last executing test programs:

17.911952877s ago: executing program 2 (id=6095):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0f8ff5000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x96, &(0x7f00000015c0)=""/150}, 0x94)
syz_emit_ethernet(0x4e, &(0x7f0000000740)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x3, 0x0, 0x2, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@broadcast, 0x80000}, {@broadcast}]}, @generic={0x7, 0x2}]}}, {{0x4e23, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r2}, 0x18)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x5c, 0x32, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x71, &(0x7f0000000000)="03040000008002ff", 0x8)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0)

17.771279605s ago: executing program 2 (id=6097):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x9c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x24}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x11c, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0xa}}}}, [@NL80211_ATTR_IE_PROBE_RESP={0xfc, 0x7f, [@ibss={0x6, 0x2, 0x8000}, @preq={0x82, 0x25, {{}, 0x3, 0xfc, 0x0, @device_a, 0x9, @void, 0x10, 0x0, 0x1, [{{0x1}, @broadcast, 0x6}]}}, @tim={0x5, 0x8d, {0x3, 0x93, 0x8, "7c335fff22a0a14c58279af66bc02f373b043cb6be48cfbbeecc27b6609f8bdfee519a366bf9d7271d980a905662575b303b6efe05ab1761fcfb770a13b13a6589cf1cb1d56e198440ddeccd09f81a07777432c15e3bdfb26892727375f0310b500b539fbc72878fc267502bff21557e5fffec7a6f7c34109145aac533bcbf95f56fab347b6b3241d947"}}, @rann={0x7e, 0x15, {{0x0, 0x3}, 0xd0, 0x4, @broadcast, 0x80000001, 0x1, 0x1}}, @peer_mgmt={0x75, 0x6, {0x1, 0x8, @void, @val=0x37, @void}}, @cf={0x4, 0x6, {0x0, 0x0, 0xf50, 0x401}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x4, 0x8, @device_a, 0xb, 0xf4, 0x4}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x810}, 0x800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x74, 0x0, 0x800, 0x15287}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x1}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x9c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x24}, 0x94) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x11c, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0xa}}}}, [@NL80211_ATTR_IE_PROBE_RESP={0xfc, 0x7f, [@ibss={0x6, 0x2, 0x8000}, @preq={0x82, 0x25, {{}, 0x3, 0xfc, 0x0, @device_a, 0x9, @void, 0x10, 0x0, 0x1, [{{0x1}, @broadcast, 0x6}]}}, @tim={0x5, 0x8d, {0x3, 0x93, 0x8, "7c335fff22a0a14c58279af66bc02f373b043cb6be48cfbbeecc27b6609f8bdfee519a366bf9d7271d980a905662575b303b6efe05ab1761fcfb770a13b13a6589cf1cb1d56e198440ddeccd09f81a07777432c15e3bdfb26892727375f0310b500b539fbc72878fc267502bff21557e5fffec7a6f7c34109145aac533bcbf95f56fab347b6b3241d947"}}, @rann={0x7e, 0x15, {{0x0, 0x3}, 0xd0, 0x4, @broadcast, 0x80000001, 0x1, 0x1}}, @peer_mgmt={0x75, 0x6, {0x1, 0x8, @void, @val=0x37, @void}}, @cf={0x4, 0x6, {0x0, 0x0, 0xf50, 0x401}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x4, 0x8, @device_a, 0xb, 0xf4, 0x4}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x810}, 0x800) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x74, 0x0, 0x800, 0x15287}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x1}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)

17.678482506s ago: executing program 2 (id=6098):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c6ea090000000000000100000000e01f00000000000000ff0200"/51], 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000850000005000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0), 0x10, 0x7ff}, 0x94)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)
sendmmsg$alg(r2, &(0x7f0000006ac0), 0x6, 0x640400c0)
r6 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r7=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000002220200029bd7000fcdbdf250000000044c810ad30b34989992d89a5feedb1a0aa3b3a91493a19bbdf1f9b2f8890a0d53c1029c52789b96df1f104000000000001ffffffffffffffdbe26308b6d915ccfc16acb47ecd3b45aab4309dc3cdb399878d84065cb6318fc1ffaab720889310c423c32e0095163b59b42143d27c1ab463d71fbbd9b5e6558c3211b37990bed8bc1639304944f27cdce83e0a96d46cb42b30db3a72b58acb48a57c9a2b3b04afb75e6c70ff573000000000000000000099d3616acf133febadcb5f42723bc8bc"], 0x14}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r8 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r8, 0x84, 0x9, &(0x7f0000000380), 0x98)
r9 = socket(0x10, 0x3, 0x0)
socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c0c1}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000000000604000000080000000100000ff7ffffff0400000001000000fffffff70030615f5f002e305f"], 0x0, 0x46, 0x0, 0x1}, 0x28)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1e00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="6a58faae97be0aee752c15d8424bda7e80a2245af4032c2cc0a4f7f3337a5e1d68fd1d4cd963f516c2a53eb9d72649031e2125f5e0ff237f0a9c79e1fc3184f9c14b082780434d4eaae699befaf0ed0d67b6905a25f5bfb2614a41d288102255298d0e1257381090359c051c6f859c1ad47404e787285a7f20e8d143f9466040249fe60eeb6ffac3a46c2cad3a44235266437bb70000000000000000", @ANYRES64=0x0], 0x20)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000a40))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x12, 0xe, &(0x7f0000000200)=ANY=[@ANYRESOCT=r4], &(0x7f00000001c0)='GPL\x00', 0x40000000, 0x0, 0x0, 0x40f00, 0x3e, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x10}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x19}, 0x94)

17.521790708s ago: executing program 2 (id=6102):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x4000000)
write$tun(r0, &(0x7f0000000380)={@val={0x70, 0xa01}, @void, @eth={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @void, {@ipv6={0x86dd, @tcp={0x1, 0x6, "b404ba", 0x2d, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x4e2b, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x8, 0x7, 0x0, 0x6, {[@md5sig={0x13, 0x12, "2c14486192166a53444fdf3392add95e"}]}}, {"650e79681b"}}}}}}}}, 0x67)

17.030573205s ago: executing program 2 (id=6109):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r2)
sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf251b00000008000100", @ANYRES32, @ANYBLOB="04001900080015"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=<r4=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=<r5=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=<r6=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=<r7=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=<r8=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r3, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4044002)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r2) (async)
sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf251b00000008000100", @ANYRES32, @ANYBLOB="04001900080015"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)) (async)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r3, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4044002) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) (async)

16.968926775s ago: executing program 2 (id=6111):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000030400000000fddbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0100000000000080200012800b000100627269646765000010000b800c152e000000000001000000c2eb017faf6edd27c80f2981559e296b91a1e45fef4d36ee55d92b5c4307b1b9"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0)

16.824266066s ago: executing program 32 (id=6111):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000030400000000fddbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0100000000000080200012800b000100627269646765000010000b800c152e000000000001000000c2eb017faf6edd27c80f2981559e296b91a1e45fef4d36ee55d92b5c4307b1b9"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.629339273s ago: executing program 3 (id=6314):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
sendmsg$can_j1939(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)="623eb869e81086501d21ba7426fe7fc15f876b98e32f9c8d1c50e91e19ff3ceb8118d4edac3349cf2e3693595f6442df99beaad8ec5474944da960d5e1e81f17812fef", 0x43}, 0x1, 0x0, 0x0, 0x1}, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b7c0140020203600e41b0000900ac00060311000000a4000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x2004c840)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0x13, 0x0, &(0x7f00000000c0))
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x74, 0x0, 0x800, 0x15287}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x1}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.52045765s ago: executing program 3 (id=6317):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a000000ff03ffc311a400100100001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x74, 0x0, 0x800, 0x15287}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x1}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.411888538s ago: executing program 3 (id=6319):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r1)
ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
recvfrom$ax25(r1, &(0x7f0000000140)=""/29, 0x1d, 0x10000, &(0x7f00000001c0)={{0x3, @bcast, 0x1}, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x81, 0x8, 0x7cc7ebbe, 0x3, 0x0, 0x9, 0x1, <r3=>0x0}, &(0x7f0000000180)=0x20)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={r3, @in6={{0xa, 0x7, 0x4, @initdev={0xfe, 0x88, '\x00', 0xc, 0x0}, 0xff}}, 0x4, 0x2, 0x9, 0x7f, 0x90, 0x6, 0x2}, &(0x7f0000000380)=0x9c)
connect$inet6(r1, &(0x7f0000000340)={0xa, 0x4e21, 0xf14, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0x1c)
openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0)

1.411412367s ago: executing program 1 (id=6320):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000030400000000fddbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000087520100200012800b0050006272696467650000100002800c002e000000000001000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.301940023s ago: executing program 1 (id=6321):
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000003c40)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff00000000030000001100000000000000000000020000c9"], 0x0, 0x4a}, 0x28) (async, rerun: 32)
unshare(0x6a040000) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x11, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xff}, {}, {}, [@map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x4d, &(0x7f0000000480)=""/77, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x2, 0x0, 0x8, 0x4a2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xff}, 0x94)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) (async)
r1 = openat$cgroup(r0, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f0000000180), 0x2, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x410000, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'veth0_vlan\x00', 0x202}) (async)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)

1.301386713s ago: executing program 3 (id=6322):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x8005, &(0x7f0000000380)={0xa, 0x0, 0x0, @private0, 0x8}, 0x1c) (async)
sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x8005, &(0x7f0000000380)={0xa, 0x0, 0x0, @private0, 0x8}, 0x1c)
setsockopt$inet6_int(r0, 0x84, 0x24, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
r2 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
pipe(&(0x7f00000007c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4) (async)
close(r4)
splice(r3, 0x0, r4, 0x0, 0xfffd, 0x0) (async)
splice(r3, 0x0, r4, 0x0, 0xfffd, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2083, 0x10056}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40050}, 0x4000880)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r3}, 0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x80000001}, &(0x7f0000000300)=0x8) (async)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000280)={<r7=>0x0, 0x80000001}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000340)={0x1ff, 0x9, 0x2, 0x80000001, r7}, 0x10) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000340)={0x1ff, 0x9, 0x2, 0x80000001, r7}, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000740)={'xfrm0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0)

