last executing test programs:

2.618535783s ago: executing program 2 (id=1224):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00000010000304000000000000008000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad88000000001c00128009000100626f6e64000000000c00028068a80b00", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0)

2.560340187s ago: executing program 2 (id=1226):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
unshare(0x20000400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4e}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)
close(r0) (async)
r1 = socket(0x1e, 0x4, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x1e, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)={0x44, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffffd}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

1.384873759s ago: executing program 0 (id=1234):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000003000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}}, 0x0)

1.304433447s ago: executing program 0 (id=1235):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000700)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x4a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000305000000090000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800130001000000080014"], 0x44}}, 0x0)

1.200065467s ago: executing program 0 (id=1237):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10)
write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {0x8}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x2, 0x0, 0x0, 0x0, 0x6}, {0x1}, 0x0, 0x7f}}, @TCA_TBF_BURST={0x8, 0x6, 0xe2}]}}, @qdisc_kind_options=@q_mq={0x7}]}, 0x68}}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x2eb5ec5096708fce, 0x0, 0x0, {0x3, 0x0, 0xa}}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}}, 0x20000000)
r6 = socket$packet(0x11, 0x2, 0x300)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r7 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
close(r7)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x100, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {0xa, 0x5}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x50}]}}]}, 0x3c}}, 0x400c4)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_MTU={0x8, 0x4, 0xff2}]}, 0x48}}, 0x0)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff)
r12 = socket$packet(0x11, 0x2, 0x300)
sendmsg$SMC_PNETID_DEL(r9, &(0x7f0000004700)={&(0x7f00000045c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000046c0)={&(0x7f0000002bc0)={0x80, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4021)
recvmmsg$unix(r0, &(0x7f0000005fc0)=[{{&(0x7f0000002c40)=@abs, 0x6e, &(0x7f0000004800)=[{&(0x7f0000002cc0)=""/252, 0xfc}, {&(0x7f0000002dc0)=""/57, 0x39}, {&(0x7f0000002e00)=""/216, 0xd8}, {&(0x7f0000004600)=""/165, 0xa5}, {&(0x7f0000004740)=""/190, 0xbe}], 0x5, &(0x7f0000004880)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000004900), 0x6e, &(0x7f0000005980)=[{&(0x7f0000006100)=""/4109, 0x100d}], 0x1, &(0x7f0000000840)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x178}}, {{&(0x7f0000005ac0)=@abs, 0x6e, &(0x7f0000005d40), 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000005e00)=@abs, 0x6e, &(0x7f0000005f40)=[{&(0x7f0000005e80)=""/139, 0x8b}], 0x1, &(0x7f0000005f80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}], 0x4, 0x2000, &(0x7f00000060c0)={0x0, 0x3938700})
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r13=>0x0})
sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)={0x34, r11, 0x1, 0x70bd25, 0x25dfdbfa, {}, [@ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004800}, 0x20040040)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000042c0)={'batadv_slave_1\x00'})
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)={@fallback=r14, r15, 0x2f}, 0x20)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0), 0x8)

1.110265366s ago: executing program 1 (id=1240):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='b 122'], 0xa)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r4, 0x110, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x300000, 0x1}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040010}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "facaf7719c"}]}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd8}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async)
openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) (async)
write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='b 122'], 0xa) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r4, 0x110, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x300000, 0x1}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040010}, 0x40) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "facaf7719c"}]}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd8}}, 0x0) (async)

1.050952173s ago: executing program 2 (id=1241):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x40428d4}, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000180)={0x9, 'vlan1\x00', {0x6719}, 0x5})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', <r3=>0x0})
clock_gettime(0x0, &(0x7f00000002c0)={<r4=>0x0, <r5=>0x0})
sendmsg$can_bcm(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1d, r3}, 0x10, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="06000000200400000100000000000000", @ANYRES64=r4, @ANYRES64=r5/1000+10000, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="040000c00100000004000020030200004277506662154565"], 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0xc010)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@deltclass={0x24, 0x29, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xf, 0x10}, {0xffff, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x54}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_SECURITY(r10, 0x112, 0x4, &(0x7f0000000080)={0x3, 0xdc}, 0x2)
connect$bt_l2cap(r10, &(0x7f0000000040)={0x1f, 0x1, @none}, 0xe)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000980)=ANY=[@ANYBLOB="4400000064cdd2e8345eac10e29e7c7a71e47b4bbec1e05ef9b9615c3b4b56849976df429cca53d5efb2fe1fbb5011cf7c1c1cb8332ce8bb8f1616c83f42140cf1627bb5d66cf99e1a86aaf9693df25e25369210a628c5c6735755d918a3328dddeaa6f2e9c9f27367194b743d03c4dbb1bb201201e30cca0d14813406c100b54e7dbc3e773953b2b330a0261b1a5f458fd43e4eba1c31b2c678ae5ba103935d48c1524af4150973cdb969811987c08f7f53666f812a27bb928c8549d85d97962a13cf163cb4b3caae2e515d5a8d413bf18f64d38c", @ANYRES16=r11, @ANYRES16=r0], 0x44}}, 0x8045)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x2000c000}, 0x800)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0)

1.050773682s ago: executing program 1 (id=1242):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10)
bind$inet6(r0, 0x0, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [], {0x14}}, 0x28}}, 0x0)

330.590676ms ago: executing program 0 (id=1243):
r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x2, 0x2, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc040}, 0x4008000) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0}) (rerun: 32)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r5, 0x1, 0x50bd24, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r4}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (async, rerun: 64)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x24, r6, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, r9, 0x1, 0x0, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x101, 0xd}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x15}, 0x2004c088)

330.283946ms ago: executing program 0 (id=1244):
socket$inet6(0xa, 0x3, 0x7) (async)
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r2 = socket(0x400000000010, 0x3, 0x0) (async)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', <r4=>0x0}) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xfff3}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

197.828724ms ago: executing program 0 (id=1245):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000001408000240000000120400058008000640000000440900010073797a30"], 0x10c}}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x9b}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
socket(0x10, 0x80003, 0x0) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000095080000000000002f7e71b5618f1ee16af22a7508b5d9eaa029e273bfc7f2b2bab0ad8f84c88946ee24c18a521dcf22eeed227f18732444499c827bb71f9a8029951edeb471e9008e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r2}, 0x18) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) (async)
socket$tipc(0x1e, 0x2, 0x0) (async)
unshare(0x2a020400) (async)
socket$xdp(0x2c, 0x3, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$X25_QBITINCL(r7, 0x106, 0x1, &(0x7f0000000000), 0x4) (async)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'wlan1\x00', 0x0})
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={<r9=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14)
socket(0x1d, 0x2, 0x6)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000840)={r9, @in={{0x2, 0x4e22, @empty}}, 0x2, 0x2, 0x614, 0x1, 0x2d, 0x7, 0x4}, 0x9c) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0)

197.29323ms ago: executing program 2 (id=1246):
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008040}, 0x4004)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, 0x2, 0x8, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88be}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1a01}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x8004)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x98, r1, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x40, 0x57}}}}, [@NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x953f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x47}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xdf04}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x800}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x56}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xe73}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1a}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8a}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2d}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffff}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x100}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffff7}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8080}, 0xc011)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@newspdinfo={0x44, 0x24, 0x20, 0x70bd2a, 0x25dfdbfb, 0x4, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x44}}, 0x4040800)
sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x2, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x20000041)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x0, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x40000)
sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, r1, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4b, 0x65}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000084)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x1, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24044011}, 0x880)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@volatile={0xc}, @ptr={0x2, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x30, 0x2e, 0x2e, 0x2e, 0x61]}}, &(0x7f0000000a80)=""/214, 0x37, 0xd6, 0x0, 0x600000}, 0x28)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), r0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'ip_vti0\x00', &(0x7f0000000c40)={'gre0\x00', <r7=>0x0, 0x8, 0x8, 0x6, 0x7, {{0x3b, 0x4, 0x2, 0x10, 0xec, 0x67, 0x0, 0x1, 0x29, 0x0, @local, @empty, {[@timestamp_prespec={0x44, 0x54, 0x32, 0x3, 0x7, [{@private=0xa010102, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@loopback, 0xfffffffd}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x81}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x4}, {@empty, 0x5}, {@local}, {@multicast1, 0x7}, {@multicast2, 0x6f}]}, @timestamp={0x44, 0x28, 0xa5, 0x0, 0xb, [0x4, 0x6, 0x9, 0xfff, 0x4, 0x5, 0x2, 0x4, 0x10]}, @timestamp_prespec={0x44, 0xc, 0x13, 0x3, 0x2, [{@private=0xa010100, 0x9}]}, @timestamp={0x44, 0x14, 0xb, 0x0, 0x1, [0x7ff, 0x3, 0x49, 0x3]}, @end, @noop, @timestamp={0x44, 0xc, 0x89, 0x0, 0xb, [0x8, 0x3]}, @cipso={0x86, 0x1b, 0x3, [{0x0, 0xb, "1e1166319c018b0f51"}, {0x1, 0xa, "50b0f5cd5eddaf90"}]}, @end, @timestamp={0x44, 0x10, 0x27, 0x0, 0x1, [0xff, 0x5, 0x0]}]}}}}})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000f00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0xf0, r6, 0x2, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x10040801}, 0x10)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000f40)={0x0, 0x3, 0x10}, 0x8)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), r0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000fc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r9=>0x0})
ioctl$BTRFS_IOC_RM_DEV_V2(r8, 0x5000943a, &(0x7f0000001240)={{r8}, r9, 0x1e, @inherit={0x50, &(0x7f00000011c0)={0x0, 0x1, 0x7, 0x1, {0x10, 0x7, 0x8000000000000001, 0x698, 0x3}, [0x4]}}, @subvolid=0x7})
sendmsg$inet_sctp(r8, &(0x7f0000002680)={&(0x7f0000002240)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000002600)=[{&(0x7f0000002280)="7a309eeee97537b12ae4d47b3856ab18c830a753c602e451543ae7d49f4d3bbb2274feb384b47ec7f58b720b", 0x2c}, {&(0x7f00000022c0)="f72a40a257388a1a546f8d2e7610a07ccd6db55d36159823aab674147788e0374b2890dce58f62643457793d0db4abf704972a542574d7a01eba5ecc8c86b3ac25658db7dc2b60fefdb7bb007e81f5692498f65333e820c0ff6b56a35b351c36ec5f34261168d22281bdcc219281df", 0x6f}, {&(0x7f0000002340)="d37db6ae68cf6d4c99f68211119eb93a10f9658c7b73fcf70efec7789932534b8d08e0a16b221ba3d67b0122d2292eb6097250687652a7e0e8b0d51a16225ca43dcc382d0ff45ace4376fa0d984aabe98fe7e382e278ea007011c53c67352ac9c9c28bbd6175f51c4790fd5684f45313b45bd26b47a1c269a7ed535eeb1e499b25c22179c7d206dfe44a27e98e270d4c7a7b773bfb3dac1b0244f499227c6a75ee09de87f26a4eb3bd2eefd7d771ae289935cc4e88ed99fd2ba00d4e5146ba77800353f4eab285631fea10ea49da4dd1860782ba4d7ab7e3aab6b1328b8044a2bc6fa07f1c35257c56faa239cc2ee19f0f816174a2cefb6c", 0xf8}, {&(0x7f0000002440)="821865d51e3bc4aba57028336e051bb814142199f276878c9cd88ca482a2ee3521ebf192e85059df8f7bec1873f4af66a25ab5266e5696c37d26f617c7a32839d61d6175b8b9b5411e9326e446d401cf0acba8c43d596025b6fd989c31af08e44717dd8c45716bd21d6b1f15679ca09b3ecdd1e3fc539fec4f36e7f4f83699904d6dead330a456ce577e05ef583812b8b8749f6bb2255769e91c24da7c80a066b4", 0xa1}, {&(0x7f0000002500)="e428422f75c5ec710d7a6a89ff975fef0566ca788ff9594dc323125494d103ebdec7881f428539187ed1a6d864f96a0eea1ed4ca55d83c07bf4bf48a5d2605fcc2d03a8c3739146f4355b509a4a182aa844514a82b9970a4b3abcd0a42b6999b97fd4596f9974d857081807a81ba638d66fa20540d09a480acac13d0630c19b8c4469cfb643cf647034f2e75e8ce1057209f2c84408e79a4d47472315b0b7f4e1cc1897ee33d26616d6bfe5d560d0ac1a9dfca1e144115e4b1686782ae5e8da097ba0f0e8d866be536283219f6e5d1189c3fd7f74d9168", 0xd7}], 0x5, 0x0, 0x0, 0x10}, 0x20040080)
sendmsg$NL80211_CMD_START_NAN(r4, &(0x7f0000002780)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x38, r1, 0x2, 0x70bd26, 0x5, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7c}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xff}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r10 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000027c0)={<r11=>r4})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r11, 0x84, 0x65, &(0x7f0000002800)=[@in6={0xa, 0x4e20, 0xfffffc01, @dev={0xfe, 0x80, '\x00', 0x33}, 0x2}, @in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9b}, @in={0x2, 0x4e21, @local}], 0x48)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r10, 0x8982, &(0x7f0000002880)={0x7, 'veth0_to_team\x00', {0x7}, 0xfff})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000002980)={'erspan0\x00', &(0x7f00000028c0)={'erspan0\x00', r3, 0x80, 0x700, 0x4, 0xf, {{0x22, 0x4, 0x1, 0x9, 0x88, 0x68, 0x0, 0x6, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @rr={0x7, 0x3, 0xd1}, @noop, @ssrr={0x89, 0x17, 0x29, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x35}, @multicast2, @loopback, @multicast1]}, @timestamp={0x44, 0x8, 0x46, 0x0, 0x9, [0x80000000]}, @noop, @timestamp_prespec={0x44, 0x4c, 0xe1, 0x3, 0x0, [{@empty, 0x10001}, {@loopback, 0x12}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x262}, {@rand_addr=0x64010100, 0x81}, {@broadcast, 0xfffffffd}, {@broadcast, 0xfffffffb}, {@loopback, 0x9}, {@rand_addr=0x64010100, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}]}}}}})

120.332939ms ago: executing program 1 (id=1247):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x7a00, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2044}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000540)=""/122, 0x7a}, {&(0x7f00000005c0)=""/237, 0xed}, {&(0x7f0000001a00)=""/4088, 0xff8}, {&(0x7f0000006080)=""/4064, 0xfe0}, {&(0x7f00000004c0)=""/106, 0x6a}], 0x5}, 0x3}], 0x3, 0x40010020, 0x0)

119.09025ms ago: executing program 2 (id=1248):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000fbffffff17000000202070250000899c173da2da5ff80000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000a5"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r4)
r10 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x80}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1}, {{@in6=@mcast2, 0x1, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0x66)
connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="3c0000000000cabad4282213b4211760c49a3ffd3206da32765fbb4839d06683ee4878dd526cf0f70e7eda997691546e598680abfc4f82c491147970c6c934f39284d214e59de93bc4fb107e5fff7e56022b15d5b3232213202b9cab6af4f69ace22da6c976213ade11b49605f9dc1b6a8af45a71de33d3eff517603a1df750bc17f5c86943ecb950a1ca841b1e9601c"], 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000002100fedbdf253900000008000300", @ANYRES32=r11, @ANYBLOB="10005a800c000480050009"], 0x2c}, 0x1, 0x0, 0x0, 0x200440c1}, 0x4004)
r12 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, 0x0, 0x0)
r13 = accept4(r12, 0x0, 0x0, 0x800)
sendmmsg$alg(r13, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538", 0x58}], 0x3, 0x0, 0x0, 0x4004014}], 0x1, 0x40800)
recvmsg(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000300)=""/99, 0x63}], 0x2}, 0x20)
recvfrom(r13, &(0x7f00000023c0)=""/231, 0xe7, 0x20, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=r6, @ANYBLOB="01980000000000001c0012800b00010162726964676500000c00028005002a0001000000"], 0x3c}}, 0x0)
sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1", 0xe, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r6, 0x1, 0x4, 0x6, @local}, 0x14)

