last executing test programs:

1.99779884s ago: executing program 0 (id=6458):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4ea3, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
readv(r3, &(0x7f0000000340)=[{&(0x7f0000000040)=""/142, 0x8e}], 0x1)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0xed, &(0x7f0000000780)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xb7, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0xb7, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e79dc1db6ecbf24b32e08c54a7cbee5809d8b542e7458ef7cbac933d79068a1492f809caa178afcd5c30f429764c3840100e00117dd6712781ba0385c1846e6c001eac6c71939e1d33a4b120e44584225740f0421a5ee1ae4cfc8d7acf721d5c8ee35323d6a880e43b9ac00499eee5afa3d65886ff58ccb7a62defb784e566bbf8c2320c1e4650bd339def98e5bebcd23f3965a6bd1da217d895f9cde8380c17f0151"}}}}}}}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff0000007d7a44dd66d22100bfa100000000000007010000b8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f0000000500)={'syztnl0\x00', <r8=>0x0, 0xf810, 0x8, 0xdbc, 0x101, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x67, 0x0, 0x2, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x23}}}}})
getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f00000001c0)={0x0, @initdev, @multicast2}, &(0x7f0000000200)=0xc)
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x7}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}}, 0x0)
connect(r1, &(0x7f00000005c0)=@ll={0x11, 0x11, r8, 0x1, 0x2, 0x6, @local}, 0x80)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$FIBMAP(r5, 0x1, &(0x7f00000003c0)=0x9)

1.996871411s ago: executing program 2 (id=6459):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0xa000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x3}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0xfff}]}}}]}, 0x4c}}, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x25, 0x0, 0x0, 0x0, 0x1}, @initr0, @exit, @alu={0x7, 0x0, 0xa, 0x3}]}, &(0x7f0000000300)='syzkaller\x00'}, 0x94)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000100)=0x82)
close(r8)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', <r9=>0x0})
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r9}, 0x90)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r9, 0x4100}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r10}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}]}, 0x34}}, 0x4008000)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1e, 0x2a, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @call={0x85, 0x0, 0x0, 0x56}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5bf4}}]}, &(0x7f0000000340)='GPL\x00', 0x5, 0xbf, &(0x7f0000000780)=""/191, 0x41100, 0x29, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0x3, 0x0, 0x17}, 0x10, 0x0, r7, 0x5, &(0x7f0000000700)=[r4, r0], &(0x7f0000000a00)=[{0x5, 0x4, 0xa, 0x2}, {0x2, 0x1, 0xc, 0x4}, {0x5, 0x2, 0x7, 0x4}, {0x0, 0x1, 0x7, 0xb}, {0x5, 0x4, 0x8, 0x5}], 0x10, 0x1}, 0x94)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="09052cbd7000fbdbdf250300000003000000000000000a000000e0b829330b0f458c63bc5fca4a013f104cec37b5fa42c361a6a1587db19aff1e89d67463c8eff962992819f9120aecebcacd6d7e8714a5a391a6"], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x40080d0)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000180)=@raw=[@ldst={0x1, 0x2, 0x0, 0x1, 0xb, 0xfffffffffffffff4, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0x32, 0x1, 0x8, 0x6, 0xa35}], &(0x7f00000001c0)='syzkaller\x00', 0xa3e, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x1, 0x803}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x9}, 0x94)
r13 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440), 0x2, 0x0)
ppoll(&(0x7f0000000480)=[{r0, 0x4c0}, {r11, 0x8229}, {r12, 0x200}, {r13, 0x9785}], 0x4, &(0x7f00000004c0)={0x0, 0x989680}, &(0x7f0000000500)={[0x7fffffff]}, 0x8)
r14 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'})
r15 = socket$nl_generic(0x10, 0x3, 0x10)
r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r17=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r16, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r17, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc000008000900050000000800070098010000200001"], 0x234}}, 0x0)

1.846069626s ago: executing program 2 (id=6461):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x440008c0}, 0x4804)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00'})
r4 = socket(0x1d, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, 0x0, 0x4040004)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x14, r6, 0x6a98047402e98331}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r5)

1.706298123s ago: executing program 2 (id=6463):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000040)={{}, 0x8, &(0x7f0000000000)=[0x2, 0x0, 0x188, 0x4, 0x7fffffff, 0x2, 0x2db1, 0xad55], 0xfff, 0x3})
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc8}, [@ldst={0x2, 0x2, 0x4, 0x0, 0x9, 0xfffffffffffffff4, 0xfffffffffffffff0}]}, &(0x7f0000000100)='syzkaller\x00', 0xfffffffd, 0xb4, &(0x7f0000000140)=""/180, 0x0, 0x1, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x18dd8, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000280)=[{0x3, 0x5, 0x10, 0xc}, {0x2, 0x1, 0xf, 0x1}, {0x4, 0x3, 0x7, 0x4}, {0x4, 0x4, 0x1, 0x2}, {0x0, 0x1, 0xe}, {0x4, 0x2, 0x0, 0x5}], 0x10, 0x7}, 0x94)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff, 0x1, 0x18}, 0xc)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r1, r2}, 0xc)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000440)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000840))
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000880)=""/57, 0x39}, {&(0x7f00000008c0)=""/127, 0x7f}, {&(0x7f0000000940)=""/121, 0x79}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/221, 0xdd}, {&(0x7f0000001ac0)=""/203, 0xcb}, {&(0x7f0000001bc0)=""/47, 0x2f}, {&(0x7f0000001c00)=""/192, 0xc0}], 0x8, &(0x7f0000001d40)=""/250, 0xfa}, 0x9}, {{&(0x7f0000001e40)=@in, 0x80, &(0x7f0000001ec0)}, 0x5}, {{&(0x7f0000001f00)=@pppol2tpv3={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000002340)=[{&(0x7f0000001f80)=""/180, 0xb4}, {&(0x7f0000002040)=""/216, 0xd8}, {&(0x7f0000002140)=""/216, 0xd8}, {&(0x7f0000002240)=""/193, 0xc1}], 0x4, &(0x7f0000002380)=""/95, 0x5f}, 0x200}], 0x3, 0x10100, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = openat$cgroup(0xffffffffffffffff, &(0x7f00000024c0)='syz1\x00', 0x200002, 0x0)
mkdirat$cgroup(r5, &(0x7f0000002500)='syz0\x00', 0x1ff)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
write$nci(r6, &(0x7f0000002580)=@NCI_OP_CORE_CONN_CLOSE_RSP={0x0, 0x0, 0x2, 0x5, 0x79}, 0x4)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000025c0))
pipe(&(0x7f0000002600)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000002680), r3)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r8, &(0x7f0000002740)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x9240240}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x30, r9, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4c0d1)
connect$phonet_pipe(r7, &(0x7f0000002780)={0x23, 0xa0, 0x9, 0x2}, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), r3)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000002840)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000002940)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002900)={&(0x7f0000002880)={0x44, r10, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40804}, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002980)={r7}, 0x4)
sendmsg$IPSET_CMD_GET_BYINDEX(r7, &(0x7f0000002a80)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)={0x3c, 0xf, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008010}, 0x800)
r12 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r12, 0x11b, 0x1, &(0x7f0000002ac0), &(0x7f0000002b40)=0x80)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002b80)='blkio.throttle.io_serviced\x00', 0x0, 0x0)
setsockopt$sock_timeval(r4, 0x1, 0x43, &(0x7f0000002bc0)={0x0, 0x2710}, 0x10)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000002c00))
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000002d00)={<r13=>0x0, 0x94, &(0x7f0000002c40)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}, @in6={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xe8}, @in6={0xa, 0x4e21, 0x1, @remote, 0x1}, @in={0x2, 0x4e22, @private=0xa010100}, @in6={0xa, 0x4e22, 0x4, @private1, 0x3a}, @in={0x2, 0x4e22, @rand_addr=0x64010101}, @in={0x2, 0x4e20, @local}]}, &(0x7f0000002d40)=0x10)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000002d80)={r13, @in={{0x2, 0x4e23, @remote}}}, &(0x7f0000002e40)=0x84)

1.226213008s ago: executing program 1 (id=6472):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001500010300000000000000000b"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001400)={0xe0000017})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
epoll_wait(r2, &(0x7f0000001940)=[{}], 0x1, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000)
r4 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0x14, &(0x7f0000000000), 0x4)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$kcm(r4, &(0x7f0000001780)={&(0x7f00000003c0)=@nfc_llcp={0x27, r6, 0x1, 0x7, 0x2, 0x7, "55d828798ac0c58a2a3ce9f2fbaece23d6e092ba705156a3dce561ebd2a0beaf7bf60e5b6720f458c0a2f74bd8a6de835cf7e856f69af096d192dd9e8a4119", 0xc}, 0xbf, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x1}], 0x43}, 0x881)
r7 = socket(0x200000000000011, 0x2, 0xd)
bind$packet(r7, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r9)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"})
recvmsg$can_j1939(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001b00)=""/4096, 0x1000}], 0x1, &(0x7f0000000340)=""/66, 0x42}, 0x10100)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x9, 0x88, &(0x7f0000000140)=""/136, 0x0, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
write$cgroup_devices(r8, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x20, r10, 0x6a98047402e98331, 0x70bd21, 0xffa1, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004040}, 0x4008800)

1.113075091s ago: executing program 0 (id=6473):
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'})
socket$netlink(0x10, 0x3, 0x0)

1.111908985s ago: executing program 1 (id=6474):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c40)={0x38, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000000c0)={'ip6tnl0\x00', <r3=>0x0, 0x4, 0xf7, 0x7, 0x5, 0x4, @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x20, 0x7808, 0x6, 0x2a}})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x34, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x10)

1.086557675s ago: executing program 0 (id=6475):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async)
sendto$inet6(r4, &(0x7f0000000280)="32780f", 0x3, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) (async)
shutdown(r4, 0x1) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) (async)
write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="0000001801040700ff00c5"], 0x24e2) (async)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050)
r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) (async)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={<r8=>0x0, 0x5, 0x30}, &(0x7f0000000300)=0xc)
getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000380)={r8, 0x3}, &(0x7f00000003c0)=0x8) (async)
splice(r0, 0x0, r6, 0x0, 0x47, 0x0) (async)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r9, 0x0, 0xf69}, 0x18) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = socket$inet6(0x10, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x8, 0xfff00000}, {0x16, 0x10, 0x1c, 0x4f}]}, 0x10) (async)
sendto$inet6(r10, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.084701311s ago: executing program 1 (id=6476):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x7fff}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x20004055) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x7fff}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x4}}, &(0x7f0000000000)='GPL\x00'}, 0x94) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x4}}, &(0x7f0000000000)='GPL\x00'}, 0x94)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0x16, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x800000, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@broadcast, @in6=@private1}}]}, 0x50}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r5=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002609000000dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x0)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, @ax25={0x3, @null, 0x5}, @nfc={0x27, r5, 0x1, 0x5}, @qipcrtr={0x2a, 0x4, 0x7fff}, 0x1, 0x0, 0x0, 0x0, 0x300, 0x0, 0x6, 0x1, 0x81}) (async)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, @ax25={0x3, @null, 0x5}, @nfc={0x27, r5, 0x1, 0x5}, @qipcrtr={0x2a, 0x4, 0x7fff}, 0x1, 0x0, 0x0, 0x0, 0x300, 0x0, 0x6, 0x1, 0x81})

1.08425458s ago: executing program 0 (id=6477):
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x8001, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}]}]}, 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000034011100ac14140c000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa6c01a8000200000002000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ff020000000000000000000000000001ff020000003500000a000800ac1414bb000000000000000000000000fc02000000000000000000000000000064010102000000000000000000000000fe8000000000000000000000000000323c"], 0x184}}, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4)
setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000021801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000009e86"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r7}, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="d5948f1d00"/15, @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000"], 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c7200000001000000000037a80000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010)

816.182371ms ago: executing program 2 (id=6478):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xa2}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
pwrite64(r0, &(0x7f00000002c0)="dcd03cb5d4bd8539ce59c043fa8c231dffa40743b0ca28135680362524f00c61b48d23a080c2a252", 0x28, 0x1000)
ioctl(r1, 0x8b2a, &(0x7f0000000040))
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r2 = socket$kcm(0x10, 0x3, 0x10)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000240)={@initdev, @multicast2, <r3=>0x0}, &(0x7f0000000280)=0xc)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='contention_end\x00', r4, 0x0, 0x3}, 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
preadv(r6, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc)
unshare(0x24020400)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d4d7a9e18879e85a949fde909d909267e20067b344b471bc1dabde228925035db7e7f8bd08c901142d6eb6fbeed7775e3f7f72885381d6968bc6e7240d0a653742cee1e71d27d4de52d8d2277326f58f974f5a27230b8d1c3e229cd6b53feba2c78fc1c152ec76291adcb5b8a863678a1d1ffce5bba3dc64d9cd6e0ce79604357a4d27481939b14d08ff586c5f252a1111a6486d249c8e65ef1a2295c40aaf2e0609cddc76e5eda481d82eaab23ce1443e87ff6fbdb2896429cfebacc5c0298883e38d73a8bb4f29044ac1caf2c221c78a09b92de022705ab0b11f9ec9"], 0x50)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r8, 0x5}, 0x10)
r9 = openat$cgroup_procs(r5, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
preadv(r9, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0x4, 0x3)
sendfile(r6, r6, 0x0, 0x10001)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x3500000000000000)
write(r0, &(0x7f0000000040)="07000000010001", 0x7)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0)

765.768765ms ago: executing program 2 (id=6479):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x5c005294}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r3, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xe, 0x6d}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fffffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}]]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg1\x00'})
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats})
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0xff7ffeff}, {0x6, 0xa, 0xfe, 0x8001}]})
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_sctp(0xa, 0x4, 0x84)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r7}, 0x18)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
listen(r6, 0x7)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0)
r8 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000008c0)=[{&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f0000000600)=""/123, 0x7b}, {&(0x7f0000000700)=""/113, 0x71}, {&(0x7f0000000800)=""/133, 0x85}], 0x5, 0x0, 0x4}}], 0x48}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x4000010, 0xffffffffffffffff, 0x54099000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a27f200022c00fe8000000000000000000000000000bbfe8000000000000000000000000000aaff0001080000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000009078080050e439cc1c50f9e8f0e11a069a10956846f9b94ac998f72d61715c8c4129345ff7afa956de43ce83b4c1b2fd7eafbe4262b2a5cceb924593f577cf04736141ea2ae5370d3f14c75cba771a9ee982efac6d632b944c8a90dcdae68109c259f0bfba1973a8b12f4d11dabc5d60ae87f6b6c78d6b2a01b5e1bda3afbb5fd61a2267026b611444954d06525cf062794471ed32d643f610ddbbfe8148fd2aa4a46e3e"], 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)