588.835716ms ago: executing program 1 (id=6333):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet6_mreq(r1, 0x29, 0x1, 0x0, &(0x7f0000000100))
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0)

531.359442ms ago: executing program 1 (id=6335):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180))
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0702000000000000000001000000040008802c000480050003000100000005000300000000020000000000000000050003000000000005000300020000000800010003000000080002000100"], 0x54}}, 0x880)
syz_emit_ethernet(0x0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a0b0400000000000000000200000088000480240001800b000100736f636b6574000014000280080002400000000308000140000000024c0001800b00010065787468647200003c000280080002400000007508000340000000590800064000000002080006400000000108000440000000b905000200070000000500020007000000140001800a00010071756f7461000000040002800900010073797a30000000000900020073797a32"], 0x17c}}, 0x40880)
recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r5, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r5, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0)
r6 = socket(0x22, 0x2, 0x1)
r7 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xd2, 0xb}}, 0x1c}}, 0x0)
accept4$inet(r6, 0x0, 0x0, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x2, &(0x7f0000000000)=0x18, 0x4)
ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)=@ethtool_cmd={0x45, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x87, 0x0, 0xfffffffd, 0x0, 0x1, 0xb8, 0x0, 0x80000048, [0x2, 0x89ff]}})

530.504701ms ago: executing program 0 (id=6336):
pipe(0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x4, 0x0) (async)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x10, 0xaf9}, &(0x7f00000010c0)=0x18) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113300000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async)
r3 = accept$unix(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000340)=0x6e)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRES8=r0, @ANYRES32=r2, @ANYRESHEX=r0], 0x48}}, 0x40480c4) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x15, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESDEC=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="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", 0xfa, 0x80, &(0x7f00000007c0)={0xa, 0x4e24, 0x0, @private2, 0x80000000}, 0x1c) (async)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@RTM_DELMDB={0x38, 0x55, 0x93d, 0x100402, 0x25dfdbfc, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x0, 0x3, {@in6_addr=@empty, 0x800}}}]}, 0x38}}, 0x24048850)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='writeback_sb_inodes_requeue\x00', r4, 0x0, 0x7}, 0x18)
r8 = socket(0x27, 0x1, 0x80000000)
setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000000580)={0x2, {{0xa, 0x4e22, 0x10, @dev={0xfe, 0x80, '\x00', 0x14}, 0x2}}}, 0x88) (async)
shutdown(r8, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) (async)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c001a8008000280f10f0500080000003e120000080006"], 0x44}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x38}}, 0x0)

431.532457ms ago: executing program 0 (id=6337):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="07820100110000002c0012800900010069706970000000001c0002800800140006000000080003007f000001130004001300080005000000", @ANYRES32=0x0, @ANYBLOB], 0x54}}, 0x0) (async, rerun: 32)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async, rerun: 32)
r2 = socket$tipc(0x1e, 0x2, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000003e000701fcffffff00000000017c0000040042800c00018006000600ab230000100002800c00178008002180040015800d77a30351ff8a773f4b3ed7a81dd3c679d2"], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) (async)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000080010000000000001308000000005f2e00808f01301ff08522dd0a1c2f2e7f41606a7fa7dca3d81eca0fba43"], &(0x7f00000006c0)=""/209, 0x28, 0xd1, 0x1, 0x3}, 0x28) (async, rerun: 64)
bind$inet(r4, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) (async, rerun: 64)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async, rerun: 64)
sendmmsg(0xffffffffffffffff, &(0x7f00000016c0)=[{{&(0x7f0000000640)=@llc={0x1a, 0x303, 0x93, 0x7f, 0x0, 0x7, @remote}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000800)="ef595568d574610b2c2643c45528a56fcc4e1da868795809cad8a246f0589898f3efae6e8bdcec4752251fd0667b4f719b7537018c11dcdb18bc9cc2c417999d3545203db6b3ad4add6df525bb7f256d117566d04e1608fe4688018cffba07357d2faaf789af237d3a5313f81ce1bc9cd5110b4767839883a986f6742b9bd96cf63ad67e245ceed1796bade212b301b18b7221e878938a3dcb5ca2", 0x9b}, {&(0x7f0000000d80)="a57e535158b9e87d2920e64f2548825e5b3ad2aecf1776007a28f45e644766133afaf5442c2f21684c30dbf675eed30bebb7d4a461d0ca87bd0a0dbd2bcd5f1275e262436512cc93299f761f3ed2ae60385c006abebf8b443737289fed61fae3f857487efde486973819769900afb9a1b979e348ab035c48ac3e9af72057", 0x7e}, {&(0x7f0000000a80)="5b318d52119541d30f6167d6dec8d4b487db7c4bb987ed35b40a9fbf4d2820ce93d3f7b6ce31998d3728f1e651ad6d365c7ff84d9430189c97db5b740ebe4659ef6e84a53756ff1f707e71", 0x4b}, {&(0x7f0000000b00)="5eee76a2ddf779b6e022ba2877936933c83639f717f01011c69e6ae7769a9762ed3f9766cf0c74fbecba5ea86d3378330dd1217f808256181ba2a6011d525b7be9eed486fbee3a18f9f5d1875523f4f0b7a05ab957304eea3df91f807d623abbb863cc57bfd3f89f5474fca3e8e77c4c02", 0x71}, {&(0x7f0000000140)="3934b38b6e70f662b09b86d31b739506509c", 0x12}], 0x5, &(0x7f0000000d40)=ANY=[@ANYRES32=r0], 0x90}}, {{&(0x7f0000000c40)=@l2tp6={0xa, 0x0, 0x1ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffe, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000e00)="f43a96aa4e85b92cfb2ea986754b7a89d5f90838fdcb28560b16c6d141c9b0d47c099f4b4b2ca0d2e5a773c5ce5ccb3f48fd96de936d62ca46e8614f1b337cf6835ec6fc9c08e66298d8862d135eff5324f057c7e84dc3ffd9902f39a26bd3ddc461aad029c270fc073e8cb34370de38aca0eed21b41035dead5ae498bdd4b85a42072cf75d283eaa719af2bf55ac9b4ce69471c77ce602c788d887ab3d3d6a4130aa816b68d2fe9d45afbf95d7f95f23cfcae47214c4bbf54db04bf02be1480b35a8e3e63000c936ca06c175719e081da7d7e6a85333965e08685bc75b4cb1390f0c5bb4f12bf937c7223450d751a29a9", 0xf1}, {&(0x7f0000000f00)="70ba0075421f11eecf1bacb27f19881d90644af98f3ab9a89f8079e6e9ab09c743dbbde11de28056f4aca7fa81238e39509a6203b1802485179bb81e582141f54b6b9d1e4329a0e523bdd36d1c40774cbeb6288b41d9529418516c730e736fd7c23a72cdd93270e91a53f56522306453b3a2ab6b6d0c086247738d52", 0x7c}, {&(0x7f0000000f80)="c3eccb69711a599a089d314564349bda06cb10138ab30dca9f012c3704dcd46e5d0d6ef103680a546ae458272073a262e671eccb03156009d47c2a1ce8dd48be33842683919a70e0ce14d1149c42d9d1cf0dc7827323c1f8ece5cbe30e85715afaf1ff911d44510ec6540b2d42947ac5a2d228fca37020e6459afce6191fd19547a3d164810bcb4aab66d4163d6afa623c490cb2eda887b5221f3e1c058f320a6741ab3d6029db362fe82d4151e500dee348c13e1a47f208", 0xb8}, {&(0x7f0000001040)="dd3d846ac4d1e06e165afe095e4e440eb8e1d43f5028e65e46e6506924060af9c0a13cb1e3a6e2ada5a4f6c158047b2a4361ada41dbe5d7c666efc82b9e53495dcca5e2b69611edbf9b78134dd4a2cf747095cfd9303f08c9d4e188d1e686568718e61cb796e742edb5973155de5d27d22bb63a2d10a65f3d18adcee3767c8e3ac4c10ca69", 0x85}], 0x4}}, {{&(0x7f0000001100)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001500)="8819e7f6f5238acf2624243ff20ac13c30abec1110256d48d20b84ca3051872ef741cfcc74ea3937f47c03211dbffbacdb963d7133547530f99a991870a0fa24c7e74bd4d2ba39db06", 0x49}, {&(0x7f00000008c0)="fcc653391942838994cb07c8ad46b7e034bed0601e706d674d3ea90095f28d48c8af1ccf646a641682261f", 0x2b}, {&(0x7f0000001200)="7dc3a5986d2d4a2613e3a00192cd224e6cc45e37615d9cbcc1e2e6d488056257f422b6ac40bbc4ce730a2ca734dfaf69f784f4112d0db76b61991a5e84517cd9ad91dc8f5deeec64bafc81dfaa38a5b9f5e5e4169f2b9ef3de6f8eabe177b873422638d58dcfd91838259db91c32c5aa76373ff0302ed37a9444d7c1aabd4cd852babe49cf7d741d1deddf9f59b19ca7e11fcda26629024c05b35f663de4692fc15585573e5c173777fd249ad97b13", 0xaf}, {&(0x7f00000012c0)="01352d5c9c554e3ebe7852438b5f615c483d339d0fc2072a3d3669d53acd17c435587e42e2fb6c72576454a9bcd5d9793f98092c0be94f4b0b07efc9c19a2b83c3434441ba18616df96a82fa0e5b4699750b449695073d8c1325973f8711497aa9bfb73ec391cae548210d5e17cdb541da9ca25cc0d805cd94d37c10ba8477323ebb3b72c52c101e478cd00f15df5225c646f62deb9bb322d834a577598bb3336f1914c8b2be452812dcdeb496f4fe04", 0xb0}, {&(0x7f0000001380)="df7bc6d93db674fc4a9cbf7d3be6da113fb27ffae6ca42b0de8bca25a17ba19ed44c91d810ab46bd2c76320ce79689a8fae6d63cf9e697218e8fe6d3d966d7ff63bd063d9251ae7fcb03d29529c713b90ad686aca5d87d0eeed9f8448ad3bc99d02da7ba410f4854417af3284508944dfd0759f63b16e1caae6fe60e67cb17a2075ccaf26195e2337bcee015cc8300d53ad8f7fa60717950c2d445655cd44b713c8289e5d65832a27677127c645970b81f2cd27870e1885690da202aba1ba4e47e260f659da081fd1423bff9b2072dd5bc9f43629a989c9b2a567264abf10e1c5ae333935d5cf08d", 0xe8}], 0x5, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x1b0}}], 0x3, 0x200400c3) (async, rerun: 64)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lc\x00', 0x15, 0x9, 0x36}, 0x2c) (async)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) (async)
bind$tipc(r0, 0x0, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0f00000004000000080000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000004c0)=ANY=[@ANYRES8=r6], 0xf8}, 0x1, 0x0, 0x0, 0x4008040}, 0x40000) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r6, &(0x7f0000000bc0), &(0x7f0000000c00)=@udp6=r5}, 0x20)
close(0x3) (async)
sendmsg$tipc(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) (async)
setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 32)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004"], 0x328}}, 0x84) (async)
readv(r8, &(0x7f0000000740)=[{&(0x7f00000002c0)=""/206, 0xce}], 0x1)