61.091106ms ago: executing program 1 (id=1249):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1024}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}]}, 0x48}}, 0x2000000)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x3, 0x0, 0xffdfffff}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a800000"], 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0xac, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xf, 0xe}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x0, [0x0, 0xe, 0xa, 0x2, 0x0, 0x9, 0x9, 0x5, 0x10, 0x7, 0x8, 0x3, 0x2, 0x6, 0xd, 0xd], 0x1, [0x1, 0x2883, 0x85, 0x1, 0x10, 0x0, 0x9, 0x7, 0x7ff, 0xc, 0x4, 0x6, 0x42d, 0x8, 0x200, 0x4], [0x36e, 0xd, 0xeed, 0x5, 0x200, 0x1, 0x32c4, 0x0, 0x5, 0x0, 0x10, 0x7, 0x200, 0x29, 0xffff, 0x3]}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x4}}]}]}, 0xac}}, 0x40044)

60.598298ms ago: executing program 2 (id=1250):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x5, 0x0)
unshare(0x2c020400)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x4000032, 0xffffffffffffffff, 0x7364e000)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
unshare(0x4000400)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080), 0x4)
sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
recvmmsg(r1, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x0, 0x0)
close(r2)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x200000000, 0x0, 0x1000000000000007, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x20000000)
r4 = accept4(r0, 0x0, 0x0, 0x80000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000002000010000000000150000000a202000000000000000000008000d000a00cfda14000200fc0000000000000000000000000000ec217ec5289400050016002f00000014000100fe800000000000000000"], 0x54}}, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054)
setsockopt(r5, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206717c7acc70099e3e4d5183605dd718dd", 0x57)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), r4)
sendmsg$alg(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1)
r8 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
r9 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r9, &(0x7f00000000c0), 0x10)

787.908µs ago: executing program 1 (id=1251):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
sendmmsg$alg(r2, &(0x7f0000000e00)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)='f', 0x1}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x8010)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x44004)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a30000000004c000000090a010400000000000000400700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000640ffffff004c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c000080080003400000000210000280070002"], 0xe0}}, 0x0)