175.328384ms ago: executing program 0 (id=6480):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x440008c0}, 0x4804)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10)
r3 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
getsockname(r3, &(0x7f0000000400)=@rc, &(0x7f0000000480)=0x80)
bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
connect$inet(r3, &(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newchain={0x169c, 0x64, 0x300, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xe, 0x10}, {0xffe0, 0x6}, {0xc, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0xff}, @filter_kind_options=@f_u32={{0x8}, {0x468, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff3, 0x2}}, @TCA_U32_MARK={0x10, 0xa, {0x6, 0x7}}, @TCA_U32_HASH={0x8, 0x2, 0x3}, @TCA_U32_LINK={0x8, 0x3, 0x4}, @TCA_U32_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xfffffff9, 0xa0000000, 0x1, 0x101, 0x94fd, 0x3, 0x0, 0x7, 0x6e7cfa91, 0xf9, 0x7, 0x7d, 0x1, 0x8, 0x40, 0xfff, 0x200, 0x1, 0x1, 0x7fff, 0x4, 0x19, 0x1, 0x33d, 0x100, 0xedc, 0x0, 0x2, 0xe, 0x8b4, 0xb40, 0x1, 0x7, 0x47, 0x4, 0xfffffff9, 0x5, 0x1, 0xfff, 0x80000000, 0x401, 0x93b, 0x8, 0x5, 0x1000000, 0xfffffff7, 0x8b4, 0x3, 0x8, 0x1, 0x0, 0x3, 0x2, 0x8, 0x1, 0x1, 0x1, 0x1d, 0x2, 0x2, 0x1ff, 0x5, 0xc, 0x0, 0xb, 0x7, 0x64, 0x1, 0x8, 0x2, 0x1, 0x5, 0x7fff, 0x7, 0x9, 0x7, 0x2, 0xfff, 0x3b, 0x0, 0x9, 0x8001, 0x400, 0x0, 0x100e, 0x101, 0x981a, 0xa0000000, 0x40, 0x7fff, 0x80000000, 0x5, 0x9, 0x4, 0x9, 0x4, 0x10, 0xfff, 0x9, 0x5, 0xf, 0xffff, 0x76cf, 0x1, 0xe67, 0xaeb, 0x2, 0x1, 0x40, 0x7fffffff, 0x8, 0x0, 0x7, 0xff, 0x3, 0x1, 0x9, 0x3, 0xb, 0x8001, 0x3, 0x0, 0x7, 0x0, 0xfff, 0x2, 0x3, 0x81, 0x3, 0x1, 0x0, 0x7, 0x1, 0x80, 0x6, 0x4, 0x3, 0x7, 0xd810, 0x9, 0x7, 0x4, 0xfffffe01, 0x1, 0x6bc, 0x0, 0x4d, 0xb1, 0x7, 0x2f, 0x5, 0xffffc88e, 0x7, 0xb3, 0x3, 0x6, 0x909, 0x2, 0x4, 0xa, 0x27, 0x3, 0x9, 0x80000001, 0x6, 0xbc, 0x0, 0x40, 0x5, 0x8, 0x83fd, 0x2, 0x6, 0x8e2, 0x7, 0x401, 0x3d, 0xfffffffd, 0x6, 0x3, 0x6, 0x6, 0xf59, 0x7, 0xfffff7de, 0x35d289bf, 0x9eab, 0x9, 0x61f8000, 0x8, 0x1000, 0x5, 0x7ff, 0x4, 0x4, 0xffffffff, 0x1dd0, 0x5, 0x10001, 0xc8fe, 0xc, 0x7, 0x15a0, 0x3, 0x1, 0x5, 0x1000, 0x4, 0x101, 0x5, 0xad, 0x1, 0xb9, 0x6, 0xfffffff7, 0x8, 0x0, 0x8, 0x100, 0x5, 0xf, 0x80000007, 0x5360, 0xfffffffa, 0x20000000, 0x3, 0x6, 0x1000001, 0x6, 0x8, 0x1e62, 0x5, 0x5, 0x2, 0x3, 0x3, 0x7f, 0x6, 0x5, 0x9, 0x101, 0x7, 0x3, 0x100, 0x7, 0xb65, 0x0, 0xfffff21f, 0x9, 0x1, 0x1, 0x6, 0x5cd, 0x8, 0x3]}]}, @TCA_U32_FLAGS={0x8, 0xb, 0x8}, @TCA_U32_INDEV={0x14, 0x8, 'nicvf0\x00'}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0x1}}, @TCA_U32_DIVISOR={0x8, 0x4, 0x9c}, @TCA_U32_HASH={0x8, 0x2, 0xb3}]}}, @filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0xc}, @TCA_FLOW_KEYS={0x8, 0x1, 0x83d51}]}}, @filter_kind_options=@f_fw={{0x7}, {0x11d0, 0x2, [@TCA_FW_ACT={0x6f4, 0x4, [@m_gact={0xd0, 0x16, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xb81, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20000000, 0xe5c, 0x20000008, 0x9, 0xb183}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0x0, 0x2, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1ba9, 0x20000000}}]}, {0x59, 0x6, "7d364c12ee01498ab48d877cad73ce7a974a6cc13592a84a7154701e33e422c74ba47041fd0280758f17b5bcf805061c7aedfb5c0bb4368bc2ee4d99f48e609c868646fee641d4dc7a69a606572e4b0ee36f5a7d82"}, {0xc}, {0xc}}}, @m_nat={0x34, 0x10, 0x0, 0x0, {{0x8}, {0x4}, {0xb, 0x6, "13fe4ccb19942c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0xa0, 0xd, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}]}, {0x28, 0x6, "46edc259583b4577e29d23030877203ddc4a163e4fb42ac844dd5962c6afc865cb49dc8b"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x164, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x1, 0x7, 0xc, 0x8}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5c86, 0x0, 0x3, 0x10, 0x6}, 0x2, r4}}]}, {0xf5, 0x6, "5adaf05379db29423368908db3a720f4504b0d0cce329d321805a6b2ece6820a288539264bb469c39a6ad0d0ca71a661bad6ef2c83e30eb031c3e7b15af8487b478f58172a195526f87930707b4abe2ee821925a31a85f69a164a06631773dfd14d2ec86ee1d00136b8b598bc82a083c0d8c6cfcfcfe2b624c8ca2bdb64a6f7ce4c74fe0e22ed207ca75be7a731b75b6e2d9d8005a07c292744c54981a413cbc1baa14411ee9f63073613aa70b38fdfb78f1dc2dbe656875690bd368673b1c1f2ce64a464b7da0cf05f3aa38bc8524f577ba583ee607b282406b921a4bd38a5064e99a72aba6662e919ddc03c250d63dfd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x70, 0x16, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffff, 0x9}}]}, {0x39, 0x6, "bd74d1499b1837a7689f0471ddab089966ee35bddb24fa2f81eb5483c8baaa0008fe35822913dd56480c3f47de04ec3897e892b144"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x1b0, 0x15, 0x0, 0x0, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x34, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x2}, @IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x35b}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x3}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x200}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x5}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xa}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0xfffe}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_TYPE={0x6, 0x5, 0x972}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x2, 0x6, 0x80, 0x8}}}, @TCA_IFE_SMAC={0xa, 0x4, @random="ba6bc708cd92"}]}, {0xd8, 0x6, "1c64326c16d2e30e27ea1349e24677f536b23e0950f08ca6eeaf8930d1cc4621d34f15f05306a5db38497426ad4ee8eeaba168309f66747ad7de7b225e57db786921d2d1e76d5643bc70fafa31e7a3f798b4de7ee73b3c1ce0fee17257cc3161b400099befbfbc48e6413819d444dbd5783dc440b87c742c859785b6374094ea3e96515488e5be4de2e9a314ac4289b543b2ce8d814e9077c9c4ff75a875956d907eac3c8908ca6059322bcaab206efc350d87143534e1dcb704bfd4758e84637eb4b292346785f4da238f0394273d0f8a88ca5d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x3c, 0x10, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '-\x00'}]}, {0x6, 0x6, "65f9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0x18c, 0x0, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x10000000, 0x4}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x3, 0x3, 0x935}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x34b, 0x80, 0x6, 0x5, 0xfffffffa}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x20000000, 0x5, 0x8}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x10001, 0x0, 0x10000, 0x117a8ccc}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3b, 0x6, 0x3, 0x5, 0x81}, 0x3}}]}, {0xb1, 0x6, "cc73f002977dd55b2bd0e5e1df06c5c7d768e64dc68de8afdbbdd864b421d3613093a37cce06be4022c141f37c5c54829835d3c94c8cd0f326764917b1b6901a01fd5cc0e9203b69844bc7d0d0fc8b1404054908be7fc6e51670d8eeaa52928ce97c6bb9313a1870aeaa6caaae1c350191f36f10e0bf33eb32d05690b0ec7caca7fa59eb8ba3fe7670ae05f9c41a51a78c5858753a4e0b0cdc0832d9e32168fcd7cd8866bd3d7fffb7d34a4d8a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x0, 0x716, 0x77a4eb04, 0x2, {0x1, 0x2, 0x1a, 0x263c}, {0x6, 0x2, 0x6, 0x3, 0x1, 0xda6}, 0x3, 0x9, 0x6}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xffe2, 0xb}}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffe01}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x5, 0xffff}}, @TCA_FW_ACT={0x5cc, 0x4, [@m_mpls={0x12c, 0x1b, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_TTL={0x5, 0x7, 0x1a}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0xfed6b}]}, {0xe0, 0x6, "58829a811b3a94f74f068dadef3ea1c934ecc117badc3b3834498d2f0f0203845d103a69c785ff804ba00290b0279a526add8b1a28ff29d901a2bc3012896bd95f3ac5118151152846b4260ed1b8d5711b77b82e37e40ce74007bf47939d2c3f545c11f47f359f79c9f7ab0bddb49ef8f4c0ecc78e9377f32d0ba61bcaa67429ba0c9c4b552a7b195fc67e47c4e6b9f3409aa821a9b97cf01f1315a53657702c51234c29d778cafedf0223658f73b8ac31b739d95315d3059f555f1fa53d2784fd3c8c19df7b82499ccf159d9f499fb88175d65810b7bad0610e613b"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x174, 0x10, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x3, 0xffffffffffffffff, 0x6, 0x4}, @rand_addr=0x5, @multicast2, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x1, 0x10000000, 0x0, 0xbe29}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x2, 0x8, 0xc0d9, 0x6e}, @multicast2, @remote, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3b, 0x8, 0xffffffffffffffff, 0xffffffff, 0x5}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x57, 0x2, 0x7, 0x1, 0x883}, @broadcast, @multicast1, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1fffe00, 0x7, 0x2, 0x2, 0x55c}, @remote, @private=0xa010101, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xbb5, 0x50, 0x7, 0x8, 0x1dc}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0xda1, 0x4, 0x0, 0xffff8001}, @private=0xa010102, @multicast2, 0xff, 0x1}}]}, {0xc, 0x6, "d8250a80a2302960"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbedit={0x124, 0x19, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0xc}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x200}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7fff, 0x1d0000, 0xffffffffffffffff, 0x6, 0x5}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff6, 0x3}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0xad, 0x6, "584d8f5bf106f2e08cc92773105d2ab60d854981a1ab096d7b8de46012ebdecec524e36a332ecebf185f171cb38b258cc285b90ac5ebaccf72d508d4d092e391224f306eec16eeb88c841e705fc2c336a6bbf3ccae5b96578f8bc653144ce129fbdf6d1459c8446556056c6019a8b703a43fb352e149314ed69292e7490482518da3e9452eb698afb5fe7dab4e4cff91a8775554b95a395420a30513128830c24a249636dc877566ba"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0xa0, 0x17, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x800, 0x6, 0x5, 0x1}}]}, {0x59, 0x6, "cbf9ade15d05ff0cabcffd4f96a6dc0cd6d006469a5ae0a25594a3e0e6ab143e1e504ea95d26a9d3f989f9fa0a30e7442e11e0ea11e168d6e8af5426baf08dacc1fbb7ec9aab592d19cec840a905a09e7a380fb8c5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_vlan={0x164, 0x2, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x10, 0x6, 0x7, 0x40}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xc4, 0xe1bee76, 0x10000000, 0x4, 0x7}, 0x1}}]}, {0xf8, 0x6, "76cfc5ed1ced9e18f25c7841c1b5d86a773c6cbabf2fe73a9e30a4fe3055256c063298698183c6c8197b03bdcdb3fc0b42962fe37c6236867194a3979efad65fae62cc27ef5ddf0751dd13e0ef0f910fc77926cc3db1997232a89bb755875a98c08108df9c9cfdd789a759f97ed3ceae5f664b6a0d16a3065ce5cc27531faa545728e57ca2b9bfefc8b9bf6b1ca4957ded6e2187fa859f554774e53549eb6f681b87ae07a9b2e1d193571308cf195b19b4fc1307026b6af1dd793e481e66242ed3d9dbc1bc48d2ddf47325922d0f560dfb763412abb0f960a4ddacc5431b64e57a3a64611393e1a110b99b1c7dc9da5f18516fb7"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FW_POLICE={0x498, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x20000000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x2, 0x4ba, 0x7, {0x0, 0x1, 0x5, 0x9, 0x0, 0xce}, {0x7, 0x1, 0x8, 0x4, 0x7fff, 0x2}, 0xff, 0xd, 0x1ff}}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x6, 0xe, 0x2, 0x9, 0x2, 0x7fff, 0x7, 0x7, 0xd92, 0x7, 0xfff, 0x4, 0xfffffffe, 0x2, 0x1, 0x6, 0x1, 0x4dd99acb, 0x9, 0x6, 0x6, 0x9, 0x39a, 0xfffeffff, 0x3c7, 0x1, 0x9, 0x0, 0xfffff001, 0xefda, 0x3, 0x838, 0xc, 0x4, 0x9, 0x5, 0xf3, 0x5, 0xffff0000, 0xff, 0x8, 0xff, 0x56, 0x7, 0xc, 0xfffffffb, 0x4, 0x6, 0x5, 0x80, 0x900000, 0x1, 0x8, 0x400000, 0x3, 0x7fff, 0x619, 0x1, 0x9, 0x100, 0x4bcb, 0x14c5, 0x2, 0x100, 0x10000000, 0xfffffff7, 0x4, 0x6, 0x8, 0x21e9, 0xfff, 0x0, 0x41ed, 0x447, 0x3ff, 0x8, 0xffff, 0x96d, 0x2, 0x5, 0x8, 0x8000, 0x9, 0x9, 0x7, 0x50f0cc44, 0x3, 0x1, 0xfff, 0x35f, 0x4, 0x4, 0x9, 0xd2e, 0xff, 0x9, 0x8001, 0x6, 0xb2, 0x80, 0x9, 0x5, 0x8, 0x1, 0xc, 0x9, 0x10, 0x4, 0x8, 0x8, 0x1, 0x0, 0x8, 0x101, 0x6, 0xba, 0xfffffffb, 0x60375d94, 0x4, 0x40, 0xf7d, 0x6, 0xef, 0x9, 0x5, 0x1, 0xfffff73a, 0xfffffff7, 0x33, 0x6, 0xfff, 0x6, 0x6, 0xfffffff7, 0x0, 0x7f, 0x9, 0xffffffe2, 0x5, 0x1, 0x1, 0x80000001, 0x8, 0x2, 0x8, 0x7fff, 0x0, 0x3ff, 0x101, 0x6, 0x0, 0xe, 0xaf29, 0x5, 0x913, 0x79f, 0x7, 0x3, 0x9, 0xfffffffd, 0x9, 0x2, 0x1, 0x0, 0x6, 0x8, 0x4, 0x0, 0x8, 0x2, 0x6, 0x0, 0xfffffffc, 0x74, 0x8, 0x0, 0x7, 0x8, 0x2, 0x3ff, 0x7, 0x2, 0x5f13, 0xfffffffc, 0x4, 0x0, 0x8, 0x0, 0x1, 0x7, 0x4, 0x401, 0x7, 0x1, 0x639, 0xfffffffc, 0xc, 0x8, 0xff, 0x4, 0x4, 0x1, 0x7, 0x1ddb, 0x6, 0x1, 0x1, 0x2f65985f, 0x0, 0x1, 0x1, 0x2, 0x8, 0x11, 0x4, 0x5, 0x5, 0x0, 0x7fffffff, 0x10000, 0x2, 0x6, 0x3, 0x7fffffff, 0x1, 0x4, 0xfffffff7, 0x1, 0xe, 0x7fff, 0x6, 0x1, 0xffffffff, 0xfcb9, 0x5, 0x5, 0x0, 0x5, 0xc, 0x4, 0x1, 0x8, 0x80, 0x10, 0x1, 0x2000001, 0xfffffff8, 0x5, 0x1, 0xffffff2e, 0x29, 0x3, 0x8, 0x0, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x20000000, 0x1, 0x6, 0x5, {0x7, 0x1, 0x5, 0x8, 0x0, 0x3}, {0x9, 0x2, 0x4, 0x5, 0xff, 0x1}, 0xd, 0x7fffffff, 0x990}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]}, @TCA_FW_INDEV={0x14, 0x3, 'ipvlan1\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}]}, 0x169c}}, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00'})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, 0x0, 0x4040004)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000110000000800000000000000000000003000000000200000002"], 0x0, 0x4e, 0x0, 0x4}, 0x20)
bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="fd0a3f31", @ANYRES16=r8, @ANYBLOB="3183000000000000000019000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r7)
socket$can_bcm(0x1d, 0x2, 0x2)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f0000000140)=""/187, &(0x7f0000000280)=0xbb)

170.569059ms ago: executing program 1 (id=6481):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) (async, rerun: 64)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) (async, rerun: 32)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async, rerun: 32)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async)
sendto$inet6(r4, &(0x7f0000000280)="32780f", 0x3, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) (async, rerun: 32)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) (rerun: 32)
shutdown(r4, 0x1) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="0000001801040700ff00c5"], 0x24e2) (async)
r5 = socket$kcm(0x10, 0x3, 0x10)
ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000800)={0x3, @default}) (async)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) (async)
r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) (async, rerun: 64)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={<r8=>0x0, 0x5, 0x30}, &(0x7f0000000300)=0xc)
getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000380)={r8, 0x3}, &(0x7f00000003c0)=0x8)
splice(r0, 0x0, r6, 0x0, 0x47, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r9, 0x0, 0xf69}, 0x18) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv6_getaddrlabel={0x44, 0x4a, 0x800, 0x70bd2b, 0x25dfdbfc, {0xa, 0x0, 0x20, 0x0, 0x0, 0x4}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_ADDRESS={0xff6e, 0x1, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x8098}, 0x48804)

116.103326ms ago: executing program 2 (id=6482):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r0, 0x27f8) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x101000000}, {0xc}}]}, 0x54}}, 0x0) (async)
accept4$x25(r0, 0x0, 0x0, 0x80800)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2e, &(0x7f00000000c0)=[{}], 0x8, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0xca, 0x8, 0x8, &(0x7f0000000180)}}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x1000002, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}}, 0x0)

115.182966ms ago: executing program 0 (id=6483):
accept4(0xffffffffffffffff, &(0x7f00000003c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f0000000440)=0x80, 0x0) (async)
r0 = accept4(0xffffffffffffffff, &(0x7f00000003c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f0000000440)=0x80, 0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000480)={<r1=>0x0, 0xac}, &(0x7f00000004c0)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000500)={r1, 0x0, 0x2, 0x4}, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$cgroup_ro(r2, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) (async)
r4 = openat$cgroup_ro(r2, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000300)={<r8=>r1, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x200005, 0x3, 0x8, 0x5, 0x3}, &(0x7f00000001c0)=0x98)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x3, 0x4, 0x400, 0x520, 0x0, 0x10, 0x3, r8}, 0x20) (async)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x3, 0x4, 0x400, 0x520, 0x0, 0x10, 0x3, r8}, 0x20)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000040000b6191dea0b64eff6f000300000008000200070000000600018000000000"], 0x24}}, 0x4040080)
socket$xdp(0x2c, 0x3, 0x0) (async)
r9 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) (async)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) (async)
setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4)
r10 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r10, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc)
setsockopt$MRT6_FLUSH(r10, 0x29, 0xd4, &(0x7f0000000080)=0x9, 0x4)
r11 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r11, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) (async)
connect$rxrpc(r11, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
r12 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="400100001000130400000000fbdbdf25fe8000000000000000000000000000b400"/50, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffff7f0000010000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000008000000000000000000000000000040000000000000000000000010a000000000000000000000050001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000004000000025cac521"], 0x140}}, 0x4000080)
sendmmsg(r11, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r11, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) (async)
recvmmsg(r11, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x1, 0x1, 0x4, 0x4}, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r11, 0x12, 0x3, &(0x7f0000000100), 0x4) (async)
setsockopt$bt_rfcomm_RFCOMM_LM(r11, 0x12, 0x3, &(0x7f0000000100), 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)

112.512424ms ago: executing program 1 (id=6484):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write(r2, 0x0, 0x2b)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000904000000000000000100000105"], 0x0, 0x5a}, 0x28)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', <r4=>0x0, 0x2f, 0xff, 0x3, 0xffffffc0, 0x24, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x19, 0x2, 0x1}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', r4, 0x29, 0x9, 0x9, 0x5, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x47, 0x7, 0x40, 0xa4}})
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond0\x00', <r7=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="216f389e7805ddc68500128008000100687372001c8337a436000280", @ANYRES32=r7, @ANYBLOB="08000200", @ANYRES32=r8, @ANYBLOB="0500070001000000"], 0x48}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000006fa5402fa3b300"/26, @ANYRES32=0x0, @ANYBLOB="080004000a01010208000100640101021400030067656e65766530000000000000000000080001000a01010108000200ffffffff08000900ff0f0000"], 0x54}}, 0x0)

0s ago: executing program 1 (id=6485):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x300, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x9010)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x20, r2, 0x6a98047402e98331, 0x70bd21, 0xffa1, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004040}, 0x4008800)

kernel console output (not intermixed with test programs):