430.635609ms ago: executing program 3 (id=6338):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000800)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan1\x00', <r3=>0x0})
sendmmsg$inet6(r2, &(0x7f0000002180)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x800, @private0, 0x7f15}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0xff}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x3b}, r3}}}], 0x40}}], 0x1, 0x4008090)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280080018000dac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

356.38625ms ago: executing program 0 (id=6339):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000030400000000fddbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000087520100200012800b000100628d696467650000100002800c002e000000000001000000c03f3b777b5a6acf192468b4a0bd6d14bf577ec0109b34acf85d29abe1b100a74347e7c2e4b1a2cd3a14f27b58c32d6bcf793e93d0bbddc79660dc8d4bd11cdf0b52e0039f4be48668d79b6ec2d6fee4467638e5f37a72d614d66151c2a06e269eba04677125b885e5492fa1"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0)

281.857373ms ago: executing program 3 (id=6340):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x74, 0x0, 0x800, 0x15287}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x1}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socket$inet(0x2, 0x5, 0x9)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000001d00)={<r1=>0x0, 0x10, &(0x7f0000001cc0)=[@in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000001d40)=0x10)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r3=>0x0]}, &(0x7f0000000040)=0x8)
sendmmsg$inet_sctp(r2, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x208, 0xff, 0x7}}], 0x20, 0x4c004}], 0x1, 0x8010)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000800)={r3, 0x4, 0x1, 'u'}, 0x9)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000022c0)={r1, 0xfffd}, &(0x7f0000002300)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000026c0)={0x0, 0xc}, &(0x7f0000002700)=0xc)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f00000000c0), 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000200)={0x1, [<r5=>0x0]}, &(0x7f0000000080)=0x8)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r9 = accept4(r8, 0x0, 0x0, 0x0)
sendmsg$alg(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r9, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/57, 0x39}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f00000003c0)=""/213, 0xd5}, {&(0x7f00000004c0)=""/11, 0xb}, {&(0x7f0000000500)=""/29, 0x1d}], 0x7}, 0x3}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000900)=""/210, 0xd2}], 0x1}}], 0x2, 0x10100, 0x0)
sendmsg$nl_route_sched_retired(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f00000010c0)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000180)={r10, @in={{0x2, 0x4e20, @empty}}, 0x7, 0x4002}, 0x90)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000001d80)={0x5, 0x8203, 0xafc, 0x7, r10}, &(0x7f0000001dc0)=0x10)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000240)={r5}, &(0x7f0000000340)=0x23)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000003c40)={0x0, 0x5}, &(0x7f0000003c80)=0x8)
socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)

279.543158ms ago: executing program 1 (id=6341):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x8, 0x20, 0xffffffff, 0x1, 0x1, 0xfffffffe}, 0x50)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r4, 0xfffffffc)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00'})
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r5)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x5, 0x2, 0x0, &(0x7f0000000240)) (async)
socketpair(0x5, 0x2, 0x0, &(0x7f0000000240)={<r7=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000200)="9b8a7e57553cacc864ce6bc284480783523718790bfb7d747b2eace2cdbe97b78dd70235520c6dbfcbbaca78867da268d0", &(0x7f00000002c0)=@udp=r7}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000200)="9b8a7e57553cacc864ce6bc284480783523718790bfb7d747b2eace2cdbe97b78dd70235520c6dbfcbbaca78867da268d0", &(0x7f00000002c0)=@udp=r7}, 0x20)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x28, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$unix(r1, 0x0, 0xc800)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r10, 0x1, 0xa, &(0x7f0000000100)=0x7d06, 0x4)
recvfrom$inet6(r10, 0x0, 0x0, 0x40000041, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb}, 0x50) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb}, 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r11, @ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r12}, 0xc)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080))
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0)

275.369819ms ago: executing program 0 (id=6342):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x3})
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4804}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}]}, 0x34}, 0x1, 0xba01, 0x0, 0x4004001}, 0x4000000)
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)={'vxcan1\x00'})
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040), 0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x7}, [@NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x22eb}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0)
ioctl$sock_bt_hci(r3, 0x800448d5, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES64=0x0, @ANYRES64], 0x40}, 0x1, 0x0, 0x0, 0x24000014}, 0x0)

131.146684ms ago: executing program 0 (id=6343):
syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c6ea090000000000000100000000e01f00000000000000ff0200000000000000000000000000010001c204"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xa, 0xb}], 0x10, 0x7ff}, 0x94)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001", @ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r3], 0x48}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000006ac0), 0x6, 0x640400c0)
r4 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@getrule={0x14, 0x22, 0x20, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000010c0)=@newqdisc={0x498, 0x24, 0xd0f, 0x470bd2d, 0x1100000, {0x60, 0x0, 0x0, r9, {0x0, 0xffff}, {0x10, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x2dc, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x3}, @TCA_GRED_PARMS={0x38, 0x1, {0x3, 0x81, 0x0, 0x4, 0x5, 0x1, 0x9, 0xfff, 0x101, 0xd99, 0x13, 0x1e, 0xe, 0x0, 0x80000000, 0x3}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x8}, @TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x6, 0x4c5f, 0xb, 0x3, 0xfffffff8, 0xb, 0x3, 0x3, 0x0, 0x2, 0x1a, 0xb, 0x3, 0x5, 0x2}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8, 0x5, 0x4}, @TCA_GRED_PARMS={0x38, 0x1, {0x300, 0x5161, 0x0, 0xd, 0xa3da, 0x7, 0x7, 0x800, 0x96cdf6, 0x3, 0x1f, 0x16, 0xb, 0x1, 0x9e, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x1, 0xc, 0x0, 0x1}}]}}, @TCA_STAB={0x18c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x9, 0x2, 0x0, 0x0, 0x1, 0x8, 0x3}}, {0xa, 0x2, [0x7, 0x100, 0xffff]}}, {{0x1c, 0x1, {0x5, 0x4, 0x3, 0x80000001, 0x1, 0x6, 0xffff, 0x8}}, {0x14, 0x2, [0x1, 0x7ff, 0xe5a, 0x8, 0x7, 0xeb8, 0x3, 0xda6]}}, {{0x1c, 0x1, {0x4, 0x2, 0xa8b, 0xb, 0x2, 0x1, 0x5}}, {0x4}}, {{0x1c, 0x1, {0x7, 0xff, 0x4, 0x0, 0x1, 0x100, 0x5, 0x5}}, {0xe, 0x2, [0x8b, 0x8001, 0x7ff, 0xfff7, 0x2]}}, {{0x1c, 0x1, {0x80, 0x1c, 0x400, 0x8fa, 0x0, 0x6, 0x2, 0x1}}, {0x6, 0x2, [0xa5]}}, {{0x1c, 0x1, {0xd, 0x7, 0x9000, 0x200, 0x0, 0x1, 0x80, 0x6}}, {0x10, 0x2, [0x7, 0x4e, 0xbba5, 0x4, 0x7, 0x400]}}, {{0x1c, 0x1, {0x5, 0x3, 0x4fb, 0x7, 0x2, 0xd500, 0x64, 0x3}}, {0xa, 0x2, [0x1000, 0x1, 0x201]}}, {{0x1c, 0x1, {0x3, 0xf6, 0x1, 0x1, 0x0, 0xffffffff, 0x1ff, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x2, 0x9, 0x0, 0x0, 0x2, 0x2, 0x0, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x7, 0x6, 0x0, 0x6, 0x2, 0x0, 0x2, 0x1}}, {0x6, 0x2, [0x9]}}]}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404c0c1}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000000000604000000080000000100000ff7ffffff0400000001000000fffffff70030615f5f002e305f"], 0x0, 0x46, 0x0, 0x1}, 0x28)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1e00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="6a58faae97be0aee752c15d8424bda7e80a2245af4032c2cc0a4f7f3337a5e1d68fd1d4cd963f516c2a53eb9d72649031e2125f5e0ff237f0a9c79e1fc3184f9c14b082780434d4eaae699befaf0ed0d67b6905a25f5bfb2614a41d288102255298d0e1257381090359c051c6f859c1ad47404e787285a7f20e8d143f9466040249fe60eeb6ffac3a46c2cad3a44235266437bb70000000000000000", @ANYRES64=0x0], 0x20)
sendmsg$nl_route_sched(r10, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000a000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000300000000002604fdffff02000016010000033800001d13f8ff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, 0x0, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_ECHOREQ(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r13, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x90)