0s ago: executing program 1 (id=1252):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000004000000040500000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x12, 0xffff, 0x1, 0x40000, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20)
close(r0) (async, rerun: 64)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) (rerun: 64)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000002009aaebcd9858bb0e6a1aef1c9f288a57452f75900000000000000000000edae14fbb01a0602d8a90b53776a97609ad670540df1c88b11da0823b62c7995a0bf6fdca80e109d72b3ffc46352055a24208a1650d349e98a4930ab49ded10158cb5572398a8898f07a1782d12008d97c12f18cd363460c978716a87d15ca75449c2b58b9ee6548be08b76a09fb2fbea10954ac75b180078d9f68867e04fe92f608faffb341283d27278db0d6ac14ef2b6428617d18b48c0f1486744ab3ae237784256c9df75be253ef1eaa84f87fac76345d915b2cc9c8d91731197955c9b9ad94dac37fa7ea49438bda20741750"], 0x50) (async)
r3 = socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf67000000000000160602000fff52007607000010000000d60600000ee60000bf050000000000001f63000000000000650700000200000007070000fbffffff2000000000000000bf54000000000000070400000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc4d6a5713bcb949e8f9000d885dfea2783835e29eb532ba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f2686ef970d6482a2e7ddbf51c74ccac1c7b21bde7d1af255d6ebff9bff35e3888a0e356d82e43407a6d7fa94b2100204000000000000009ab62d7b07ba0a71a72145edade9941f04000000000000004ea9e4c70ef8b7407740ab3312edee62a4dc2fc85755d387bfa1bc8eb71fbe11b2216cc8d1f0160c237d929b49da28724b95555b74be2f76fb5f330b015a68587a75c01300"/454], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) (async)
sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) (async, rerun: 32)
syz_emit_ethernet(0xfffffc69, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa2402544aadcccaba772be1cd1e6d43aa0308060000003c0000000003019078ac1e0001ac1e010144140a01ac1414f1cd8f7e620bb29b68cf5e1bf8bc5d0000000000e0000002000000000d00907800"/103], 0x0) (async, rerun: 32)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r4], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000018c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000800)='cubic', 0x4) (async, rerun: 32)
bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) (async, rerun: 32)
sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="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", 0x110}], 0x1, 0x0, 0x0, 0x80040000}}], 0x1, 0x20000810)
setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f00000017c0)=@gcm_256={{}, "41107f2d8c227eab", "2aade1aa965e611899c2a40889d4b110389398808b9d31cae1bc954b53e429e5", "33f3df93", "7e68d31c6375e358"}, 0x38)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001840)=ANY=[@ANYBLOB="5c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="11a000f9edffffff34002b8008080100", @ANYRES32=r5, @ANYBLOB="08000300030000000800030001000000080003000300000008000100", @ANYRES32=r5, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r5, @ANYBLOB="08001b0000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x200480d4}, 0x80) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ac0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="69fb2c5a29b0ef37e7fcadb89a", @ANYRES64=r2], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async, rerun: 64)
r8 = socket(0x18, 0x6, 0x0) (rerun: 64)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async, rerun: 64)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, 0x0) (async, rerun: 64)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x9303, 0x30, 0x7, 0x4}, &(0x7f0000000500)=0x18)
socket$kcm(0xf, 0x0, 0x2) (async)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0x9, 0x4, 0x7, 0x4ae, 0x1, 0xf, 0x4, 0x6, 0xff, 0x7f, 0x7fffffffffffffff, 0xffffffffffff8001, 0x5}})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:9401' (ED25519) to the list of known hosts.
syzkaller login: [   48.811381][ T5779] cgroup: Unknown subsys name 'net'
[   48.896701][ T5779] cgroup: Unknown subsys name 'cpuset'
[   48.900706][ T5779] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.979911][ T5779] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.787080][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.790451][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.794337][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.797704][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.800613][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.906547][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.909505][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.919152][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.922052][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.925382][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.928595][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.940202][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.957938][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.965059][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.968608][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.001615][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   56.174762][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.178437][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.181583][ T5847] bridge_slave_0: entered allmulticast mode
[   56.186148][ T5847] bridge_slave_0: entered promiscuous mode
[   56.191373][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.195017][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.198195][ T5847] bridge_slave_1: entered allmulticast mode
[   56.201852][ T5847] bridge_slave_1: entered promiscuous mode
[   56.244830][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   56.257050][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.270864][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.323746][ T5847] team0: Port device team_slave_0 added
[   56.336091][ T5847] team0: Port device team_slave_1 added
[   56.414933][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.417263][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.427880][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.448592][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.451325][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.454486][ T5853] bridge_slave_0: entered allmulticast mode
[   56.457292][ T5853] bridge_slave_0: entered promiscuous mode
[   56.461253][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.464189][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.466805][ T5853] bridge_slave_1: entered allmulticast mode
[   56.469691][ T5853] bridge_slave_1: entered promiscuous mode
[   56.472985][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.475725][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.488403][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.530410][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.537154][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.541001][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   56.600199][ T5847] hsr_slave_0: entered promiscuous mode
[   56.604182][ T5847] hsr_slave_1: entered promiscuous mode
[   56.639469][ T5853] team0: Port device team_slave_0 added
[   56.663557][ T5853] team0: Port device team_slave_1 added
[   56.727782][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.730911][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.734508][ T5855] bridge_slave_0: entered allmulticast mode
[   56.738429][ T5855] bridge_slave_0: entered promiscuous mode
[   56.749933][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.753408][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.764300][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.769347][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.773209][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.776309][ T5855] bridge_slave_1: entered allmulticast mode
[   56.780229][ T5855] bridge_slave_1: entered promiscuous mode
[   56.789005][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.791983][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.802691][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.855564][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.867744][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.928500][ T5855] team0: Port device team_slave_0 added
[   56.933924][ T5855] team0: Port device team_slave_1 added
[   56.960488][ T5853] hsr_slave_0: entered promiscuous mode
[   56.963826][ T5853] hsr_slave_1: entered promiscuous mode
[   56.966794][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   56.969223][ T5853] Cannot create hsr debugfs directory
[   57.009199][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.012179][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.024543][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.035351][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.038143][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.048358][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.114298][ T5855] hsr_slave_0: entered promiscuous mode
[   57.117476][ T5855] hsr_slave_1: entered promiscuous mode
[   57.120466][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   57.123380][ T5855] Cannot create hsr debugfs directory
[   57.218474][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.249173][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.255606][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.265049][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.330100][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.344026][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.353062][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.359593][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.424834][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.430238][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.443721][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.449190][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.564982][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.570523][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.607507][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   57.614578][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   57.626428][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.629566][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.643555][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.648032][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.651178][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.666036][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.669079][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.673545][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.675766][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.689214][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   57.715520][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.718644][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.755294][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.758223][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.813565][ T5237] Bluetooth: hci0: command tx timeout
[   57.960440][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.972893][ T5237] Bluetooth: hci1: command tx timeout
[   57.973720][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.016857][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.050352][ T5847] veth0_vlan: entered promiscuous mode
[   58.053453][ T5237] Bluetooth: hci2: command tx timeout
[   58.075677][ T5847] veth1_vlan: entered promiscuous mode
[   58.089070][ T5853] veth0_vlan: entered promiscuous mode
[   58.119295][ T5853] veth1_vlan: entered promiscuous mode
[   58.125310][ T5855] veth0_vlan: entered promiscuous mode
[   58.147556][ T5855] veth1_vlan: entered promiscuous mode
[   58.151821][ T5847] veth0_macvtap: entered promiscuous mode
[   58.159428][ T5847] veth1_macvtap: entered promiscuous mode
[   58.180591][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.195969][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.208510][ T5853] veth0_macvtap: entered promiscuous mode
[   58.216373][ T5855] veth0_macvtap: entered promiscuous mode
[   58.228878][ T5853] veth1_macvtap: entered promiscuous mode
[   58.234041][ T5855] veth1_macvtap: entered promiscuous mode
[   58.238558][ T5868] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.242284][ T5868] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.259645][ T5868] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.263900][ T5868] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.288995][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.323466][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.339979][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.355198][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.375059][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.380311][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.393260][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.419084][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.440691][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.443878][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.446920][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.447894][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.454873][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.475432][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.519767][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.526758][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.560617][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.571174][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.602130][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.612141][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.618063][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.619705][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.621071][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.676183][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.679744][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.718746][ T5920] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'.
[   58.719690][ T5921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   58.748360][ T5921] IPVS: Error joining to the multicast group
[   58.824743][ T5927] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.844765][ T5927] openvswitch: netlink: IP tunnel TTL not specified.
[   58.878871][ T5929] 8021q: adding VLAN 0 to HW filter on device bond2
[   58.894430][ T5929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4'.
[   58.974063][ T5939] netlink: 'syz.2.6': attribute type 32 has an invalid length.
[   59.008380][ T5936] warning: `syz.2.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.019502][ T5928] bridge_slave_0: left allmulticast mode
[   59.021879][ T5928] bridge_slave_0: left promiscuous mode
[   59.026618][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.035994][ T5928] bridge_slave_1: left allmulticast mode
[   59.038507][ T5928] bridge_slave_1: left promiscuous mode
[   59.041077][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.054887][ T5928] bond0: (slave bond_slave_0): Releasing backup interface
[   59.062104][ T5928] bond0: (slave bond_slave_1): Releasing backup interface
[   59.077115][ T5928] team0: Port device team_slave_0 removed
[   59.085426][ T5928] team0: Port device team_slave_1 removed
[   59.088591][ T5928] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.097228][ T5928] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.101995][ T5928] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.106064][ T5928] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.111508][ T5928] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   59.222332][ T5950] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   59.290977][ T5954] openvswitch: netlink: IP tunnel TTL not specified.
[   59.396030][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.398877][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.421098][ T5969] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.13'.
[   59.453466][ T5965] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.459315][ T5965] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.523827][ T5899] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.527526][ T5899] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.533395][ T5899] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.537510][ T5899] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.563662][ T5974] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16'.
[   59.609383][ T5970] netlink: 'syz.0.15': attribute type 1 has an invalid length.
[   59.616448][ T5977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'.
[   59.655319][ T5981] openvswitch: netlink: IP tunnel TTL not specified.
[   59.686405][ T5983] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19'.
[   59.689315][ T5983] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19'.
[   59.708588][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'.
[   59.717631][ T5985] ieee802154 phy0 wpan0: encryption failed: -22
[   59.730725][ T5985] Zero length message leads to an empty skb
[   59.736113][ T5985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20'.
[   59.758974][ T5985] 8021q: adding VLAN 0 to HW filter on device bond3
[   59.892817][ T5237] Bluetooth: hci0: command tx timeout
[   60.052690][ T5237] Bluetooth: hci1: command tx timeout
[   60.132830][ T5237] Bluetooth: hci2: command tx timeout
[   60.377761][ T6028] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   60.590933][ T6039] syz.1.32 uses obsolete (PF_INET,SOCK_PACKET)
[   60.604121][ T6039] netlink: 'syz.1.32': attribute type 11 has an invalid length.
[   61.288873][ T6041] netlink: 'syz.2.33': attribute type 1 has an invalid length.
[   61.414683][   T57] block nbd0: Receive control failed (result -32)
[   61.516615][ T6050] openvswitch: netlink: IP tunnel TTL not specified.
[   61.654214][ T1092] wlan1: Trigger new scan to find an IBSS to join
[   61.658550][ T6061] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   61.691489][ T6063] tipc: Started in network mode
[   61.693456][ T6063] tipc: Node identity 9e1dde5dca5b, cluster identity 4711
[   61.696084][ T6063] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.699228][ T6063] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[   61.702528][ T6063] syzkaller0: entered promiscuous mode
[   61.704297][ T6063] syzkaller0: entered allmulticast mode
[   61.711591][ T6062] tipc: Resetting bearer <eth:syzkaller0>
[   61.719640][ T6062] tipc: Disabling bearer <eth:syzkaller0>
[   61.787199][ T6065] bond1: entered promiscuous mode
[   61.788867][ T6065] bond1: entered allmulticast mode
[   61.790702][ T6065] 8021q: adding VLAN 0 to HW filter on device bond1
[   61.870625][ T6065] bond1 (unregistering): Released all slaves
[   61.896007][ T6069] netlink: 'syz.1.44': attribute type 5 has an invalid length.
[   61.976427][ T5237] Bluetooth: hci0: command tx timeout
[   62.085121][ T6097] netlink: 'syz.1.49': attribute type 9 has an invalid length.
[   62.122125][ T6097] netlink: 'syz.1.49': attribute type 4 has an invalid length.
[   62.134914][ T5237] Bluetooth: hci1: command tx timeout
[   62.212762][ T5237] Bluetooth: hci2: command tx timeout
[   62.243826][ T6094] infiniband syz1: set down
[   62.245744][ T6094] infiniband syz1: added syz_tun
[   62.256389][ T6097] block nbd1: server does not support multiple connections per device.