sistent configuration, please check.
[  285.032029][T19086] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  285.032888][T19085] IPVS: stopping backup sync thread 19086 ...
[  285.078402][T19080] lo speed is unknown, defaulting to 1000
[  285.159106][T19083] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3938'.
[  285.583168][T19126] lo speed is unknown, defaulting to 1000
[  286.675522][T19196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3965'.
[  286.744752][T19206] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  286.798362][T19213] netlink: 'syz.2.3971': attribute type 11 has an invalid length.
[  286.814556][T19213] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3971'.
[  286.817726][T19213] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3971'.
[  286.831320][T19213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3971'.
[  287.070752][T19230] netlink: 'syz.1.3978': attribute type 83 has an invalid length.
[  287.074546][   T33] audit: type=1107 audit(1757435965.397:3): pid=19229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  287.161820][T19240] netlink: 'syz.2.3982': attribute type 1 has an invalid length.
[  287.596254][T19272] syzkaller1: entered promiscuous mode
[  287.598142][T19272] syzkaller1: entered allmulticast mode
[  287.607992][T19273] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  287.620462][T19272] IPVS: stopping backup sync thread 19273 ...
[  287.818730][T19286] syzkaller1: entered promiscuous mode
[  287.829002][T19286] syzkaller1: entered allmulticast mode
[  287.834887][T19290] netlink: 'syz.2.3998': attribute type 4 has an invalid length.
[  287.853755][T19290] netlink: 'syz.2.3998': attribute type 4 has an invalid length.
[  288.217394][T19310] syz_tun: entered allmulticast mode
[  288.268742][T19312] vxcan18: entered promiscuous mode
[  288.304609][T19314] 8021q: adding VLAN 0 to HW filter on device bond35
[  288.404711][T19321] syz_tun (unregistering): left allmulticast mode
[  288.428740][T19318] lo speed is unknown, defaulting to 1000
[  288.493243][T19326] macvtap3: entered allmulticast mode
[  288.495202][T19326] veth0_macvtap: entered allmulticast mode
[  288.521801][T19309] syz_tun: left allmulticast mode
[  288.787944][T19337] netlink: 'syz.1.4014': attribute type 1 has an invalid length.
[  288.850507][T19337] bond44: entered promiscuous mode
[  288.866067][T19337] 8021q: adding VLAN 0 to HW filter on device bond44
[  288.882147][T19346] netlink: 'syz.0.4016': attribute type 7 has an invalid length.
[  288.891403][T19347] 8021q: adding VLAN 0 to HW filter on device bond44
[  288.894037][T19347] bond44: (slave wireguard2): The slave device specified does not support setting the MAC address
[  288.897915][T19347] bond44: (slave wireguard2): Setting fail_over_mac to active for active-backup mode
[  288.903969][T19347] bond44: (slave wireguard2): making interface the new active one
[  288.906693][T19347] wireguard2: entered promiscuous mode
[  288.909291][T19347] bond44: (slave wireguard2): Enslaving as an active interface with an up link
[  289.148253][T19373] netlink: 'syz.0.4021': attribute type 1 has an invalid length.
[  289.187621][T19373] bond36: entered promiscuous mode
[  289.190183][T19373] 8021q: adding VLAN 0 to HW filter on device bond36
[  289.223309][T19380] netlink: 'syz.1.4023': attribute type 21 has an invalid length.
[  289.228696][T19380] ip_vti0: Master is either lo or non-ether device
[  289.318679][T19388] __nla_validate_parse: 8 callbacks suppressed
[  289.318693][T19388] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4027'.
[  289.333350][T19388] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4027'.
[  289.337094][T19388] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4027'.
[  289.341930][T19388] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4027'.
[  289.571940][T19393] netlink: 'syz.0.4025': attribute type 1 has an invalid length.
[  290.660349][   T11] block nbd0: Possible stuck request ffff8880207d0000: control (read@0,1024B). Runtime 180 seconds
[  290.665852][   T11] block nbd0: Possible stuck request ffff8880207d0200: control (read@1024,1024B). Runtime 180 seconds
[  290.703974][T19393] 8021q: adding VLAN 0 to HW filter on device bond37
[  290.900101][T19418] openvswitch: netlink: Key type 29 is not supported
[  291.031873][T19433] bridge23: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  291.105510][T19434] batadv_slave_0: entered promiscuous mode
[  291.108737][T19434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4037'.
[  291.115821][T19434] netlink: 428 bytes leftover after parsing attributes in process `syz.1.4037'.
[  291.119697][T19434] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4037'.
[  291.394810][T19449] netlink: 'syz.1.4043': attribute type 4 has an invalid length.
[  291.443154][T19454] 8021q: adding VLAN 0 to HW filter on device macvlan8
[  291.447601][T19454] bond25: (slave macvlan8): Enslaving as a backup interface with a down link
[  291.553146][T19462] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4048'.
[  291.557285][T19461] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4048'.
[  291.682845][T19472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4052'.
[  291.950208][T19481] sctp: [Deprecated]: syz.1.4055 (pid 19481) Use of int in maxseg socket option.
[  291.950208][T19481] Use struct sctp_assoc_value instead
[  292.775988][T19516] netlink: 'syz.2.4066': attribute type 1 has an invalid length.
[  292.782941][T19516] netlink: 'syz.2.4066': attribute type 2 has an invalid length.
[  292.791798][T19517] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  292.860464][T19521] netlink: 'syz.0.4067': attribute type 1 has an invalid length.
[  292.893232][T19521] bond38: (slave bridge90): making interface the new active one
[  292.896832][T19521] bond38: (slave bridge90): Enslaving as an active interface with an up link
[  292.996413][T19534] openvswitch: netlink: Key type 29 is not supported
[  293.006791][T19536] bond70: (slave vxcan15): The slave device specified does not support setting the MAC address
[  293.017143][T19536] bond70: (slave vxcan15): Error -95 calling set_mac_address
[  293.059852][T19540] macvlan9: entered promiscuous mode
[  293.065358][T19540] macvlan9: entered allmulticast mode
[  293.068492][T19540] bond70: (slave macvlan9): Error -98 calling set_mac_address
[  293.084080][T19539] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  293.154688][T19539] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  293.198218][T19539] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  293.238495][T19539] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  293.292612][T19555] netlink: 'syz.2.4078': attribute type 1 has an invalid length.
[  293.317602][T19555] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  293.320812][T19555] IPv6: NLM_F_CREATE should be set when creating new route
[  293.323991][T19555] IPv6: NLM_F_CREATE should be set when creating new route
[  293.324260][T12246] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  293.342805][T12246] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  293.369168][ T5901] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  293.378976][T10487] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  294.049832][T19600] netlink: 'syz.0.4094': attribute type 3 has an invalid length.
[  294.125543][T19606] netlink: 'syz.1.4095': attribute type 5 has an invalid length.
[  294.128289][T19606] netlink: 'syz.1.4095': attribute type 6 has an invalid length.
[  294.135483][T19605] openvswitch: netlink: Key type 29 is not supported
[  294.283419][T19624] netlink: 'syz.1.4100': attribute type 1 has an invalid length.
[  294.299111][T19624] 8021q: adding VLAN 0 to HW filter on device bond45
[  294.310504][T19624] xt_socket: unknown flags 0xfc
[  294.390517][T19627] __nla_validate_parse: 14 callbacks suppressed
[  294.390531][T19627] netlink: 19 bytes leftover after parsing attributes in process `syz.2.4102'.
[  294.668544][T19637] openvswitch: netlink: Key type 29 is not supported
[  294.712811][T19639] syzkaller1: entered promiscuous mode
[  294.715282][T19639] syzkaller1: entered allmulticast mode
[  294.720045][T19640] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  294.720069][T19639] IPVS: stopping backup sync thread 19640 ...
[  295.661920][T19666] bridge24: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  295.663761][T19669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4113'.
[  295.668769][T19669] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4113'.
[  296.320147][T19693] lo speed is unknown, defaulting to 1000
[  296.995314][T19725] openvswitch: netlink: Key type 29 is not supported
[  297.022465][T19723] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4134'.
[  297.162828][T19734] sock: sock_timestamping_bind_phc: sock not bind to device
[  297.247416][T19731] lo speed is unknown, defaulting to 1000
[  297.626865][T19752] macvlan9: entered promiscuous mode
[  297.648444][T19752] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4142'.
[  297.652097][T19752] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4142'.
[  297.804956][T19760] openvswitch: netlink: Key type 29 is not supported
[  297.919173][T19773] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4148'.
[  298.039371][T19784] netlink: 'syz.2.4151': attribute type 10 has an invalid length.
[  298.043649][T19784] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4151'.
[  298.047825][T19784] bridge79: port 1(dummy0) entered blocking state
[  298.054120][T19784] bridge79: port 1(dummy0) entered disabled state
[  298.056607][T19784] dummy0: entered allmulticast mode
[  298.061713][T19784] dummy0: left allmulticast mode
[  298.064674][T19784] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  298.182487][T19790] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4153'.
[  298.239753][T19790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4153'.
[  298.465122][T19813] bridge91: entered promiscuous mode
[  298.467350][T19813] bridge91: entered allmulticast mode
[  298.568972][T19820] syzkaller1: entered promiscuous mode
[  298.573958][T19820] syzkaller1: entered allmulticast mode
[  298.610410][T19827] netlink: 'syz.1.4164': attribute type 1 has an invalid length.
[  298.929787][T19866] veth11: entered promiscuous mode
[  298.980764][T19859] bond38: (slave bridge90): Releasing active interface
[  299.043896][T19870] netlink: 'syz.2.4178': attribute type 1 has an invalid length.
[  299.075848][T19870] 8021q: adding VLAN 0 to HW filter on device bond72
[  299.093949][T19872] veth0: entered promiscuous mode
[  299.098578][T19872] veth0: left promiscuous mode
[  299.115502][T19870] bond72: (slave geneve4): making interface the new active one
[  299.119900][T19870] bond72: (slave geneve4): Enslaving as an active interface with an up link
[  299.123906][T10487] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  299.127297][T10487] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  299.144008][T10487] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  299.153276][T10487] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  299.234312][T19884] netlink: 'syz.0.4183': attribute type 21 has an invalid length.
[  299.237141][T19884] netlink: 'syz.0.4183': attribute type 22 has an invalid length.
[  299.240243][T19884] netlink: 'syz.0.4183': attribute type 23 has an invalid length.
[  299.245390][T19884] netlink: 'syz.0.4183': attribute type 25 has an invalid length.
[  299.248328][T19884] netlink: 'syz.0.4183': attribute type 26 has an invalid length.
[  299.259404][T19884] netlink: 'syz.0.4183': attribute type 13 has an invalid length.
[  299.322332][T19892] netlink: 'syz.1.4187': attribute type 1 has an invalid length.
[  299.347058][T19892] bond46: entered promiscuous mode
[  299.349839][T19892] 8021q: adding VLAN 0 to HW filter on device bond46
[  299.362828][T19892] 8021q: adding VLAN 0 to HW filter on device bond46
[  299.365533][T19892] bond46: (slave wireguard3): The slave device specified does not support setting the MAC address
[  299.370303][T19892] bond46: (slave wireguard3): Setting fail_over_mac to active for active-backup mode
[  299.384875][T19892] bond46: (slave wireguard3): making interface the new active one
[  299.387638][T19892] wireguard3: entered promiscuous mode
[  299.390235][T19892] bond46: (slave wireguard3): Enslaving as an active interface with an up link
[  299.402510][T19888] __nla_validate_parse: 7 callbacks suppressed
[  299.402521][T19888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4185'.
[  299.408919][T19892] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  299.411888][T19892] IPv6: NLM_F_CREATE should be set when creating new route
[  299.414879][T19892] IPv6: NLM_F_CREATE should be set when creating new route
[  299.435812][T19892] bond46: (slave wireguard4): The slave device specified does not support setting the MAC address
[  299.446379][T19892] bond46: (slave wireguard4): Enslaving as a backup interface with an up link
[  299.464311][T19898] delete_channel: no stack
[  299.608382][T19918] openvswitch: netlink: Key type 29 is not supported
[  299.688877][T19924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4196'.
[  299.688910][T19925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4196'.
[  299.698767][T19924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4196'.
[  303.337143][ T5298] udevd[5298]: worker [5849] /devices/virtual/block/nbd0 timeout; kill it
[  303.346235][ T5298] udevd[5298]: seq 15037 '/devices/virtual/block/nbd0' killed
[  304.091312][   T60] block nbd1: Possible stuck request ffff8880207f0000: control (read@0,4096B). Runtime 60 seconds
[  306.536572][ T5298] udevd[5298]: worker [12589] /devices/virtual/block/nbd1 is taking a long time
[  312.381767][T19942] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4203'.
[  312.399202][T19944] can: request_module (can-proto-0) failed.
[  312.446550][T19947] _Z`Ԁ@: entered promiscuous mode
[  312.587166][T19954] openvswitch: netlink: Key type 29 is not supported
[  312.638767][T19964] dvmrp0: entered allmulticast mode
[  312.990252][T19989] netlink: 'syz.2.4219': attribute type 13 has an invalid length.
[  312.996463][T19989] netlink: 'syz.2.4219': attribute type 17 has an invalid length.
[  313.009891][T19989] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  313.639261][T20034] openvswitch: netlink: Key type 29 is not supported
[  313.869613][T20055] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4237'.
[  313.916116][T20062] netlink: 'syz.2.4239': attribute type 30 has an invalid length.
[  313.942668][T20063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4237'.
[  313.946136][T20063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4237'.
[  313.950062][T20063] netlink: 'syz.0.4237': attribute type 14 has an invalid length.
[  313.953971][T20063] netlink: 'syz.0.4237': attribute type 13 has an invalid length.
[  314.043070][T20071] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4241'.
[  314.047880][T20071] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4241'.
[  314.082824][T20076] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4242'.
[  314.099665][T20076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4242'.
[  314.156443][T20078] vlan10: entered promiscuous mode
[  314.178229][T20082] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4244'.
[  314.182104][T20082] bond0: invalid ARP target 0.0.0.0 specified for addition
[  314.184585][T20082] bond0: option arp_ip_target: invalid value (0)
[  314.198756][T20079] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4243'.
[  314.401100][T20099] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  314.414674][T20100] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  314.488790][T20105] netlink: 'syz.0.4252': attribute type 10 has an invalid length.
[  314.500543][T20105] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  314.503992][T20105] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  314.766045][T20137] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  314.980320][T20154] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  314.984558][T20153] IPVS: stopping backup sync thread 20154 ...
[  315.023023][T20151] netlink: 'syz.1.4265': attribute type 42 has an invalid length.
[  315.166447][T20167] netlink: 'syz.2.4271': attribute type 30 has an invalid length.
[  315.185293][T20167] netlink: 'syz.2.4271': attribute type 30 has an invalid length.
[  315.189351][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  315.193296][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  315.207381][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  315.207885][T20160] openvswitch: netlink: Key type 29 is not supported
[  315.214836][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  315.459008][T20195] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  315.546774][T20203] netlink: 'syz.0.4282': attribute type 18 has an invalid length.
[  315.970544][T20243] openvswitch: netlink: Key type 29 is not supported
[  316.092596][T20257] tipc: Resetting bearer <eth:syzkaller0>
[  316.124485][T20257] vlan0: left promiscuous mode
[  316.190199][ T5879] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  316.195604][ T5879] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  316.198421][ T5879] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  316.202724][ T5879] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  316.926072][T20344] openvswitch: netlink: Key type 29 is not supported
[  316.944053][T20346] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20002
[  317.308805][T20373] bridge92: entered allmulticast mode
[  317.516542][T20387] __nla_validate_parse: 22 callbacks suppressed
[  317.516558][T20387] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4334'.
[  317.576050][T20389] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4335'.
[  317.577148][T20391] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4336'.
[  317.916296][T20411] openvswitch: netlink: Key type 29 is not supported
[  317.967063][T20418] vlan10: entered promiscuous mode
[  318.004699][T20420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4342'.
[  318.022953][T20418] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4341'.
[  318.075807][T20425] validate_nla: 5 callbacks suppressed
[  318.075821][T20425] netlink: 'syz.2.4343': attribute type 1 has an invalid length.
[  318.082184][T20425] netlink: 'syz.2.4343': attribute type 11 has an invalid length.
[  318.088518][T20425] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4343'.
[  318.102084][T20425] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  318.107146][T20425] CPU: 1 UID: 0 PID: 20425 Comm: syz.2.4343 Not tainted syzkaller #0 PREEMPT(full) 
[  318.107164][T20425] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  318.107171][T20425] Call Trace:
[  318.107176][T20425]  <TASK>
[  318.107182][T20425]  dump_stack_lvl+0x189/0x250
[  318.107204][T20425]  ? __pfx_dump_stack_lvl+0x10/0x10
[  318.107219][T20425]  ? __pfx__printk+0x10/0x10
[  318.107240][T20425]  ? kernfs_path_from_node+0x2f/0x290
[  318.107253][T20425]  ? kernfs_path_from_node+0x250/0x290
[  318.107264][T20425]  ? kernfs_path_from_node+0x2f/0x290
[  318.107280][T20425]  sysfs_warn_dup+0x8e/0xa0
[  318.107294][T20425]  sysfs_do_create_link_sd+0xc0/0x110
[  318.107309][T20425]  device_add_class_symlinks+0x1cf/0x240
[  318.107325][T20425]  device_add+0x475/0xb50
[  318.107341][T20425]  wiphy_register+0x1ba6/0x28d0
[  318.107373][T20425]  ? __pfx_wiphy_register+0x10/0x10
[  318.107389][T20425]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  318.107410][T20425]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  318.107427][T20425]  ieee80211_register_hw+0x3484/0x4100
[  318.107453][T20425]  ? ieee80211_register_hw+0x1461/0x4100
[  318.107475][T20425]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  318.107492][T20425]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  318.107515][T20425]  ? __hrtimer_setup+0x187/0x210
[  318.107526][T20425]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  318.107546][T20425]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  318.107587][T20425]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  318.107600][T20425]  ? trace_kmalloc+0x1f/0xd0
[  318.107613][T20425]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  318.107628][T20425]  ? kstrndup+0xbf/0x160
[  318.107650][T20425]  hwsim_new_radio_nl+0xea4/0x1b10
[  318.107667][T20425]  ? __pfx___nla_validate_parse+0x10/0x10
[  318.107697][T20425]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  318.107722][T20425]  ? __nla_parse+0x40/0x60
[  318.107770][T20425]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  318.107794][T20425]  genl_family_rcv_msg_doit+0x215/0x300
[  318.107814][T20425]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  318.107839][T20425]  ? bpf_lsm_capable+0x9/0x20
[  318.107858][T20425]  ? security_capable+0x7e/0x2e0
[  318.107879][T20425]  genl_rcv_msg+0x60e/0x790
[  318.107899][T20425]  ? __pfx_genl_rcv_msg+0x10/0x10
[  318.107912][T20425]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  318.107939][T20425]  netlink_rcv_skb+0x208/0x470
[  318.107955][T20425]  ? __lock_acquire+0xab9/0xd20
[  318.107973][T20425]  ? __pfx_genl_rcv_msg+0x10/0x10
[  318.107988][T20425]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  318.108021][T20425]  ? down_read+0x1ad/0x2e0
[  318.108035][T20425]  genl_rcv+0x28/0x40
[  318.108048][T20425]  netlink_unicast+0x82f/0x9e0
[  318.108071][T20425]  ? __pfx_netlink_unicast+0x10/0x10
[  318.108089][T20425]  ? netlink_sendmsg+0x642/0xb30
[  318.108098][T20425]  ? skb_put+0x11b/0x210
[  318.108113][T20425]  netlink_sendmsg+0x805/0xb30
[  318.108132][T20425]  ? __pfx_netlink_sendmsg+0x10/0x10
[  318.108167][T20425]  ? aa_sock_msg_perm+0xf1/0x1d0
[  318.108182][T20425]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  318.108194][T20425]  ? __pfx_netlink_sendmsg+0x10/0x10
[  318.108206][T20425]  __sock_sendmsg+0x21c/0x270
[  318.108224][T20425]  ____sys_sendmsg+0x505/0x830
[  318.108242][T20425]  ? __pfx_____sys_sendmsg+0x10/0x10
[  318.108263][T20425]  ? import_iovec+0x74/0xa0
[  318.108281][T20425]  ___sys_sendmsg+0x21f/0x2a0
[  318.108296][T20425]  ? __pfx____sys_sendmsg+0x10/0x10
[  318.108340][T20425]  ? __fget_files+0x2a/0x420
[  318.108356][T20425]  ? __fget_files+0x3a0/0x420
[  318.108382][T20425]  __x64_sys_sendmsg+0x19b/0x260
[  318.108398][T20425]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  318.108420][T20425]  ? rcu_is_watching+0x15/0xb0
[  318.108437][T20425]  ? do_syscall_64+0xbe/0x3b0
[  318.108451][T20425]  do_syscall_64+0xfa/0x3b0
[  318.108461][T20425]  ? lockdep_hardirqs_on+0x9c/0x150
[  318.108477][T20425]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.108488][T20425]  ? exc_page_fault+0x9f/0xf0
[  318.108506][T20425]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.108517][T20425] RIP: 0033:0x7fead238ebe9
[  318.108529][T20425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  318.108538][T20425] RSP: 002b:00007fead31bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  318.108552][T20425] RAX: ffffffffffffffda RBX: 00007fead25c5fa0 RCX: 00007fead238ebe9
[  318.108560][T20425] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000002c
[  318.108567][T20425] RBP: 00007fead2411e19 R08: 0000000000000000 R09: 0000000000000000
[  318.108574][T20425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  318.108580][T20425] R13: 00007fead25c6038 R14: 00007fead25c5fa0 R15: 00007ffeb99cc7b8
[  318.108601][T20425]  </TASK>
[  318.460486][T20439] vlan6: entered promiscuous mode
[  318.506347][T20444] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4346'.
[  318.570235][T20446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4351'.
[  318.613941][T20451] netlink: 'syz.2.4353': attribute type 4 has an invalid length.
[  318.714775][T20462] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  318.720368][T20462] netlink: 'syz.2.4356': attribute type 1 has an invalid length.
[  318.724589][T20462] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4356'.
[  318.728826][T20462] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4356'.
[  319.258340][T20508] pimreg3: entered allmulticast mode
[  319.787348][T20540] netlink: 'syz.2.4381': attribute type 10 has an invalid length.
[  319.793015][T20540] bridge79: entered promiscuous mode
[  319.795197][T20540] bridge79: entered allmulticast mode
[  319.800004][T20540] bond0: (slave bridge79): Enslaving as an active interface with a down link
[  319.841589][T20540] bond0: (slave bridge79): Releasing backup interface
[  319.851747][T20540] bridge79 (unregistering): left allmulticast mode
[  320.156136][T20560] openvswitch: netlink: Key type 29 is not supported
[  320.373992][T20581] sock: sock_timestamping_bind_phc: sock not bind to device
[  320.617755][T20590] netlink: 'syz.1.4397': attribute type 4 has an invalid length.
[  320.626696][T12345] lo speed is unknown, defaulting to 1000
[  320.628641][T12345] syz0: Port: 1 Link DOWN
[  320.630141][T12345] lo speed is unknown, defaulting to 1000
[  320.742275][T20593] netlink: 'syz.0.4398': attribute type 2 has an invalid length.
[  320.905936][   T11] block nbd0: Possible stuck request ffff8880207d0000: control (read@0,1024B). Runtime 210 seconds
[  320.909777][   T11] block nbd0: Possible stuck request ffff8880207d0200: control (read@1024,1024B). Runtime 210 seconds
[  321.052376][T10487] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  321.060758][T10487] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  321.097861][T10487] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  321.105836][T10487] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  321.116637][T20616] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  321.127153][T20616] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.169665][T20619] lo speed is unknown, defaulting to 1000
[  321.199416][T20616] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  321.203994][T20616] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.292555][T20616] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  321.301129][T20616] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.361958][T20616] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  321.366423][T20616] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.484111][T20622] netlink: 'syz.0.4407': attribute type 2 has an invalid length.
[  321.499497][T12246] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  321.503256][T12246] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  321.506116][T12246] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  321.508829][T12246] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  321.533296][T12246] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  321.536601][T12246] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  321.539822][T12246] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  321.546542][T12246] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  321.755655][ T5901] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22