60.650375ms ago: executing program 1 (id=6344):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xd50, 0xffffffffffffff60, &(0x7f0000000380)="b9ff0300600d698cff9e14f08edd", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002a00)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@mcast1, 0x0, 0x5}, {@in=@loopback, 0x0, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x8}}, @algo_auth={0x48, 0x1, {{'cryptd(sha256-ce)\x00'}}}]}, 0x1a0}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x124, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0xac, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x5f, 0x2, "6f28cae7e763e81067d4ceb813e7feb2a199aa4d55a1ab96f08a0f0e794136b12fef25420295cc1e507f98d439d24055b3819ebc8073730523a0a085ad7669c2155f69b15be1a3c2c548d7259b70c08e808f7af3a3406f731c9d6e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x41, 0x3, "5ae3420e80c07506bfd5002f75393ca25f1b4eaf61a166ad9b6b03caed34ec7ca2d030cc7a9c46dec5fa602fdf022276c1d032155f658f98a411e682d7"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x124}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="840000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00300000000000005400128009000100766c616e000000004400028006000100000000000600050081000000280003803900010006000000090000000c00010000040000000000008dff010040000000060000000600050088a8000008000a00", @ANYRES32, @ANYBLOB="080005"], 0x84}, 0x1, 0xba01}, 0x0)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_DEL_RULE(r6, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000014c0)={0x420, 0x3f4, 0x0, 0x0, 0x0, {0x10, 0x3ea, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}, 0x420}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_AP(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r8, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4a}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xd50, 0xffffffffffffff60, &(0x7f0000000380)="b9ff0300600d698cff9e14f08edd", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002a00)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@mcast1, 0x0, 0x5}, {@in=@loopback, 0x0, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x8}}, @algo_auth={0x48, 0x1, {{'cryptd(sha256-ce)\x00'}}}]}, 0x1a0}}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x124, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0xac, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x5f, 0x2, "6f28cae7e763e81067d4ceb813e7feb2a199aa4d55a1ab96f08a0f0e794136b12fef25420295cc1e507f98d439d24055b3819ebc8073730523a0a085ad7669c2155f69b15be1a3c2c548d7259b70c08e808f7af3a3406f731c9d6e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x41, 0x3, "5ae3420e80c07506bfd5002f75393ca25f1b4eaf61a166ad9b6b03caed34ec7ca2d030cc7a9c46dec5fa602fdf022276c1d032155f658f98a411e682d7"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x124}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="840000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00300000000000005400128009000100766c616e000000004400028006000100000000000600050081000000280003803900010006000000090000000c00010000040000000000008dff010040000000060000000600050088a8000008000a00", @ANYRES32, @ANYBLOB="080005"], 0x84}, 0x1, 0xba01}, 0x0) (async)
socket$nl_audit(0x10, 0x3, 0x9) (async)
sendmsg$AUDIT_DEL_RULE(r6, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000014c0)={0x420, 0x3f4, 0x0, 0x0, 0x0, {0x10, 0x3ea, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}, 0x420}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_STOP_AP(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r8, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4a}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000) (async)

0s ago: executing program 0 (id=6345):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x70bd05, 0x4, {0x2}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x800)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0xe722e18}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)
socket$alg(0x26, 0x5, 0x0)
bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r3, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r7, 0x89b1, &(0x7f0000000040)={'syz_tun\x00', 0xfffffffe})
r8 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
unshare(0x0)
shutdown(r4, 0x1)
r9 = socket$l2tp6(0xa, 0x2, 0x73)
sendto$inet6(r9, 0x0, 0x0, 0x0, 0x0, 0x0)
shutdown(r3, 0x1)
bind$inet(r2, 0x0, 0x0)

kernel console output (not intermixed with test programs):

