="cgroup.controllers" dev="tmpfs" ino=4727 res=0 errno=0
[  332.002053][T16355] netlink: 'syz.1.2880': attribute type 1 has an invalid length.
[  332.006662][T16355] workqueue: Failed to create a rescuer kthread for wq "bond56": -EINTR
[  332.079160][T16361] nbd: couldn't find device at index 536870912
[  332.085692][T16361] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2881'.
[  332.314013][T16370] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2884'.
[  332.635549][T16385] lo speed is unknown, defaulting to 1000
[  332.880742][ T7147] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  332.886199][ T7147] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  332.889871][ T7147] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  332.904277][ T7147] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  333.097642][T16406] netlink: 'syz.1.2891': attribute type 5 has an invalid length.
[  333.278935][T16418] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode
[  333.302071][T16418] netlink: 'syz.0.2892': attribute type 10 has an invalid length.
[  334.215433][T16463] 8021q: adding VLAN 0 to HW filter on device bond1
[  334.277452][T16465] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  334.470979][T16478] veth1: left promiscuous mode
[  334.477986][T16478] mac80211_hwsim hwsim13 wlan0: left promiscuous mode
[  334.481754][T16478] veth8: left promiscuous mode
[  334.483727][T16478] veth8: left allmulticast mode
[  334.486591][T16478] macsec0: left promiscuous mode
[  334.488422][T16478] macsec0: left allmulticast mode
[  334.490277][T16478] ip6tnl5: left promiscuous mode
[  334.492059][T16478] ip6tnl5: left allmulticast mode
[  334.505345][T16478] veth11: left allmulticast mode
[  334.706491][T16502] netlink: 'syz.1.2915': attribute type 13 has an invalid length.
[  334.709310][T16502] netlink: 'syz.1.2915': attribute type 17 has an invalid length.
[  334.740948][T16502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  334.788137][T16495] lo speed is unknown, defaulting to 1000
[  335.560321][T16548] lo speed is unknown, defaulting to 1000
[  335.662520][    C1] ==================================================================
[  335.664964][    C1] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  335.667344][    C1] Read of size 1 at addr ffff88803d37d0b0 by task swapper/1/0
[  335.669648][    C1] 
[  335.670521][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[  335.670534][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  335.670540][    C1] Call Trace:
[  335.670545][    C1]  <IRQ>
[  335.670550][    C1]  dump_stack_lvl+0x189/0x250
[  335.670563][    C1]  ? __kasan_check_byte+0x12/0x40
[  335.670579][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  335.670587][    C1]  ? lock_release+0x4b/0x3e0
[  335.670602][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  335.670613][    C1]  print_report+0xca/0x240
[  335.670626][    C1]  ? xfrm_state_find+0x2cf2/0x5400
[  335.670634][    C1]  kasan_report+0x118/0x150
[  335.670646][    C1]  ? xfrm_state_find+0x2cf2/0x5400
[  335.670655][    C1]  xfrm_state_find+0x2cf2/0x5400
[  335.670662][    C1]  ? __lock_acquire+0xab9/0xd20
[  335.670676][    C1]  ? unwind_next_frame+0xa5/0x2390
[  335.670687][    C1]  ? xfrm_state_find+0x1da/0x5400
[  335.670695][    C1]  ? __pfx_xfrm_state_find+0x10/0x10
[  335.670706][    C1]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  335.670723][    C1]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  335.670734][    C1]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  335.670744][    C1]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  335.670755][    C1]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  335.670771][    C1]  ? xfrm_expand_policies+0x41f/0x6a0
[  335.670781][    C1]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  335.670793][    C1]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  335.670802][    C1]  ? make_kuid+0x1d9/0x680
[  335.670814][    C1]  ? __pfx_make_kuid+0x10/0x10
[  335.670825][    C1]  xfrm_lookup_route+0x3c/0x1c0
[  335.670835][    C1]  igmpv3_newpack+0x27d/0x11d0
[  335.670845][    C1]  ? __pfx_igmpv3_newpack+0x10/0x10
[  335.670854][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[  335.670866][    C1]  add_grhead+0x70/0x340
[  335.670874][    C1]  add_grec+0x1122/0x13e0
[  335.670882][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  335.670891][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  335.670907][    C1]  igmp_ifc_timer_expire+0x978/0xde0
[  335.670920][    C1]  ? igmp_ifc_timer_expire+0x26/0xde0
[  335.670932][    C1]  call_timer_fn+0x17e/0x5f0
[  335.670944][    C1]  ? __pfx_igmp_ifc_timer_expire+0x10/0x10
[  335.670955][    C1]  ? call_timer_fn+0xbe/0x5f0