[  321.760096][T20645] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  321.883447][T20658] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  321.886353][T20658] syzkaller0: entered promiscuous mode
[  321.888671][T20658] syzkaller0: entered allmulticast mode
[  321.923383][T20658] sch_fq: defrate 257 ignored.
[  321.955943][T20657] tipc: Resetting bearer <eth:syzkaller0>
[  321.980471][T20657] tipc: Disabling bearer <eth:syzkaller0>
[  322.276040][T20681] geneve6: entered promiscuous mode
[  322.278196][T20681] geneve6: entered allmulticast mode
[  323.514588][T20712] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  323.518215][T20712] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  323.521528][T20712] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  323.524977][T20712] tipc: Resetting bearer <eth:syzkaller0>
[  323.540453][T20712] tipc: Resetting bearer <eth:syzkaller0>
[  323.545377][T20712] __nla_validate_parse: 18 callbacks suppressed
[  323.545388][T20712] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4433'.
[  323.623275][T20716] lo speed is unknown, defaulting to 1000
[  323.788448][T20725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4437'.
[  324.058784][T20739] openvswitch: netlink: Key type 29 is not supported
[  324.196362][T20754] netlink: 'syz.0.4447': attribute type 1 has an invalid length.
[  324.199809][T20755] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4447'.
[  324.223924][T20755] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4447'.
[  324.230005][T20755] 8021q: adding VLAN 0 to HW filter on device bond40
[  324.337458][T20766] openvswitch: netlink: Key type 29 is not supported
[  324.367242][T20776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4453'.
[  324.372977][T20776] hsr_slave_0: left promiscuous mode
[  324.387005][T20777] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  324.495858][T20786] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4455'.
[  324.779157][T20811] lo speed is unknown, defaulting to 1000
[  324.936426][T20815] netlink: 20824 bytes leftover after parsing attributes in process `syz.2.4464'.
[  325.391019][T20824] openvswitch: netlink: Key type 29 is not supported
[  325.754171][T20838] netlink: 812 bytes leftover after parsing attributes in process `syz.0.4473'.
[  325.834849][T20842] netlink: 'syz.0.4475': attribute type 1 has an invalid length.
[  325.837462][T20842] netlink: 'syz.0.4475': attribute type 1 has an invalid length.
[  325.843982][T20842] netlink: 'syz.0.4475': attribute type 1 has an invalid length.
[  325.848745][T20847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4476'.
[  325.848872][T20842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4475'.
[  325.927080][T20857] netlink: 'syz.1.4478': attribute type 1 has an invalid length.
[  325.930390][T20857] netlink: 'syz.1.4478': attribute type 3 has an invalid length.
[  326.109829][T20866] netlink: 'syz.0.4482': attribute type 1 has an invalid length.
[  326.540263][T20889] lo speed is unknown, defaulting to 1000
[  326.857091][T20909] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  326.933841][T20909] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  327.148680][T20909] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  327.197328][T20909] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  327.247998][   T12] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  327.254923][   T12] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  327.272152][ T5900] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  327.317030][T10487] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  327.339108][T10487] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  327.356886][T10487] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  327.401544][T10487] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  327.611001][ T5900] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  327.660337][T20945] netlink: 'syz.0.4508': attribute type 1 has an invalid length.
[  327.840987][ T5900] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  328.061293][T20975] bond0: (slave gretap0): Opening slave failed
[  328.116166][T20985] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  328.251721][T20987] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  328.328932][T21001] netlink: 'syz.0.4526': attribute type 12 has an invalid length.
[  328.352677][T21001] netlink: 'syz.0.4526': attribute type 14 has an invalid length.
[  328.428895][   T12] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  328.435725][   T12] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  328.442496][T21006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  328.450911][ T5900] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  328.460177][T21009] pimreg3: entered allmulticast mode
[  328.610820][ T5900] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  328.617375][T21013] : renamed from vlan1
[  328.699807][T21022] 8021q: adding VLAN 0 to HW filter on device bond47
[  328.704465][T21022] bond0: (slave bond47): Enslaving as an active interface with a down link
[  329.000985][T21057] lo speed is unknown, defaulting to 1000
[  329.131151][ T5900] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  329.275030][T21071] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  329.619130][T21092] __nla_validate_parse: 17 callbacks suppressed
[  329.619140][T21092] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4559'.
[  329.657085][T21095] validate_nla: 2 callbacks suppressed
[  329.657094][T21095] netlink: 'syz.1.4560': attribute type 6 has an invalid length.
[  329.664017][T21095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4560'.
[  330.319698][T21147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4578'.
[  330.323741][T21147] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4578'.
[  330.328337][T21147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4578'.
[  330.339238][T21147] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4578'.
[  330.684813][T21162] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4584'.
[  330.689286][T21162] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4584'.
[  330.748134][T21169] netlink: 'syz.1.4586': attribute type 1 has an invalid length.
[  330.751726][T21169] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4586'.
[  331.349101][T21203] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4596'.
[  331.729332][T21232] veth13: entered promiscuous mode
[  331.796819][T21240] netlink: 'syz.1.4608': attribute type 1 has an invalid length.
[  331.818453][T21240] 8021q: adding VLAN 0 to HW filter on device bond48
[  331.863118][T21245] chnl_net:caif_netlink_parms(): no params data found
[  332.447692][T21296] netlink: 'syz.1.4626': attribute type 2 has an invalid length.
[  332.466036][T21296] : entered promiscuous mode
[  332.570812][    C1] ip6_tnl_xmit_ctl: 1 callbacks suppressed
[  332.570827][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  332.629176][T21311] 8021q: adding VLAN 0 to HW filter on device bond49
[  332.752794][T21325] netlink: 'syz.0.4638': attribute type 11 has an invalid length.
[  332.979196][T21351] openvswitch: netlink: Key type 29 is not supported
[  333.006437][T21354] vlan5: entered allmulticast mode
[  333.008717][T21354] dummy0: entered allmulticast mode
[  333.034752][T21357] bridge26: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  333.091682][T21361] netlink: 'syz.0.4651': attribute type 7 has an invalid length.
[  333.136844][T21364] netlink: 'syz.2.4652': attribute type 20 has an invalid length.
[  333.202972][T21364] netlink: 'syz.2.4652': attribute type 20 has an invalid length.
[  333.450892][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  333.674060][T21405] sctp: [Deprecated]: syz.1.4663 (pid 21405) Use of int in max_burst socket option deprecated.
[  333.674060][T21405] Use struct sctp_assoc_value instead
[  334.172755][   T60] block nbd1: Possible stuck request ffff8880207f0000: control (read@0,4096B). Runtime 90 seconds
[  334.231328][T21459] netlink: 'syz.2.4683': attribute type 5 has an invalid length.
[  334.234000][T21459] netlink: 'syz.2.4683': attribute type 5 has an invalid length.
[  334.450559][T21471] netlink: 'syz.0.4684': attribute type 3 has an invalid length.
[  334.480228][T21472] lo speed is unknown, defaulting to 1000
[  334.848745][T21492] sctp: [Deprecated]: syz.1.4690 (pid 21492) Use of struct sctp_assoc_value in delayed_ack socket option.
[  334.848745][T21492] Use struct sctp_sack_info instead
[  334.979631][T21497] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  335.038259][T21497] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  335.077788][T21499] __nla_validate_parse: 22 callbacks suppressed
[  335.077805][T21499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4692'.
[  335.097752][T21497] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  335.154014][T21502] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4693'.
[  335.159384][T21502] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4693'.
[  335.179654][T21497] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  335.284804][T10487] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  335.308982][T10487] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  335.309129][T21504] netlink: 'syz.0.4694': attribute type 4 has an invalid length.
[  335.320100][T10487] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  335.339861][T21504] netlink: 'syz.0.4694': attribute type 4 has an invalid length.
[  335.353545][T10487] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  335.528876][T21519] sock: sock_timestamping_bind_phc: sock not bind to device
[  335.534618][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  335.625938][T21528] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  335.667645][T21535] netlink: 'syz.0.4702': attribute type 4 has an invalid length.
[  335.677708][T21535] netlink: 'syz.0.4702': attribute type 4 has an invalid length.
[  335.730907][T21535] netlink: 812 bytes leftover after parsing attributes in process `syz.0.4702'.
[  335.916449][T21550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4707'.
[  336.056829][T21556] netlink: 'syz.2.4710': attribute type 1 has an invalid length.
[  336.239977][T21569] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4715'.
[  336.277824][T21571] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4716'.
[  336.429727][T21584] netlink: 'syz.0.4720': attribute type 2 has an invalid length.
[  336.436261][T21584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  336.446824][T21586] netlink: 812 bytes leftover after parsing attributes in process `syz.2.4721'.
[  336.686102][T21599] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  336.706920][T21601] netlink: 'syz.0.4727': attribute type 9 has an invalid length.
[  336.709960][T21601] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4727'.
[  336.714466][T21599] syzkaller0: entered promiscuous mode
[  336.716794][T21599] syzkaller0: entered allmulticast mode
[  336.719674][T21599] tipc: Resetting bearer <eth:syzkaller0>
[  336.792447][T21603] xt_time: invalid argument - start or stop time greater than 23:59:59
[  336.980157][T21613] 8021q: adding VLAN 0 to HW filter on device bond18
[  336.995039][T21613] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  336.998396][T21613] bond18: (slave macvlan4): Enslaving as a backup interface with a down link
[  337.012079][T21613] bond18: (slave macvlan4): Releasing backup interface
[  337.041241][    T9] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  337.353116][T21623] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4736'.
[  337.494831][T21631] 8021q: adding VLAN 0 to HW filter on device bond41
[  337.498931][T21631] bond0: (slave bond41): Enslaving as an active interface with a down link
[  337.518146][T21598] tipc: Resetting bearer <eth:syzkaller0>
[  338.014292][    T9] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  338.742431][T21598] tipc: Disabling bearer <eth:syzkaller0>
[  338.755939][T21643] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  338.771482][T21638] lo speed is unknown, defaulting to 1000
[  338.962626][T21655] netlink: 'syz.2.4746': attribute type 1 has an invalid length.
[  339.002794][T21655] 8021q: adding VLAN 0 to HW filter on device bond73
[  339.014060][T21655] macvlan10: entered promiscuous mode
[  339.016418][T21655] macvlan10: entered allmulticast mode
[  339.019714][T21655] bond73: entered promiscuous mode
[  339.034479][T21655] 8021q: adding VLAN 0 to HW filter on device macvlan10
[  339.048333][T21655] bond73: left promiscuous mode
[  339.290713][    C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  339.300412][T21667] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  339.381012][T21671] netlink: 'syz.0.4751': attribute type 10 has an invalid length.
[  339.714137][T21698] netlink: 'syz.1.4761': attribute type 1 has an invalid length.
[  339.752722][T21698] 8021q: adding VLAN 0 to HW filter on device bond50
[  339.795204][T21705] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  339.816766][T21705] sock: sock_timestamping_bind_phc: sock not bind to device
[  340.036275][T21729] lo speed is unknown, defaulting to 1000
[  340.493753][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.496929][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.553569][T21750] netlink: 'syz.2.4777': attribute type 1 has an invalid length.
[  340.638730][T21752] bond74: (slave vxcan19): The slave device specified does not support setting the MAC address
[  340.644713][T21752] bond74: (slave vxcan19): Error -95 calling set_mac_address
[  340.672413][T21750] macvlan10: entered promiscuous mode
[  340.674923][T21750] macvlan10: entered allmulticast mode
[  340.909177][T21759] bridge79: entered promiscuous mode
[  340.912205][T21758] netem: change failed
[  341.210760][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  351.461910][   T11] block nbd0: Possible stuck request ffff8880207d0000: control (read@0,1024B). Runtime 240 seconds
[  351.466500][   T11] block nbd0: Possible stuck request ffff8880207d0200: control (read@1024,1024B). Runtime 240 seconds
[  352.988738][T21768] can: request_module (can-proto-0) failed.
[  352.997672][T21769] openvswitch: netlink: IP tunnel dst address not specified
[  353.001515][T21769] openvswitch: netlink: IP tunnel dst address not specified
[  353.005893][T21769] openvswitch: netlink: IP tunnel dst address not specified
[  353.009774][T21769] openvswitch: netlink: IP tunnel dst address not specified
[  353.016768][T21769] openvswitch: netlink: IP tunnel dst address not specified
[  353.019997][T21769] openvswitch: netlink: IP tunnel dst address not specified
[  353.031905][T21771] can: request_module (can-proto-0) failed.
[  353.045210][T21775] openvswitch: netlink: Message has 1 unknown bytes.
[  353.051038][T21775] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  353.066373][T21775] __nla_validate_parse: 5 callbacks suppressed
[  353.066386][T21775] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4784'.
[  353.094408][T21775] lo speed is unknown, defaulting to 1000
[  353.852756][T21807] netlink: 'syz.2.4793': attribute type 1 has an invalid length.
[  353.879062][T21807] bond75: entered promiscuous mode
[  353.881890][T21807] 8021q: adding VLAN 0 to HW filter on device bond75
[  353.885282][T21809] netlink: 812 bytes leftover after parsing attributes in process `syz.0.4794'.
[  354.122078][T21823] bond25: option mode: unable to set because the bond device has slaves
[  354.137107][T21822] bond25: option mode: unable to set because the bond device has slaves
[  354.157007][T21822] bond25: (slave macvlan10): Error -98 calling set_mac_address
[  354.266262][T21823] bond65: (slave wlan0): Releasing active interface
[  354.326887][T21823] bond0: (slave wlan1): Releasing backup interface
[  354.333100][T21823] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  354.336385][T21823] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  354.359493][T21823] bond66: (slave bond67): Releasing backup interface
[  354.371649][T21823] batadv2: left allmulticast mode
[  354.374194][T21823] batadv2: left promiscuous mode
[  354.376516][T21823] bridge0: port 1(batadv2) entered disabled state
[  354.385207][T21823] vlan3: left promiscuous mode
[  354.387596][T21823] bridge83: port 1(vlan3) entered disabled state
[  354.397295][T21823] bond25: (slave macvlan8): Releasing backup interface
[  354.405308][T21823] bond72: (slave geneve4): Releasing active interface
[  354.455824][ T5900] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  354.483027][ T5901] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  354.494843][ T5901] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  354.507912][ T5901] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  354.519945][ T5901] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  354.627437][T21843] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  354.640425][T21843] gtp2: entered promiscuous mode
[  354.646843][T21843] gtp2: entered allmulticast mode
[  354.681675][T21844] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4804'.
[  354.697863][T21846] netlink: 'syz.2.4808': attribute type 1 has an invalid length.
[  354.717099][T21846] 8021q: adding VLAN 0 to HW filter on device bond76
[  354.819395][T21853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4811'.
[  355.290978][    C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  355.450878][   T47] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  356.654239][T21893] netlink: 'syz.1.4822': attribute type 11 has an invalid length.
[  356.733913][T21899] netlink: 'syz.1.4825': attribute type 32 has an invalid length.
[  356.743871][T21899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4825'.
[  356.762274][T21899] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  356.827898][T21907] netlink: 'syz.0.4828': attribute type 15 has an invalid length.
[  356.998446][T21917] netlink: 'syz.0.4831': attribute type 6 has an invalid length.
[  357.210798][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  357.458699][T21944] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  357.500109][T21944] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  357.518605][T21946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4840'.
[  357.526579][T21946] netlink: 'syz.2.4840': attribute type 5 has an invalid length.
[  357.530403][T21946] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4840'.
[  357.553847][T21946] geneve5: entered promiscuous mode
[  357.556155][T21946] geneve5: entered allmulticast mode
[  357.559896][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  357.565550][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  357.576646][T21944] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  357.587471][T21944] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  357.653276][T21944] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  357.658531][T21944] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  357.765031][T12246] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  357.768550][T12246] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  357.782976][T10487] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  357.786459][T10487] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  357.797542][T12246] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  357.802110][T12246] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  357.812994][T12246] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  357.815882][T12246] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  357.887390][T21959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4845'.
[  358.127589][T21970] lo speed is unknown, defaulting to 1000
[  358.339929][T21979] veth0_to_team: left promiscuous mode
[  358.346152][T21979] veth0_to_team: left allmulticast mode
[  358.348820][T21979] batadv_slave_0: left promiscuous mode
[  358.382473][T21979] bridge1: left allmulticast mode
[  358.389393][T21979] bridge3: left allmulticast mode
[  358.394032][T21979] team1: left promiscuous mode
[  358.396071][T21979] team1: left allmulticast mode
[  358.398320][T21979] geneve3: left promiscuous mode
[  358.400491][T21979] geneve3: left allmulticast mode
[  358.404051][T21979] gretap3: left allmulticast mode
[  358.406607][T21979] bond8: left promiscuous mode
[  358.408600][T21979] bond8: left allmulticast mode
[  358.411565][T21979] gtp0: left promiscuous mode
[  358.413637][T21979] gtp0: left allmulticast mode
[  358.416135][T21979] bond12: left promiscuous mode
[  358.418600][T21979] xfrm1: left allmulticast mode
[  358.422212][T21979] bond16: left promiscuous mode
[  358.424450][T21979] bond16: left allmulticast mode
[  358.426270][T21979] bridge11: left promiscuous mode
[  358.428013][T21979] bridge11: left allmulticast mode
[  358.429811][T21979] macsec3: left promiscuous mode
[  358.432348][T21979] macsec3: left allmulticast mode
[  358.435412][T21979] vlan3: left allmulticast mode
[  358.437104][T21979] veth1: left allmulticast mode
[  358.439778][T21979] geneve5: left promiscuous mode
[  358.444510][T21979] geneve5: left allmulticast mode
[  358.451100][T21979] tipc: Resetting bearer <eth:syzkaller0>
[  358.463023][T21979] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  358.465941][T21979] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  358.479737][T21979] ipvlan4: left allmulticast mode
[  358.482319][T21979] bond23: left allmulticast mode
[  358.484633][T21979] bond25: left promiscuous mode
[  358.487056][T21979] bridge19: left allmulticast mode
[  358.489544][T21979] macvlan5: left promiscuous mode
[  358.496721][T21979] gretap5: left promiscuous mode
[  358.499923][T21979] bond36: left promiscuous mode
[  358.504034][T21979] bridge92: left allmulticast mode
[  358.539999][T21982] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4851'.
[  358.547518][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  358.553868][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  358.557549][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  358.561726][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  359.197221][T22004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4858'.
[  359.213838][T22006] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4859'.
[  359.217681][T22006] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4859'.
[  359.278402][T22009] syzkaller0: entered promiscuous mode
[  359.281058][T22009] syzkaller0: entered allmulticast mode
[  359.575526][T22024] syz_tun: entered allmulticast mode
[  359.586913][T22024] netlink: 165 bytes leftover after parsing attributes in process `syz.0.4865'.
[  359.593202][T22023] syz_tun: left allmulticast mode
[  360.135373][T22054] netlink: 'syz.0.4875': attribute type 1 has an invalid length.
[  360.238037][T22060] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4878'.
[  360.518310][T22084] netlink: 'syz.1.4888': attribute type 12 has an invalid length.
[  360.524963][T22086] sctp: [Deprecated]: syz.2.4889 (pid 22086) Use of int in max_burst socket option deprecated.
[  360.524963][T22086] Use struct sctp_assoc_value instead
[  360.828265][T22113] netlink: 'syz.1.4896': attribute type 7 has an invalid length.
[  360.836359][T22113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4896'.
[  360.865698][T22113] 8021q: adding VLAN 0 to HW filter on device bond52
[  360.869024][T22113] bridge27: port 1(bond52) entered blocking state
[  360.873164][T22113] bridge27: port 1(bond52) entered disabled state
[  360.875869][T22113] bond52: entered allmulticast mode
[  360.880851][T22113] bridge27: port 1(bond52) entered blocking state
[  360.883663][T22113] bridge27: port 1(bond52) entered forwarding state
[  361.142357][T22128] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4901'.
[  361.279890][T22139] netlink: 'syz.0.4906': attribute type 1 has an invalid length.
[  361.301616][T22139] workqueue: Failed to create a rescuer kthread for wq "bond42": -EINTR
[  361.569640][T22165] syzkaller0: entered promiscuous mode
[  361.574338][T22165] syzkaller0: entered allmulticast mode
[  361.578736][T22165] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  361.617115][ T1194] bridge27: port 1(bond52) entered disabled state
[  361.629737][T22169] netlink: 'syz.0.4915': attribute type 3 has an invalid length.
[  361.634053][T22169] netlink: 666 bytes leftover after parsing attributes in process `syz.0.4915'.
[  361.637956][T22164] tipc: Resetting bearer <eth:syzkaller0>
[  361.692750][T22170] sock: sock_timestamping_bind_phc: sock not bind to device
[  362.785548][T22181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4919'.
[  363.003023][T22164] tipc: Disabling bearer <eth:syzkaller0>
[  363.183653][T22189] lo speed is unknown, defaulting to 1000
[  363.323925][T22200] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  363.657439][T22212] delete_channel: no stack
[  363.667929][T22212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4928'.
[  363.727218][T22216] netlink: 'syz.1.4930': attribute type 1 has an invalid length.
[  363.765745][T22216] 8021q: adding VLAN 0 to HW filter on device bond53
[  363.807677][T22218] syzkaller0: entered promiscuous mode
[  363.809671][T22218] syzkaller0: entered allmulticast mode
[  363.912671][T22223] netlink: 'syz.1.4933': attribute type 1 has an invalid length.
[  363.916125][T22223] netlink: 'syz.1.4933': attribute type 1 has an invalid length.
[  364.252115][   T60] block nbd1: Possible stuck request ffff8880207f0000: control (read@0,4096B). Runtime 120 seconds
[  365.123517][T22242] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4935'.
[  365.127682][T22242] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4935'.
[  365.139277][T22244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4936'.
[  365.145918][T22244] netlink: 'syz.1.4936': attribute type 2 has an invalid length.
[  365.149519][T22242] gretap0: entered promiscuous mode
[  365.155223][T22242] gretap0: left promiscuous mode
[  365.245790][T22252] netlink: 'syz.1.4939': attribute type 1 has an invalid length.
[  365.279421][T22252] 8021q: adding VLAN 0 to HW filter on device bond54
[  365.304893][T22252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4939'.
[  365.587629][T22286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4949'.
[  365.620221][T22286] bond55: (slave vxcan21): The slave device specified does not support setting the MAC address
[  365.625791][T22286] bond55: (slave vxcan21): Error -95 calling set_mac_address
[  365.670471][T22292] macvlan5: entered promiscuous mode
[  365.672817][T22292] macvlan5: entered allmulticast mode
[  365.675641][T22292] bond55: (slave macvlan5): Error -98 calling set_mac_address