g interface: dummy0
[  348.165900][T21961] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4515'.
[  348.367100][T21983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4521'.
[  348.381719][T21983] vlan3: entered allmulticast mode
[  348.383772][T21983] bridge0: entered allmulticast mode
[  348.385954][T21983] bridge296: port 1(vlan3) entered blocking state
[  348.388209][T21983] bridge296: port 1(vlan3) entered disabled state
[  348.393361][T21983] vlan3: entered promiscuous mode
[  348.395498][T21983] bridge0: entered promiscuous mode
[  348.469221][T21986] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4522'.
[  348.548371][T21998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4525'.
[  348.561764][T21998] sit3: entered promiscuous mode
[  348.576057][T22000] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  348.582807][T22000] netem: change failed
[  348.587348][T22000] tipc: Resetting bearer <eth:syzkaller0>
[  348.616139][T22002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4527'.
[  348.619367][T22002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4527'.
[  348.712843][T22005] netlink: 'syz.2.4528': attribute type 10 has an invalid length.
[  348.716306][T22005] bond0: (slave 0!): Releasing backup interface
[  348.724041][T22005] netlink: 'syz.2.4528': attribute type 10 has an invalid length.
[  348.728386][T22005] bond0: (slave 0!): Enslaving as an active interface with an up link
[  348.939372][T22020] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4532'.
[  349.199116][T22028] gretap0: entered promiscuous mode
[  349.210771][T22028] gretap0: left promiscuous mode
[  349.296513][T22030] bond0: entered promiscuous mode
[  349.456916][T22037] bond0: left promiscuous mode
[  349.458783][T22037] dummy0: left promiscuous mode
[  349.463514][T22037] wg1: left promiscuous mode
[  349.466392][T22037] wg1: left allmulticast mode
[  349.470344][T22037] macsec0: left allmulticast mode
[  349.472990][T22037] tipc: Resetting bearer <eth:syzkaller0>
[  349.496283][T22037] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  349.499073][T22037] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  349.507487][T22037] gtp0: left promiscuous mode
[  349.509521][T22037] gtp0: left allmulticast mode
[  349.514542][T22037] gretap1: left promiscuous mode
[  349.522678][T22037] bond5: left promiscuous mode
[  349.524842][T22037] bond5: left allmulticast mode
[  349.527542][T22037] veth5: left promiscuous mode
[  349.530373][T22037] veth7: left promiscuous mode
[  349.534342][T22037] bridge104: left promiscuous mode
[  349.536632][T22037] bridge104: left allmulticast mode
[  349.539287][T22037] ip6erspan0: left allmulticast mode
[  349.543999][T22037] veth11: left allmulticast mode
[  349.547995][T22037] bond9: left promiscuous mode
[  349.550314][T22037] bond9: left allmulticast mode
[  349.553812][T22037] bond11: left promiscuous mode
[  349.555823][T22037] batadv1: left promiscuous mode
[  349.558212][T22037] batadv1: left allmulticast mode
[  349.559991][T22037] vxlan2: left promiscuous mode
[  349.561805][T22037] vxlan2: left allmulticast mode
[  349.564129][T22037] ip6gre2: left allmulticast mode
[  349.567127][T22037] veth15: left promiscuous mode
[  349.572459][T22037] vlan1: left promiscuous mode
[  349.575261][T22037] vlan1: left allmulticast mode
[  349.577168][T22037] hsr_slave_1: left allmulticast mode
[  349.581100][T22037] bond15: left promiscuous mode
[  349.584258][T22037] veth17: left promiscuous mode
[  349.587549][T22037] veth19: left promiscuous mode
[  349.592644][T22037] bridge183: left allmulticast mode
[  349.596269][T22037] veth21: left promiscuous mode
[  349.598668][T22037] xfrm1: left allmulticast mode
[  349.601466][T22037] macvtap1: left promiscuous mode
[  349.604615][T22037] macvtap1: left allmulticast mode
[  349.607755][T22037] bridge204: left allmulticast mode
[  349.612422][T22037] bridge214: left allmulticast mode
[  349.614553][T22037] bridge215: left allmulticast mode
[  349.616919][T22037] bridge216: left allmulticast mode
[  349.619218][T22037] bridge217: left allmulticast mode
[  349.621609][T22037] bridge218: left allmulticast mode
[  349.623897][T22037] bridge219: left allmulticast mode
[  349.627419][T22037] bridge220: left allmulticast mode
[  349.630245][T22037] bridge221: left allmulticast mode
[  349.632939][T22037] veth23: left promiscuous mode
[  349.635558][T22037] bond58: left promiscuous mode
[  349.637629][T22037] bond58: left allmulticast mode
[  349.639930][T22037] bridge230: left promiscuous mode
[  349.641868][T22037] bridge230: left allmulticast mode
[  349.646589][T22037] geneve5: left promiscuous mode
[  349.650806][T22037] vlan0: left allmulticast mode
[  349.652895][T22037] veth1: left allmulticast mode
[  349.656303][T22037] bridge271: left allmulticast mode
[  349.663780][T22037] veth27: left promiscuous mode
[  349.666530][T22037] bond64: left promiscuous mode
[  349.668667][T22037] bond65: left promiscuous mode
[  349.683700][T22037] sit3: left promiscuous mode
[  349.929197][T22067] gtp3: entered promiscuous mode
[  349.937954][T22067] gtp3: entered allmulticast mode
[  350.014784][T22079] netlink: 'syz.2.4554': attribute type 12 has an invalid length.
[  350.503300][   T57] block nbd2: Receive control failed (result -32)
[  351.145104][T22168] netlink: 'syz.0.4580': attribute type 5 has an invalid length.
[  351.355542][T22189] tipc: Resetting bearer <eth:team0>
[  351.460211][T22196] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  351.471555][T22196] tipc: Disabling bearer <eth:syzkaller0>
[  351.542865][T22201] can: request_module (can-proto-0) failed.
[  351.546564][T22201] netlink: 'syz.2.4593': attribute type 21 has an invalid length.
[  351.553988][T22201] netlink: 'syz.2.4593': attribute type 6 has an invalid length.
[  351.564164][T22201] net_ratelimit: 15 callbacks suppressed
[  351.564177][T22201] openvswitch: netlink: IP tunnel dst address not specified
[  351.977280][T22258] bridge: RTM_NEWNEIGH with invalid state 0x1
[  352.222377][T22284] netlink: 'syz.2.4618': attribute type 16 has an invalid length.
[  352.225540][T22284] netlink: 'syz.2.4618': attribute type 17 has an invalid length.
[  352.243119][T22284] tipc: Resetting bearer <eth:syzkaller0>
[  352.349965][T22298] bridge0: port 1(erspan0) entered blocking state
[  352.352437][T22298] bridge0: port 1(erspan0) entered disabled state
[  352.354885][T22298] erspan0: entered allmulticast mode
[  352.358063][T22298] erspan0: entered promiscuous mode
[  352.714151][T22313] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  352.745223][T22322] tun0: tun_chr_ioctl cmd 1074025672
[  352.747462][T22322] tun0: ignored: set checksum disabled
[  352.839023][T22327] __nla_validate_parse: 34 callbacks suppressed
[  352.839032][T22327] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4631'.
[  352.994180][T22342] bond0: (slave 0!): Releasing backup interface
[  352.997317][T22342] veth0_to_bond: left allmulticast mode
[  352.999299][T22342] veth0_to_bond: left promiscuous mode
[  353.001457][T22342] bridge299: port 1(veth0_to_bond) entered disabled state
[  353.008286][T22342] bond37: (slave bridge291): Removing an active aggregator
[  353.012626][T22342] bond37: (slave bridge291): Releasing backup interface
[  353.017162][T22342] bridge291: left promiscuous mode
[  353.019161][T22342] bridge291: left allmulticast mode
[  353.023869][T22342] bond38: (slave gretap3): Releasing active interface
[  353.186024][T22354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4637'.
[  353.294979][T22357] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4638'.
[  353.513607][T22368] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  353.517360][T22368] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  353.521725][T22368] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  353.526955][T22368] tipc: Resetting bearer <eth:syzkaller0>
[  353.579046][T22371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4642'.
[  353.739343][T22382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4646'.
[  353.747765][T22382] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  353.752458][T22382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4646'.
[  354.623815][T22394] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4650'.
[  354.629018][T22394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4650'.
[  354.789242][T22412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4654'.
[  354.824215][T22413] netlink: 212404 bytes leftover after parsing attributes in process `syz.1.4656'.
[  354.956491][T22420] netlink: 'syz.2.4658': attribute type 2 has an invalid length.
[  355.108341][T22435] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  355.148359][T22435] tipc: Resetting bearer <eth:syzkaller0>
[  355.167281][T22434] tipc: Disabling bearer <eth:syzkaller0>
[  355.174613][T22444] netlink: 'syz.2.4664': attribute type 30 has an invalid length.
[  355.182401][ T5877] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  355.182451][T22444] netlink: 'syz.2.4664': attribute type 30 has an invalid length.
[  355.186455][ T5877] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  355.192556][ T5877] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  355.196306][ T5877] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  355.253187][T22450] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[  355.256800][T22450] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  355.433405][ T8237] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  355.436398][ T8237] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  355.443335][ T8237] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  355.446246][ T8237] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  355.702079][T22479] netlink: 'syz.2.4675': attribute type 1 has an invalid length.
[  355.737861][T22479] 8021q: adding VLAN 0 to HW filter on device bond42
[  355.768268][T22486] netlink: 'syz.2.4677': attribute type 1 has an invalid length.
[  355.781687][T22486] bond1: (slave vcan0): The slave device specified does not support setting the MAC address
[  355.785956][T22486] bond1: (slave vcan0): Error -95 calling set_mac_address
[  355.841931][T22489] bond1: (slave vcan0): The slave device specified does not support setting the MAC address
[  355.846800][T22489] bond1: (slave vcan0): Error -95 calling set_mac_address
[  356.004200][T22490] sctp: [Deprecated]: syz.1.4678 (pid 22490) Use of int in max_burst socket option deprecated.
[  356.004200][T22490] Use struct sctp_assoc_value instead
[  356.703727][T22543] netlink: 'syz.0.4692': attribute type 1 has an invalid length.
[  356.753865][T22543] veth29: entered promiscuous mode
[  356.761891][T22543] bond66: (slave veth29): Enslaving as a backup interface with a down link
[  357.052472][T22568] nbd1: detected capacity change from 0 to 63
[  357.133574][T22581] tipc: Enabled bearer <eth:gre0>, priority 10
[  357.181595][T22584] netlink: 'syz.0.4703': attribute type 1 has an invalid length.
[  357.707650][   T57] block nbd1: Receive control failed (result -104)
[  357.806815][T22623] macsec3: entered promiscuous mode
[  357.808615][T22623] team0: entered promiscuous mode
[  357.813017][T22623] macsec3: entered allmulticast mode
[  357.814818][T22623] team0: entered allmulticast mode
[  357.817052][T22623] team0: Device macsec3 is already an upper device of the team interface
[  357.830300][T22623] team0: left allmulticast mode
[  357.832134][T22623] team0: left promiscuous mode
[  358.101905][T22637] __nla_validate_parse: 54 callbacks suppressed
[  358.101916][T22637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4718'.
[  358.107248][T22637] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4718'.
[  358.284857][T22650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4723'.
[  358.406690][T22655] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4725'.