[   62.266315][ T6097] block nbd1: shutting down sockets
[   62.290169][ T6094] RDS/IB: syz1: added
[   62.294307][ T6094] smc: adding ib device syz1 with port count 1
[   62.297274][ T6094] smc:    ib device syz1 port 1 has no pnetid
[   62.510034][ T6118] netlink: 'syz.1.51': attribute type 3 has an invalid length.
[   62.512931][ T6118] netlink: 'syz.1.51': attribute type 1 has an invalid length.
[   62.988397][ T6138] netlink: 'syz.2.55': attribute type 9 has an invalid length.
[   62.991130][ T6138] netlink: 'syz.2.55': attribute type 7 has an invalid length.
[   63.158667][ T6137] hsr_slave_0: left promiscuous mode
[   63.184110][ T6137] hsr_slave_1: left promiscuous mode
[   63.206115][ T5868] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.218375][ T5868] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.222914][ T5868] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.227539][ T5868] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.269366][ T6143] openvswitch: netlink: IP tunnel TTL not specified.
[   63.478634][ T6149] veth1_to_team: entered promiscuous mode
[   63.483091][ T6149] veth1_to_team: left promiscuous mode
[   63.729831][ T6170] __nla_validate_parse: 16 callbacks suppressed
[   63.729845][ T6170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.62'.
[   63.737610][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'.
[   63.741311][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.62'.
[   63.826207][ T6173] vlan0: entered promiscuous mode
[   63.835468][ T6173] bond0: entered promiscuous mode
[   63.837182][ T6173] bond_slave_0: entered promiscuous mode
[   63.839150][ T6173] bond_slave_1: entered promiscuous mode
[   63.846206][ T6173] vlan0: entered allmulticast mode
[   63.847974][ T6173] bond0: entered allmulticast mode
[   63.849667][ T6173] bond_slave_0: entered allmulticast mode
[   63.861896][ T6173] bond_slave_1: entered allmulticast mode
[   64.053601][ T5237] Bluetooth: hci0: command tx timeout
[   64.105712][ T6183] tc_dump_action: action bad kind
[   64.127290][ T6183] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.66'.
[   64.131195][ T6183] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.187171][ T6186] netlink: 56 bytes leftover after parsing attributes in process `syz.1.67'.
[   64.212882][ T5237] Bluetooth: hci1: command tx timeout
[   64.239478][ T5883] hid-generic 0005:16C0:5502.0001: item fetching failed at offset 0/3
[   64.243722][ T5883] hid-generic 0005:16C0:5502.0001: probe with driver hid-generic failed with error -22
[   64.254500][ T6194] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.69'.
[   64.295635][ T5237] Bluetooth: hci2: command tx timeout
[   64.311604][ T6197] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.357595][ T6197] bond1 (unregistering): Released all slaves
[   64.371566][ T6199] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[   64.486480][ T6207] tipc: Started in network mode
[   64.488338][ T6207] tipc: Node identity 3e09efa2d861, cluster identity 4711
[   64.491324][ T6207] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.529387][ T6207] syzkaller0: entered promiscuous mode
[   64.531221][ T6207] syzkaller0: entered allmulticast mode
[   64.535796][ T6207] tipc: Resetting bearer <eth:syzkaller0>
[   64.545400][ T6211] netlink: 192 bytes leftover after parsing attributes in process `syz.2.75'.
[   64.549052][ T6211] netlink: 20 bytes leftover after parsing attributes in process `syz.2.75'.
[   64.553053][ T6206] tipc: Resetting bearer <eth:syzkaller0>
[   65.248984][ T6206] tipc: Disabling bearer <eth:syzkaller0>
[   65.383471][ T6229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.79'.
[   65.438916][ T6231] validate_nla: 6 callbacks suppressed
[   65.438927][ T6231] netlink: 'syz.0.80': attribute type 83 has an invalid length.
[   65.718007][ T6254] netlink: 'syz.2.87': attribute type 3 has an invalid length.
[   65.959874][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.93'.
[   66.207040][ T6298] netlink: 'syz.2.97': attribute type 6 has an invalid length.
[   66.563179][ T6331] syzkaller0: entered promiscuous mode
[   66.567375][ T6331] syzkaller0: entered allmulticast mode
[   66.590361][ T6322] netlink: 'syz.0.107': attribute type 5 has an invalid length.
[   66.599273][ T6329] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.658618][ T6329] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.716500][ T6329] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.765748][ T6329] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.855297][ T5868] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.865061][ T5868] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.874495][ T5868] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.882605][ T5868] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.105157][ T6355] netlink: 'syz.2.114': attribute type 10 has an invalid length.
[   67.169312][ T6362] openvswitch: netlink: IP tunnel TTL not specified.
[   67.225542][ T6366] tipc: Started in network mode
[   67.227319][ T6366] tipc: Node identity 1add078b8e0e, cluster identity 4711
[   67.229763][ T6366] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.291634][ T6370] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[   68.087902][ T6399] netlink: 'syz.0.127': attribute type 1 has an invalid length.
[   68.233586][ T5883] tipc: Node number set to 2496857995
[   68.244472][ T6404] syz.0.129: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   68.249670][ T6404] CPU: 0 UID: 0 PID: 6404 Comm: syz.0.129 Not tainted syzkaller #0 PREEMPT(full) 
[   68.249680][ T6404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   68.249685][ T6404] Call Trace:
[   68.249689][ T6404]  <TASK>
[   68.249692][ T6404]  dump_stack_lvl+0x189/0x250
[   68.249706][ T6404]  ? __pfx_dump_stack_lvl+0x10/0x10
[   68.249714][ T6404]  ? __pfx__printk+0x10/0x10
[   68.249724][ T6404]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   68.249733][ T6404]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   68.249741][ T6404]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   68.249749][ T6404]  warn_alloc+0x214/0x310
[   68.249760][ T6404]  ? stack_depot_save_flags+0x436/0x860
[   68.249771][ T6404]  ? __pfx_warn_alloc+0x10/0x10
[   68.249781][ T6404]  ? kasan_save_track+0x4f/0x80
[   68.249790][ T6404]  ? xskq_create+0x56/0x170
[   68.249823][ T6404]  ? xsk_init_queue+0xb0/0x110
[   68.249829][ T6404]  ? xsk_setsockopt+0x4dc/0x8d0
[   68.249837][ T6404]  ? do_sock_setsockopt+0x17c/0x1b0
[   68.249845][ T6404]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   68.249853][ T6404]  ? do_syscall_64+0xfa/0x3b0
[   68.249860][ T6404]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.249870][ T6404]  __vmalloc_node_range_noprof+0x125/0x12f0
[   68.249891][ T6404]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   68.249903][ T6404]  ? __kasan_kmalloc+0x93/0xb0
[   68.249913][ T6404]  vmalloc_user_noprof+0xad/0xf0
[   68.249923][ T6404]  ? xskq_create+0xbf/0x170
[   68.249930][ T6404]  xskq_create+0xbf/0x170
[   68.249938][ T6404]  xsk_init_queue+0xb0/0x110
[   68.249949][ T6404]  xsk_setsockopt+0x4dc/0x8d0
[   68.249965][ T6404]  ? __pfx_xsk_setsockopt+0x10/0x10
[   68.249985][ T6404]  ? __pfx_aa_sk_perm+0x10/0x10
[   68.250005][ T6404]  ? aa_sock_opt_perm+0xff/0x1b0
[   68.250018][ T6404]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   68.250031][ T6404]  ? __pfx_xsk_setsockopt+0x10/0x10
[   68.250047][ T6404]  do_sock_setsockopt+0x17c/0x1b0
[   68.250066][ T6404]  __x64_sys_setsockopt+0x13f/0x1b0
[   68.250081][ T6404]  do_syscall_64+0xfa/0x3b0
[   68.250088][ T6404]  ? lockdep_hardirqs_on+0x9c/0x150
[   68.250095][ T6404]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.250101][ T6404]  ? exc_page_fault+0x9f/0xf0
[   68.250108][ T6404]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.250115][ T6404] RIP: 0033:0x7f012038ec29
[   68.250122][ T6404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   68.250128][ T6404] RSP: 002b:00007f0121304038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   68.250136][ T6404] RAX: ffffffffffffffda RBX: 00007f01205d5fa0 RCX: 00007f012038ec29
[   68.250141][ T6404] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[   68.250145][ T6404] RBP: 00007f0120411e41 R08: 0000000000000004 R09: 0000000000000000
[   68.250149][ T6404] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   68.250153][ T6404] R13: 00007f01205d6038 R14: 00007f01205d5fa0 R15: 00007ffc2ea48c48
[   68.250164][ T6404]  </TASK>
[   68.250167][ T6404] Mem-Info:
[   68.369523][ T6404] active_anon:5464 inactive_anon:0 isolated_anon:0
[   68.369523][ T6404]  active_file:1415 inactive_file:38238 isolated_file:0
[   68.369523][ T6404]  unevictable:1768 dirty:1595 writeback:0
[   68.369523][ T6404]  slab_reclaimable:9800 slab_unreclaimable:53587
[   68.369523][ T6404]  mapped:18179 shmem:2433 pagetables:911
[   68.369523][ T6404]  sec_pagetables:0 bounce:0
[   68.369523][ T6404]  kernel_misc_reclaimable:0
[   68.369523][ T6404]  free:301059 free_pcp:18359 free_cma:0
[   68.387457][ T6404] Node 0 active_anon:11276kB inactive_anon:0kB active_file:3988kB inactive_file:19752kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38260kB dirty:6096kB writeback:0kB shmem:4964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3576kB pagetables:1880kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   68.400083][ T6404] Node 1 active_anon:10580kB inactive_anon:0kB active_file:1672kB inactive_file:133200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34456kB dirty:284kB writeback:0kB shmem:4768kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8096kB pagetables:1764kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   68.412591][ T6404] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   68.426443][ T6404] lowmem_reserve[]: 0 811 811 811 811
[   68.428825][ T6404] Node 0 DMA32 free:438956kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11276kB inactive_anon:0kB active_file:3988kB inactive_file:19752kB unevictable:3536kB writepending:6096kB present:1556484kB managed:830852kB mlocked:0kB bounce:0kB free_pcp:22896kB local_pcp:2536kB free_cma:0kB
[   68.442177][ T6404] lowmem_reserve[]: 0 0 0 0 0
[   68.450159][ T6404] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   68.462324][ T6404] lowmem_reserve[]: 0 0 854 854 854
[   68.464638][ T6404] Node 1 Normal free:289116kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10580kB inactive_anon:0kB active_file:1672kB inactive_file:133200kB unevictable:3536kB writepending:284kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:51200kB local_pcp:20696kB free_cma:0kB
[   68.477624][ T6404] lowmem_reserve[]: 0 0 0 0 0
[   68.479684][ T6404] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   68.484873][ T6404] Node 0 DMA32: 99*4kB (UME) 169*8kB (UME) 57*16kB (UM) 33*32kB (ME) 10*64kB (ME) 13*128kB (UME) 3*256kB (ME) 2*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 104*4096kB (M) = 438916kB
[   68.491984][ T6404] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   68.498739][ T6404] Node 1 Normal: 331*4kB (UME) 115*8kB (UME) 87*16kB (UME) 52*32kB (UME) 70*64kB (UME) 32*128kB (UME) 5*256kB (M) 7*512kB (ME) 8*1024kB (UME) 4*2048kB (ME) 62*4096kB (M) = 289076kB
[   68.506090][ T6404] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   68.509912][ T6404] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   68.513990][ T6404] 42086 total pagecache pages
[   68.515961][ T6404] 0 pages in swap cache
[   68.517739][ T6404] Free swap  = 124996kB
[   68.519518][ T6404] Total swap = 124996kB
[   68.521331][ T6404] 786301 pages RAM
[   68.523007][ T6404] 0 pages HighMem/MovableOnly
[   68.525035][ T6404] 241356 pages reserved
[   68.526867][ T6404] 0 pages cma reserved
[   68.855164][ T6417] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[   68.877582][ T6414] __nla_validate_parse: 9 callbacks suppressed
[   68.877591][ T6414] netlink: 20 bytes leftover after parsing attributes in process `syz.1.131'.
[   68.896761][ T6414] vlan2: entered promiscuous mode
[   68.898527][ T6414] gretap0: entered promiscuous mode
[   68.987443][ T6420] tc_dump_action: action bad kind
[   68.996526][ T6422] netlink: 32 bytes leftover after parsing attributes in process `syz.1.134'.
[   69.039184][ T6425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.135'.
[   69.059231][ T6426] netlink: 56 bytes leftover after parsing attributes in process `syz.0.133'.
[   69.107308][ T6387] Set syz1 is full, maxelem 65536 reached
[   69.285617][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.139'.
[   69.289371][ T6435] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.292505][ T6435] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.297010][ T6435] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.300183][ T6435] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.380630][ T6442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.142'.
[   69.400207][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'.
[   69.403944][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.140'.
[   69.407522][ T6443] netlink: 'syz.0.140': attribute type 11 has an invalid length.
[   69.724455][ T6454] netlink: 134788 bytes leftover after parsing attributes in process `syz.2.145'.
[   69.764123][ T6457] netlink: 28 bytes leftover after parsing attributes in process `syz.2.146'.
[   70.378026][ T6475] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[   70.490154][ T6489] netlink: 'syz.0.155': attribute type 19 has an invalid length.
[   70.723577][ T6507] netlink: 'syz.1.160': attribute type 30 has an invalid length.
[   70.769456][ T6510] openvswitch: netlink: IP tunnel TTL not specified.
[   70.809624][ T6513] netlink: 'syz.2.162': attribute type 20 has an invalid length.
[   70.890659][ T6523] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[   70.899012][ T6525] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   70.912324][ T6525] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   71.175703][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.178585][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.419205][ T6540] 8021q: adding VLAN 0 to HW filter on device bond7
[   71.455098][ T6543] netlink: 'syz.0.170': attribute type 1 has an invalid length.
[   71.700507][ T6562] openvswitch: netlink: IP tunnel TTL not specified.
[   71.728575][ T6564] sctp: [Deprecated]: syz.0.177 (pid 6564) Use of int in max_burst socket option.
[   71.728575][ T6564] Use struct sctp_assoc_value instead
[   71.738168][ T6564] syzkaller0: entered promiscuous mode
[   71.740443][ T6564] syzkaller0: entered allmulticast mode
[   71.745060][ T6565] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   72.207394][ T6590] block nbd2: Receive control failed (result -32)
[   72.210253][   T56] block nbd1: Receive control failed (result -32)
[   72.233422][ T6598] netlink: 'syz.1.186': attribute type 1 has an invalid length.
[   72.263424][ T6600] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   72.270478][ T6600] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   72.340360][ T6607] openvswitch: netlink: Flow actions attr not present in new flow.
[   72.541094][ T6617] netlink: 'syz.2.193': attribute type 23 has an invalid length.
[   72.561385][ T6617] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   72.612083][ T6620] netlink: 'syz.2.194': attribute type 1 has an invalid length.
[   72.618491][ T6618] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.621405][ T6618] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.718206][ T6623] netlink: 'syz.2.194': attribute type 1 has an invalid length.
[   72.801284][ T6618] vlan0: left promiscuous mode
[   72.804062][ T6618] bond0: left promiscuous mode
[   72.806113][ T6618] bond_slave_0: left promiscuous mode
[   72.808549][ T6618] bond_slave_1: left promiscuous mode
[   72.811077][ T6618] vlan0: left allmulticast mode
[   72.813486][ T6618] bond0: left allmulticast mode
[   72.816043][ T6618] bond_slave_0: left allmulticast mode
[   72.818302][ T6618] bond_slave_1: left allmulticast mode
[   72.821290][ T6618] vlan2: left promiscuous mode
[   72.823473][ T6618] gretap0: left promiscuous mode
[   72.829627][ T6622] hsr_slave_0: left promiscuous mode
[   72.839325][ T6622] hsr_slave_1: left promiscuous mode
[   72.872647][ T6623] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   72.874054][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.887470][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.890582][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.901790][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.136402][ T6643] netlink: 'syz.2.197': attribute type 13 has an invalid length.
[   73.139941][ T6643] netlink: 'syz.2.197': attribute type 17 has an invalid length.
[   73.234251][ T6643] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.238623][ T6643] 8021q: adding VLAN 0 to HW filter on device team0
[   73.249199][ T6643] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   73.257492][ T5898] syz1: Port: 1 Link ACTIVE
[   73.284005][ T6643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   73.347970][ T6647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.085484][ T6643] syz.2.197 (6643) used greatest stack depth: 19616 bytes left
[   75.003829][ T6665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.141284][ T6678] __nla_validate_parse: 20 callbacks suppressed
[   75.141298][ T6678] netlink: 28 bytes leftover after parsing attributes in process `syz.2.207'.
[   75.267364][ T6689] netlink: 104 bytes leftover after parsing attributes in process `syz.2.210'.
[   75.372855][ T6701] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[   75.545459][ T6710] netlink: 24 bytes leftover after parsing attributes in process `syz.1.217'.
[   75.551772][ T6710] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.559048][ T6710] syzkaller0: entered promiscuous mode
[   75.561508][ T6710] syzkaller0: entered allmulticast mode
[   75.575669][ T6710] tipc: Resetting bearer <eth:syzkaller0>
[   75.578869][ T6709] tipc: Resetting bearer <eth:syzkaller0>
[   75.586077][ T6709] tipc: Disabling bearer <eth:syzkaller0>
[   75.694361][ T6721] syz.2.221 (6721) used greatest stack depth: 19240 bytes left
[   75.721909][ T6724] netlink: 16 bytes leftover after parsing attributes in process `syz.2.222'.
[   75.730425][ T6724] bond0: entered promiscuous mode
[   75.733338][ T6724] bond_slave_0: entered promiscuous mode
[   75.736336][ T6724] bond_slave_1: entered promiscuous mode
[   75.740213][ T6724] bond0: left promiscuous mode
[   75.742259][ T6724] bond_slave_0: left promiscuous mode
[   75.745869][ T6724] bond_slave_1: left promiscuous mode
[   75.834221][ T6730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.224'.
[   75.907515][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'.
[   75.915775][ T6732] bond0: entered promiscuous mode
[   75.918806][ T6732] bond_slave_0: entered promiscuous mode
[   75.921477][ T6732] bond_slave_1: entered promiscuous mode
[   75.924390][ T6732] batadv0: entered promiscuous mode
[   75.927111][ T6732] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[   75.930935][ T6732] 8021q: adding VLAN 0 to HW filter on device hsr1
[   75.937183][ T6733] netlink: 36 bytes leftover after parsing attributes in process `syz.2.225'.
[   75.951651][ T6736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.226'.
[   75.955400][ T6735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.226'.
[   75.959275][ T6736] validate_nla: 3 callbacks suppressed