[  365.677646][T22295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4953'.
[  365.682726][T22295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4953'.
[  365.695186][T22295] macvlan10: entered promiscuous mode
[  365.761351][T22299] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4955'.
[  365.765166][T22299] nbd: must specify at least one socket
[  365.771962][T22299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4955'.
[  365.775655][T22299] netlink: 'syz.0.4955': attribute type 5 has an invalid length.
[  365.859998][T22311] v: renamed from ip6_vti0 (while UP)
[  365.996597][T22329] netlink: 'syz.1.4964': attribute type 1 has an invalid length.
[  366.025334][T22329] bond56: entered promiscuous mode
[  366.031153][T22329] 8021q: adding VLAN 0 to HW filter on device bond56
[  366.247611][T22362] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  366.382273][T22365] delete_channel: no stack
[  366.875335][T22419] lo speed is unknown, defaulting to 1000
[  367.717127][T22479] netlink: 'syz.0.5009': attribute type 11 has an invalid length.
[  368.265758][T22507] lo speed is unknown, defaulting to 1000
[  368.358806][T22517] pimreg: left allmulticast mode
[  368.726621][T22535] netlink: 'syz.2.5029': attribute type 1 has an invalid length.
[  368.731180][T22535] __nla_validate_parse: 15 callbacks suppressed
[  368.731189][T22535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5029'.
[  369.065605][T22554] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5036'.
[  369.075907][T22551] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5035'.
[  369.236849][T22559] lo speed is unknown, defaulting to 1000
[  369.381640][T22577] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  369.385576][T22577] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  369.428175][T22577] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  369.438043][T22577] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  369.464072][T22567] lo speed is unknown, defaulting to 1000
[  369.491251][T22577] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  369.495283][T22577] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  369.519980][T22583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5043'.
[  369.528614][T22583] macsec0: entered promiscuous mode
[  369.530556][T22583] batadv0: entered promiscuous mode
[  369.539173][T22583] batadv0: left promiscuous mode
[  369.559809][T22577] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  369.563115][T22577] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  369.701047][T12246] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  369.704459][T12246] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  369.712408][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  369.716817][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  369.724647][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  369.728011][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  369.738486][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  369.741825][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  369.769535][T22594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5046'.
[  369.780392][T22594] macvlan10: entered promiscuous mode
[  369.796654][T22594] macvlan11: entered promiscuous mode
[  369.804918][T22594] macvlan12: entered promiscuous mode
[  369.817807][T22594] macvlan13: entered promiscuous mode
[  369.825489][T22594] macvlan14: entered promiscuous mode
[  369.843738][T22594] macvlan15: entered promiscuous mode
[  369.852750][T22594] macvlan16: entered promiscuous mode
[  369.863240][T22594] macvlan17: entered promiscuous mode
[  369.877503][T22601] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5048'.
[  369.878139][T22594] macvlan18: entered promiscuous mode
[  369.892970][T22594] macvlan19: entered promiscuous mode
[  369.901137][T22600] lo speed is unknown, defaulting to 1000
[  369.923319][T22594] macvlan20: entered promiscuous mode
[  369.958353][T22594] macvlan21: entered promiscuous mode
[  369.990209][T22594] macvlan22: entered promiscuous mode
[  370.017869][T22594] macvlan23: entered promiscuous mode
[  370.155509][T22594] macvlan24: entered promiscuous mode
[  370.175062][T22594] macvlan25: entered promiscuous mode
[  370.198104][T22609] netlink: 'syz.0.5050': attribute type 1 has an invalid length.
[  370.199726][T22594] macvlan26: entered promiscuous mode
[  370.203060][T22609] netlink: 'syz.0.5050': attribute type 5 has an invalid length.
[  370.203070][T22609] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5050'.
[  370.224968][T22594] macvlan27: entered promiscuous mode
[  370.243839][T22609] : entered promiscuous mode
[  370.251796][T22594] macvlan28: entered promiscuous mode
[  370.268516][T22609] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  370.282623][T22609] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  370.376769][T22594] macvlan29: entered promiscuous mode
[  370.431813][T22594] macvlan30: entered promiscuous mode
[  370.447993][T22594] macvlan31: entered promiscuous mode
[  370.488421][T22594] macvlan32: entered promiscuous mode
[  370.518155][T22594] macvlan33: entered promiscuous mode
[  370.546357][T22594] macvlan34: entered promiscuous mode
[  370.563651][T22594] macvlan35: entered promiscuous mode
[  370.584884][T22594] macvlan36: entered promiscuous mode
[  370.606231][T22594] macvlan37: entered promiscuous mode
[  370.614355][T22619] syzkaller1: entered promiscuous mode
[  370.618207][T22619] syzkaller1: entered allmulticast mode
[  371.066486][T22653] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5063'.
[  371.189974][T22668] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5069'.
[  371.199680][T22668] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5069'.
[  371.509775][T22687] lo speed is unknown, defaulting to 1000
[  372.257498][T22724] netlink: 'syz.2.5086': attribute type 1 has an invalid length.
[  372.260272][T22724] netlink: 'syz.2.5086': attribute type 1 has an invalid length.
[  372.648386][T22763] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  372.760000][T22761] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  372.799695][T22790] netlink: 'syz.1.5103': attribute type 1 has an invalid length.
[  372.828629][T22790] bond57: entered promiscuous mode
[  372.836365][T22790] bond57: entered allmulticast mode
[  372.840132][T22797] netlink: 'syz.2.5102': attribute type 10 has an invalid length.
[  372.850098][T22790] bridge29: entered promiscuous mode
[  372.855190][T22790] bridge29: entered allmulticast mode
[  372.872264][T22790] bond57: (slave bridge29): making interface the new active one
[  372.887524][T22790] bond57: (slave bridge29): Enslaving as an active interface with an up link
[  372.902688][T22797] 8021q: adding VLAN 0 to HW filter on device batadv0
[  372.908277][T22797] batadv0: entered promiscuous mode
[  372.910291][T22797] batadv0: entered allmulticast mode
[  372.914242][T22797] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  372.922184][   T13] bond0: (slave batadv0): interface is now down
[  372.940862][ T5872] bond0: (slave batadv0): interface is now down
[  372.968915][   T13] bond0: (slave batadv0): interface is now down
[  372.990999][T10487] bond0: (slave batadv0): interface is now down
[  373.006532][T10487] bond0: now running without any active interface!
[  373.368519][T22832] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  373.502410][T22839] syzkaller1: entered promiscuous mode
[  373.504832][T22839] syzkaller1: entered allmulticast mode
[  373.524109][T22841] netlink: 'syz.1.5117': attribute type 1 has an invalid length.
[  373.558952][T22841] bond59: (slave geneve0): making interface the new active one
[  373.564114][T22841] bond59: (slave geneve0): Enslaving as an active interface with an up link
[  373.571667][ T5901] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  373.575145][ T5901] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  373.578581][ T5901] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  373.581625][ T5901] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  373.915521][T22866] lo speed is unknown, defaulting to 1000
[  374.164114][T22864] lo speed is unknown, defaulting to 1000
[  374.540203][T22893] __nla_validate_parse: 7 callbacks suppressed
[  374.540217][T22893] netlink: 2176 bytes leftover after parsing attributes in process `syz.0.5132'.
[  374.548299][T22893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5132'.
[  375.107034][T22925] netlink: 'syz.1.5142': attribute type 1 has an invalid length.
[  375.188223][T22935] netlink: 'syz.1.5144': attribute type 1 has an invalid length.
[  375.239232][T22935] 8021q: adding VLAN 0 to HW filter on device bond60
[  375.266260][T22945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5147'.
[  375.269860][T22945] netlink: 'syz.0.5147': attribute type 5 has an invalid length.
[  375.279518][T22945] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.5147'.
[  375.383717][T22954] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5150'.
[  375.554322][T22975] 8021q: adding VLAN 0 to HW filter on device bond0
[  375.647791][T22982] lo speed is unknown, defaulting to 1000
[  375.923236][T22998] netlink: 'syz.2.5164': attribute type 6 has an invalid length.
[  376.232742][T23010] lo speed is unknown, defaulting to 1000
[  376.236068][T23014] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.5168'.
[  376.279173][T23018] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5170'.
[  376.324522][T23022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5171'.
[  376.386488][T23031] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5173'.
[  376.397592][T23031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5173'.
[  379.025729][T23165] bond26: option mode: unable to set because the bond device is up
[  379.060482][T23165] bond0: (slave bond41): Releasing backup interface
[  379.067051][T23165] bond0: (slave bond41): the permanent HWaddr of slave - 32:87:32:ca:62:05 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  379.080433][T23165] batadv3: left allmulticast mode
[  379.082811][T23165] batadv3: left promiscuous mode
[  379.084670][T23165] bridge0: port 1(batadv3) entered disabled state
[  379.094327][T23165] bond43: (slave veth9): Releasing active interface
[  379.099962][T23165] bond44: (slave wireguard2): Releasing backup interface
[  379.106030][T23165] wireguard2: left promiscuous mode
[  379.113510][T23165] bond46: (slave wireguard3): Releasing backup interface
[  379.116175][T23165] wireguard3: left promiscuous mode
[  379.118623][T23165] bond46: (slave wireguard4): making interface the new active one
[  379.122651][T23165] wireguard4: entered promiscuous mode
[  379.133637][T23165] bond46: (slave wireguard4): Releasing backup interface
[  379.136332][T23165] wireguard4: left promiscuous mode
[  379.144723][T23165] bond0: (slave bond47): Releasing backup interface
[  379.151921][T23165] bond52: left allmulticast mode
[  379.154050][T23165] bridge27: port 1(bond52) entered disabled state
[  379.160342][T23165] bond57: (slave bridge29): Releasing backup interface
[  379.169873][T23165] bond59: (slave geneve0): Releasing active interface
[  379.190562][ T5879] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  379.201956][ T5879] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  379.211180][ T5879] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  379.215151][ T5879] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  379.339436][T23182] netlink: 'syz.0.5220': attribute type 29 has an invalid length.
[  379.349806][T23182] netlink: 'syz.0.5220': attribute type 29 has an invalid length.
[  379.353487][T23182] netlink: 'syz.0.5220': attribute type 29 has an invalid length.
[  379.356849][T23182] netlink: 'syz.0.5220': attribute type 29 has an invalid length.
[  379.360265][T23182] netlink: 'syz.0.5220': attribute type 29 has an invalid length.
[  379.364357][T23182] netlink: 'syz.0.5220': attribute type 29 has an invalid length.
[  379.367700][T23182] netlink: 'syz.0.5220': attribute type 29 has an invalid length.
[  379.371534][T23182] netlink: 'syz.0.5220': attribute type 29 has an invalid length.
[  379.460439][T23186] lo speed is unknown, defaulting to 1000
[  379.602453][T23196] __nla_validate_parse: 5 callbacks suppressed
[  379.602468][T23196] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5223'.
[  379.610106][T23197] IPVS: length: 104 != 24
[  379.723060][T23203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5225'.
[  379.727072][T23204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5225'.
[  379.760087][T23203] 8021q: adding VLAN 0 to HW filter on device bond77
[  380.663957][T23259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5240'.
[  380.744987][T23263] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  380.902511][T23267] lo speed is unknown, defaulting to 1000
[  380.930408][T23275] macvlan38: entered promiscuous mode
[  380.936286][T23275] 8021q: adding VLAN 0 to HW filter on device macvlan38
[  380.940166][T23275] bond25: (slave macvlan38): Enslaving as a backup interface with a down link
[  381.260119][T23294] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  381.274225][T23294] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  381.297220][T23297] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5256'.
[  381.300240][T23297] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5256'.
[  381.388182][T23300] validate_nla: 120 callbacks suppressed
[  381.388196][T23300] netlink: 'syz.2.5255': attribute type 2 has an invalid length.
[  381.396633][T23300] netlink: 'syz.2.5255': attribute type 2 has an invalid length.
[  381.399233][T23300] netlink: 'syz.2.5255': attribute type 2 has an invalid length.
[  381.402227][T23300] netlink: 'syz.2.5255': attribute type 2 has an invalid length.
[  381.405244][T23300] netlink: 'syz.2.5255': attribute type 2 has an invalid length.
[  381.407731][T23300] netlink: 'syz.2.5255': attribute type 2 has an invalid length.
[  381.410302][T23300] netlink: 'syz.2.5255': attribute type 2 has an invalid length.
[  381.413236][T23300] netlink: 'syz.2.5255': attribute type 2 has an invalid length.
[  381.415823][T23300] netlink: 'syz.2.5255': attribute type 2 has an invalid length.
[  381.418722][T23300] netlink: 'syz.2.5255': attribute type 2 has an invalid length.
[  381.528253][T23303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5258'.
[  381.532135][   T11] block nbd0: Possible stuck request ffff8880207d0000: control (read@0,1024B). Runtime 270 seconds
[  381.535794][   T11] block nbd0: Possible stuck request ffff8880207d0200: control (read@1024,1024B). Runtime 270 seconds
[  381.542477][T23303] 8021q: adding VLAN 0 to HW filter on device bond62
[  381.606279][T23306] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5259'.
[  381.610064][T23306] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5259'.
[  381.624365][T23306] batadv0: entered promiscuous mode
[  381.627911][T23306] batadv0: left promiscuous mode
[  381.873402][T23314] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5262'.
[  382.241147][T23347] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  382.772628][T23388] bond78: entered promiscuous mode
[  382.775373][T23388] 8021q: adding VLAN 0 to HW filter on device bond78
[  382.794690][T23388] 8021q: adding VLAN 0 to HW filter on device bond78
[  382.797186][T23388] bond78: (slave wireguard0): The slave device specified does not support setting the MAC address
[  382.801771][T23388] bond78: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  382.810520][T23388] bond78: (slave wireguard0): making interface the new active one
[  382.817850][T23388] wireguard0: entered promiscuous mode
[  382.821687][T23388] bond78: (slave wireguard0): Enslaving as an active interface with an up link
[  382.828922][T23388] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  383.014888][T23395] lo speed is unknown, defaulting to 1000
[  385.176373][T23450] __nla_validate_parse: 9 callbacks suppressed
[  385.176386][T23450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5305'.
[  385.306897][T23455] lo speed is unknown, defaulting to 1000
[  385.370724][    C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  385.693450][T23471] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5309'.
[  385.779826][T23477] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5314'.
[  385.787812][T23476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5313'.
[  385.845772][T23483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5316'.
[  385.848988][T23483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5316'.
[  386.093166][T23513] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5327'.
[  386.096709][T23514] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5327'.
[  386.236850][T23521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5330'.
[  386.242667][T23521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5330'.
[  386.906429][T23571] lo speed is unknown, defaulting to 1000
[  387.155619][T23572] lo speed is unknown, defaulting to 1000
[  387.437510][T23592] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  387.446642][T23592] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  387.722346][T23613] 8021q: adding VLAN 0 to HW filter on device bond44
[  387.725968][T23613] bond0: (slave bond44): Enslaving as an active interface with a down link
[  387.824257][T23618] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  387.915961][T23618] lo speed is unknown, defaulting to 1000
[  388.624991][T23658] validate_nla: 12 callbacks suppressed
[  388.625001][T23658] netlink: 'syz.1.5373': attribute type 13 has an invalid length.
[  388.633913][T23658] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  388.820101][T23665] sctp: [Deprecated]: syz.1.5376 (pid 23665) Use of int in max_burst socket option.
[  388.820101][T23665] Use struct sctp_assoc_value instead
[  388.826480][T23665] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  389.263243][T23688] 8021q: adding VLAN 0 to HW filter on device bond64
[  389.267646][T23688] bond63: (slave bond64): Enslaving as an active interface with an up link
[  389.291913][T23691] tap0: tun_chr_ioctl cmd 2147767507
[  389.297851][T23688] bond63 (unregistering): (slave bond64): Releasing backup interface
[  389.307978][T23688] bond63 (unregistering): Released all slaves
[  389.520123][T23711] netlink: 'syz.2.5390': attribute type 1 has an invalid length.
[  389.570214][T23713] syz_tun: left promiscuous mode
[  389.573074][T23713] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  389.776855][T23735] lo speed is unknown, defaulting to 1000
[  390.114006][T23741] lo speed is unknown, defaulting to 1000
[  390.240134][T23769] 8021q: adding VLAN 0 to HW filter on device bond18
[  390.249833][T23769] bond0: (slave bond41): Releasing active interface
[  390.255767][T23769] bond0: (slave bond41): the permanent HWaddr of slave - ca:7a:ea:22:70:01 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  390.264846][T23769] bond0: (slave bond44): Releasing active interface
[  390.788810][T23787] lo speed is unknown, defaulting to 1000
[  391.016297][T23804] lo speed is unknown, defaulting to 1000
[  391.115262][T23807] netlink: 'syz.1.5419': attribute type 2 has an invalid length.
[  391.131249][ T5238] Bluetooth: hci2: command 0x0405 tx timeout
[  391.168073][T23807] __nla_validate_parse: 15 callbacks suppressed
[  391.168087][T23807] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5419'.
[  391.189939][T23813] netlink: 159784 bytes leftover after parsing attributes in process `syz.2.5421'.
[  391.612201][T23845] netlink: 'syz.0.5431': attribute type 1 has an invalid length.
[  391.645797][T23845] 8021q: adding VLAN 0 to HW filter on device bond45
[  391.735544][T23857] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5434'.
[  391.739738][T23857] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5434'.
[  392.046432][T23869] lo speed is unknown, defaulting to 1000
[  392.074044][T23881] netlink: 'syz.2.5442': attribute type 12 has an invalid length.
[  392.095273][T23885] sock: sock_timestamping_bind_phc: sock not bind to device
[  392.621175][T23926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5454'.
[  392.897438][T23948] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5464'.
[  392.943852][T23948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5464'.
[  392.950388][T23948] netlink: 428 bytes leftover after parsing attributes in process `syz.2.5464'.
[  392.954888][T23948] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5464'.
[  393.148196][T23961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5468'.
[  393.229269][T23964] lo speed is unknown, defaulting to 1000
[  393.453636][T23971] lo speed is unknown, defaulting to 1000
[  393.490390][T23973] netlink: 'syz.0.5472': attribute type 1 has an invalid length.
[  394.014791][T23988] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  394.340321][   T60] block nbd1: Possible stuck request ffff8880207f0000: control (read@0,4096B). Runtime 150 seconds
[  394.365451][T24014] netlink: 'syz.0.5484': attribute type 13 has an invalid length.
[  394.368787][T24017] netlink: 'syz.0.5484': attribute type 13 has an invalid length.
[  394.599379][T24041] netlink: 'syz.2.5489': attribute type 10 has an invalid length.
[  394.776708][T24052] netlink: 'syz.0.5496': attribute type 1 has an invalid length.
[  394.787339][T24052] bond0: Caught tx_queue_len zero misconfig
[  395.090209][T24071] netlink: 'syz.0.5502': attribute type 1 has an invalid length.
[  395.117394][T24071] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  395.287600][T24092] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  395.388970][T24099] batadv4: entered promiscuous mode
[  395.460419][T24106] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003
[  395.486944][T24111] netlink: 'syz.0.5513': attribute type 10 has an invalid length.
[  395.636957][T24122] bond79: entered promiscuous mode
[  395.894318][T24144] netlink: 'syz.0.5525': attribute type 1 has an invalid length.
[  395.914413][T24149] netlink: 'syz.1.5526': attribute type 15 has an invalid length.
[  396.828666][T24227] __nla_validate_parse: 14 callbacks suppressed
[  396.828682][T24227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5546'.
[  396.918921][T24226] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  396.975969][T24226] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  397.013615][T24232] netlink: 'syz.2.5549': attribute type 1 has an invalid length.
[  397.039736][T24226] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  397.068428][T24232] veth15: entered promiscuous mode
[  397.071768][T24232] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5549'.
[  397.092886][T24226] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  397.186411][T12246] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  397.204121][T12246] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  397.216992][ T5879] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  397.235277][ T5879] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  397.282857][T24247] netlink: 'syz.2.5553': attribute type 21 has an invalid length.
[  397.285882][T24247] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5553'.
[  397.297610][T24247] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5553'.
[  397.351543][T24251] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5552'.
[  397.659155][T24323] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5562'.
[  397.719653][T24327] lo speed is unknown, defaulting to 1000
[  398.479538][T24358] 8021q: adding VLAN 0 to HW filter on device bond65
[  398.503262][T24358] 8021q: adding VLAN 0 to HW filter on device bond65
[  398.506207][T24358] bond65: (slave vxcan25): The slave device specified does not support setting the MAC address
[  398.516096][T24358] bond65: (slave vxcan25): Error -95 calling set_mac_address
[  398.605123][T24358] bond65: (slave bridge31): Enslaving as an active interface with a down link
[  398.648861][T24367] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5573'.
[  398.656925][T24361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5573'.
[  398.716223][T24369] nbd: must specify at least one socket
[  398.733572][T24371] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5575'.
[  398.769190][T24371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5575'.
[  399.002540][T24385] bond81: (slave vxcan19): The slave device specified does not support setting the MAC address
[  399.006582][T24385] bond81: (slave vxcan19): Error -95 calling set_mac_address
[  399.100309][T24391] bond0: option resend_igmp: invalid value (6225920)
[  399.111714][T24391] bond0: option resend_igmp: allowed values 0 - 255
[  399.414630][T24418] validate_nla: 38 callbacks suppressed
[  399.414640][T24418] netlink: 'syz.1.5590': attribute type 1 has an invalid length.
[  399.419758][T24419] netlink: 'syz.1.5590': attribute type 1 has an invalid length.
[  399.423224][T24416] lo speed is unknown, defaulting to 1000
[  399.438507][T24414] netlink: 'syz.2.5588': attribute type 10 has an invalid length.
[  399.676555][T24432] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  399.758573][T24446] netlink: 'syz.1.5597': attribute type 29 has an invalid length.
[  399.764319][T24446] netlink: 'syz.1.5597': attribute type 29 has an invalid length.
[  399.770097][T24446] unsupported nla_type 58
[  399.786509][T24446] netlink: 'syz.1.5597': attribute type 1 has an invalid length.
[  399.817095][T24448] netlink: 'syz.2.5598': attribute type 10 has an invalid length.
[  399.826570][T24448] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  399.830067][T24448] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  399.837309][T24448] bond0: (slave wlan1): Enslaving as an active interface with a down link
[  399.873159][T24449] veth15: entered promiscuous mode
[  399.932788][T24454] ip6gretap0: entered promiscuous mode
[  399.934731][T24454] macsec0: entered promiscuous mode
[  399.936680][T24454] macsec0: entered allmulticast mode
[  399.938865][T24454] ip6gretap0: entered allmulticast mode
[  400.057163][T24463] bond26: option mode: unable to set because the bond device is up
[  400.076106][T24463] bond65: (slave bridge31): Releasing active interface
[  400.149481][T24467] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  400.201788][T24471] netlink: 'syz.1.5605': attribute type 21 has an invalid length.
[  400.253880][T24471] netlink: 'syz.1.5605': attribute type 1 has an invalid length.
[  400.324105][T24471] bond66 (unregistering): Released all slaves
[  400.361487][T24478] syzkaller0: entered promiscuous mode
[  400.363843][T24478] syzkaller0: entered allmulticast mode
[  400.623696][T24496] bridge0: entered promiscuous mode
[  400.627329][T24496] vlan11: entered promiscuous mode
[  400.636094][T24496] bridge0: port 1(vlan11) entered blocking state