[  358.440368][T22657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4726'.
[  358.685268][T22665] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4729'.
[  358.755953][T22665] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  358.844413][T22669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4731'.
[  359.255259][T22684] tipc: Enabling of bearer <eth:syzkaller0g> rejected, failed to enable media
[  359.568276][T22707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4742'.
[  359.573676][T22707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4742'.
[  359.590544][T22710] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4743'.
[  359.659065][T22721] netlink: 'syz.0.4745': attribute type 9 has an invalid length.
[  360.227518][T22750] netlink: 'syz.2.4757': attribute type 20 has an invalid length.
[  360.392802][T22765] bond17: (slave macvlan0): making interface the new active one
[  360.396534][T22765] bond17: (slave macvlan0): Enslaving as an active interface with an up link
[  360.403692][T22758] erspan0: left allmulticast mode
[  360.405539][T22758] erspan0: left promiscuous mode
[  360.407442][T22758] bridge0: port 1(erspan0) entered disabled state
[  360.415003][T22758] bond64: (slave bond65): Releasing backup interface
[  360.418498][T22758] vlan3: left allmulticast mode
[  360.421097][T22758] bridge0: left allmulticast mode
[  360.423133][T22758] vlan3: left promiscuous mode
[  360.424969][T22758] bridge0: left promiscuous mode
[  360.426994][T22758] bridge296: port 1(vlan3) entered disabled state
[  360.434289][T22758] bond66: (slave veth29): Releasing backup interface
[  360.439304][T22758] bond17: (slave macvlan0): Releasing backup interface
[  360.455236][T22767] syzkaller1: entered promiscuous mode
[  360.457930][T22767] syzkaller1: entered allmulticast mode
[  360.468635][T22769] netlink: 'syz.0.4763': attribute type 10 has an invalid length.
[  360.730230][T22786] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  360.772409][T22793] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  361.037229][T22812] netlink: 'syz.1.4777': attribute type 10 has an invalid length.
[  361.044278][T22812] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  361.047294][T22812] bond0: (slave wlan1): Enslaving as an active interface with a down link
[  361.274326][T22829] netlink: 'syz.1.4780': attribute type 1 has an invalid length.
[  361.305041][T22829] bond41: (slave geneve7): making interface the new active one
[  361.309415][T22829] bond41: (slave geneve7): Enslaving as an active interface with an up link
[  361.313171][ T5693] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  361.318338][ T5693] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  361.322503][ T5693] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  361.327330][ T5693] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  361.334678][T22829] 8021q: adding VLAN 0 to HW filter on device bond41
[  362.167385][T22865] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  362.528048][T22885] netlink: 'syz.2.4798': attribute type 8 has an invalid length.
[  362.651080][T22892] veth0_to_bridge: entered promiscuous mode
[  362.654819][T22891] veth0_to_bridge: left promiscuous mode
[  362.697985][T22897] netlink: 'syz.2.4801': attribute type 1 has an invalid length.
[  362.716518][T22897] bond43: entered promiscuous mode
[  362.718462][T22897] bond43: entered allmulticast mode
[  362.727096][T22896] bridge350: entered promiscuous mode
[  362.728846][T22896] bridge350: entered allmulticast mode
[  363.132575][T22920] batadv_slave_1: entered promiscuous mode
[  363.136793][T22919] batadv_slave_1: left promiscuous mode
[  363.169532][T22939] __nla_validate_parse: 35 callbacks suppressed
[  363.177926][T22939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4812'.
[  363.198146][T22942] netlink: 'syz.0.4813': attribute type 1 has an invalid length.
[  363.451425][T22966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4820'.
[  363.458333][T22966] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4820'.
[  363.843238][T22978] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4825'.
[  364.143156][T15113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  364.146304][T15113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  364.750849][T22996] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  364.756168][T22996] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4830'.
[  364.815832][T22995] tipc: Disabling bearer <eth:syzkaller0>
[  364.897275][T23003] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4831'.
[  364.911013][T23003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4831'.
[  364.929892][T23009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4832'.
[  364.932663][T23009] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4832'.
[  364.962802][T23016] netlink: 'syz.1.4834': attribute type 13 has an invalid length.
[  364.965720][T23016] netlink: 'syz.1.4834': attribute type 17 has an invalid length.
[  364.973989][T23016] tipc: Resetting bearer <eth:team0>
[  364.976345][T23016] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  365.304101][T23042] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4840'.
[  365.314928][T23045] netlink: 'syz.0.4841': attribute type 13 has an invalid length.
[  365.506230][T23062] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  365.574831][T23068] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  365.727506][T23077] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  366.378192][T23139] sctp: [Deprecated]: syz.1.4869 (pid 23139) Use of int in maxseg socket option.
[  366.378192][T23139] Use struct sctp_assoc_value instead
[  366.745844][T23174] pim6reg: entered allmulticast mode
[  366.749367][T23174] pim6reg: left allmulticast mode
[  366.901720][T23186] netlink: 'syz.2.4880': attribute type 1 has an invalid length.
[  367.191043][T23212] netlink: 'syz.2.4889': attribute type 1 has an invalid length.
[  367.218679][T23212] 8021q: adding VLAN 0 to HW filter on device bond44
[  367.548712][T23236] sctp: [Deprecated]: syz.1.4896 (pid 23236) Use of int in max_burst socket option.
[  367.548712][T23236] Use struct sctp_assoc_value instead
[  367.807758][T23251] netlink: 'syz.1.4900': attribute type 10 has an invalid length.
[  368.126492][T23281] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  368.252321][T23287] netlink: 'syz.1.4911': attribute type 7 has an invalid length.
[  368.263279][T23287] : entered promiscuous mode
[  368.339393][T23293] netlink: 'syz.0.4913': attribute type 10 has an invalid length.
[  368.374175][T23290] __nla_validate_parse: 21 callbacks suppressed
[  368.374322][T23290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4912'.
[  368.496473][T23302] tipc: Resetting bearer <eth:syzkaller0>
[  368.525427][T23308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4917'.
[  368.526294][T23309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4918'.
[  368.733287][T23326] sctp: [Deprecated]: syz.1.4922 (pid 23326) Use of struct sctp_assoc_value in delayed_ack socket option.
[  368.733287][T23326] Use struct sctp_sack_info instead
[  368.734656][T23324] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4921'.
[  368.753430][T23328] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4921'.
[  368.768621][T23328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4921'.
[  368.905508][T23338] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4924'.
[  368.938344][T23340] netlink: 'syz.0.4925': attribute type 1 has an invalid length.
[  368.942435][T23340] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4925'.
[  368.952726][T23340] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4925'.
[  368.982114][T23343] block nbd3: Unsupported socket: shutdown callout must be supported.
[  369.068507][T23350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4927'.
[  369.110564][T23354] bond0: Device is already in use.
[  369.350976][T23366] IPVS: set_ctl: invalid protocol: 41 172.30.0.2:20004
[  370.236884][T23413] dvmrp8: entered allmulticast mode
[  370.243796][T23411] dvmrp8: left allmulticast mode
[  370.752223][T23410] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  370.849087][T23452] netlink: 'syz.0.4952': attribute type 17 has an invalid length.
[  370.855019][T23452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  370.861552][T23453] netlink: 'syz.1.4953': attribute type 3 has an invalid length.
[  370.864700][T23453] netlink: 'syz.1.4953': attribute type 3 has an invalid length.
[  371.224656][T23481] netlink: 'syz.0.4960': attribute type 3 has an invalid length.
[  371.404673][T23483] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  372.828063][T23585] sctp: [Deprecated]: syz.1.4994 (pid 23585) Use of struct sctp_assoc_value in delayed_ack socket option.
[  372.828063][T23585] Use struct sctp_sack_info instead
[  373.112053][T23611] openvswitch: netlink: Flow key attr not present in new flow.
[  373.213555][T23615] netlink: 'syz.2.5004': attribute type 6 has an invalid length.
[  373.705108][T23651] __nla_validate_parse: 34 callbacks suppressed
[  373.705123][T23651] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5013'.
[  373.735726][T23651] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5013'.
[  373.772172][T23654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5014'.
[  373.782806][T23654] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5014'.
[  373.821831][T23654] geneve4: entered promiscuous mode
[  373.825159][T23654] geneve4: entered allmulticast mode
[  373.832953][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  373.891149][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  373.894100][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  373.903608][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  374.012296][T23659] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5016'.
[  374.280005][T23678] tipc: Resetting bearer <eth:team0>
[  374.283605][T23678] bond0: (slave wlan1): Releasing backup interface
[  374.288229][T23678] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  374.298431][T23678] bond41: (slave geneve7): Releasing active interface
[  374.313796][ T5693] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  374.317584][T23678] syz.1.5019: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  374.325211][T23678] CPU: 0 UID: 0 PID: 23678 Comm: syz.1.5019 Not tainted syzkaller #0 PREEMPT(full) 
[  374.325227][T23678] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  374.325234][T23678] Call Trace:
[  374.325239][T23678]  <TASK>
[  374.325261][T23678]  dump_stack_lvl+0x189/0x250
[  374.325282][T23678]  ? __pfx_dump_stack_lvl+0x10/0x10
[  374.325295][T23678]  ? __pfx__printk+0x10/0x10
[  374.325311][T23678]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  374.325326][T23678]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  374.325340][T23678]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  374.325355][T23678]  warn_alloc+0x214/0x310
[  374.325373][T23678]  ? stack_depot_save_flags+0x40/0x860
[  374.325390][T23678]  ? __pfx_warn_alloc+0x10/0x10
[  374.325408][T23678]  ? kasan_save_track+0x4f/0x80
[  374.325422][T23678]  ? xskq_create+0x56/0x170
[  374.325437][T23678]  ? xsk_init_queue+0xb0/0x110
[  374.325449][T23678]  ? xsk_setsockopt+0x4dc/0x8d0
[  374.325461][T23678]  ? do_sock_setsockopt+0x17c/0x1b0
[  374.325472][T23678]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  374.325482][T23678]  ? do_syscall_64+0xfa/0x3b0
[  374.325491][T23678]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.325508][T23678]  __vmalloc_node_range_noprof+0x125/0x12f0
[  374.325546][T23678]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  374.325563][T23678]  ? xskq_create+0x56/0x170
[  374.325580][T23678]  ? __kasan_kmalloc+0x93/0xb0