[   75.959288][ T6736] netlink: 'syz.1.226': attribute type 2 has an invalid length.
[   75.965511][ T6735] netlink: 'syz.1.226': attribute type 2 has an invalid length.
[   75.967067][ T6736] netlink: 'syz.1.226': attribute type 8 has an invalid length.
[   75.971649][ T6736] netlink: 132 bytes leftover after parsing attributes in process `syz.1.226'.
[   75.975664][ T6735] netlink: 'syz.1.226': attribute type 8 has an invalid length.
[   75.995255][ T6739] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   75.998445][ T6739] IPv6: NLM_F_CREATE should be set when creating new route
[   76.034208][ T6741] openvswitch: netlink: IP tunnel TTL not specified.
[   76.099967][ T6747] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[   76.115352][ T6750] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   76.118375][ T6750] IPv6: NLM_F_CREATE should be set when creating new route
[   76.121571][ T6749] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   76.125888][ T6749] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   76.128878][ T6749] IPv6: NLM_F_CREATE should be set when creating new route
[   76.201545][ T6758] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[   76.209098][ T6758] netlink: 'syz.2.236': attribute type 4 has an invalid length.
[   76.457845][ T6780] tls_set_device_offload_rx: netdev not found
[   76.784780][ T6798] openvswitch: netlink: IPv4 tun info is not correct
[   76.955591][ T6810] team0: Device ipip0 is of different type
[   77.172342][ T6820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   77.348508][ T6834] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   77.432837][ T6838] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[   78.047126][ T6878] openvswitch: netlink: Flow actions attr not present in new flow.
[   78.537632][ T6900] openvswitch: netlink: Key 32 has unexpected len 20 expected 2
[   78.787008][ T6917] netlink: 'syz.2.288': attribute type 1 has an invalid length.
[   78.931294][ T6930] openvswitch: netlink: Key 32 has unexpected len 20 expected 2
[   80.047438][ T6984] veth3: entered promiscuous mode
[   80.490906][ T6991] __nla_validate_parse: 43 callbacks suppressed
[   80.490924][ T6991] netlink: 28 bytes leftover after parsing attributes in process `syz.0.310'.
[   80.499078][ T6991] netlink: 28 bytes leftover after parsing attributes in process `syz.0.310'.
[   80.504685][ T6991] netlink: 28 bytes leftover after parsing attributes in process `syz.0.310'.
[   80.508664][ T6991] netlink: 28 bytes leftover after parsing attributes in process `syz.0.310'.
[   80.617157][ T6994] netlink: 'syz.0.311': attribute type 13 has an invalid length.
[   80.620108][ T6994] netlink: 'syz.0.311': attribute type 17 has an invalid length.
[   80.671188][ T6994] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.679793][ T6994] 8021q: adding VLAN 0 to HW filter on device team0
[   80.690441][ T6994] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   80.700465][ T6995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   80.707422][ T6997] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[   80.758446][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.313'.
[   80.759100][ T6994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   80.765247][ T6999] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   80.890393][ T7003] netlink: 9 bytes leftover after parsing attributes in process `syz.2.314'.
[   80.895923][ T7003] ..0: renamed from hsr0
[   80.900682][ T7003] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   80.905890][ T7003] ..0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   80.910250][ T7003] ..0: entered allmulticast mode
[   80.913456][ T7003] hsr_slave_0: entered allmulticast mode
[   80.915900][ T7003] hsr_slave_1: entered allmulticast mode
[   80.919806][ T7003] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[   81.010790][ T7005] netlink: 192 bytes leftover after parsing attributes in process `syz.1.315'.
[   81.015148][ T7005] netlink: 20 bytes leftover after parsing attributes in process `syz.1.315'.
[   81.027384][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.315'.
[   81.206658][ T7014] netlink: 'syz.1.318': attribute type 1 has an invalid length.
[   81.229055][ T7014] 8021q: adding VLAN 0 to HW filter on device bond2
[   81.284320][ T7014] veth5: entered promiscuous mode
[   81.289387][ T7014] bond2: (slave veth5): Enslaving as an active interface with a down link
[   81.296494][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.299611][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.480712][ T7021] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.483415][ T7021] netlink: 56 bytes leftover after parsing attributes in process `syz.1.320'.
[   81.486938][ T7021] syzkaller0: entered promiscuous mode
[   81.488946][ T7021] syzkaller0: entered allmulticast mode
[   81.500428][ T7021] tipc: Resetting bearer <eth:syzkaller0>
[   81.507852][ T7021] netlink: 'syz.1.320': attribute type 14 has an invalid length.
[   81.511196][ T7021] netlink: 'syz.1.320': attribute type 13 has an invalid length.
[   81.517109][ T7020] tipc: Resetting bearer <eth:syzkaller0>
[   81.526242][ T7020] tipc: Disabling bearer <eth:syzkaller0>
[   81.603312][  T793] IPVS: starting estimator thread 0...
[   81.606554][ T7023] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available
[   81.638887][ T7026] geneve2: entered promiscuous mode
[   81.641558][ T5868] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.645760][ T5868] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.648494][ T5868] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.653147][ T5868] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.704087][ T7024] IPVS: using max 78 ests per chain, 187200 per kthread
[   81.992029][ T7040] vlan2: entered promiscuous mode
[   81.997299][ T7040] gretap0: entered promiscuous mode
[   82.190795][ T7053] netlink: 'syz.0.330': attribute type 11 has an invalid length.
[   82.195085][ T7053] netlink: 'syz.0.330': attribute type 4 has an invalid length.
[   82.209671][ T7050] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.348826][ T7050] syzkaller0: entered promiscuous mode
[   82.351258][ T7050] syzkaller0: entered allmulticast mode
[   82.383121][ T7051] tipc: Resetting bearer <eth:syzkaller0>
[   82.398986][ T7051] tipc: Disabling bearer <eth:syzkaller0>
[   82.530144][ T7064] tipc: Enabled bearer <eth:veth1_to_bridge>, priority 10
[   82.781465][ T7084] netlink: 'syz.0.339': attribute type 7 has an invalid length.
[   82.784768][ T7084] netlink: 'syz.0.339': attribute type 8 has an invalid length.
[   83.642719][ T5315] tipc: Node number set to 1413930589
[   84.634329][ T7104] infiniband syz0: set down
[   84.636120][ T7104] infiniband syz0: added veth1_to_hsr
[   84.667965][ T7104] RDS/IB: syz0: added
[   84.669265][ T7104] smc: adding ib device syz0 with port count 1
[   84.671193][ T7104] smc:    ib device syz0 port 1 has no pnetid
[   84.713549][ T7105] sctp: [Deprecated]: syz.0.345 (pid 7105) Use of struct sctp_assoc_value in delayed_ack socket option.
[   84.713549][ T7105] Use struct sctp_sack_info instead
[   85.208562][ T7110] 8021q: adding VLAN 0 to HW filter on device macvlan0
[   85.213254][ T7110] bond2: (slave macvlan0): Enslaving as a backup interface with a down link
[   85.967686][ T7133] __nla_validate_parse: 7 callbacks suppressed
[   85.967702][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'.
[   86.009428][ T7133] netlink: 'syz.1.354': attribute type 1 has an invalid length.
[   86.261454][ T7147] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   86.385275][ T7149] batadv_slave_0: entered promiscuous mode
[   86.389745][ T7149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.358'.
[   86.395900][ T7149] netlink: 428 bytes leftover after parsing attributes in process `syz.1.358'.
[   86.398780][ T7149] netlink: 32 bytes leftover after parsing attributes in process `syz.1.358'.
[   86.548708][  T974] cfg80211: failed to load regulatory.db
[   86.602624][ T7160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.361'.
[   86.746080][ T7168] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.768019][ T7168] netlink: 28 bytes leftover after parsing attributes in process `syz.0.362'.
[   86.889482][ T7168] netlink: 24 bytes leftover after parsing attributes in process `syz.0.362'.
[   87.380906][ T7196] netlink: 'syz.0.368': attribute type 4 has an invalid length.
[   87.390363][ T7200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.373'.
[   87.537951][ T7198] syzkaller1: entered allmulticast mode
[   88.309514][ T7223] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[   88.563680][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.383'.
[   88.628964][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.384'.
[   88.635068][ T7238] netlink: 'syz.2.383': attribute type 10 has an invalid length.
[   88.646763][ T7238] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[   88.666259][ T7238] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   88.699039][ T7233] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   88.718613][ T7233] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   88.894245][ T7256] netlink: 'syz.0.388': attribute type 5 has an invalid length.
[   88.900740][ T7258] netlink: 'syz.0.388': attribute type 10 has an invalid length.
[   88.909963][ T7258] 8021q: adding VLAN 0 to HW filter on device team0
[   88.914088][ T7258] bond0: (slave team0): Enslaving as an active interface with an up link
[   89.019384][ T7269] openvswitch: netlink: IP tunnel TTL not specified.
[   89.205064][ T7283] tipc: Cannot configure node identity twice
[   89.562807][ T7302] macsec1: entered promiscuous mode
[   89.564723][ T7302] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   89.567299][ T7302] macsec1: entered allmulticast mode
[   89.569242][ T7302] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   89.660057][ T7324] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   90.280893][ T7326] netlink: 'syz.0.405': attribute type 2 has an invalid length.
[   90.290364][ T7326] netlink: 'syz.0.405': attribute type 1 has an invalid length.
[   90.354102][ T7332] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[   90.484249][ T7346] tipc: Can't bind to reserved service type 2
[   90.576948][ T7360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.639550][ T7375] netlink: 'syz.2.414': attribute type 1 has an invalid length.
[   90.777568][ T7381] af_packet: tpacket_rcv: packet too big, clamped from 240 to 4294967272. macoff=96
[   90.899950][ T7387] netlink: 'syz.0.421': attribute type 10 has an invalid length.
[   90.908020][ T7387] bridge0: entered promiscuous mode
[   90.911068][ T7387] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   90.925117][ T7387] bond0: (slave bridge0): Releasing backup interface
[   91.002373][ T7389] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[   91.005378][ T7389] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[   91.098133][ T7396] netlink: 'syz.0.423': attribute type 1 has an invalid length.
[   91.100759][ T7396] __nla_validate_parse: 12 callbacks suppressed
[   91.100766][ T7396] netlink: 92 bytes leftover after parsing attributes in process `syz.0.423'.
[   91.359289][ T7404] syzkaller1: entered allmulticast mode
[   91.642981][ T7406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.425'.
[   91.820276][ T7420] netlink: 24 bytes leftover after parsing attributes in process `syz.1.430'.
[   91.832032][ T7422] netlink: 28 bytes leftover after parsing attributes in process `syz.2.431'.
[   91.836144][ T7422] netlink: 28 bytes leftover after parsing attributes in process `syz.2.431'.
[   91.844972][ T7422] dummy0: entered promiscuous mode
[   91.847458][ T7422] team0: entered promiscuous mode
[   91.849445][ T7422] team_slave_0: entered promiscuous mode
[   91.851816][ T7422] team_slave_1: entered promiscuous mode
[   91.860672][ T7422] hsr0: Slave B (team0) is not up; please bring it up to get a fully working HSR network
[   92.032576][ T7434] netlink: 'syz.2.436': attribute type 21 has an invalid length.
[   92.042959][ T7434] netlink: 152 bytes leftover after parsing attributes in process `syz.2.436'.
[   92.210017][ T7452] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.214927][ T7452] 8021q: adding VLAN 0 to HW filter on device team0
[   92.233968][ T7452] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   92.267935][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.440'.
[   92.277382][ T7443] warn_alloc: 1 callbacks suppressed
[   92.277396][ T7443] syz.2.438: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   92.293708][ T7443] CPU: 0 UID: 0 PID: 7443 Comm: syz.2.438 Not tainted syzkaller #0 PREEMPT(full) 
[   92.293725][ T7443] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   92.293732][ T7443] Call Trace:
[   92.293755][ T7443]  <TASK>
[   92.293762][ T7443]  dump_stack_lvl+0x189/0x250
[   92.293783][ T7443]  ? __pfx_dump_stack_lvl+0x10/0x10
[   92.293796][ T7443]  ? __pfx__printk+0x10/0x10
[   92.293812][ T7443]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   92.293826][ T7443]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   92.293840][ T7443]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   92.293855][ T7443]  warn_alloc+0x214/0x310
[   92.293877][ T7443]  ? __pfx_warn_alloc+0x10/0x10
[   92.293901][ T7443]  ? __get_vm_area_node+0x28f/0x300
[   92.293916][ T7443]  ? xskq_create+0xbf/0x170
[   92.293930][ T7443]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   92.293968][ T7443]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   92.293988][ T7443]  ? __kasan_kmalloc+0x93/0xb0
[   92.294007][ T7443]  vmalloc_user_noprof+0xad/0xf0
[   92.294023][ T7443]  ? xskq_create+0xbf/0x170
[   92.294034][ T7443]  xskq_create+0xbf/0x170
[   92.294048][ T7443]  xsk_init_queue+0xb0/0x110
[   92.294061][ T7443]  xsk_setsockopt+0x57b/0x8d0
[   92.294079][ T7443]  ? __pfx_xsk_setsockopt+0x10/0x10
[   92.294096][ T7443]  ? __pfx_aa_sk_perm+0x10/0x10
[   92.294114][ T7443]  ? __fget_files+0x2a/0x420
[   92.294123][ T7443]  ? aa_sock_opt_perm+0xff/0x1b0
[   92.294136][ T7443]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   92.294148][ T7443]  ? __pfx_xsk_setsockopt+0x10/0x10
[   92.294165][ T7443]  do_sock_setsockopt+0x17c/0x1b0
[   92.294185][ T7443]  __x64_sys_setsockopt+0x13f/0x1b0
[   92.294202][ T7443]  do_syscall_64+0xfa/0x3b0
[   92.294214][ T7443]  ? lockdep_hardirqs_on+0x9c/0x150
[   92.294226][ T7443]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.294237][ T7443]  ? exc_page_fault+0x9f/0xf0
[   92.294250][ T7443]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.294261][ T7443] RIP: 0033:0x7ff14b78ec29
[   92.294272][ T7443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   92.294281][ T7443] RSP: 002b:00007ff14c6b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   92.294294][ T7443] RAX: ffffffffffffffda RBX: 00007ff14b9d5fa0 RCX: 00007ff14b78ec29
[   92.294302][ T7443] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005
[   92.294309][ T7443] RBP: 00007ff14b811e41 R08: 0000000000000004 R09: 0000000000000000
[   92.294316][ T7443] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[   92.294323][ T7443] R13: 00007ff14b9d6038 R14: 00007ff14b9d5fa0 R15: 00007ffc224bfe98
[   92.294343][ T7443]  </TASK>
[   92.294369][ T7443] Mem-Info:
[   92.337236][ T7455] x_tables: ip_tables: udp match: only valid for protocol 17
[   92.340237][ T7443] active_anon:5507 inactive_anon:0 isolated_anon:0
[   92.340237][ T7443]  active_file:1495 inactive_file:38251 isolated_file:0
[   92.340237][ T7443]  unevictable:1768 dirty:69 writeback:0
[   92.340237][ T7443]  slab_reclaimable:10062 slab_unreclaimable:81237
[   92.340237][ T7443]  mapped:18266 shmem:2444 pagetables:936
[   92.340237][ T7443]  sec_pagetables:0 bounce:0
[   92.340237][ T7443]  kernel_misc_reclaimable:0
[   92.340237][ T7443]  free:270708 free_pcp:17293 free_cma:0
[   92.428942][ T7443] Node 0 active_anon:11344kB inactive_anon:0kB active_file:4308kB inactive_file:19756kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38604kB dirty:212kB writeback:0kB shmem:4976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3700kB pagetables:1848kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   92.441935][ T7443] Node 1 active_anon:10684kB inactive_anon:0kB active_file:1672kB inactive_file:133248kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34460kB dirty:64kB writeback:0kB shmem:4800kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8488kB pagetables:1896kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   92.454900][ T7443] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   92.456123][ T7453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.473082][ T7443] lowmem_reserve[]: 0 811 811 811 811
[   92.475317][ T7443] Node 0 DMA32 free:390868kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11344kB inactive_anon:0kB active_file:4308kB inactive_file:19756kB unevictable:3536kB writepending:212kB present:1556484kB managed:830852kB mlocked:0kB bounce:0kB free_pcp:38408kB local_pcp:20076kB free_cma:0kB
[   92.486982][ T7443] lowmem_reserve[]: 0 0 0 0 0
[   92.488816][ T7443] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   92.499771][ T7443] lowmem_reserve[]: 0 0 854 854 854
[   92.502150][ T7443] Node 1 Normal free:216828kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10684kB inactive_anon:0kB active_file:1672kB inactive_file:133248kB unevictable:3536kB writepending:64kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:31156kB local_pcp:16324kB free_cma:0kB
[   92.528550][ T7443] lowmem_reserve[]: 0 0 0 0 0
[   92.535843][ T7443] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   92.540513][ T7443] Node 0 DMA32: 1*4kB (E) 85*8kB 
[   92.541690][ T7459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.443'.
[   92.549103][ T7443] (M) 69*16kB (ME) 38*32kB (ME) 14*64kB (ME) 14*128kB (M) 4*256kB (ME) 4*512kB (UME) 3*1024kB (UME) 3*2048kB (UME) 91*4096kB (M) = 390716kB
[   92.556163][ T7443] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   92.563716][ T7443] Node 1 Normal: 42*4kB (UME) 432*8kB (UME) 217*16kB (UM) 218*32kB (UME) 32*64kB (UM) 33*128kB (UM) 8*256kB (M) 9*512kB (UM) 7*1024kB (UME) 1*2048kB (E) 44*4096kB (UM) = 216440kB
[   92.574363][ T7443] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[   92.577609][ T7443] Node 1 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB
[   92.580724][ T7443] 42190 total pagecache pages
[   92.582368][ T7443] 0 pages in swap cache
[   92.584956][ T7443] Free swap  = 124996kB
[   92.586837][ T7443] Total swap = 124996kB
[   92.588728][ T7443] 786301 pages RAM
[   92.590329][ T7443] 0 pages HighMem/MovableOnly
[   92.592029][ T7443] 241356 pages reserved
[   92.595254][ T7443] 0 pages cma reserved
[   92.650554][ T7461] Bluetooth: MGMT ver 1.23
[   92.968223][ T7480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.448'.
[   93.001495][ T7482] netlink: 24 bytes leftover after parsing attributes in process `syz.1.449'.
[   93.066707][ T7488] validate_nla: 2 callbacks suppressed
[   93.066716][ T7488] netlink: 'syz.1.450': attribute type 15 has an invalid length.
[   93.079987][ T7488] netlink: 'syz.1.450': attribute type 15 has an invalid length.
[   93.081677][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 256 - 0
[   93.087970][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 256 - 0
[   93.104664][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 256 - 0
[   93.108029][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 256 - 0