[  400.639105][T24496] bridge0: port 1(vlan11) entered disabled state
[  400.644172][T24496] vlan11: entered allmulticast mode
[  400.648930][T24496] vlan11: left allmulticast mode
[  400.682552][T24499] netlink: 'syz.1.5611': attribute type 1 has an invalid length.
[  400.691638][T24499] dvmrp0: left allmulticast mode
[  400.904470][T24515] lo speed is unknown, defaulting to 1000
[  402.660445][T24604] gretap0: Device is already in use.
[  402.758410][T24621] __nla_validate_parse: 14 callbacks suppressed
[  402.758424][T24621] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5642'.
[  402.947435][T24638] bridge33: entered allmulticast mode
[  402.968151][T24642] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  403.264316][T24668] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5653'.
[  403.267430][T24668] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5653'.
[  403.288395][T24668] syzkaller1: entered promiscuous mode
[  403.290248][T24668] syzkaller1: entered allmulticast mode
[  403.384838][T24674] batadv_slave_0: entered allmulticast mode
[  403.389997][T24674] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  403.404338][T24674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5656'.
[  403.455711][T24677] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5656'.
[  403.510091][T24679] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5656'.
[  403.757208][T24695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5662'.
[  403.878075][T24703] bond47: entered promiscuous mode
[  403.880142][T24703] 8021q: adding VLAN 0 to HW filter on device bond47
[  403.909252][T24703] 8021q: adding VLAN 0 to HW filter on device bond47
[  403.914661][T24703] bond47: (slave vxcan21): The slave device specified does not support setting the MAC address
[  403.918598][T24703] bond47: (slave vxcan21): Setting fail_over_mac to active for active-backup mode
[  403.927292][T24703] bond47: (slave vxcan21): making interface the new active one
[  403.934963][T24703] vxcan21: entered promiscuous mode
[  403.937358][T24703] bond47: (slave vxcan21): Enslaving as an active interface with an up link
[  403.956881][T24712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5668'.
[  404.087155][T24721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5672'.
[  404.180080][T24732] netlink: 332 bytes leftover after parsing attributes in process `syz.1.5676'.
[  404.708981][T24774] lo speed is unknown, defaulting to 1000
[  405.835555][T24802] syzkaller1: entered promiscuous mode
[  405.837313][T24802] syzkaller1: entered allmulticast mode
[  405.847422][T24802] syzkaller1: left promiscuous mode
[  405.849403][T24802] syzkaller1: left allmulticast mode
[  406.108249][T24812] validate_nla: 6 callbacks suppressed
[  406.108264][T24812] netlink: 'syz.2.5700': attribute type 12 has an invalid length.
[  406.807535][T24872] lo speed is unknown, defaulting to 1000
[  407.043476][T24882] lo speed is unknown, defaulting to 1000
[  407.367650][T24902] bridge100: port 1(veth0_to_bond) entered blocking state
[  407.380861][T24902] bridge100: port 1(veth0_to_bond) entered disabled state
[  407.384119][T24902] veth0_to_bond: entered allmulticast mode
[  407.387860][T24902] veth0_to_bond: entered promiscuous mode
[  407.777764][T24931] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:0
[  408.247076][T24942] __nla_validate_parse: 14 callbacks suppressed
[  408.247086][T24942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5732'.
[  408.330018][T24942] vlan1: entered allmulticast mode
[  408.347047][T24942] bridge0: entered allmulticast mode
[  408.349627][T24942] bridge101: port 1(vlan1) entered blocking state
[  408.368840][T24942] bridge101: port 1(vlan1) entered disabled state
[  408.386329][T24942] vlan1: entered promiscuous mode
[  408.388049][T24942] bridge0: entered promiscuous mode
[  408.678531][T24958] netlink: 516 bytes leftover after parsing attributes in process `syz.0.5738'.
[  408.759450][T24965] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5741'.
[  408.987702][T24973] lo speed is unknown, defaulting to 1000
[  409.085793][T24976] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  409.093165][T24976] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  409.099474][T24976] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  409.110863][T24976] tipc: Resetting bearer <eth:syzkaller0>
[  409.990218][T24996] sctp: [Deprecated]: syz.1.5749 (pid 24996) Use of struct sctp_assoc_value in delayed_ack socket option.
[  409.990218][T24996] Use struct sctp_sack_info instead
[  410.457695][T25031] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  410.918760][T25046] netlink: zone id is out of range
[  411.009012][T25057] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5769'.
[  411.013748][T25055] netlink: 'syz.0.5769': attribute type 13 has an invalid length.
[  411.016493][T25055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5769'.
[  411.030404][T25059] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5770'.
[  411.099952][T25065] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  411.435124][T25090] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  411.438471][T25090] CPU: 1 UID: 0 PID: 25090 Comm: syz.1.5782 Not tainted syzkaller #0 PREEMPT(full) 
[  411.438486][T25090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  411.438492][T25090] Call Trace:
[  411.438496][T25090]  <TASK>
[  411.438500][T25090]  dump_stack_lvl+0x189/0x250
[  411.438514][T25090]  ? __pfx_dump_stack_lvl+0x10/0x10
[  411.438522][T25090]  ? __pfx__printk+0x10/0x10
[  411.438534][T25090]  ? kernfs_path_from_node+0x2f/0x290
[  411.438541][T25090]  ? kernfs_path_from_node+0x250/0x290
[  411.438548][T25090]  ? kernfs_path_from_node+0x2f/0x290
[  411.438557][T25090]  sysfs_warn_dup+0x8e/0xa0
[  411.438564][T25090]  sysfs_do_create_link_sd+0xc0/0x110
[  411.438574][T25090]  device_add_class_symlinks+0x1cf/0x240
[  411.438584][T25090]  device_add+0x475/0xb50
[  411.438593][T25090]  wiphy_register+0x1ba6/0x28d0
[  411.438610][T25090]  ? __pfx_wiphy_register+0x10/0x10
[  411.438619][T25090]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  411.438630][T25090]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  411.438640][T25090]  ieee80211_register_hw+0x3484/0x4100
[  411.438654][T25090]  ? ieee80211_register_hw+0x1461/0x4100
[  411.438666][T25090]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  411.438675][T25090]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  411.438688][T25090]  ? __hrtimer_setup+0x187/0x210
[  411.438694][T25090]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  411.438706][T25090]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  411.438726][T25090]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  411.438734][T25090]  ? trace_kmalloc+0x1f/0xd0
[  411.438742][T25090]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  411.438751][T25090]  ? kstrndup+0xbf/0x160
[  411.438763][T25090]  hwsim_new_radio_nl+0xea4/0x1b10
[  411.438773][T25090]  ? __pfx___nla_validate_parse+0x10/0x10
[  411.438789][T25090]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  411.438803][T25090]  ? __nla_parse+0x40/0x60
[  411.438814][T25090]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  411.438826][T25090]  genl_family_rcv_msg_doit+0x215/0x300
[  411.438837][T25090]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  411.438850][T25090]  ? bpf_lsm_capable+0x9/0x20
[  411.438859][T25090]  ? security_capable+0x7e/0x2e0
[  411.438872][T25090]  genl_rcv_msg+0x60e/0x790
[  411.438882][T25090]  ? __pfx_genl_rcv_msg+0x10/0x10
[  411.438889][T25090]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  411.438904][T25090]  netlink_rcv_skb+0x208/0x470
[  411.438913][T25090]  ? __lock_acquire+0xab9/0xd20
[  411.438923][T25090]  ? __pfx_genl_rcv_msg+0x10/0x10
[  411.438931][T25090]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  411.438949][T25090]  ? down_read+0x1ad/0x2e0
[  411.438956][T25090]  genl_rcv+0x28/0x40
[  411.438963][T25090]  netlink_unicast+0x82f/0x9e0
[  411.438976][T25090]  ? __pfx_netlink_unicast+0x10/0x10
[  411.438986][T25090]  ? netlink_sendmsg+0x642/0xb30
[  411.438991][T25090]  ? skb_put+0x11b/0x210
[  411.439000][T25090]  netlink_sendmsg+0x805/0xb30
[  411.439011][T25090]  ? __pfx_netlink_sendmsg+0x10/0x10
[  411.439018][T25090]  ? aa_sock_msg_perm+0xf1/0x1d0
[  411.439026][T25090]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  411.439033][T25090]  ? __pfx_netlink_sendmsg+0x10/0x10
[  411.439039][T25090]  __sock_sendmsg+0x21c/0x270
[  411.439049][T25090]  ____sys_sendmsg+0x505/0x830
[  411.439059][T25090]  ? __pfx_____sys_sendmsg+0x10/0x10
[  411.439070][T25090]  ? import_iovec+0x74/0xa0
[  411.439080][T25090]  ___sys_sendmsg+0x21f/0x2a0
[  411.439088][T25090]  ? __pfx____sys_sendmsg+0x10/0x10
[  411.439111][T25090]  ? __fget_files+0x2a/0x420
[  411.439120][T25090]  ? __fget_files+0x3a0/0x420
[  411.439134][T25090]  __x64_sys_sendmsg+0x19b/0x260
[  411.439143][T25090]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  411.439154][T25090]  ? rcu_is_watching+0x15/0xb0
[  411.439164][T25090]  ? do_syscall_64+0xbe/0x3b0
[  411.439172][T25090]  do_syscall_64+0xfa/0x3b0
[  411.439178][T25090]  ? lockdep_hardirqs_on+0x9c/0x150
[  411.439187][T25090]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.439194][T25090]  ? exc_page_fault+0x9f/0xf0
[  411.439204][T25090]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.439210][T25090] RIP: 0033:0x7f683338ebe9
[  411.439217][T25090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  411.439224][T25090] RSP: 002b:00007f6834219038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  411.439232][T25090] RAX: ffffffffffffffda RBX: 00007f68335c6090 RCX: 00007f683338ebe9
[  411.439237][T25090] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000002b
[  411.439241][T25090] RBP: 00007f6833411e19 R08: 0000000000000000 R09: 0000000000000000
[  411.439246][T25090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  411.439249][T25090] R13: 00007f68335c6128 R14: 00007f68335c6090 R15: 00007fffc0785bb8
[  411.439261][T25090]  </TASK>
[  411.639047][   T11] block nbd0: Possible stuck request ffff8880207d0000: control (read@0,1024B). Runtime 300 seconds
[  411.645294][   T11] block nbd0: Possible stuck request ffff8880207d0200: control (read@1024,1024B). Runtime 300 seconds
[  411.818084][T25103] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5787'.
[  411.886560][T25105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5788'.
[  411.948255][T25117] lo speed is unknown, defaulting to 1000
[  412.178097][T25133] netlink: 'syz.0.5795': attribute type 2 has an invalid length.
[  412.342356][T25146] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5799'.
[  412.345393][T25146] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5799'.
[  413.303071][T25178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5810'.
[  413.413086][T25181] lo speed is unknown, defaulting to 1000
[  413.433827][T25182] netlink: 'syz.1.5809': attribute type 83 has an invalid length.
[  413.978526][ T8536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  413.987159][ T8536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  414.467777][T25246] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  414.477671][T25244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5833'.
[  414.496536][T25241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5833'.
[  414.498739][T25248] netlink: 'syz.0.5836': attribute type 11 has an invalid length.
[  414.501777][T25243] lo speed is unknown, defaulting to 1000
[  414.523621][T25244] bridge98: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  414.925847][T25268] lo speed is unknown, defaulting to 1000
[  415.251995][T25278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5845'.
[  415.537841][T25290] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5848'.
[  415.548232][T25294] netlink: 216 bytes leftover after parsing attributes in process `syz.1.5850'.
[  415.553113][T25294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5850'.
[  415.556999][T25294] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5850'.
[  415.784838][T25309] netlink: 'syz.2.5854': attribute type 1 has an invalid length.
[  415.835342][T25309] bond82: entered promiscuous mode
[  415.838113][T25309] 8021q: adding VLAN 0 to HW filter on device bond82
[  415.866409][T25318] 8021q: adding VLAN 0 to HW filter on device bond83
[  415.871291][T25318] bond82: (slave bond83): making interface the new active one
[  415.874578][T25318] bond83: entered promiscuous mode
[  415.877471][T25318] bond82: (slave bond83): Enslaving as an active interface with an up link
[  415.891645][T25309] bond82: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  415.896816][T25309] bond82: (slave ipvlan5): The slave device specified does not support setting the MAC address
[  416.067941][T25329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5861'.
[  416.466939][T25357] netlink: 'syz.2.5868': attribute type 14 has an invalid length.
[  416.510090][T25357] netlink: 'syz.2.5868': attribute type 14 has an invalid length.
[  416.513231][T25360] lo speed is unknown, defaulting to 1000
[  416.796569][T25380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5876'.
[  416.959756][T25385] bond25: option mode: unable to set because the bond device has slaves
[  417.543136][T12246] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  417.549386][T12246] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  417.585944][ T5916] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  417.714507][T25431] syzkaller1: entered promiscuous mode
[  417.719664][T25431] syzkaller1: entered allmulticast mode
[  417.836514][T25442] lo speed is unknown, defaulting to 1000
[  417.986641][T25444] lo speed is unknown, defaulting to 1000
[  418.213207][T25451] netlink: 'syz.2.5899': attribute type 1 has an invalid length.
[  418.255209][ T5916] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  418.262595][T25451] bond84: (slave veth17): Enslaving as an active interface with a down link
[  418.268375][T25451] 8021q: adding VLAN 0 to HW filter on device bond84
[  418.330456][T25454] pim6reg: entered allmulticast mode
[  418.336632][T25454] __nla_validate_parse: 6 callbacks suppressed
[  418.336641][T25454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5900'.
[  418.493124][ T5916] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  418.637754][   T33] audit: type=1804 audit(1757436096.937:4): pid=25475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5906" name="/newroot/2026/memory.events" dev="tmpfs" ino=10248 res=1 errno=0
[  418.646949][   T33] audit: type=1800 audit(1757436096.937:5): pid=25475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5906" name="memory.events" dev="tmpfs" ino=10248 res=0 errno=0
[  418.915846][T25492] netlink: 'syz.2.5914': attribute type 1 has an invalid length.
[  418.987797][T25492] bond85: (slave vxcan19): The slave device specified does not support setting the MAC address
[  418.991876][T25497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5916'.
[  418.992549][T25492] bond85: (slave vxcan19): Error -95 calling set_mac_address
[  419.036282][T25498] macvlan39: entered promiscuous mode
[  419.038100][T25498] macvlan39: entered allmulticast mode
[  419.042302][T25498] bond85: entered promiscuous mode
[  419.044406][T25498] 8021q: adding VLAN 0 to HW filter on device macvlan39
[  419.049070][T25498] bond85: left promiscuous mode
[  419.635833][T25547] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.5932'.
[  419.641612][T25547] IPVS: set_ctl: invalid protocol: 8 172.20.20.31:20002
[  421.371419][    C0] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  424.415967][   T60] block nbd1: Possible stuck request ffff8880207f0000: control (read@0,4096B). Runtime 180 seconds
[  425.365195][ T5298] udevd[5298]: worker [12589] /devices/virtual/block/nbd1 timeout; kill it
[  425.369028][ T5298] udevd[5298]: seq 26708 '/devices/virtual/block/nbd1' killed
[  428.890835][    C0] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  429.853979][T25571] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5942'.
[  429.888480][T25575] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  430.225478][T25602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5953'.
[  430.549967][T25627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5961'.
[  430.678508][T25637] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5966'.
[  431.225773][T25672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5975'.
[  432.247868][T25694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5982'.
[  432.248492][T25700] openvswitch: netlink: Missing key (keys=40, expected=80)
[  432.260388][T25700] syzkaller1: entered promiscuous mode
[  432.271201][T25700] syzkaller1: entered allmulticast mode
[  432.303366][T25708] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5987'.
[  432.378210][T25717] sctp: [Deprecated]: syz.1.5990 (pid 25717) Use of int in maxseg socket option.
[  432.378210][T25717] Use struct sctp_assoc_value instead
[  432.387851][T25717] sctp: [Deprecated]: syz.1.5990 (pid 25717) Use of int in maxseg socket option.
[  432.387851][T25717] Use struct sctp_assoc_value instead
[  432.550400][T25726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5993'.
[  432.943114][T25754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6000'.
[  433.116344][T25765] netlink: 'syz.0.6004': attribute type 1 has an invalid length.
[  433.228632][T25774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6006'.
[  433.389548][T25782] netlink: 'syz.2.6009': attribute type 2 has an invalid length.
[  433.426590][T25782] netlink: 'syz.2.6009': attribute type 8 has an invalid length.
[  433.885073][T25824] bond86 (unregistering): Released all slaves
[  434.055257][T25840] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  434.267400][T25855] netlink: 'syz.2.6032': attribute type 1 has an invalid length.
[  434.525331][T25869] netlink: 'syz.0.6036': attribute type 58 has an invalid length.
[  434.664703][T25875] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004
[  434.883846][T25891] __nla_validate_parse: 8 callbacks suppressed
[  434.883856][T25891] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6045'.
[  434.954980][T25893] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6046'.
[  434.982415][T25897] syzkaller1: entered promiscuous mode
[  434.984751][T25897] syzkaller1: entered allmulticast mode
[  435.056736][T25900] gre5: entered allmulticast mode
[  435.176019][T25911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6053'.
[  435.894927][T25923] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6056'.
[  436.034765][T25942] netlink: 'syz.1.6062': attribute type 1 has an invalid length.
[  436.037489][T25942] netlink: 'syz.1.6062': attribute type 1 has an invalid length.
[  436.043385][T25942] netlink: 'syz.1.6062': attribute type 6 has an invalid length.
[  436.124870][T25951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6066'.
[  436.124893][T25952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6066'.
[  436.128162][T25951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6066'.
[  436.135907][T25951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6066'.
[  436.139140][T25952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6066'.
[  436.149975][T25951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6066'.
[  436.215505][T25962] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  436.281974][T25967] syzkaller1: tun_chr_ioctl cmd 1074025677
[  436.286719][T25967] syzkaller1: linktype set to 823
[  436.432475][T25980] netlink: 'syz.2.6077': attribute type 1 has an invalid length.
[  436.652462][T25989] netlink: 'syz.2.6080': attribute type 3 has an invalid length.
[  436.659366][T25989] bridge100: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  436.970502][T26017] macsec0: entered promiscuous mode
[  436.976190][T26017] macsec0: entered allmulticast mode
[  437.047931][T26025] sock: sock_timestamping_bind_phc: sock not bind to device
[  437.416433][T26066] vlan6: entered promiscuous mode
[  437.956322][T26102] lo speed is unknown, defaulting to 1000
[  439.583428][T26220] vlan5: entered promiscuous mode
[  439.585444][T26220] bond0: entered promiscuous mode
[  439.977238][T26256] nbd: illegal input index -1
[  440.086805][T26265] __nla_validate_parse: 16 callbacks suppressed
[  440.086815][T26265] netlink: 308 bytes leftover after parsing attributes in process `syz.2.6158'.
[  440.094132][T26265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6158'.
[  440.099780][T26265] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  440.189012][T26275] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6161'.
[  440.253880][T26281] team0: Device is already in use.
[  440.561426][T26315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6173'.
[  440.590360][T26315] bond66: entered promiscuous mode
[  440.594041][T26315] 8021q: adding VLAN 0 to HW filter on device bond66
[  440.597577][T26317] bond0: Device is already in use.
[  440.634543][T26315] 8021q: adding VLAN 0 to HW filter on device bond66
[  440.638158][T26315] bond66: (slave sit3): The slave device specified does not support setting the MAC address
[  440.643246][T26315] bond66: (slave sit3): Error -95 calling set_mac_address
[  440.697959][T26323] veth20: entered allmulticast mode
[  440.742817][T26325] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6178'.
[  440.788402][T26323] 8021q: adding VLAN 0 to HW filter on device bond87
[  440.796221][T26323] bond87: entered promiscuous mode
[  440.798160][T26323] bond87: entered allmulticast mode
[  440.801628][T26323] bond0: (slave bond87): Enslaving as an active interface with a down link
[  440.831885][T26331] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6179'.
[  440.867391][T26335] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6181'.
[  440.900376][T26342] tap0: tun_chr_ioctl cmd 1074025677
[  440.903423][T26342] tap0: linktype set to 825
[  440.986825][T26347] lo speed is unknown, defaulting to 1000
[  441.041396][T26355] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  441.142969][T26352] lo speed is unknown, defaulting to 1000
[  441.319944][T26365] validate_nla: 5 callbacks suppressed
[  441.319957][T26365] netlink: 'syz.0.6188': attribute type 1 has an invalid length.
[  441.415137][T26365] bond50: entered promiscuous mode
[  441.417684][T26365] 8021q: adding VLAN 0 to HW filter on device bond50
[  441.601915][T26379] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  441.695802][   T11] block nbd0: Possible stuck request ffff8880207d0000: control (read@0,1024B). Runtime 330 seconds
[  441.700186][   T11] block nbd0: Possible stuck request ffff8880207d0200: control (read@1024,1024B). Runtime 330 seconds
[  441.923702][T26397] netlink: 'syz.2.6194': attribute type 21 has an invalid length.
[  441.927873][T26403] batadv_slave_0: entered promiscuous mode
[  441.982686][T26411] lo speed is unknown, defaulting to 1000
[  442.225464][T26402] batadv_slave_0: left promiscuous mode
[  444.242067][T26450] netlink: 'syz.1.6211': attribute type 1 has an invalid length.
[  444.313762][T26450] lo speed is unknown, defaulting to 1000
[  444.452573][T26455] lo speed is unknown, defaulting to 1000
[  444.604190][T26466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6215'.
[  444.890815][    C0] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  446.390127][T26499] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6224'.
[  446.399734][T26499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6224'.
[  446.669382][T26518] bond26: option mode: unable to set because the bond device is up
[  446.673517][T26518] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6230'.
[  446.764866][T26522] netlink: 'syz.1.6232': attribute type 2 has an invalid length.
[  446.772607][T26522] k*]: entered promiscuous mode
[  446.804745][T26522] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  446.817007][T12345] lo speed is unknown, defaulting to 1000
[  446.819385][T12345] syz0: Port: 1 Link ACTIVE
[  446.823380][T26523] syzkaller1: entered promiscuous mode
[  446.827459][T26523] syzkaller1: entered allmulticast mode
[  446.834236][T12345] lo speed is unknown, defaulting to 1000
[  446.834266][T26522] veth0_to_team: entered promiscuous mode
[  446.839155][T26522] veth0_to_team: entered allmulticast mode
[  446.844666][T26523] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  447.068107][T26540] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  447.070780][T26540] syzkaller0: entered promiscuous mode
[  447.072691][T26540] syzkaller0: entered allmulticast mode
[  447.077834][T26540] tipc: Resetting bearer <eth:syzkaller0>
[  447.087970][T26537] tipc: Resetting bearer <eth:syzkaller0>
[  447.097255][T26537] tipc: Disabling bearer <eth:syzkaller0>
[  447.165574][T26548] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6242'.
[  447.505371][T26571] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  447.767109][T26596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6264'.
[  447.802053][T26596] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6264'.
[  447.862564][T26606] sctp: [Deprecated]: syz.1.6266 (pid 26606) Use of struct sctp_assoc_value in delayed_ack socket option.
[  447.862564][T26606] Use struct sctp_sack_info instead
[  447.926123][T26613] netlink: 'syz.0.6269': attribute type 1 has an invalid length.
[  448.017266][T26624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6272'.
[  448.105692][T26632] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6275'.
[  448.115721][T26633] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6273'.
[  448.147487][T26635] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664
[  448.152115][T26635] netlink: 'syz.0.6276': attribute type 7 has an invalid length.
[  448.154716][T26635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6276'.
[  448.176583][T26635] 8021q: adding VLAN 0 to HW filter on device bond51
[  448.179407][T26635] bridge104: port 1(bond51) entered blocking state
[  448.182452][T26635] bridge104: port 1(bond51) entered disabled state
[  448.184739][T26635] bond51: entered allmulticast mode
[  448.189468][T26635] bridge104: port 1(bond51) entered blocking state
[  448.191743][T26635] bridge104: port 1(bond51) entered forwarding state
[  448.196804][T26635] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664
[  448.338246][ T1194] bridge104: port 1(bond51) entered disabled state
[  448.462152][T26652] team0: Mode changed to "loadbalance"
[  448.677544][T26664] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  448.680279][T26664] syzkaller0: entered promiscuous mode
[  448.682775][T26664] syzkaller0: entered allmulticast mode
[  448.712670][T26664] sch_fq: defrate 257 ignored.
[  448.716841][T26664] tipc: Resetting bearer <eth:syzkaller0>
[  448.828829][T26663] tipc: Resetting bearer <eth:syzkaller0>
[  448.849212][T26663] tipc: Disabling bearer <eth:syzkaller0>