[  374.325597][T23678]  vmalloc_user_noprof+0xad/0xf0
[  374.325613][T23678]  ? xskq_create+0xbf/0x170
[  374.325629][T23678]  xskq_create+0xbf/0x170
[  374.325646][T23678]  xsk_init_queue+0xb0/0x110
[  374.325663][T23678]  xsk_setsockopt+0x4dc/0x8d0
[  374.325679][T23678]  ? __pfx_xsk_setsockopt+0x10/0x10
[  374.325699][T23678]  ? __pfx_aa_sk_perm+0x10/0x10
[  374.325719][T23678]  ? aa_sock_opt_perm+0xff/0x1b0
[  374.325732][T23678]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  374.325744][T23678]  ? __pfx_xsk_setsockopt+0x10/0x10
[  374.325759][T23678]  do_sock_setsockopt+0x17c/0x1b0
[  374.325774][T23678]  __x64_sys_setsockopt+0x13f/0x1b0
[  374.325790][T23678]  do_syscall_64+0xfa/0x3b0
[  374.325799][T23678]  ? lockdep_hardirqs_on+0x9c/0x150
[  374.325814][T23678]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.325825][T23678]  ? exc_page_fault+0x9f/0xf0
[  374.325842][T23678]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.325852][T23678] RIP: 0033:0x7effa078ebe9
[  374.325863][T23678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  374.325872][T23678] RSP: 002b:00007effa154a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  374.325885][T23678] RAX: ffffffffffffffda RBX: 00007effa09c5fa0 RCX: 00007effa078ebe9
[  374.325893][T23678] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  374.325899][T23678] RBP: 00007effa0811e19 R08: 0000000000000004 R09: 0000000000000000
[  374.325906][T23678] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  374.325912][T23678] R13: 00007effa09c6038 R14: 00007effa09c5fa0 R15: 00007ffcec89d878
[  374.325933][T23678]  </TASK>
[  374.325937][T23678] Mem-Info:
[  374.336929][ T5693] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  374.342161][T23678] active_anon:4987 inactive_anon:0 isolated_anon:0
[  374.342161][T23678]  active_file:1494 inactive_file:38349 isolated_file:0
[  374.342161][T23678]  unevictable:1768 dirty:139 writeback:0
[  374.342161][T23678]  slab_reclaimable:12902 slab_unreclaimable:161726
[  374.342161][T23678]  mapped:18308 shmem:2461 pagetables:1016
[  374.342161][T23678]  sec_pagetables:0 bounce:0
[  374.342161][T23678]  kernel_misc_reclaimable:0
[  374.342161][T23678]  free:177685 free_pcp:19816 free_cma:0
[  374.357092][ T5693] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  374.359020][T23678] Node 0 active_anon:10824kB inactive_anon:0kB active_file:3720kB inactive_file:147616kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38120kB dirty:248kB writeback:0kB shmem:4992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11312kB pagetables:2408kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  374.364657][ T5693] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  374.367511][T23678] Node 1 active_anon:9124kB inactive_anon:0kB active_file:2256kB inactive_file:5780kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35112kB dirty:308kB writeback:0kB shmem:4852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8680kB pagetables:1588kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  374.372089][T23680] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5020'.
[  374.374656][T23678] Node 0 DMA free:13648kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:584kB local_pcp:288kB free_cma:0kB
[  374.522727][T23678] lowmem_reserve[]: 0 811 811 811 811
[  374.525228][T23678] Node 0 DMA32 free:73692kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10756kB inactive_anon:0kB active_file:3720kB inactive_file:147616kB unevictable:3536kB writepending:248kB present:1556484kB managed:830928kB mlocked:0kB bounce:0kB free_pcp:23116kB local_pcp:9556kB free_cma:0kB
[  374.537907][T23678] lowmem_reserve[]: 0 0 0 0 0
[  374.540101][T23678] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  374.551103][T23678] lowmem_reserve[]: 0 0 854 854 854
[  374.553252][T23678] Node 1 Normal free:163544kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9124kB inactive_anon:0kB active_file:2256kB inactive_file:5780kB unevictable:3536kB writepending:308kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:56060kB local_pcp:18132kB free_cma:0kB
[  374.565059][T23678] lowmem_reserve[]: 0 0 0 0 0
[  374.566823][T23678] Node 0 DMA: 20*4kB (U) 16*8kB (U) 8*16kB (U) 38*32kB (U) 13*64kB (U) 10*128kB (U) 9*256kB (U) 3*512kB (U) 2*1024kB (U) 2*2048kB (UM) 0*4096kB = 13648kB
[  374.571898][T23678] Node 0 DMA32: 1101*4kB (UM) 871*8kB (UME) 531*16kB (UME) 40*32kB (UME) 12*64kB (UM) 44*128kB (UM) 24*256kB (UME) 6*512kB (M) 8*1024kB (UM) 4*2048kB (M) 5*4096kB (U) = 73628kB
[  374.578483][T23678] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  374.584281][T23678] Node 1 Normal: 424*4kB (UME) 287*8kB (UME) 120*16kB (UME) 8*32kB (UME) 120*64kB (UME) 77*128kB (UM) 24*256kB (UME) 7*512kB (UME) 3*1024kB (UM) 6*2048kB (UE) 28*4096kB (UM) = 163480kB
[  374.590776][T23678] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  374.594388][T23678] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  374.599703][T23678] 42304 total pagecache pages
[  374.601895][T23678] 0 pages in swap cache
[  374.603795][T23678] Free swap  = 124996kB
[  374.605640][T23678] Total swap = 124996kB
[  374.608205][T23678] 786301 pages RAM
[  374.610253][T23678] 0 pages HighMem/MovableOnly
[  374.613015][T23678] 241337 pages reserved
[  374.615039][T23678] 0 pages cma reserved
[  374.658919][T23692] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5023'.
[  374.860946][T23700] netlink: 'syz.2.5026': attribute type 22 has an invalid length.
[  374.863877][T23700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5026'.
[  374.905712][T23706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5027'.
[  374.911393][T23700] netlink: 'syz.2.5026': attribute type 22 has an invalid length.
[  374.914708][T23700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5026'.
[  375.454901][T23739] netlink: 'syz.0.5036': attribute type 1 has an invalid length.
[  375.458348][T23739] netlink: 'syz.0.5036': attribute type 3 has an invalid length.
[  375.561335][T23741] netlink: 'syz.0.5037': attribute type 21 has an invalid length.
[  375.573354][T23741] ipvlan0: entered promiscuous mode
[  375.577282][T23741] bridge0: port 1(ipvlan0) entered blocking state
[  375.580473][T23741] bridge0: port 1(ipvlan0) entered disabled state
[  375.583346][T23741] ipvlan0: entered allmulticast mode
[  375.585652][T23741] gretap0: entered allmulticast mode
[  375.590199][T23741] ipvlan0: left allmulticast mode
[  375.592269][T23741] gretap0: left allmulticast mode
[  376.168071][T23751] tipc: Resetting bearer <eth:syzkaller0>
[  376.214341][ T5878] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  376.217854][ T5878] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  376.222847][ T5878] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  376.226107][ T5878] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  376.230580][ T5878] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  376.234439][ T5878] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  376.237909][ T5878] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  376.241420][ T5878] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  376.327042][T23762] netlink: 'syz.2.5044': attribute type 1 has an invalid length.
[  376.383308][T23762] bond45: (slave bridge369): making interface the new active one
[  376.387212][T23762] bond45: (slave bridge369): Enslaving as an active interface with an up link
[  376.394143][T23762] netlink: 'syz.2.5044': attribute type 1 has an invalid length.
[  376.405985][T23764] bond45: (slave bridge370): Enslaving as an active interface with a down link
[  376.707591][T23779] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  376.806131][T23783] netlink: 'syz.2.5050': attribute type 1 has an invalid length.
[  376.831024][T23783] bond46: entered promiscuous mode
[  376.834015][T23783] 8021q: adding VLAN 0 to HW filter on device bond46
[  376.859691][T23785] 8021q: adding VLAN 0 to HW filter on device bond46
[  376.863201][T23785] bond46: (slave vxcan1): The slave device specified does not support setting the MAC address
[  376.867647][T23785] bond46: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[  376.879369][T23785] bond46: (slave vxcan1): making interface the new active one
[  376.882609][T23785] vxcan1: entered promiscuous mode
[  376.885619][T23785] bond46: (slave vxcan1): Enslaving as an active interface with an up link
[  376.959306][T23791] ip6_vti0: entered allmulticast mode
[  376.968636][T23790] dvmrp8: entered allmulticast mode
[  376.972757][T23792] ip6_vti0: left allmulticast mode
[  376.975109][T23792] dvmrp8: left allmulticast mode
[  377.521525][T23818] netlink: 'syz.0.5060': attribute type 1 has an invalid length.
[  377.538558][T23818] 8021q: adding VLAN 0 to HW filter on device bond68
[  377.611070][T23818] veth31: entered promiscuous mode
[  377.616000][T23818] erspan0: entered allmulticast mode
[  377.769991][T23830] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  377.773639][T23830] openvswitch: netlink: Message has 252 unknown bytes.
[  377.937839][T23840] netlink: 'syz.0.5065': attribute type 1 has an invalid length.
[  377.954432][T23840] workqueue: Failed to create a rescuer kthread for wq "bond69": -EINTR
[  378.314040][T23865] tap0: tun_chr_ioctl cmd 1074025680
[  378.328883][T23865] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  378.353069][T23865] D: renamed from syzkaller0
[  378.410303][T23865] tipc: Disabling bearer <eth:syzkaller0>
[  378.436654][T23871] wireguard0: entered promiscuous mode
[  378.440548][T23871] wireguard0: entered allmulticast mode
[  378.687449][T23883] tipc: Resetting bearer <eth:team0>
[  378.781337][T23889] geneve8: entered promiscuous mode
[  378.783550][T23889] geneve8: entered allmulticast mode
[  378.787964][ T5693] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  378.792726][ T5693] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  378.796183][ T5693] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  378.798820][ T5693] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  378.803246][ T5693] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  378.806060][ T5693] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  378.809233][ T5693] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  378.813405][ T5693] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  378.862584][T23896] __nla_validate_parse: 22 callbacks suppressed
[  378.862596][T23896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5080'.
[  378.922625][T23905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5081'.
[  379.102213][T23916] macvtap0: entered promiscuous mode
[  379.104488][T23916] vlan0: entered promiscuous mode
[  379.106622][T23916] bond44: entered promiscuous mode
[  379.108901][T23916] macvtap0: entered allmulticast mode
[  379.114541][T23916] vlan0: entered allmulticast mode
[  379.116684][T23916] bond44: entered allmulticast mode
[  379.198465][T23925] sch_tbf: burst 2 is lower than device lo mtu (1550) !
[  379.214501][T23925] sch_tbf: burst 2 is lower than device lo mtu (1550) !
[  379.231108][T23925] sch_tbf: burst 2 is lower than device lo mtu (1550) !
[  379.236392][T23927] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5090'.
[  379.336744][T23934] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5092'.
[  379.378007][T23942] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5095'.
[  379.447719][T23950] vlan4: entered promiscuous mode
[  379.450833][T23950] bond0: entered promiscuous mode
[  379.707234][T23965] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5100'.
[  380.053452][T23968] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5101'.
[  380.118357][T23970] vlan2: entered promiscuous mode
[  380.262536][T23973] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5103'.
[  380.323644][T23980] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5105'.