[   93.264427][ T7499] nbd: socks must be embedded in a SOCK_ITEM attr
[   93.351627][ T7511] trusted_key: syz.2.456 sent an empty control message without MSG_MORE.
[   93.484615][ T7523] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[   93.487827][ T7523] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (3)
[   93.491639][ T7521] netlink: 'syz.1.458': attribute type 16 has an invalid length.
[   93.491676][ T7520] netlink: 'syz.1.458': attribute type 16 has an invalid length.
[   93.497802][ T7520] netlink: 'syz.1.458': attribute type 17 has an invalid length.
[   93.501212][ T7521] netlink: 'syz.1.458': attribute type 17 has an invalid length.
[   93.511291][ T7517] netlink: 'syz.0.460': attribute type 4 has an invalid length.
[   93.558176][ T5899] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 256 - 0
[   93.566822][ T5899] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.574876][ T5899] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 256 - 0
[   93.578238][ T5899] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.596355][ T5899] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 256 - 0
[   93.600032][ T5899] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.610043][ T7532] netlink: 'syz.1.464': attribute type 5 has an invalid length.
[   93.628116][ T5899] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 256 - 0
[   93.631078][ T5899] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.686994][ T7542] netlink: 'syz.1.468': attribute type 101 has an invalid length.
[   93.690054][ T7542] netlink: 'syz.1.468': attribute type 7 has an invalid length.
[   93.854498][ T7547] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   94.275933][ T7581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.692820][ T5237] Bluetooth: hci0: command tx timeout
[   94.735626][ T7588] IPVS: set_ctl: invalid protocol: 95 10.1.1.2:20002
[   94.854697][ T7599] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   94.859809][ T7599] syzkaller0: entered promiscuous mode
[   94.862302][ T7599] syzkaller0: entered allmulticast mode
[   94.887738][ T7599] Illegal XDP return value 16128 on prog  (id 162) dev syz_tun, expect packet loss!
[   94.980872][ T7604] ..1: renamed from ..0 (while UP)
[   94.983970][ T7604] A link change request failed with some changes committed already. Interface ..1 may have been left with an inconsistent configuration, please check.
[   95.650299][ T7624] batadv_slave_0: left promiscuous mode
[   95.654152][ T7624] veth3: left promiscuous mode
[   95.656402][ T7624] veth5: left promiscuous mode
[   95.658571][ T7624] geneve2: left promiscuous mode
[   95.691856][ T7627] sctp: [Deprecated]: syz.0.494 (pid 7627) Use of struct sctp_assoc_value in delayed_ack socket option.
[   95.691856][ T7627] Use struct sctp_sack_info instead
[   96.556520][ T7647] __nla_validate_parse: 81 callbacks suppressed
[   96.556535][ T7647] netlink: 24 bytes leftover after parsing attributes in process `syz.1.500'.
[   96.577710][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.500'.
[   96.729161][ T7659] netlink: 140 bytes leftover after parsing attributes in process `syz.2.504'.
[   96.732232][ T7658] netlink: 140 bytes leftover after parsing attributes in process `syz.2.504'.
[   96.860570][ T7676] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[   96.945781][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.511'.
[   97.085933][ T7694] netlink: 16 bytes leftover after parsing attributes in process `syz.1.516'.
[   97.196272][ T7697] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.202341][ T7697] 8021q: adding VLAN 0 to HW filter on device team0
[   97.211892][ T7697] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   97.351682][ T7698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.535582][ T7705] 8021q: adding VLAN 0 to HW filter on device bond11
[   97.543731][ T7705] bond11: entered promiscuous mode
[   97.600673][ T7708] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   97.954168][ T7719] : entered promiscuous mode
[   97.980485][ T7719] syzkaller0: left promiscuous mode
[   97.983229][ T7719] syzkaller0: left allmulticast mode
[   98.105539][ T7721] netlink: 48 bytes leftover after parsing attributes in process `syz.2.525'.
[   98.148723][ T7721] validate_nla: 9 callbacks suppressed
[   98.148737][ T7721] netlink: 'syz.2.525': attribute type 4 has an invalid length.
[   98.164325][ T7721] netlink: 'syz.2.525': attribute type 4 has an invalid length.
[   98.354327][ T7707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.410184][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.529'.
[   98.493584][ T7741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.532'.
[   98.615487][ T7756] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[   98.681924][ T7743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.533'.
[   98.865512][ T7770] 8021q: adding VLAN 0 to HW filter on device bond3
[   98.899839][ T7770] bond3: (slave macsec2): Error -34 calling dev_set_mtu
[   99.040030][ T7783] syzkaller0: entered promiscuous mode
[   99.042346][ T7783] syzkaller0: entered allmulticast mode
[   99.109183][ T5315] IPVS: starting estimator thread 0...
[   99.111313][ T7789] IPVS: ovf: FWM 3 0x00000003 - no destination available
[   99.212548][ T7790] IPVS: using max 78 ests per chain, 187200 per kthread
[   99.225989][ T7793] bridge_slave_1: left allmulticast mode
[   99.228323][ T7793] bridge_slave_1: left promiscuous mode
[   99.230350][ T7793] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.235448][ T7793] bridge_slave_0: left allmulticast mode
[   99.237479][ T7793] bridge_slave_0: left promiscuous mode
[   99.239964][ T7793] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.536480][ T5899] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   99.540117][ T5899] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   99.545699][ T5899] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   99.550641][ T5899] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   99.555170][ T7799] netlink: 'syz.2.546': attribute type 1 has an invalid length.
[   99.800479][ T7806] 8021q: VLANs not supported on vxcan1
[   99.947433][ T7814] netlink: 'syz.2.550': attribute type 1 has an invalid length.
[  100.029786][ T7820] bond0: entered promiscuous mode
[  100.032120][ T7820] team0: entered promiscuous mode
[  100.035712][ T7820] bond0: left promiscuous mode
[  100.038691][ T7820] team0: left promiscuous mode
[  100.054633][ T7822] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  100.064793][ T7822] team0: No ports can be present during mode change
[  100.158415][ T7829] 8021q: adding VLAN 0 to HW filter on device bond12
[  100.166960][ T7829] bond12: (slave macsec2): Error -34 calling dev_set_mtu
[  100.280980][ T7838] macsec1: left promiscuous mode
[  100.283172][ T7838] macsec1: left allmulticast mode
[  100.285238][ T7838] bond11: left promiscuous mode
[  100.350604][ T7846] unsupported nlmsg_type 40
[  100.393727][ T7852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.612822][ T7869] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  100.622154][ T7869] netlink: 'syz.0.570': attribute type 3 has an invalid length.
[  100.761593][ T7893] netlink: 'syz.1.577': attribute type 2 has an invalid length.
[  101.263281][ T7921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.332284][ T7924] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[  101.447747][ T7932] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  101.450606][ T7932] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  101.646641][ T7943] bond2: option mode: unable to set because the bond device has slaves
[  101.745512][ T7948] __nla_validate_parse: 25 callbacks suppressed
[  101.745525][ T7948] netlink: 20 bytes leftover after parsing attributes in process `syz.1.592'.
[  101.751014][ T7948] netlink: 20 bytes leftover after parsing attributes in process `syz.1.592'.
[  101.909962][ T7964] netlink: 'syz.1.597': attribute type 3 has an invalid length.
[  101.913643][ T7964] netlink: 'syz.1.597': attribute type 1 has an invalid length.
[  101.916743][ T7964] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.597'.
[  102.002083][ T7976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.601'.
[  102.006622][ T7978] netem: change failed
[  102.022014][ T7976] lo speed is unknown, defaulting to 1000
[  102.025009][ T7976] lo speed is unknown, defaulting to 1000
[  102.027780][ T7976] lo speed is unknown, defaulting to 1000
[  102.033194][ T7976] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  102.043307][ T7976] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  102.065137][ T7976] lo speed is unknown, defaulting to 1000
[  102.068293][ T7976] lo speed is unknown, defaulting to 1000
[  102.073879][ T7976] lo speed is unknown, defaulting to 1000
[  102.193011][ T7994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.606'.
[  102.271803][ T8001] netlink: 'syz.2.607': attribute type 10 has an invalid length.
[  102.322524][ T8001] bridge0: entered promiscuous mode
[  102.324983][ T8001] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  102.325745][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.607'.
[  102.337882][ T8004] bridge_slave_1: left allmulticast mode
[  102.339947][ T8004] bridge_slave_1: left promiscuous mode
[  102.342936][ T8004] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.347482][ T8004] bridge_slave_0: left allmulticast mode
[  102.349474][ T8004] bridge_slave_0: left promiscuous mode
[  102.351493][ T8004] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.370643][ T8004] bond0: (slave bridge0): Releasing backup interface
[  102.377759][ T8004] bridge0 (unregistering): left promiscuous mode
[  102.443290][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.607'.
[  102.452274][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.607'.
[  102.477069][ T8001] tipc: Resetting bearer <eth:syzkaller0>
[  102.506302][ T5315] lo speed is unknown, defaulting to 1000
[  102.506421][ T8007] batadv_slave_1: entered promiscuous mode
[  102.508316][ T5315] syz2: Port: 1 Link DOWN
[  102.519315][ T5972] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  102.522357][ T5898] syz1: Port: 1 Link DOWN
[  102.525080][ T5972] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  102.528675][ T5972] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  102.531625][ T5972] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  102.544987][ T8006] batadv_slave_1: left promiscuous mode
[  103.067671][ T8036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.619'.
[  103.105818][ T8038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.620'.
[  103.118132][ T8038] dummy0 (unregistering): left promiscuous mode
[  103.118475][ T8040] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[  103.371958][ T8047] sctp: [Deprecated]: syz.0.624 (pid 8047) Use of struct sctp_assoc_value in delayed_ack socket option.
[  103.371958][ T8047] Use struct sctp_sack_info instead
[  103.535520][ T8061] netlink: 'syz.1.629': attribute type 1 has an invalid length.
[  103.541060][ T8062] netlink: 'syz.0.630': attribute type 2 has an invalid length.
[  103.640582][ T8068] netlink: 'syz.1.632': attribute type 1 has an invalid length.
[  103.972167][ T8093] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[  104.294776][ T8112] dummy0: entered promiscuous mode
[  104.299632][ T8112] dummy0: left promiscuous mode
[  104.697407][ T8133] IPVS: set_ctl: invalid protocol: 29 10.1.1.1:20000
[  104.814349][ T8140] syzkaller0: entered promiscuous mode
[  104.820342][ T8140] syzkaller0: entered allmulticast mode
[  104.968896][ T8150] netlink: 'syz.2.659': attribute type 1 has an invalid length.
[  105.263242][ T8178] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  105.287731][ T8143] lo speed is unknown, defaulting to 1000
[  105.434217][ T8200] netlink: 'syz.1.668': attribute type 39 has an invalid length.
[  105.502839][ T8209] netlink: 'syz.1.668': attribute type 5 has an invalid length.
[  105.509964][ T8209] vlan4: entered allmulticast mode
[  105.511712][ T8209] bridge_slave_0: entered allmulticast mode
[  105.641378][ T8217] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:21
[  105.644835][ T8217] IPVS: ovf: FWM 3 0x00000003 - no destination available
[  105.644861][ T8218] IPVS: ovf: FWM 3 0x00000003 - no destination available
[  105.651843][ T8220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.154373][ T8260] team0: No ports can be present during mode change
[  106.205970][ T8262] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  106.747506][ T8327] syzkaller0: entered promiscuous mode
[  106.749638][ T8327] syzkaller0: entered allmulticast mode
[  106.875120][ T8340] __nla_validate_parse: 24 callbacks suppressed
[  106.875130][ T8340] netlink: 20 bytes leftover after parsing attributes in process `syz.2.702'.
[  106.987857][ T8357] netlink: 76 bytes leftover after parsing attributes in process `syz.2.702'.
[  107.169835][ T8327] lo speed is unknown, defaulting to 1000
[  107.703644][ T8374] netlink: 36 bytes leftover after parsing attributes in process `syz.1.706'.
[  107.710667][ T8374] macsec1: entered promiscuous mode
[  107.712660][ T8374] macsec1: entered allmulticast mode
[  107.716117][ T8374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.706'.
[  107.750066][ T8369] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  107.759432][ T8379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'.
[  107.772734][ T8379] gtp0: entered promiscuous mode
[  107.774447][ T8379] gtp0: entered allmulticast mode
[  107.783783][   T33] audit: type=1107 audit(1758663532.679:2): pid=8378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  107.792304][ T8381] netlink: 20 bytes leftover after parsing attributes in process `syz.0.708'.
[  107.841830][ T8383] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[  107.845657][ T8383] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  107.850679][ T8386] netlink: 16 bytes leftover after parsing attributes in process `syz.0.710'.
[  107.904565][ T8389] netlink: 32 bytes leftover after parsing attributes in process `syz.0.711'.
[  107.909613][ T8395] netlink: 32 bytes leftover after parsing attributes in process `syz.0.711'.
[  107.915804][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.711'.
[  108.830607][ T8418] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.945197][ T8423] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  109.930854][ T8430] tc_dump_action: action bad kind
[  109.987693][ T8444] netlink: 'syz.0.727': attribute type 1 has an invalid length.
[  109.994651][   T47] IPVS: starting estimator thread 0...
[  109.999622][ T8445] IPVS: ovf: FWM 3 0x00000003 - no destination available
[  110.080783][ T8453] netlink: 'syz.0.730': attribute type 10 has an invalid length.
[  110.094609][ T8447] IPVS: using max 78 ests per chain, 187200 per kthread
[  110.967766][ T8477] syzkaller0: entered promiscuous mode
[  110.969793][ T8477] syzkaller0: entered allmulticast mode
[  110.981341][ T8479] netlink: 'syz.2.739': attribute type 1 has an invalid length.
[  111.005120][ T8479] 8021q: adding VLAN 0 to HW filter on device bond2
[  111.016791][ T8479] bond2: (slave gretap2): making interface the new active one
[  111.020789][ T8479] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  111.692836][ T8522] netlink: 'syz.0.753': attribute type 1 has an invalid length.
[  111.732123][ T8527] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  111.737097][ T8527] bond2: (slave macvlan1): Enslaving as a backup interface with an up link
[  111.789899][ T8529] macvtap1: entered promiscuous mode
[  111.791812][ T8529] ip6gretap0: entered promiscuous mode
[  111.795091][ T8529] macvtap1: entered allmulticast mode
[  111.797263][ T8529] ip6gretap0: entered allmulticast mode
[  111.879332][ T5972] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  111.887128][ T5972] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  111.890821][ T5972] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  111.898372][ T5972] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  111.912006][ T8535] 8021q: VLANs not supported on ip6gre0
[  112.100382][ T8553] __nla_validate_parse: 16 callbacks suppressed
[  112.100398][ T8553] netlink: 428 bytes leftover after parsing attributes in process `syz.0.759'.
[  112.186232][ T8563] syzkaller0: entered promiscuous mode
[  112.188088][ T8563] syzkaller0: entered allmulticast mode
[  112.248404][ T8568] IPVS: ovf: FWM 3 0x00000003 - no destination available
[  112.289017][ T8570] netlink: 'syz.2.767': attribute type 6 has an invalid length.
[  112.396475][ T8576] netlink: 'syz.2.770': attribute type 16 has an invalid length.
[  112.399798][ T8576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.770'.
[  112.737550][ T8583] lo speed is unknown, defaulting to 1000
[  113.158542][ T8637] raw_sendmsg: syz.0.773 forgot to set AF_INET. Fix it!
[  113.163537][ T8637] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode broadcast(3)
[  113.388026][ T8657] lo: entered allmulticast mode
[  113.402064][ T8654] dvmrp8: entered allmulticast mode
[  113.418248][ T8659] netlink: 36 bytes leftover after parsing attributes in process `syz.2.776'.
[  113.449066][ T8660] veth0: entered promiscuous mode
[  113.505301][ T8657] netlink: 'syz.0.774': attribute type 23 has an invalid length.
[  113.698014][ T8656] lo speed is unknown, defaulting to 1000
[  114.116384][ T8654] lo speed is unknown, defaulting to 1000
[  114.151679][ T8653] lo: left allmulticast mode
[  114.154054][ T8653] dvmrp8: left allmulticast mode
[  114.249272][ T8660] veth0: left promiscuous mode
[  114.442029][ T8688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.782'.
[  114.447320][ T8689] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.783'.
[  114.619391][ T8694] netlink: 16 bytes leftover after parsing attributes in process `syz.0.784'.
[  114.926447][ T8713] netlink: 16 bytes leftover after parsing attributes in process `syz.2.789'.
[  114.930341][ T8713] openvswitch: netlink: Key type 13830 is out of range max 32
[  115.121637][ T8720] netlink: 'syz.2.791': attribute type 13 has an invalid length.
[  115.125764][ T8720] netlink: 'syz.2.791': attribute type 17 has an invalid length.
[  115.160815][ T8720] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.165447][ T8720] 8021q: adding VLAN 0 to HW filter on device team0
[  115.169980][ T8720] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  115.181360][   T47] lo speed is unknown, defaulting to 1000
[  115.185392][ T5898] syz1: Port: 1 Link ACTIVE
[  115.189240][   T47] syz2: Port: 1 Link ACTIVE
[  115.524782][ T8724] netlink: 'syz.0.792': attribute type 1 has an invalid length.
[  115.537773][ T8724] netlink: 'syz.0.792': attribute type 11 has an invalid length.
[  115.549746][ T8720] lo speed is unknown, defaulting to 1000
[  115.553207][ T8724] netlink: 224 bytes leftover after parsing attributes in process `syz.0.792'.
[  115.788468][ T8721] lo speed is unknown, defaulting to 1000
[  115.816978][ T8736] netlink: 1 bytes leftover after parsing attributes in process `syz.0.796'.
[  115.946182][ T8742] netlink: 'syz.0.798': attribute type 10 has an invalid length.
[  115.979389][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.798'.
[  115.990889][ T8742] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  116.071972][ T8744] syzkaller0: entered promiscuous mode
[  116.074174][ T8744] syzkaller0: entered allmulticast mode