[  448.937839][T26677] bridge103: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  449.246755][T26705] lo speed is unknown, defaulting to 1000
[  449.471869][T26730] syzkaller1: entered promiscuous mode
[  449.473783][T26730] syzkaller1: entered allmulticast mode
[  449.628499][T26737] bridge35: entered promiscuous mode
[  449.630309][T26737] bridge35: entered allmulticast mode
[  450.010802][    C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  450.058824][T26780] netlink: 'syz.2.6324': attribute type 1 has an invalid length.
[  450.099451][T26780] 8021q: adding VLAN 0 to HW filter on device bond88
[  450.166635][T26794] bond88: (slave batadv4): Opening slave failed
[  450.191283][T26796] netlink: 'syz.0.6329': attribute type 1 has an invalid length.
[  450.214425][T26796] bond52: (slave vxcan1): The slave device specified does not support setting the MAC address
[  450.218818][T26796] bond52: (slave vxcan1): Error -95 calling set_mac_address
[  450.263316][T26799] macvlan6: entered promiscuous mode
[  450.265476][T26799] macvlan6: entered allmulticast mode
[  450.267914][T26799] bond52: entered promiscuous mode
[  450.270120][T26799] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  450.276188][T26799] bond52: left promiscuous mode
[  450.317931][T26802] sock: sock_timestamping_bind_phc: sock not bind to device
[  450.431308][T26812] netlink: 'syz.0.6333': attribute type 1 has an invalid length.
[  450.723346][T26835] vlan5: entered allmulticast mode
[  450.725122][T26835] dummy0: entered allmulticast mode
[  450.946206][T26846] ip6gre4: entered allmulticast mode
[  451.054458][T26857] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  451.056779][T26857] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  451.252287][T26867] netlink: 'syz.0.6352': attribute type 13 has an invalid length.
[  451.255332][T26867] netlink: 'syz.0.6352': attribute type 17 has an invalid length.
[  451.314235][T26867] lo speed is unknown, defaulting to 1000
[  451.773188][T26892] __nla_validate_parse: 9 callbacks suppressed
[  451.773196][T26892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6359'.
[  451.787713][T26892] bond0: (slave batadv0): Releasing backup interface
[  451.789877][T26892] bond0: (slave batadv0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:2a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  451.795841][T26892] batadv0 (unregistering): left allmulticast mode
[  451.982371][T26901] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6362'.
[  452.265541][T26928] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6374'.
[  452.269556][T26928] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6374'.
[  452.347008][T26927] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6374'.
[  452.460244][T26945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6379'.
[  452.507533][T26945] 8021q: adding VLAN 0 to HW filter on device bond54
[  452.512666][T26945] bond53: (slave bond54): Enslaving as an active interface with an up link
[  452.537400][T26945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6379'.
[  452.547599][T26945] bond53 (unregistering): (slave bond54): Releasing backup interface
[  452.556143][T26945] bond53 (unregistering): Released all slaves
[  453.804161][T27028] netlink: 'syz.1.6405': attribute type 58 has an invalid length.
[  453.806780][T27028] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6405'.
[  453.910470][T27037] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6408'.
[  453.938979][T27039] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6409'.
[  454.361599][T27083] nbd: socks must be embedded in a SOCK_ITEM attr
[  454.364008][T27083] block nbd2: shutting down sockets
[  454.377523][T27079] tipc: Resetting bearer <eth:syzkaller0>
[  454.423647][T27093] gretap0: entered promiscuous mode
[  454.426543][T27093] gretap0: left promiscuous mode
[  454.494022][   T60] block nbd1: Possible stuck request ffff8880207f0000: control (read@0,4096B). Runtime 210 seconds
[  454.596601][T27111] delete_channel: no stack
[  454.625025][T27108] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  454.667632][T27108] veth0_macvtap: left allmulticast mode
[  454.729588][ T5886] lo speed is unknown, defaulting to 1000
[  454.736120][ T5886] syz0: Port: 1 Link DOWN
[  454.740555][T26495] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  454.745728][ T5886] lo speed is unknown, defaulting to 1000
[  454.755072][T26495] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  454.768166][T26495] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  454.794519][T26495] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  454.838690][T27125] lo speed is unknown, defaulting to 1000
[  454.987389][T27136] openvswitch: netlink: Key type 9989 is out of range max 32
[  455.089742][T27140] netlink: 'syz.1.6436': attribute type 4 has an invalid length.
[  455.483779][T27168] sock: sock_timestamping_bind_phc: sock not bind to device
[  455.488325][T27171] sock: sock_timestamping_bind_phc: sock not bind to device
[  456.049741][T27218] bridge104: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  456.106110][T27221] syzkaller0: entered allmulticast mode
[  456.136050][T27213] syzkaller0: left allmulticast mode
[  456.219257][T27227] can: request_module (can-proto-0) failed.
[  456.678939][T27267] netlink: 'syz.1.6471': attribute type 12 has an invalid length.
[  456.819646][T27269] syzkaller0: entered promiscuous mode
[  456.822275][T27269] syzkaller0: entered allmulticast mode
[  457.086146][T27291] netlink: 'syz.0.6477': attribute type 1 has an invalid length.
[  457.932094][T27312] ip6tnl0: Caught tx_queue_len zero misconfig
[  457.956046][T27312] __nla_validate_parse: 6 callbacks suppressed
[  457.956060][T27312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6483'.
[  457.986505][T27315] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6484'.
[  458.025814][T27317] pim6reg: left allmulticast mode
[  458.163405][T27313] syz.0.6483: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  458.170095][T27313] CPU: 1 UID: 0 PID: 27313 Comm: syz.0.6483 Not tainted syzkaller #0 PREEMPT(full) 
[  458.170114][T27313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  458.170122][T27313] Call Trace:
[  458.170127][T27313]  <TASK>
[  458.170133][T27313]  dump_stack_lvl+0x189/0x250
[  458.170155][T27313]  ? __pfx_dump_stack_lvl+0x10/0x10
[  458.170168][T27313]  ? __pfx__printk+0x10/0x10
[  458.170185][T27313]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  458.170198][T27313]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  458.170213][T27313]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  458.170228][T27313]  warn_alloc+0x214/0x310
[  458.170250][T27313]  ? __pfx_warn_alloc+0x10/0x10
[  458.170273][T27313]  ? __get_vm_area_node+0x28f/0x300
[  458.170290][T27313]  ? xskq_create+0xbf/0x170
[  458.170308][T27313]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  458.170346][T27313]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  458.170367][T27313]  ? __kasan_kmalloc+0x93/0xb0
[  458.170384][T27313]  vmalloc_user_noprof+0xad/0xf0
[  458.170400][T27313]  ? xskq_create+0xbf/0x170
[  458.170416][T27313]  xskq_create+0xbf/0x170
[  458.170433][T27313]  xsk_init_queue+0xb0/0x110
[  458.170450][T27313]  xsk_setsockopt+0x57b/0x8d0
[  458.170466][T27313]  ? __pfx_xsk_setsockopt+0x10/0x10
[  458.170480][T27313]  ? __pfx_aa_sk_perm+0x10/0x10
[  458.170498][T27313]  ? __fget_files+0x2a/0x420
[  458.170512][T27313]  ? aa_sock_opt_perm+0xff/0x1b0
[  458.170526][T27313]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  458.170538][T27313]  ? __pfx_xsk_setsockopt+0x10/0x10
[  458.170553][T27313]  do_sock_setsockopt+0x17c/0x1b0
[  458.170590][T27313]  __x64_sys_setsockopt+0x13f/0x1b0
[  458.170608][T27313]  do_syscall_64+0xfa/0x3b0
[  458.170617][T27313]  ? lockdep_hardirqs_on+0x9c/0x150
[  458.170633][T27313]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.170645][T27313]  ? exc_page_fault+0x9f/0xf0
[  458.170662][T27313]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.170678][T27313] RIP: 0033:0x7f6c0338ebe9
[  458.170690][T27313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  458.170699][T27313] RSP: 002b:00007f6c041ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  458.170713][T27313] RAX: ffffffffffffffda RBX: 00007f6c035c6090 RCX: 00007f6c0338ebe9
[  458.170721][T27313] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000009
[  458.170728][T27313] RBP: 00007f6c03411e19 R08: 0000000000000004 R09: 0000000000000000
[  458.170735][T27313] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  458.170742][T27313] R13: 00007f6c035c6128 R14: 00007f6c035c6090 R15: 00007ffffc7f33f8
[  458.170787][T27313]  </TASK>
[  458.277723][T27313] Mem-Info:
[  458.278962][T27313] active_anon:5444 inactive_anon:0 isolated_anon:0
[  458.278962][T27313]  active_file:1761 inactive_file:38378 isolated_file:0
[  458.278962][T27313]  unevictable:1768 dirty:112 writeback:0
[  458.278962][T27313]  slab_reclaimable:13926 slab_unreclaimable:114587
[  458.278962][T27313]  mapped:18613 shmem:2507 pagetables:1008
[  458.278962][T27313]  sec_pagetables:0 bounce:0
[  458.278962][T27313]  kernel_misc_reclaimable:0
[  458.278962][T27313]  free:214187 free_pcp:23975 free_cma:0
[  458.298489][T27313] Node 0 active_anon:12304kB inactive_anon:0kB active_file:5384kB inactive_file:136448kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24080kB dirty:352kB writeback:0kB shmem:5008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7964kB pagetables:1692kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  458.309759][T27313] Node 1 active_anon:9472kB inactive_anon:0kB active_file:1660kB inactive_file:17064kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:50372kB dirty:96kB writeback:0kB shmem:5020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12116kB pagetables:2340kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  458.320734][T27313] Node 0 DMA free:14976kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:384kB local_pcp:0kB free_cma:0kB
[  458.330841][   T34] INFO: task udevd:5849 blocked for more than 143 seconds.
[  458.331626][T27313] lowmem_reserve[]:
[  458.333651][   T34]       Not tainted syzkaller #0
[  458.333661][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  458.333668][   T34] task:udevd           state:D stack:21832 pid:5849  tgid:5849  ppid:5298   task_flags:0x400140 flags:0x00004006
[  458.333703][   T34] Call Trace:
[  458.333709][   T34]  <TASK>
[  458.335242][T27313]  0 811 811 811 811
[  458.335268][T27313] Node 0 DMA32 free:117176kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12304kB inactive_anon:0kB active_file:5384kB inactive_file:136448kB unevictable:3536kB writepending:352kB present:1556484kB managed:830928kB mlocked:0kB bounce:0kB free_pcp:40548kB local_pcp:27304kB free_cma:0kB
[  458.335302][T27313] lowmem_reserve[]: 0 0 0 0 0
[  458.335329][T27313] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  458.335360][T27313] lowmem_reserve[]: 0 0 854 854 854
[  458.335383][T27313] Node 1 Normal free:266104kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9472kB inactive_anon:0kB active_file:1660kB inactive_file:17064kB unevictable:3536kB writepending:96kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:54852kB local_pcp:22380kB free_cma:0kB
[  458.335417][T27313] lowmem_reserve[]: 0 0 0 0 0
[  458.335440][T27313] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 
[  458.337818][   T34]  __schedule+0x1798/0x4cc0
[  458.337862][   T34]  ? __pfx___schedule+0x10/0x10
[  458.337890][   T34]  ? schedule+0x91/0x360
[  458.341900][T27313] 2*4096kB 
[  458.345968][   T34]  schedule+0x165/0x360
[  458.347277][T27313] (UM) 
[  458.348281][   T34]  io_schedule+0x80/0xd0
[  458.348301][   T34]  folio_wait_bit_common+0x6b0/0xb90
[  458.348334][   T34]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  458.349835][T27313] = 14976kB
[  458.365532][   T34]  ? __pfx_wake_page_function+0x10/0x10
[  458.374352][T27313] Node 0 
[  458.376025][   T34]  ? __filemap_get_folio+0x6f0/0xaf0
[  458.376041][   T34]  ? do_read_cache_folio+0x4e9/0x590
[  458.376062][   T34]  do_read_cache_folio+0x1aa/0x590
[  458.376078][   T34]  ? __pfx_blkdev_read_folio+0x10/0x10
[  458.389827][T27313] DMA32: 
[  458.398336][   T34]  read_part_sector+0xb6/0x2b0
[  458.401376][T27313] 1216*4kB 
[  458.402707][   T34]  adfspart_check_POWERTEC+0x8c/0xf30
[  458.402729][   T34]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  458.402747][   T34]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  458.403921][T27313] (UM) 
[  458.405377][   T34]  bdev_disk_changed+0x75f/0x14b0
[  458.405411][   T34]  ? __pfx_bdev_disk_changed+0x10/0x10
[  458.405426][   T34]  ? wait_on_inode+0xc0/0x230
[  458.407394][T27313] 837*8kB 
[  458.409423][   T34]  blkdev_get_whole+0x380/0x510
[  458.409448][   T34]  bdev_open+0x31e/0xd30
[  458.409474][   T34]  blkdev_open+0x3a8/0x510
[  458.415428][T27313] (UME) 
[  458.416552][   T34]  ? __pfx_blkdev_open+0x10/0x10
[  458.418511][T27313] 450*16kB 
[  458.420320][   T34]  do_dentry_open+0x953/0x13f0
[  458.420349][   T34]  vfs_open+0x3b/0x340
[  458.420361][   T34]  ? path_openat+0x2ecd/0x3830
[  458.420378][   T34]  path_openat+0x2ee5/0x3830
[  458.422477][T27313] (UME) 206*32kB (UME) 134*64kB (UME) 58*128kB (UE) 30*256kB (UME) 35*512kB (UM) 19*1024kB (UM) 3*2048kB (UM) 6*4096kB (U) 
[  458.423634][   T34]  ? arch_stack_walk+0xfc/0x150
[  458.423666][   T34]  ? stack_depot_save_flags+0x40/0x860
[  458.423694][   T34]  ? __pfx_path_openat+0x10/0x10
[  458.425632][T27313] = 117128kB
[  458.426652][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.426684][   T34]  do_filp_open+0x1fa/0x410
[  458.426700][   T34]  ? __lock_acquire+0xab9/0xd20
[  458.428751][T27313] Node 1 
[  458.435175][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  458.436869][T27313] DMA32: 
[  458.438613][   T34]  ? _raw_spin_unlock+0x28/0x50
[  458.438639][   T34]  ? alloc_fd+0x64c/0x6c0
[  458.440428][T27313] 3*4kB 
[  458.441579][   T34]  do_sys_openat2+0x121/0x1c0
[  458.441594][   T34]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  458.441607][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  458.441627][   T34]  ? rcu_is_watching+0x15/0xb0
[  458.441640][   T34]  __x64_sys_openat+0x138/0x170
[  458.441654][   T34]  do_syscall_64+0xfa/0x3b0
[  458.441666][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.441675][   T34]  ? asm_sysvec_call_function_single+0x1a/0x20
[  458.441689][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.441698][   T34] RIP: 0033:0x7f728e1169a4
[  458.441709][   T34] RSP: 002b:00007ffeb33cbce0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  458.441722][   T34] RAX: ffffffffffffffda RBX: 00005584b42b8780 RCX: 00007f728e1169a4
[  458.441731][   T34] RDX: 00000000000a0800 RSI: 00005584b42b0230 RDI: 00000000ffffff9c
[  458.441739][   T34] RBP: 00005584b42b0230 R08: 0000000000000001 R09: 7fffffffffffffff
[  458.441747][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  458.441754][   T34] R13: 00005584b42a9aa0 R14: 0000000000000001 R15: 00005584b4298910
[  458.441804][   T34]  </TASK>
[  458.441897][   T34] 
[  458.441897][   T34] Showing all locks held in the system:
[  458.441906][   T34] 1 lock held by khungtaskd/34:
[  458.441913][   T34]  #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  458.441968][   T34] 2 locks held by getty/5671:
[  458.441975][   T34]  #0: ffff888025ee90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  458.442009][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  458.442042][   T34] 1 lock held by udevd/5849:
[  458.442048][   T34]  #0: ffff888020722358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  458.442093][   T34] 1 lock held by udevd/12589:
[  458.442100][   T34]  #0: ffff888020726358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  458.442151][   T34] 4 locks held by syz.0.6483/27313:
[  458.442158][   T34] 3 locks held by syz.0.6483/27317:
[  458.442165][   T34]  #0: ffffffff8f538ac8 (rtnl_mutex){+.+.}-{4:4}, at: ip6_mroute_setsockopt+0xa84/0xf00
[  458.442199][   T34]  #1: ffff88801eaac0d8 (&net->xdp.lock){+.+.}-{4:4}, at: xsk_notifier+0x89/0x230
[  458.442232][   T34]  #2: ffff888126a796b8 (&xs->mutex){+.+.}-{4:4}, at: xsk_notifier+0xd5/0x230
[  458.442265][   T34] 3 locks held by syz.1.6485/27319:
[  458.442271][   T34]  #0: ffffffff8f59e0f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  458.442299][   T34]  #1: ffff8881283e86d0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0
[  458.442330][   T34]  #2: ffffffff8f538ac8 (rtnl_mutex){+.+.}-{4:4}, at: ethnl_tsinfo_dumpit+0x75/0x6a0
[  458.442357][   T34] 
[  458.442361][   T34] =============================================
[  458.442361][   T34] 
[  458.442366][   T34] NMI backtrace for cpu 1
[  458.442376][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  458.442386][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  458.442392][   T34] Call Trace:
[  458.442396][   T34]  <TASK>
[  458.442400][   T34]  dump_stack_lvl+0x189/0x250
[  458.442414][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  458.442425][   T34]  ? __pfx__printk+0x10/0x10
[  458.442445][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  458.442459][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  458.442473][   T34]  ? __pfx__printk+0x10/0x10
[  458.442488][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  458.442505][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  458.442518][   T34]  watchdog+0xf93/0xfe0
[  458.442534][   T34]  ? watchdog+0x1de/0xfe0
[  458.442550][   T34]  kthread+0x711/0x8a0
[  458.442564][   T34]  ? __pfx_watchdog+0x10/0x10
[  458.442575][   T34]  ? __pfx_kthread+0x10/0x10
[  458.442587][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  458.442600][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  458.442611][   T34]  ? __pfx_kthread+0x10/0x10
[  458.442631][   T34]  ret_from_fork+0x3fc/0x770
[  458.442643][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  458.442657][   T34]  ? __switch_to_asm+0x39/0x70
[  458.442668][   T34]  ? __switch_to_asm+0x33/0x70
[  458.442678][   T34]  ? __pfx_kthread+0x10/0x10
[  458.442690][   T34]  ret_from_fork_asm+0x1a/0x30
[  458.442711][   T34]  </TASK>
[  458.442716][   T34] Sending NMI from CPU 1 to CPUs 0:
[  458.442785][    C0] NMI backtrace for cpu 0
[  458.442794][    C0] CPU: 0 UID: 0 PID: 27313 Comm: syz.0.6483 Not tainted syzkaller #0 PREEMPT(full) 
[  458.442806][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  458.442811][    C0] RIP: 0010:validate_chain+0xfc4/0x2140
[  458.442824][    C0] Code: c1 81 e1 ff 0f 00 00 89 0d fd 96 0b 14 2b 05 f3 96 0b 14 25 ff 0f 00 00 39 05 b4 96 0a 12 73 06 89 05 ac 96 0a 12 49 8b 04 24 <48> 89 de 48 39 e8 0f 84 33 fe ff ff 4c 89 68 30 48 8b 00 48 39 e8
[  458.442832][    C0] RSP: 0018:ffffc90000007718 EFLAGS: 00000016
[  458.442841][    C0] RAX: ffffffff934e2860 RBX: 00000000000003fd RCX: 000000000000026c
[  458.442847][    C0] RDX: 0000000000000008 RSI: 00000000000003fd RDI: ffff88811bce5640
[  458.442854][    C0] RBP: ffffffff934e2860 R08: ffffc900000076e0 R09: 0000000000000020
[  458.442860][    C0] R10: ffffc90000007a20 R11: ffffffff819dcc10 R12: ffffffff96360118
[  458.442867][    C0] R13: ffffffff96360658 R14: ffff88811bce61f8 R15: 000000000000026b
[  458.442880][    C0] FS:  00007f6c041ed6c0(0000) GS:ffff8880b8618000(0000) knlGS:0000000000000000
[  458.442889][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  458.442895][    C0] CR2: 00007f2c0e4ce413 CR3: 000000011608e000 CR4: 00000000000006f0
[  458.442926][    C0] Call Trace:
[  458.442931][    C0]  <IRQ>
[  458.442941][    C0]  __lock_acquire+0xab9/0xd20
[  458.442957][    C0]  ? debug_object_activate+0xbb/0x420
[  458.442967][    C0]  lock_acquire+0x120/0x360
[  458.442979][    C0]  ? debug_object_activate+0xbb/0x420
[  458.442994][    C0]  _raw_spin_lock_irqsave+0xa7/0xf0
[  458.443005][    C0]  ? debug_object_activate+0xbb/0x420
[  458.443016][    C0]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  458.443030][    C0]  debug_object_activate+0xbb/0x420
[  458.443044][    C0]  __mod_timer+0xa4f/0xf30
[  458.443057][    C0]  ? fq_pie_timer+0x4d/0x5b0
[  458.443068][    C0]  fq_pie_timer+0x3e2/0x5b0
[  458.443080][    C0]  ? fq_pie_timer+0x4d/0x5b0
[  458.443092][    C0]  call_timer_fn+0x17e/0x5f0
[  458.443104][    C0]  ? __pfx_fq_pie_timer+0x10/0x10
[  458.443115][    C0]  ? call_timer_fn+0xbe/0x5f0
[  458.443127][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  458.443141][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  458.443152][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  458.443164][    C0]  ? __pfx_fq_pie_timer+0x10/0x10
[  458.443176][    C0]  __run_timer_base+0x61a/0x860
[  458.443187][    C0]  ? ktime_get+0x3e/0x1f0
[  458.443200][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  458.443210][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  458.443225][    C0]  run_timer_softirq+0xb7/0x180
[  458.443236][    C0]  handle_softirqs+0x286/0x870
[  458.443247][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  458.443257][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  458.443268][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  458.443279][    C0]  __irq_exit_rcu+0xca/0x1f0
[  458.443288][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  458.443306][    C0]  irq_exit_rcu+0x9/0x30
[  458.443313][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  458.443325][    C0]  </IRQ>
[  458.443328][    C0]  <TASK>
[  458.443331][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  458.443341][    C0] RIP: 0010:vprintk_emit+0x58f/0x7a0
[  458.443351][    C0] Code: 85 32 01 00 00 e8 11 87 1f 00 41 89 df 4d 85 f6 48 8b 1c 24 75 07 e8 00 87 1f 00 eb 06 e8 f9 86 1f 00 fb 48 c7 c7 80 e1 12 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 b9 35
[  458.443358][    C0] RSP: 0018:ffffc9000376f580 EFLAGS: 00000293
[  458.443366][    C0] RAX: ffffffff81a02497 RBX: ffffffff81a02354 RCX: ffff88811bce5640
[  458.443373][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e12e180
[  458.443379][    C0] RBP: ffffc9000376f690 R08: ffffffff8fa38f37 R09: 1ffffffff1f471e6
[  458.443385][    C0] R10: dffffc0000000000 R11: fffffbfff1f471e7 R12: dffffc0000000000
[  458.443391][    C0] R13: 1ffff920006edeb4 R14: 0000000000000200 R15: 0000000000000006
[  458.443399][    C0]  ? vprintk_emit+0x444/0x7a0
[  458.443408][    C0]  ? vprintk_emit+0x587/0x7a0
[  458.443418][    C0]  ? vprintk_emit+0x444/0x7a0
[  458.443427][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  458.443435][    C0]  ? __lock_acquire+0xab9/0xd20
[  458.443449][    C0]  ? do_raw_spin_lock+0x121/0x290
[  458.443460][    C0]  _printk+0xcf/0x120
[  458.443472][    C0]  ? __pfx__printk+0x10/0x10
[  458.443482][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  458.443493][    C0]  ? __show_mem+0x1598/0x2190
[  458.443507][    C0]  __show_mem+0x1b5d/0x2190
[  458.443518][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  458.443534][    C0]  ? __pfx___show_mem+0x10/0x10
[  458.443549][    C0]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  458.443560][    C0]  warn_alloc+0x2dd/0x310
[  458.443574][    C0]  ? __pfx_warn_alloc+0x10/0x10
[  458.443588][    C0]  ? __get_vm_area_node+0x28f/0x300
[  458.443599][    C0]  ? xskq_create+0xbf/0x170
[  458.443611][    C0]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  458.443630][    C0]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  458.443643][    C0]  ? __kasan_kmalloc+0x93/0xb0
[  458.443655][    C0]  vmalloc_user_noprof+0xad/0xf0
[  458.443666][    C0]  ? xskq_create+0xbf/0x170
[  458.443678][    C0]  xskq_create+0xbf/0x170
[  458.443690][    C0]  xsk_init_queue+0xb0/0x110
[  458.443702][    C0]  xsk_setsockopt+0x57b/0x8d0
[  458.443713][    C0]  ? __pfx_xsk_setsockopt+0x10/0x10
[  458.443724][    C0]  ? __pfx_aa_sk_perm+0x10/0x10
[  458.443736][    C0]  ? __fget_files+0x2a/0x420
[  458.443748][    C0]  ? aa_sock_opt_perm+0xff/0x1b0
[  458.443756][    C0]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  458.443807][    C0]  ? __pfx_xsk_setsockopt+0x10/0x10
[  458.443818][    C0]  do_sock_setsockopt+0x17c/0x1b0
[  458.443828][    C0]  __x64_sys_setsockopt+0x13f/0x1b0
[  458.443839][    C0]  do_syscall_64+0xfa/0x3b0
[  458.443846][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  458.443857][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.443866][    C0]  ? exc_page_fault+0x9f/0xf0
[  458.443884][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.443893][    C0] RIP: 0033:0x7f6c0338ebe9
[  458.443902][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  458.443909][    C0] RSP: 002b:00007f6c041ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  458.443918][    C0] RAX: ffffffffffffffda RBX: 00007f6c035c6090 RCX: 00007f6c0338ebe9
[  458.443924][    C0] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000009
[  458.443929][    C0] RBP: 00007f6c03411e19 R08: 0000000000000004 R09: 0000000000000000
[  458.443935][    C0] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  458.443941][    C0] R13: 00007f6c035c6128 R14: 00007f6c035c6090 R15: 00007ffffc7f33f8
[  458.443951][    C0]  </TASK>
[  458.444755][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  458.444791][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  458.444803][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  458.444809][   T34] Call Trace:
[  458.444814][   T34]  <TASK>
[  458.444820][   T34]  dump_stack_lvl+0x99/0x250
[  458.444835][   T34]  ? __asan_memcpy+0x40/0x70
[  458.444846][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  458.444861][   T34]  ? __pfx__printk+0x10/0x10
[  458.444882][   T34]  vpanic+0x281/0x750
[  458.444898][   T34]  ? __pfx_vpanic+0x10/0x10
[  458.444908][   T34]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  458.444924][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  458.444945][   T34]  panic+0xb9/0xc0
[  458.444957][   T34]  ? __pfx_panic+0x10/0x10
[  458.444972][   T34]  ? irq_work_queue+0xc3/0x140
[  458.444989][   T34]  ? nmi_trigger_cpumask_backtrace+0x234/0x300
[  458.445005][   T34]  watchdog+0xfd2/0xfe0
[  458.445024][   T34]  ? watchdog+0x1de/0xfe0
[  458.445040][   T34]  kthread+0x711/0x8a0
[  458.445057][   T34]  ? __pfx_watchdog+0x10/0x10
[  458.445071][   T34]  ? __pfx_kthread+0x10/0x10
[  458.445085][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  458.445099][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  458.445113][   T34]  ? __pfx_kthread+0x10/0x10
[  458.445128][   T34]  ret_from_fork+0x3fc/0x770
[  458.445140][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  458.445156][   T34]  ? __switch_to_asm+0x39/0x70
[  458.445168][   T34]  ? __switch_to_asm+0x33/0x70
[  458.445182][   T34]  ? __pfx_kthread+0x10/0x10
[  458.445195][   T34]  ret_from_fork_asm+0x1a/0x30
[  458.445218][   T34]  </TASK>
[  458.446997][   T34] Kernel Offset: disabled