[  335.670965][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  335.670976][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  335.670988][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  335.671006][    C1]  ? __pfx_igmp_ifc_timer_expire+0x10/0x10
[  335.671018][    C1]  __run_timer_base+0x61a/0x860
[  335.671027][    C1]  ? ktime_get+0x3e/0x1f0
[  335.671038][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  335.671047][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  335.671059][    C1]  run_timer_softirq+0xb7/0x180
[  335.671069][    C1]  handle_softirqs+0x286/0x870
[  335.671080][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  335.671093][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  335.671105][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  335.671116][    C1]  __irq_exit_rcu+0xca/0x1f0
[  335.671127][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  335.671140][    C1]  irq_exit_rcu+0x9/0x30
[  335.671150][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  335.671160][    C1]  </IRQ>
[  335.671163][    C1]  <TASK>
[  335.671166][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  335.671176][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  335.671188][    C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 13 6f 18 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  335.671196][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  335.671206][    C1] RAX: c1f9262ee775b700 RBX: ffffffff81969b18 RCX: c1f9262ee775b700
[  335.671212][    C1] RDX: 0000000000000001 RSI: ffffffff8d9792aa RDI: ffffffff8be30a00
[  335.671218][    C1] RBP: ffffc90000177f20 R08: ffff888136632f5b R09: 1ffff11026cc65eb
[  335.671224][    C1] R10: dffffc0000000000 R11: ffffed1026cc65ec R12: ffffffff8fa07bf0
[  335.671230][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1102001d000
[  335.671236][    C1]  ? do_idle+0x1e8/0x510
[  335.671252][    C1]  default_idle+0x13/0x20
[  335.671259][    C1]  default_idle_call+0x74/0xb0
[  335.671266][    C1]  do_idle+0x1e8/0x510
[  335.671303][    C1]  ? __pfx_do_idle+0x10/0x10
[  335.671317][    C1]  cpu_startup_entry+0x44/0x60
[  335.671328][    C1]  start_secondary+0x101/0x110
[  335.671341][    C1]  common_startup_64+0x13e/0x147
[  335.671356][    C1]  </TASK>
[  335.671359][    C1] 
[  335.809823][    C1] Allocated by task 14843:
[  335.811527][    C1]  kasan_save_track+0x3e/0x80
[  335.813385][    C1]  __kasan_slab_alloc+0x6c/0x80
[  335.815281][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  335.817390][    C1]  xfrm_state_alloc+0x24/0x2f0
[  335.819210][    C1]  __find_acq_core+0x8a7/0x1c00
[  335.821081][    C1]  xfrm_find_acq+0x78/0xa0
[  335.822813][    C1]  xfrm_alloc_userspi+0x6b3/0xc90
[  335.824740][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  335.826662][    C1]  netlink_rcv_skb+0x208/0x470
[  335.828484][    C1]  xfrm_netlink_rcv+0x79/0x90
[  335.830246][    C1]  netlink_unicast+0x82f/0x9e0
[  335.832109][    C1]  netlink_sendmsg+0x805/0xb30
[  335.833938][    C1]  __sock_sendmsg+0x21c/0x270
[  335.835761][    C1]  ____sys_sendmsg+0x505/0x830
[  335.837613][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  335.839452][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  335.841386][    C1]  do_syscall_64+0xfa/0x3b0
[  335.843207][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.845556][    C1] 
[  335.846485][    C1] Freed by task 5867:
[  335.848019][    C1]  kasan_save_track+0x3e/0x80
[  335.849879][    C1]  kasan_save_free_info+0x46/0x50
[  335.851819][    C1]  __kasan_slab_free+0x62/0x70
[  335.853672][    C1]  kmem_cache_free+0x18f/0x400
[  335.855536][    C1]  xfrm_state_gc_task+0x518/0x6a0
[  335.857540][    C1]  process_scheduled_works+0xae1/0x17b0
[  335.859665][    C1]  worker_thread+0x8a0/0xda0
[  335.861508][    C1]  kthread+0x711/0x8a0
[  335.863155][    C1]  ret_from_fork+0x3fc/0x770
[  335.865025][    C1]  ret_from_fork_asm+0x1a/0x30
[  335.866926][    C1] 
[  335.867888][    C1] The buggy address belongs to the object at ffff88803d37cd80
[  335.867888][    C1]  which belongs to the cache xfrm_state of size 928
[  335.873274][    C1] The buggy address is located 816 bytes inside of
[  335.873274][    C1]  freed 928-byte region [ffff88803d37cd80, ffff88803d37d120)
[  335.878570][    C1] 
[  335.879523][    C1] The buggy address belongs to the physical page:
[  335.881986][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803d37e400 pfn:0x3d37c
[  335.885861][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  335.889167][    C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  335.892137][    C1] page_type: f5(slab)
[  335.893749][    C1] raw: 00fff00000000040 ffff888104dd43c0 dead000000000122 0000000000000000