[  116.345648][ T8756] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[  116.640447][ T8754] lo speed is unknown, defaulting to 1000
[  116.661284][ T8771] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.667825][ T8771] syzkaller0: entered promiscuous mode
[  116.670030][ T8771] syzkaller0: entered allmulticast mode
[  116.678283][ T8770] tipc: Resetting bearer <eth:syzkaller0>
[  116.690744][ T8770] tipc: Disabling bearer <eth:syzkaller0>
[  116.777042][ T8774] netlink: 'syz.2.808': attribute type 10 has an invalid length.
[  116.791859][ T8774] syz_tun: entered promiscuous mode
[  116.801418][ T8774] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  116.822250][ T8781] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[  117.040599][ T8800] syz_tun: entered allmulticast mode
[  117.079717][ T8804] netlink: 'syz.0.814': attribute type 1 has an invalid length.
[  117.138494][ T8808] __nla_validate_parse: 8 callbacks suppressed
[  117.138507][ T8808] netlink: 40 bytes leftover after parsing attributes in process `syz.1.818'.
[  117.144487][ T8808] netlink: 40 bytes leftover after parsing attributes in process `syz.1.818'.
[  117.287716][ T8820] netlink: 'syz.0.821': attribute type 13 has an invalid length.
[  117.290589][ T8820] netlink: 'syz.0.821': attribute type 17 has an invalid length.
[  117.320310][ T8820] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.325061][ T8820] 8021q: adding VLAN 0 to HW filter on device team0
[  117.330696][ T8820] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  117.393524][ T8825] netlink: 236 bytes leftover after parsing attributes in process `syz.1.825'.
[  117.403641][ T8825] netlink: 1 bytes leftover after parsing attributes in process `syz.1.825'.
[  117.427514][ T8826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.494524][ T8835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.596303][ T8839] netlink: 28 bytes leftover after parsing attributes in process `syz.2.828'.
[  117.678591][ T8843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.830'.
[  117.740656][ T8845] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  117.807644][ T8845] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  117.819016][ T8820] lo speed is unknown, defaulting to 1000
[  117.838852][ T8845] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  117.852568][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.832'.
[  117.853469][ T8845] tipc: Resetting bearer <eth:syzkaller0>
[  118.024349][ T8864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.836'.
[  118.138918][ T8873] ieee802154 phy0 wpan0: encryption failed: -22
[  118.142098][ T8876] netlink: 'syz.1.841': attribute type 33 has an invalid length.
[  118.152573][ T8876] netlink: 152 bytes leftover after parsing attributes in process `syz.1.841'.
[  118.316101][ T8884] 8021q: adding VLAN 0 to HW filter on device bond4
[  118.329192][ T8884] 8021q: adding VLAN 0 to HW filter on device bond4
[  118.331843][ T8884] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  118.337863][ T8884] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  118.379730][ T8886] veth9: entered promiscuous mode
[  118.383730][ T8886] bond4: (slave veth9): Enslaving as an active interface with a down link
[  118.390269][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.394245][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.589042][ T8890] netlink: 28 bytes leftover after parsing attributes in process `syz.0.846'.
[  118.638308][ T8896] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  118.653175][ T8895] IPVS: stopping backup sync thread 8896 ...
[  118.831620][ T8900] macsec1: left promiscuous mode
[  118.834083][ T8900] macsec1: left allmulticast mode
[  118.836769][ T8900] gtp0: left promiscuous mode
[  118.838764][ T8900] gtp0: left allmulticast mode
[  118.863035][ T8900] veth9: left promiscuous mode
[  118.979737][ T8905] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  119.371072][ T8929] 8021q: adding VLAN 0 to HW filter on device bond3
[  119.384831][ T8929] bond3: (slave veth3): Enslaving as an active interface with a down link
[  119.817272][ T8936] syzkaller0: entered promiscuous mode
[  119.819204][ T8936] syzkaller0: entered allmulticast mode
[  119.875969][ T8937] IPVS: ovf: FWM 3 0x00000003 - no destination available
[  120.618995][ T8997] syzkaller1: entered promiscuous mode
[  120.621495][ T8997] syzkaller1: entered allmulticast mode
[  120.631204][ T8997] syzkaller1: left promiscuous mode
[  120.633899][ T8997] syzkaller1: left allmulticast mode
[  121.254538][ T9030] sctp: [Deprecated]: syz.2.883 (pid 9030) Use of struct sctp_assoc_value in delayed_ack socket option.
[  121.254538][ T9030] Use struct sctp_sack_info instead
[  121.675931][ T9048] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.679854][ T9048] syzkaller0: entered promiscuous mode
[  121.697630][ T9048] syzkaller0: entered allmulticast mode
[  121.704874][ T9048] tipc: Resetting bearer <eth:syzkaller0>
[  121.709530][ T9047] tipc: Resetting bearer <eth:syzkaller0>
[  121.719458][ T9047] tipc: Disabling bearer <eth:syzkaller0>
[  121.736668][ T9050] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  121.755664][ T9051] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  121.852326][ T9058] validate_nla: 2 callbacks suppressed
[  121.852341][ T9058] netlink: 'syz.2.891': attribute type 7 has an invalid length.
[  121.937271][ T9058] 8021q: adding VLAN 0 to HW filter on device bond5
[  121.940556][ T9058] bridge12: port 1(bond5) entered blocking state
[  121.961574][ T9058] bridge12: port 1(bond5) entered disabled state
[  121.965111][ T9058] bond5: entered allmulticast mode
[  121.971235][ T9058] bridge12: port 1(bond5) entered blocking state
[  121.974269][ T9058] bridge12: port 1(bond5) entered forwarding state
[  122.000119][ T9065] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  122.254829][ T9073] __nla_validate_parse: 21 callbacks suppressed
[  122.254839][ T9073] netlink: 32 bytes leftover after parsing attributes in process `syz.2.895'.
[  122.392250][ T9079] netlink: 32 bytes leftover after parsing attributes in process `syz.2.896'.
[  122.538297][ T9088] netlink: 20 bytes leftover after parsing attributes in process `syz.1.897'.
[  122.576881][ T9091] netlink: 'syz.2.898': attribute type 1 has an invalid length.
[  122.624498][ T9091] bond6: entered promiscuous mode
[  122.627244][ T9091] 8021q: adding VLAN 0 to HW filter on device bond6
[  122.697033][   T53] bridge12: port 1(bond5) entered disabled state
[  122.739634][ T9082] lo speed is unknown, defaulting to 1000
[  122.917514][ T9085] lo speed is unknown, defaulting to 1000
[  122.954004][ T9101] netlink: 52 bytes leftover after parsing attributes in process `syz.0.901'.
[  122.955622][ T9098] vlan4: entered promiscuous mode
[  122.959660][ T9098] macvtap0: entered promiscuous mode
[  122.983759][ T9101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.901'.
[  123.007492][ T9099] netlink: 104 bytes leftover after parsing attributes in process `syz.1.900'.
[  123.197510][ T9106] atomic_op ffff8881133fe198 conn xmit_atomic 0000000000000000
[  123.213016][ T9103] geneve4: entered promiscuous mode
[  123.237444][ T5972] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  123.241684][ T5972] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  123.247827][ T5972] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  123.251400][ T5972] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  123.285793][ T9106] atomic_op ffff888124b2a998 conn xmit_atomic 0000000000000000
[  123.361124][ T9117] netlink: 284 bytes leftover after parsing attributes in process `syz.1.906'.
[  123.376026][ T9117] netlink: 36 bytes leftover after parsing attributes in process `syz.1.906'.
[  123.379315][ T9117] netlink: 36 bytes leftover after parsing attributes in process `syz.1.906'.
[  123.387224][ T9117] netlink: 36 bytes leftover after parsing attributes in process `syz.1.906'.
[  123.776654][ T9159] openvswitch: netlink: Message has 5 unknown bytes.
[  123.906345][ T9178] netlink: 'syz.1.926': attribute type 21 has an invalid length.
[  123.908977][ T9178] netlink: 'syz.1.926': attribute type 4 has an invalid length.
[  123.911477][ T9178] netlink: 'syz.1.926': attribute type 5 has an invalid length.
[  124.065506][ T9190] 8021q: adding VLAN 0 to HW filter on device bond5
[  124.076818][ T9190] 8021q: adding VLAN 0 to HW filter on device bond5
[  124.079325][ T9190] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address
[  124.083906][ T9190] bond5: (slave wireguard0): Error -95 calling set_mac_address
[  124.281062][ T9197] ip6gretap1: entered promiscuous mode
[  124.401270][ T9203] netlink: 'syz.1.934': attribute type 2 has an invalid length.
[  124.433719][ T9205] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  124.437864][ T9205] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  125.077071][ T9226] tc_dump_action: action bad kind
[  125.155848][ T9229] IPVS: fo: TCP 172.20.20.170:0 - no destination available
[  125.475496][ T9245] ieee802154 phy0 wpan0: encryption failed: -22
[  125.547959][ T9269] netlink: 'syz.0.954': attribute type 1 has an invalid length.
[  125.560485][ T9269] 8021q: adding VLAN 0 to HW filter on device bond14
[  125.568651][ T9269] ipvlan0: entered allmulticast mode
[  125.570576][ T9269] bond14: entered allmulticast mode
[  125.587634][ T9269] bond14: (slave gretap1): making interface the new active one
[  125.593167][ T9269] gretap1: entered allmulticast mode
[  125.595812][ T9269] bond14: (slave gretap1): Enslaving as an active interface with an up link
[  125.823155][ T9267] lo speed is unknown, defaulting to 1000
[  125.981303][ T9296] netlink: 'syz.0.958': attribute type 4 has an invalid length.
[  126.168863][ T9301] bond6: entered promiscuous mode
[  126.170659][ T9301] bond6: entered allmulticast mode
[  126.174118][ T9301] 8021q: adding VLAN 0 to HW filter on device bond6
[  126.271144][ T9301] bond6 (unregistering): Released all slaves
[  126.359540][ T9314] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.367356][ T9314] syzkaller0: entered promiscuous mode
[  126.373925][ T9314] syzkaller0: entered allmulticast mode
[  126.391801][ T9316] netlink: 'syz.1.966': attribute type 1 has an invalid length.
[  126.398995][ T9314] tipc: Resetting bearer <eth:syzkaller0>
[  126.404399][ T9313] tipc: Resetting bearer <eth:syzkaller0>
[  126.437290][ T9313] tipc: Disabling bearer <eth:syzkaller0>
[  126.522120][ T9323] netlink: 'syz.0.968': attribute type 1 has an invalid length.
[  126.526129][ T9321] macvlan0: entered promiscuous mode
[  126.529228][ T9321] vlan0: entered promiscuous mode
[  126.533645][ T9321] bond0: entered promiscuous mode
[  126.537678][ T9321] bond_slave_0: entered promiscuous mode
[  126.540943][ T9321] bond_slave_1: entered promiscuous mode
[  126.695844][ T9333] Unsupported ieee802154 address type: 0
[  126.855895][ T9338] Bluetooth: MGMT ver 1.23
[  126.858493][ T9338] validate_nla: 2 callbacks suppressed
[  126.858503][ T9338] netlink: 'syz.1.973': attribute type 3 has an invalid length.
[  127.057932][ T9342] macvtap1: entered promiscuous mode
[  127.060184][ T9342] veth1_to_hsr: entered promiscuous mode
[  127.063308][ T9342] macvtap1: entered allmulticast mode
[  127.065772][ T9342] veth1_to_hsr: entered allmulticast mode
[  127.075947][ T9343] macvtap2: entered promiscuous mode
[  127.078182][ T9343] macvtap2: entered allmulticast mode
[  127.203279][ T9347] netlink: 'syz.2.977': attribute type 21 has an invalid length.
[  127.514797][ T9362] tipc: Enabling of bearer <eth:veth1_to_bridge> rejected, already enabled
[  127.685351][ T9377] netlink: 'syz.2.986': attribute type 20 has an invalid length.
[  127.696666][ T9377] __nla_validate_parse: 136 callbacks suppressed
[  127.696679][ T9377] netlink: 48 bytes leftover after parsing attributes in process `syz.2.986'.
[  127.726651][ T9385] netlink: 'syz.0.987': attribute type 13 has an invalid length.
[  127.729767][ T9385] netlink: 'syz.0.987': attribute type 17 has an invalid length.
[  127.753889][ T9385] gretap0: refused to change device tx_queue_len
[  127.756414][ T9385] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  127.796693][ T9387] netlink: 'syz.1.988': attribute type 1 has an invalid length.
[  127.805508][ T9387] netlink: 28 bytes leftover after parsing attributes in process `syz.1.988'.
[  127.828431][ T9385] netlink: 40 bytes leftover after parsing attributes in process `syz.0.987'.
[  127.841100][ T9385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.896550][ T9385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.919032][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.988'.
[  127.975399][ T9395] netlink: 124 bytes leftover after parsing attributes in process `syz.1.989'.
[  127.996345][ T9395] block nbd0: NBD_DISCONNECT
[  127.998550][ T9395] block nbd0: Send disconnect failed -32
[  128.002941][ T9395] block nbd0: shutting down sockets
[  128.069823][ T9397] syzkaller1: entered promiscuous mode
[  128.072275][ T9397] syzkaller1: entered allmulticast mode
[  128.153210][ T9377] lo speed is unknown, defaulting to 1000
[  128.271380][ T9400] netlink: 20 bytes leftover after parsing attributes in process `syz.1.991'.
[  128.483690][ T9380] lo speed is unknown, defaulting to 1000
[  128.780152][ T9429] bond0: (slave bond_slave_0): Releasing backup interface
[  128.783796][ T9429] bond_slave_0: left promiscuous mode
[  128.787324][ T9429] bond0: (slave bond_slave_1): Releasing backup interface
[  128.790888][ T9429] bond_slave_1: left promiscuous mode
[  128.795866][ T9429] team0: Port device team_slave_0 removed
[  128.799141][ T9429] team0: Port device team_slave_1 removed
[  128.802288][ T9429] bond2: (slave veth5): Releasing active interface
[  128.806375][ T9429] bond4: (slave veth9): Releasing active interface
[  129.063456][ T9432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.999'.
[  129.678711][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'.
[  129.682939][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'.
[  130.517050][ T9463] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1008'.
[  130.701289][ T9480] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  130.703545][ T9481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  130.838170][ T9488] netem: change failed
[  130.841169][ T9488] veth0_to_bridge: entered promiscuous mode
[  130.845732][ T9488] netlink: 'syz.1.1014': attribute type 3 has an invalid length.
[  130.927429][ T9492] netlink: 'syz.1.1016': attribute type 4 has an invalid length.
[  131.238266][ T9508] rdma_rxe: rxe_newlink: failed to add veth1_to_hsr
[  131.342989][ T9508] sctp: [Deprecated]: syz.1.1022 (pid 9508) Use of struct sctp_assoc_value in delayed_ack socket option.
[  131.342989][ T9508] Use struct sctp_sack_info instead
[  131.505184][ T9518] netlink: 'syz.1.1025': attribute type 10 has an invalid length.
[  131.584922][ T9518] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.592145][ T9518] 8021q: adding VLAN 0 to HW filter on device team0
[  131.601653][ T9518] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  131.723654][ T9532] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  131.732173][ T9532] bond7: (slave vxcan3): Error -95 calling set_mac_address
[  131.776122][ T9537] netlink: 'syz.1.1029': attribute type 5 has an invalid length.
[  131.840963][ T9545] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  132.550290][ T9610] syzkaller0: entered promiscuous mode
[  132.552852][ T9610] syzkaller0: entered allmulticast mode
[  132.615104][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.617846][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  133.006483][ T9629] 8021q: VLANs not supported on ip6gre0
[  133.143573][ T9637] bond2: (slave macvlan3): Error -98 calling set_mac_address
[  133.218257][ T9639] __nla_validate_parse: 27 callbacks suppressed
[  133.218350][ T9639] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1052'.
[  133.266237][ T9641] netlink: 'syz.0.1053': attribute type 12 has an invalid length.
[  133.369348][ T9643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1054'.
[  133.374292][ T9643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1054'.
[  133.516770][ T9653] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1057'.
[  133.564676][ T9666] netlink: 'syz.2.1059': attribute type 3 has an invalid length.
[  133.571340][ T9660] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1059'.
[  133.590746][ T9660] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1059'.
[  133.611691][ T9671] netlink: 'syz.1.1062': attribute type 14 has an invalid length.
[  133.624392][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1063'.
[  133.627735][ T9675] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1063'.
[  133.926206][ T9680] lo speed is unknown, defaulting to 1000
[  134.013102][ T9704] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1069'.
[  134.071394][ T9707] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  134.076280][ T9707] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1070'.
[  134.125286][ T9709] netlink: 'syz.0.1071': attribute type 7 has an invalid length.
[  134.128680][ T9709] netlink: 'syz.0.1071': attribute type 8 has an invalid length.
[  134.131835][ T9709] netlink: 'syz.0.1071': attribute type 4 has an invalid length.
[  134.143630][ T9709] ip6tnl3: entered promiscuous mode
[  134.145870][ T9709] ip6tnl3: entered allmulticast mode
[  134.408253][ T9724] netlink: 'syz.0.1077': attribute type 3 has an invalid length.
[  134.416433][ T9724] openvswitch: netlink: Message has 145 unknown bytes.
[  135.138364][ T9765] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  135.586924][ T9814] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[  135.919166][ T9840] netlink: 'syz.0.1117': attribute type 4 has an invalid length.
[  135.940321][ T9843] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  135.947374][ T9843] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  136.015592][ T9847] IPVS: set_ctl: invalid protocol: 234 100.1.1.1:20000
[  136.145773][ T9855] xt_socket: unknown flags 0xd0
[  136.206058][ T9860] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[  136.307549][ T9847] lo speed is unknown, defaulting to 1000
[  137.003251][ T9894] netlink: 'syz.1.1135': attribute type 29 has an invalid length.
[  137.283056][ T9907] syzkaller1: entered promiscuous mode
[  137.285271][ T9907] syzkaller1: entered allmulticast mode
[  137.511878][ T9919] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.627439][ T9929] bond2: (slave macvlan3): Error -98 calling set_mac_address
[  137.736092][ T9933] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  137.985548][ T9935] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  138.134903][ T9923] lo speed is unknown, defaulting to 1000
[  138.325208][ T9946] __nla_validate_parse: 32 callbacks suppressed
[  138.325224][ T9946] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1151'.
[  138.331885][ T9946] netlink: 'syz.2.1151': attribute type 1 has an invalid length.
[  138.336330][ T9946] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1151'.
[  138.378981][ T9950] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.383449][ T9950] syzkaller0: entered promiscuous mode
[  138.386617][ T9950] syzkaller0: entered allmulticast mode
[  138.494082][ T9950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1153'.
[  138.498570][ T9950] tipc: Resetting bearer <eth:syzkaller0>
[  138.502352][ T9948] tipc: Resetting bearer <eth:syzkaller0>
[  138.525240][ T9948] tipc: Disabling bearer <eth:syzkaller0>