VM DIAGNOSIS:
16:42:16  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81a02395 RBX=ffffffff81a02354 RCX=ffff88811bce5640 RDX=0000000000000000
RSI=ffffffff8dba74da RDI=ffffffff8be33800 RBP=ffffc9000376f690 RSP=ffffc9000376f580
R8 =0000000000000000 R9 =ffffffff81a02354 R10=dffffc0000000000 R11=fffffbfff1c25c19
R12=dffffc0000000000 R13=1ffff920006edeb4 R14=0000000000000200 R15=0000000000000005
RIP=ffffffff81a02383 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6c041ed6c0 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2c0e4ce413 CR3=000000011608e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=010a02000000140a 000006f400000000
XMM02=307a797300010009 00000002d5ff1a5e XMM03=0000002c03000000 4002000800000000
XMM04=0100110000001400 000000327a797300 XMM05=0300090000000030 7a79730001000900
XMM06=00000200000000ff e6000003010a0300 XMM07=00002c0300000040 0200080000000030
XMM08=0000000000000000 00007f6833412ee7 XMM09=0000000000000000 00007f6833412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff8b75e901 RBX=0000000000000001 RCX=ffffffff8b75e9f6 RDX=0000000000000000
RSI=0000000000000001 RDI=ffffffff8da5d600 RBP=ffffffff8da5d601 RSP=ffffc9000068f580
R8 =ffff88801d2ab980 R9 =0000000000000008 R10=0000000000000007 R11=0000000000000000
R12=ffffffff8b75e9f6 R13=ffffffff99af3d0a R14=ffffffff8da5d600 R15=ffffffff99af3d0a
RIP=ffffffff82230130 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000011608e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fead2412e53
XMM06=0000000000000000 00007fead2412e4d XMM07=0000000000000000 00007fead2412e61
XMM08=0000000000000000 00007fead2412ee7 XMM09=0000000000000000 00007fead2412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