[  335.897108][    C1] raw: ffff88803d37e400 00000000800e0008 00000000f5000000 0000000000000000
[  335.900494][    C1] head: 00fff00000000040 ffff888104dd43c0 dead000000000122 0000000000000000
[  335.903924][    C1] head: ffff88803d37e400 00000000800e0008 00000000f5000000 0000000000000000
[  335.907312][    C1] head: 00fff00000000002 ffffea0000f4df01 00000000ffffffff 00000000ffffffff
[  335.910674][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  335.914074][    C1] page dumped because: kasan: bad access detected
[  335.916593][    C1] page_owner tracks the page as allocated
[  335.918835][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 12149, tgid 12139 (syz.1.1802), ts 229310718551, free_ts 226714379163
[  335.926337][    C1]  post_alloc_hook+0x240/0x2a0
[  335.928272][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  335.930499][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  335.932825][    C1]  alloc_pages_mpol+0x232/0x4a0
[  335.934758][    C1]  allocate_slab+0x8a/0x3b0
[  335.936576][    C1]  ___slab_alloc+0xbfc/0x1480
[  335.938461][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  335.940596][    C1]  xfrm_state_alloc+0x24/0x2f0
[  335.942516][    C1]  xfrm_state_find+0x37d4/0x5400
[  335.944493][    C1]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  335.946918][    C1]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  335.949108][    C1]  xfrm_lookup_route+0x3c/0x1c0
[  335.951119][    C1]  udp_sendmsg+0x142e/0x2170
[  335.952884][    C1]  __sock_sendmsg+0x19c/0x270
[  335.954719][    C1]  ____sys_sendmsg+0x52d/0x830
[  335.956634][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  335.958464][    C1] page last free pid 5820 tgid 5820 stack trace:
[  335.960904][    C1]  __free_frozen_pages+0xc71/0xe70
[  335.962935][    C1]  __put_partials+0x161/0x1c0
[  335.964827][    C1]  put_cpu_partial+0x17c/0x250
[  335.966369][    C1]  __slab_free+0x2f7/0x400
[  335.968064][    C1]  qlist_free_all+0x97/0x140
[  335.969848][    C1]  kasan_quarantine_reduce+0x148/0x160
[  335.972021][    C1]  __kasan_slab_alloc+0x22/0x80
[  335.973893][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  335.975982][    C1]  getname_flags+0xb8/0x540
[  335.977698][    C1]  __x64_sys_unlink+0x3a/0x50
[  335.979493][    C1]  do_syscall_64+0xfa/0x3b0
[  335.981265][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.983529][    C1] 
[  335.984475][    C1] Memory state around the buggy address:
[  335.986677][    C1]  ffff88803d37cf80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  335.989469][    C1]  ffff88803d37d000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  335.991993][    C1] >ffff88803d37d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  335.994805][    C1]                                      ^
[  335.996954][    C1]  ffff88803d37d100: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  335.999944][    C1]  ffff88803d37d180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  336.003118][    C1] ==================================================================
[  336.006608][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  336.009343][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[  336.013874][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  336.017744][    C1] Call Trace:
[  336.019047][    C1]  <IRQ>
[  336.020174][    C1]  dump_stack_lvl+0x99/0x250
[  336.022014][    C1]  ? __asan_memcpy+0x40/0x70
[  336.023870][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  336.025917][    C1]  ? __pfx__printk+0x10/0x10
[  336.027709][    C1]  panic+0x2db/0x790
[  336.029078][    C1]  ? __pfx_panic+0x10/0x10
[  336.030856][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  336.033168][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  336.035181][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  336.037671][    C1]  ? print_memory_metadata+0x314/0x400
[  336.039726][    C1]  ? xfrm_state_find+0x2cf2/0x5400
[  336.041650][    C1]  check_panic_on_warn+0x89/0xb0
[  336.043541][    C1]  ? xfrm_state_find+0x2cf2/0x5400
[  336.045514][    C1]  end_report+0x78/0x160
[  336.047193][    C1]  kasan_report+0x129/0x150
[  336.048951][    C1]  ? xfrm_state_find+0x2cf2/0x5400
[  336.050882][    C1]  xfrm_state_find+0x2cf2/0x5400
[  336.052792][    C1]  ? __lock_acquire+0xab9/0xd20
[  336.054717][    C1]  ? unwind_next_frame+0xa5/0x2390
[  336.056510][    C1]  ? xfrm_state_find+0x1da/0x5400
[  336.058068][    C1]  ? __pfx_xfrm_state_find+0x10/0x10
[  336.059696][    C1]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  336.061658][    C1]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  336.063558][    C1]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  336.065815][    C1]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  336.068080][    C1]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  336.069985][    C1]  ? xfrm_expand_policies+0x41f/0x6a0