[  138.606975][ T9965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1158'.
[  138.611264][ T9965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1158'.
[  138.621113][ T9961] netlink: 'syz.2.1156': attribute type 4 has an invalid length.
[  138.721775][ T9974] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[  138.748703][ T9973] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  138.861236][ T9986] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1165'.
[  138.883062][ T9986] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1165'.
[  138.986167][ T9997] bond2: option mode: unable to set because the bond device has slaves
[  139.266922][T10011] netlink: 'syz.1.1172': attribute type 13 has an invalid length.
[  139.306155][T10013] netlink: 468 bytes leftover after parsing attributes in process `syz.2.1173'.
[  139.635964][T10024] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1176'.
[  140.216192][T10041] wlan1: mtu greater than device maximum
[  140.302714][T10034] lo speed is unknown, defaulting to 1000
[  140.360809][T10045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.440119][T10051] gretap1: entered promiscuous mode
[  140.487995][T10053] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[  140.579608][T10055] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1186'.
[  140.697438][T10061] openvswitch: netlink: Actions may not be safe on all matching packets
[  140.811332][T10073] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  140.887091][T10083] syzkaller1: tun_chr_ioctl cmd 1074025677
[  140.897521][T10083] syzkaller1: linktype set to 823
[  140.912145][T10085] IPVS: length: 151 != 8
[  141.115238][T10099] team0: left promiscuous mode
[  141.118356][T10099] team_slave_0: left promiscuous mode
[  141.121290][T10099] team_slave_1: left promiscuous mode
[  141.227657][T10106] netlink: 'syz.0.1203': attribute type 1 has an invalid length.
[  141.269439][T10109] macsec2: entered promiscuous mode
[  141.271603][T10109] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode
[  141.275158][T10109] macsec2: entered allmulticast mode
[  141.277373][T10109] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode
[  141.291882][T10106] bond16: (slave bridge10): making interface the new active one
[  141.296469][T10106] bond16: (slave bridge10): Enslaving as an active interface with an up link
[  141.582831][T10133] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[  141.922873][T10151] ip6gretap0: left allmulticast mode
[  141.960535][ T5899] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  141.964075][ T5899] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  141.969361][T10138] lo speed is unknown, defaulting to 1000
[  141.969392][ T5899] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  141.978574][ T5899] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  141.983009][T10154] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  142.094842][T10163] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  142.120647][T10163] netlink: 'syz.0.1221': attribute type 1 has an invalid length.
[  142.174892][T10167] bond8: entered promiscuous mode
[  142.178624][T10167] 8021q: adding VLAN 0 to HW filter on device bond8
[  142.211187][T10163] bond17: (slave gretap2): making interface the new active one
[  142.217373][T10163] bond17: (slave gretap2): Enslaving as an active interface with an up link
[  143.102857][T10174] lo speed is unknown, defaulting to 1000
[  143.197556][T10186] lo speed is unknown, defaulting to 1000
[  143.678184][T10177] Set syz1 is full, maxelem 65536 reached
[  143.760566][T10233] __nla_validate_parse: 11 callbacks suppressed
[  143.760581][T10233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1241'.
[  143.839371][T10233] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1241'.
[  143.885744][T10233] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1241'.
[  144.704836][T10259] tunl0: Caught tx_queue_len zero misconfig
[  144.788715][T10265] ==================================================================
[  144.791602][T10265] BUG: KASAN: out-of-bounds in __xfrm_state_insert+0x8af/0x1450
[  144.794267][T10265] Read of size 1 at addr ffff88810cf91530 by task syz.2.1250/10265
[  144.798151][T10265] 
[  144.799103][T10265] CPU: 0 UID: 0 PID: 10265 Comm: syz.2.1250 Not tainted syzkaller #0 PREEMPT(full) 
[  144.799115][T10265] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  144.799121][T10265] Call Trace:
[  144.799126][T10265]  <TASK>
[  144.799132][T10265]  dump_stack_lvl+0x189/0x250
[  144.799147][T10265]  ? __virt_addr_valid+0x1c8/0x5c0
[  144.799161][T10265]  ? rcu_is_watching+0x15/0xb0
[  144.799172][T10265]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.799183][T10265]  ? rcu_is_watching+0x15/0xb0
[  144.799198][T10265]  ? lock_release+0x4b/0x3e0
[  144.799211][T10265]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  144.799229][T10265]  ? __virt_addr_valid+0x1c8/0x5c0
[  144.799240][T10265]  ? __virt_addr_valid+0x4a5/0x5c0
[  144.799253][T10265]  print_report+0xca/0x240
[  144.799263][T10265]  ? __xfrm_state_insert+0x8af/0x1450
[  144.799276][T10265]  kasan_report+0x118/0x150
[  144.799292][T10265]  ? __xfrm_state_insert+0x8af/0x1450
[  144.799308][T10265]  __xfrm_state_insert+0x8af/0x1450
[  144.799324][T10265]  ? xfrm_state_insert+0x44/0x60
[  144.799338][T10265]  xfrm_state_insert+0x54/0x60
[  144.799351][T10265]  ipcomp6_init_state+0x655/0x900
[  144.799367][T10265]  __xfrm_init_state+0xa76/0x13f0
[  144.799376][T10265]  ? __xfrm_init_state+0x7ef/0x13f0
[  144.799387][T10265]  xfrm_add_sa+0x2f5b/0x4070
[  144.799399][T10265]  ? __pfx_xfrm_add_sa+0x10/0x10
[  144.799408][T10265]  ? apparmor_capable+0x137/0x1b0
[  144.799422][T10265]  ? __nla_parse+0x40/0x60
[  144.799433][T10265]  xfrm_user_rcv_msg+0x7a3/0xab0
[  144.799444][T10265]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  144.799463][T10265]  ? __pfx___mutex_trylock_common+0x10/0x10
[  144.799475][T10265]  ? rcu_is_watching+0x15/0xb0
[  144.799484][T10265]  ? trace_contention_end+0x39/0x120
[  144.799494][T10265]  ? __mutex_lock+0x335/0x1350
[  144.799506][T10265]  netlink_rcv_skb+0x208/0x470
[  144.799518][T10265]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  144.799528][T10265]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  144.799544][T10265]  ? netlink_deliver_tap+0x2e/0x1b0
[  144.799556][T10265]  ? netlink_deliver_tap+0x2e/0x1b0
[  144.799568][T10265]  xfrm_netlink_rcv+0x79/0x90
[  144.799578][T10265]  netlink_unicast+0x82f/0x9e0
[  144.799591][T10265]  ? __pfx_netlink_unicast+0x10/0x10
[  144.799601][T10265]  ? netlink_sendmsg+0x642/0xb30
[  144.799612][T10265]  ? skb_put+0x11b/0x210
[  144.799624][T10265]  netlink_sendmsg+0x805/0xb30
[  144.799638][T10265]  ? __pfx_netlink_sendmsg+0x10/0x10
[  144.799649][T10265]  ? aa_sock_msg_perm+0xf1/0x1d0
[  144.799659][T10265]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  144.799670][T10265]  ? __pfx_netlink_sendmsg+0x10/0x10
[  144.799681][T10265]  __sock_sendmsg+0x21c/0x270
[  144.799691][T10265]  ____sys_sendmsg+0x505/0x830
[  144.799705][T10265]  ? __pfx_____sys_sendmsg+0x10/0x10
[  144.799720][T10265]  ? import_iovec+0x74/0xa0
[  144.799733][T10265]  ___sys_sendmsg+0x21f/0x2a0
[  144.799746][T10265]  ? __pfx____sys_sendmsg+0x10/0x10
[  144.799797][T10265]  ? __fget_files+0x2a/0x420
[  144.799808][T10265]  ? __fget_files+0x3a0/0x420
[  144.799819][T10265]  __x64_sys_sendmsg+0x19b/0x260
[  144.799834][T10265]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  144.799850][T10265]  ? rcu_is_watching+0x15/0xb0
[  144.799862][T10265]  ? do_syscall_64+0xbe/0x3b0
[  144.799876][T10265]  do_syscall_64+0xfa/0x3b0
[  144.799886][T10265]  ? lockdep_hardirqs_on+0x9c/0x150
[  144.799897][T10265]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.799907][T10265]  ? exc_page_fault+0x9f/0xf0
[  144.799918][T10265]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.799928][T10265] RIP: 0033:0x7ff14b78ec29
[  144.799938][T10265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.799947][T10265] RSP: 002b:00007ff14c695038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  144.799959][T10265] RAX: ffffffffffffffda RBX: 00007ff14b9d6090 RCX: 00007ff14b78ec29
[  144.799967][T10265] RDX: 0000000020000000 RSI: 00002000000035c0 RDI: 0000000000000005
[  144.799978][T10265] RBP: 00007ff14b811e41 R08: 0000000000000000 R09: 0000000000000000
[  144.799984][T10265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  144.799991][T10265] R13: 00007ff14b9d6128 R14: 00007ff14b9d6090 R15: 00007ffc224bfe98
[  144.800004][T10265]  </TASK>
[  144.800008][T10265] 
[  144.958374][T10265] Allocated by task 10266:
[  144.960112][T10265]  kasan_save_track+0x3e/0x80
[  144.961957][T10265]  __kasan_slab_alloc+0x6c/0x80
[  144.963836][T10265]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  144.965963][T10265]  xfrm_state_alloc+0x24/0x2f0
[  144.967836][T10265]  pfkey_add+0x6e4/0x2e00
[  144.969515][T10265]  pfkey_sendmsg+0xbfe/0x1090
[  144.971368][T10265]  __sock_sendmsg+0x21c/0x270
[  144.973221][T10265]  ____sys_sendmsg+0x505/0x830
[  144.975091][T10265]  ___sys_sendmsg+0x21f/0x2a0
[  144.976957][T10265]  __x64_sys_sendmsg+0x19b/0x260
[  144.978911][T10265]  do_syscall_64+0xfa/0x3b0
[  144.980703][T10265]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.982989][T10265] 
[  144.983938][T10265] The buggy address belongs to the object at ffff88810cf91200
[  144.983938][T10265]  which belongs to the cache xfrm_state of size 928
[  144.989246][T10265] The buggy address is located 816 bytes inside of
[  144.989246][T10265]  928-byte region [ffff88810cf91200, ffff88810cf915a0)
[  144.994196][T10265] 
[  144.995107][T10265] The buggy address belongs to the physical page:
[  144.997564][T10265] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10cf90
[  145.000979][T10265] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  145.004170][T10265] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  145.007068][T10265] page_type: f5(slab)
[  145.008608][T10265] raw: 057ff00000000040 ffff88801af55780 dead000000000122 0000000000000000
[  145.011926][T10265] raw: 0000000000000000 00000000000e000e 00000000f5000000 0000000000000000
[  145.015232][T10265] head: 057ff00000000040 ffff88801af55780 dead000000000122 0000000000000000
[  145.018519][T10265] head: 0000000000000000 00000000000e000e 00000000f5000000 0000000000000000
[  145.021816][T10265] head: 057ff00000000002 ffffea000433e401 00000000ffffffff 00000000ffffffff
[  145.025164][T10265] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  145.028515][T10265] page dumped because: kasan: bad access detected
[  145.031035][T10265] page_owner tracks the page as allocated
[  145.033258][T10265] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6322, tgid 6321 (syz.0.107), ts 66496718158, free_ts 66231665964
[  145.040503][T10265]  post_alloc_hook+0x240/0x2a0
[  145.042396][T10265]  get_page_from_freelist+0x21e4/0x22c0
[  145.044565][T10265]  __alloc_frozen_pages_noprof+0x181/0x370
[  145.046859][T10265]  alloc_pages_mpol+0x232/0x4a0
[  145.048719][T10265]  allocate_slab+0x8a/0x370
[  145.050517][T10265]  ___slab_alloc+0xbeb/0x1420
[  145.052369][T10265]  kmem_cache_alloc_noprof+0x283/0x3c0
[  145.054478][T10265]  xfrm_state_alloc+0x24/0x2f0
[  145.056342][T10265]  xfrm_add_sa+0x17d1/0x4070
[  145.058127][T10265]  xfrm_user_rcv_msg+0x7a3/0xab0
[  145.060006][T10265]  netlink_rcv_skb+0x208/0x470
[  145.061855][T10265]  xfrm_netlink_rcv+0x79/0x90
[  145.063674][T10265]  netlink_unicast+0x82f/0x9e0
[  145.065487][T10265]  netlink_sendmsg+0x805/0xb30
[  145.067346][T10265]  __sock_sendmsg+0x21c/0x270
[  145.069144][T10265]  ____sys_sendmsg+0x505/0x830
[  145.071006][T10265] page last free pid 6276 tgid 6276 stack trace:
[  145.073467][T10265]  __free_frozen_pages+0xbc4/0xd30
[  145.075466][T10265]  stack_depot_save_flags+0x436/0x860
[  145.077562][T10265]  ref_tracker_free+0xfe/0x7d0
[  145.079425][T10265]  __sk_destruct+0x3c3/0x660
[  145.081199][T10265]  pfkey_release+0x2bc/0x340
[  145.082965][T10265]  sock_close+0xc3/0x240
[  145.084572][T10265]  __fput+0x44c/0xa70
[  145.086136][T10265]  task_work_run+0x1d4/0x260
[  145.087971][T10265]  exit_to_user_mode_loop+0xec/0x110
[  145.090036][T10265]  do_syscall_64+0x2bd/0x3b0
[  145.091859][T10265]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.094149][T10265] 
[  145.095107][T10265] Memory state around the buggy address:
[  145.097304][T10265]  ffff88810cf91400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  145.100389][T10265]  ffff88810cf91480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  145.103381][T10265] >ffff88810cf91500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  145.106473][T10265]                                         ^
[  145.108712][T10265]  ffff88810cf91580: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  145.111833][T10265]  ffff88810cf91600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  145.114958][T10265] ==================================================================
[  145.118285][T10265] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  145.121066][T10265] CPU: 0 UID: 0 PID: 10265 Comm: syz.2.1250 Not tainted syzkaller #0 PREEMPT(full) 
[  145.124575][T10265] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  145.128380][T10265] Call Trace:
[  145.129670][T10265]  <TASK>
[  145.130863][T10265]  dump_stack_lvl+0x99/0x250
[  145.132664][T10265]  ? __asan_memcpy+0x40/0x70
[  145.134496][T10265]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.136542][T10265]  ? __pfx__printk+0x10/0x10
[  145.138401][T10265]  vpanic+0x281/0x750
[  145.140000][T10265]  ? __pfx_vpanic+0x10/0x10
[  145.141728][T10265]  ? irqentry_exit+0x74/0x90
[  145.143555][T10265]  panic+0xb9/0xc0
[  145.145040][T10265]  ? __pfx_panic+0x10/0x10
[  145.146810][T10265]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  145.149247][T10265]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  145.151558][T10265]  ? is_module_address+0x17/0xf0
[  145.153524][T10265]  ? __xfrm_state_insert+0x8af/0x1450
[  145.155647][T10265]  check_panic_on_warn+0x89/0xb0
[  145.157614][T10265]  ? __xfrm_state_insert+0x8af/0x1450
[  145.159705][T10265]  end_report+0x78/0x160
[  145.161408][T10265]  kasan_report+0x129/0x150
[  145.163314][T10265]  ? __xfrm_state_insert+0x8af/0x1450
[  145.165513][T10265]  __xfrm_state_insert+0x8af/0x1450
[  145.167599][T10265]  ? xfrm_state_insert+0x44/0x60
[  145.169563][T10265]  xfrm_state_insert+0x54/0x60
[  145.171436][T10265]  ipcomp6_init_state+0x655/0x900
[  145.173415][T10265]  __xfrm_init_state+0xa76/0x13f0
[  145.175384][T10265]  ? __xfrm_init_state+0x7ef/0x13f0
[  145.177422][T10265]  xfrm_add_sa+0x2f5b/0x4070
[  145.179257][T10265]  ? __pfx_xfrm_add_sa+0x10/0x10
[  145.181158][T10265]  ? apparmor_capable+0x137/0x1b0
[  145.183089][T10265]  ? __nla_parse+0x40/0x60
[  145.184837][T10265]  xfrm_user_rcv_msg+0x7a3/0xab0
[  145.186792][T10265]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  145.188904][T10265]  ? __pfx___mutex_trylock_common+0x10/0x10
[  145.191189][T10265]  ? rcu_is_watching+0x15/0xb0
[  145.193093][T10265]  ? trace_contention_end+0x39/0x120
[  145.195167][T10265]  ? __mutex_lock+0x335/0x1350
[  145.196986][T10265]  netlink_rcv_skb+0x208/0x470
[  145.198834][T10265]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  145.201080][T10265]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  145.203199][T10265]  ? netlink_deliver_tap+0x2e/0x1b0
[  145.205266][T10265]  ? netlink_deliver_tap+0x2e/0x1b0
[  145.207324][T10265]  xfrm_netlink_rcv+0x79/0x90
[  145.209197][T10265]  netlink_unicast+0x82f/0x9e0
[  145.211050][T10265]  ? __pfx_netlink_unicast+0x10/0x10
[  145.213201][T10265]  ? netlink_sendmsg+0x642/0xb30
[  145.215197][T10265]  ? skb_put+0x11b/0x210
[  145.216942][T10265]  netlink_sendmsg+0x805/0xb30
[  145.218854][T10265]  ? __pfx_netlink_sendmsg+0x10/0x10
[  145.220937][T10265]  ? aa_sock_msg_perm+0xf1/0x1d0
[  145.222868][T10265]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  145.224964][T10265]  ? __pfx_netlink_sendmsg+0x10/0x10
[  145.227005][T10265]  __sock_sendmsg+0x21c/0x270
[  145.228865][T10265]  ____sys_sendmsg+0x505/0x830
[  145.230775][T10265]  ? __pfx_____sys_sendmsg+0x10/0x10
[  145.232892][T10265]  ? import_iovec+0x74/0xa0
[  145.234678][T10265]  ___sys_sendmsg+0x21f/0x2a0
[  145.236550][T10265]  ? __pfx____sys_sendmsg+0x10/0x10
[  145.238630][T10265]  ? __fget_files+0x2a/0x420
[  145.240472][T10265]  ? __fget_files+0x3a0/0x420
[  145.242345][T10265]  __x64_sys_sendmsg+0x19b/0x260
[  145.244324][T10265]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  145.246479][T10265]  ? rcu_is_watching+0x15/0xb0
[  145.248341][T10265]  ? do_syscall_64+0xbe/0x3b0
[  145.250188][T10265]  do_syscall_64+0xfa/0x3b0
[  145.251979][T10265]  ? lockdep_hardirqs_on+0x9c/0x150
[  145.254039][T10265]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.256435][T10265]  ? exc_page_fault+0x9f/0xf0
[  145.258320][T10265]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.260636][T10265] RIP: 0033:0x7ff14b78ec29
[  145.262422][T10265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  145.269780][T10265] RSP: 002b:00007ff14c695038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  145.272836][T10265] RAX: ffffffffffffffda RBX: 00007ff14b9d6090 RCX: 00007ff14b78ec29
[  145.275867][T10265] RDX: 0000000020000000 RSI: 00002000000035c0 RDI: 0000000000000005
[  145.279009][T10265] RBP: 00007ff14b811e41 R08: 0000000000000000 R09: 0000000000000000
[  145.282095][T10265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  145.285198][T10265] R13: 00007ff14b9d6128 R14: 00007ff14b9d6090 R15: 00007ffc224bfe98
[  145.288315][T10265]  </TASK>
[  145.290259][T10265] Kernel Offset: disabled
[  145.291959][T10265] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:39:29  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000066 RBX=0000000000000066 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000160a RDI=000000000000160b RBP=00000000000003f8 RSP=ffffc90003ad69f0
R8 =ffff8880205c8237 R9 =1ffff110040b9046 R10=dffffc0000000000 R11=ffffffff854fac30
R12=dffffc0000000000 R13=ffffffff99b028f9 R14=ffffffff99df7480 R15=0000000000000000
RIP=ffffffff854facac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff14c6956c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000004980 CR3=0000000011822000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007ff14b9a7498 00007ff14b9a7470 XMM03=00007ff14b9a74a8 00007ff14b9a74a0
XMM04=00007ff14c50d100 00007ff14b9a7460 XMM05=00007ff14b9a7478 00007ff14b9a74c0
XMM06=00007ff14b9a74b8 00007ff14b9a74b0 XMM07=00007ff14b9a74a8 00007ff14b9a74a0
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b2df5d RBX=ffffc90003497ae8 RCX=ffff8881031e8000 RDX=0000000000000000
RSI=ffffffff8dba98f7 RDI=ffff8881031e8000 RBP=0000000000000000 RSP=ffffc90003497938
R8 =0000000000000000 R9 =ffffffff81b2d643 R10=0000000000000000 R11=00000000ffffffff
R12=0000000000000001 R13=ffff888108e8e000 R14=ffff888108e8e7c0 R15=ffffffff81b2dcf0
RIP=ffffffff81bfadc7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555570785500 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcf6a4a3fc8 CR3=000000010313a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fcf697a7498 00007fcf697a7470 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=00007fcf697a7478 00007fcf697a74c0
XMM06=00007fcf697a74b8 00007fcf697a74b0 XMM07=00007fcf697a74a8 00007fcf697a74a0
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007fcf69612fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