[  336.071634][    C1]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  336.073339][    C1]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  336.075381][    C1]  ? make_kuid+0x1d9/0x680
[  336.077143][    C1]  ? __pfx_make_kuid+0x10/0x10
[  336.079054][    C1]  xfrm_lookup_route+0x3c/0x1c0
[  336.081001][    C1]  igmpv3_newpack+0x27d/0x11d0
[  336.082893][    C1]  ? __pfx_igmpv3_newpack+0x10/0x10
[  336.084895][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[  336.086849][    C1]  add_grhead+0x70/0x340
[  336.088551][    C1]  add_grec+0x1122/0x13e0
[  336.090271][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  336.092339][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  336.094588][    C1]  igmp_ifc_timer_expire+0x978/0xde0
[  336.096633][    C1]  ? igmp_ifc_timer_expire+0x26/0xde0
[  336.098766][    C1]  call_timer_fn+0x17e/0x5f0
[  336.100618][    C1]  ? __pfx_igmp_ifc_timer_expire+0x10/0x10
[  336.102934][    C1]  ? call_timer_fn+0xbe/0x5f0
[  336.104841][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  336.106875][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  336.108969][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  336.110783][    C1]  ? __pfx_igmp_ifc_timer_expire+0x10/0x10
[  336.112658][    C1]  __run_timer_base+0x61a/0x860
[  336.114251][    C1]  ? ktime_get+0x3e/0x1f0
[  336.115872][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  336.117909][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  336.120314][    C1]  run_timer_softirq+0xb7/0x180
[  336.122259][    C1]  handle_softirqs+0x286/0x870
[  336.124150][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  336.126067][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  336.128166][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  336.130214][    C1]  __irq_exit_rcu+0xca/0x1f0
[  336.132080][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  336.134130][    C1]  irq_exit_rcu+0x9/0x30
[  336.135782][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  336.137998][    C1]  </IRQ>
[  336.139171][    C1]  <TASK>
[  336.140361][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  336.142740][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  336.144993][    C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 13 6f 18 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  336.151472][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  336.153352][    C1] RAX: c1f9262ee775b700 RBX: ffffffff81969b18 RCX: c1f9262ee775b700
[  336.155767][    C1] RDX: 0000000000000001 RSI: ffffffff8d9792aa RDI: ffffffff8be30a00
[  336.158197][    C1] RBP: ffffc90000177f20 R08: ffff888136632f5b R09: 1ffff11026cc65eb
[  336.160611][    C1] R10: dffffc0000000000 R11: ffffed1026cc65ec R12: ffffffff8fa07bf0
[  336.163048][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1102001d000
[  336.165431][    C1]  ? do_idle+0x1e8/0x510
[  336.166751][    C1]  default_idle+0x13/0x20
[  336.168094][    C1]  default_idle_call+0x74/0xb0
[  336.169589][    C1]  do_idle+0x1e8/0x510
[  336.170866][    C1]  ? __pfx_do_idle+0x10/0x10
[  336.172346][    C1]  cpu_startup_entry+0x44/0x60
[  336.173826][    C1]  start_secondary+0x101/0x110
[  336.175329][    C1]  common_startup_64+0x13e/0x147
[  336.176865][    C1]  </TASK>
[  336.178460][    C1] Kernel Offset: disabled
[  336.179811][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
08:39:46  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff99a97a80 RBX=ffffffff8e13c4e0 RCX=0000000000000000 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff88803d7d9cc0 RBP=ffffffff825c8e9c RSP=ffffc9000296f408
R8 =0000000000000000 R9 =0000000000000000 R10=dffffc0000000000 R11=ffffed100450943d
R12=0000000000000002 R13=ffffffff8e13c4e0 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff819d742d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe3b887e6c0 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3e0e7c CR3=0000000032f2e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001dfa70
R8 =ffff888107698237 R9 =1ffff11020ed3046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a958f3 R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000003743a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000030746973
XMM02=00007f92d0587498 00007f92d0587470 XMM03=00007f92d05874a8 00007f92d05874a0
XMM04=00007f92d10ed100 00007f92d0587460 XMM05=00007f92d0587478 00007f92d05874c0
XMM06=00007f92d05874b8 00007f92d05874b0 XMM07=00007f92d05874a8 00007f92d05874a0
XMM08=0000000000000000 00007f92d0412ee7 XMM09=0000000000000000 00007f92d0412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