[  380.475813][T23996] netlink: 'syz.1.5110': attribute type 13 has an invalid length.
[  380.478510][T23996] netlink: 'syz.1.5110': attribute type 17 has an invalid length.
[  380.543944][T23996] 8021q: adding VLAN 0 to HW filter on device bond0
[  380.551129][T23996] 8021q: adding VLAN 0 to HW filter on device team0
[  380.554956][T23996] tipc: Resetting bearer <eth:team0>
[  380.559022][T23996] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  380.761642][T24004] netlink: 'syz.0.5114': attribute type 2 has an invalid length.
[  381.355941][T24031] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5123'.
[  381.363188][T24033] tipc: MTU too low for tipc bearer
[  382.021889][T24102] netlink: 'syz.1.5148': attribute type 2 has an invalid length.
[  382.029346][T24102] A link change request failed with some changes committed already. Interface [SRW may have been left with an inconsistent configuration, please check.
[  382.049281][T24109] netlink: 'syz.2.5150': attribute type 1 has an invalid length.
[  382.055731][T24109] netlink: 'syz.2.5150': attribute type 1 has an invalid length.
[  382.072055][T24109] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  383.405746][T24157] netlink: 'syz.2.5163': attribute type 1 has an invalid length.
[  383.519111][T24157] bond47: (slave geneve5): making interface the new active one
[  383.523491][T24157] bond47: (slave geneve5): Enslaving as an active interface with an up link
[  383.569434][ T5877] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  383.573500][ T5877] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  383.622571][ T5877] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  383.661927][ T5877] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  383.942943][T24175] syzkaller1: entered promiscuous mode
[  383.945485][T24175] syzkaller1: entered allmulticast mode
[  384.060571][T24185] netlink: 'syz.2.5170': attribute type 1 has an invalid length.
[  384.089454][T24187] __nla_validate_parse: 14 callbacks suppressed
[  384.089468][T24187] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5171'.
[  384.130128][T24185] bond48: (slave bridge378): making interface the new active one
[  384.133502][T24185] bond48: (slave bridge378): Enslaving as an active interface with an up link
[  384.324604][T24210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5177'.
[  384.606963][T24230] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  384.610643][T24230] netlink: 'syz.0.5182': attribute type 17 has an invalid length.
[  385.434216][T24230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  385.499379][T24238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5185'.
[  385.744785][T24252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5191'.
[  385.800707][T24260] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5193'.
[  385.872317][T24269] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  385.904253][T24273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5196'.
[  385.964440][T24279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5196'.
[  385.982644][T24272] vlan4: entered promiscuous mode
[  385.984867][T24272] macvtap0: entered promiscuous mode
[  386.095957][T24272] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5197'.
[  386.120924][T24285] netlink: 'syz.0.5200': attribute type 10 has an invalid length.
[  386.126599][T24285] dummy0: entered promiscuous mode
[  386.128556][T24285] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  386.235021][T24301] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5204'.
[  386.270522][T24304] netlink: 'syz.0.5205': attribute type 1 has an invalid length.
[  386.294339][T24304] bond69: (slave bridge333): making interface the new active one
[  386.297421][T24304] bond69: (slave bridge333): Enslaving as an active interface with an up link
[  386.307711][T24306] unknown channel width for channel at 909000KHz?
[  386.339323][T24312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5208'.
[  386.420689][T24320] netlink: 'syz.2.5210': attribute type 1 has an invalid length.
[  386.424047][T24320] workqueue: Failed to create a rescuer kthread for wq "bond49": -EINTR
[  386.680338][ T5851] Bluetooth: hci0: command tx timeout
[  386.728181][T24359] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  386.960364][T24375] netlink: 'syz.2.5225': attribute type 17 has an invalid length.
[  386.965716][T24375] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  387.096332][T24380] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (47)
[  387.131150][T24382] netlink: 'syz.1.5229': attribute type 2 has an invalid length.
[  387.136517][T24382] netlink: 'syz.1.5229': attribute type 5 has an invalid length.
[  387.177194][T24384] bridge387: entered allmulticast mode
[  387.396971][   T61] block nbd1: Possible stuck request ffff88804af58000: control (read@0,1024B). Runtime 30 seconds
[  387.402167][   T61] block nbd1: Possible stuck request ffff88804af58200: control (read@1024,1024B). Runtime 30 seconds
[  387.406341][   T61] block nbd1: Possible stuck request ffff88804af58400: control (read@2048,1024B). Runtime 30 seconds
[  387.410951][   T61] block nbd1: Possible stuck request ffff88804af58600: control (read@3072,1024B). Runtime 30 seconds
[  388.272880][T24398] bridge0: failed insert local address into bridge forwarding table
[  388.327999][T24401] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7)
[  388.394911][T24417] netlink: 'syz.1.5239': attribute type 1 has an invalid length.
[  388.464848][T24417] bond42: entered promiscuous mode
[  388.466581][T24417] bond42: entered allmulticast mode
[  388.468884][T24417] 8021q: adding VLAN 0 to HW filter on device bond42
[  388.485646][T24417] bridge389: entered promiscuous mode
[  388.487588][T24417] bridge389: entered allmulticast mode
[  388.491298][T24417] bond42: (slave bridge389): Enslaving as a backup interface with an up link
[  388.570316][ T5877] bond42: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  388.649010][T24448] v: renamed from ip6_vti0
[  388.708614][ T5877] bond42: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  388.740526][T24466] IPVS: Unknown mcast interface: veth1_to_bridge
[  388.743193][T24466] IPVS: stopping backup sync thread 14343 ...
[  388.806458][T24471] netlink: 'syz.2.5252': attribute type 1 has an invalid length.
[  388.847748][T24471] bond1: (slave vcan0): The slave device specified does not support setting the MAC address
[  388.854436][T24471] bond1: (slave vcan0): Error -95 calling set_mac_address
[  388.899184][T24471] bond1: (slave vcan0): The slave device specified does not support setting the MAC address
[  388.905947][T24471] bond1: (slave vcan0): Error -95 calling set_mac_address
[  388.937964][T24477] netlink: 'syz.1.5256': attribute type 1 has an invalid length.
[  388.955267][T24477] 8021q: adding VLAN 0 to HW filter on device bond43
[  388.958806][T24480] 8021q: adding VLAN 0 to HW filter on device bond1
[  389.249250][T24492] __nla_validate_parse: 40 callbacks suppressed
[  389.249260][T24492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5260'.
[  389.287107][T24501] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5261'.
[  389.294779][T24501] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5261'.
[  389.297811][T24501] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5261'.
[  389.303048][T24501] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5261'.
[  389.506722][T24508] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5263'.
[  389.526903][T24508] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5263'.
[  389.533004][T24508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5263'.
[  389.757118][T24512] netlink: 'syz.0.5265': attribute type 2 has an invalid length.
[  389.817107][T24517] netlink: 'syz.0.5266': attribute type 1 has an invalid length.
[  389.820281][T24517] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5266'.
[  389.979425][T24526] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5268'.
[  389.987071][T24524] netlink: 'syz.0.5269': attribute type 1 has an invalid length.
[  390.303392][T24538] netlink: 'syz.1.5273': attribute type 10 has an invalid length.
[  390.325067][T24546] syzkaller1: entered promiscuous mode
[  390.327421][T24546] syzkaller1: entered allmulticast mode
[  390.373246][T24553] netlink: 'syz.1.5278': attribute type 1 has an invalid length.
[  390.392387][T24553] 8021q: adding VLAN 0 to HW filter on device bond44
[  390.416808][T24553] 8021q: adding VLAN 0 to HW filter on device bond44
[  390.419202][T24553] bond44: (slave vxcan3): The slave device specified does not support setting the MAC address
[  390.423632][T24553] bond44: (slave vxcan3): Error -95 calling set_mac_address
[  390.471303][T24555] veth39: entered promiscuous mode
[  390.476210][T24555] bond44: (slave veth39): Enslaving as an active interface with a down link
[  390.494498][T24553] erspan0: entered allmulticast mode
[  390.505522][T24553] bond44: (slave erspan0): making interface the new active one
[  390.508836][T24553] bond44: (slave erspan0): Enslaving as an active interface with an up link
[  390.693781][T24570] bond44: (slave erspan0): Releasing active interface
[  390.703998][T24570] tipc: Resetting bearer <eth:team0>
[  390.714294][T24570] bond42: (slave bridge389): Removing an active aggregator
[  390.719104][T24570] bond42: (slave bridge389): Releasing backup interface
[  390.732441][T24570] bridge389: left promiscuous mode
[  390.734296][T24570] bridge389: left allmulticast mode
[  390.739309][T24570] bond44: (slave veth39): Releasing active interface
[  390.747506][T24581] team0: Mode changed to "broadcast"
[  390.953742][ T5877] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  390.956627][ T5877] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  390.961090][ T5877] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  390.966188][ T5877] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  392.065054][T24648] IPv6: Can't replace route, no match found
[  392.088340][T24648] syz.1.5304: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  392.096180][T24648] CPU: 1 UID: 0 PID: 24648 Comm: syz.1.5304 Not tainted syzkaller #0 PREEMPT(full) 
[  392.096200][T24648] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  392.096208][T24648] Call Trace:
[  392.096213][T24648]  <TASK>
[  392.096220][T24648]  dump_stack_lvl+0x189/0x250
[  392.096242][T24648]  ? __pfx_dump_stack_lvl+0x10/0x10
[  392.096258][T24648]  ? __pfx__printk+0x10/0x10
[  392.096283][T24648]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  392.096298][T24648]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  392.096314][T24648]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  392.096331][T24648]  warn_alloc+0x214/0x310
[  392.096351][T24648]  ? stack_depot_save_flags+0x40/0x860
[  392.096370][T24648]  ? __pfx_warn_alloc+0x10/0x10
[  392.096391][T24648]  ? kasan_save_track+0x4f/0x80
[  392.096406][T24648]  ? xskq_create+0x56/0x170
[  392.096421][T24648]  ? xsk_init_queue+0xb0/0x110
[  392.096435][T24648]  ? xsk_setsockopt+0x4dc/0x8d0
[  392.096448][T24648]  ? do_sock_setsockopt+0x17c/0x1b0
[  392.096459][T24648]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  392.096469][T24648]  ? do_syscall_64+0xfa/0x3b0
[  392.096479][T24648]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.096497][T24648]  __vmalloc_node_range_noprof+0x125/0x12f0
[  392.096536][T24648]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  392.096558][T24648]  ? __kasan_kmalloc+0x93/0xb0
[  392.096575][T24648]  vmalloc_user_noprof+0xad/0xf0
[  392.096593][T24648]  ? xskq_create+0xbf/0x170
[  392.096611][T24648]  xskq_create+0xbf/0x170
[  392.096629][T24648]  xsk_init_queue+0xb0/0x110
[  392.096648][T24648]  xsk_setsockopt+0x4dc/0x8d0
[  392.096666][T24648]  ? __pfx_xsk_setsockopt+0x10/0x10
[  392.096681][T24648]  ? __pfx_aa_sk_perm+0x10/0x10
[  392.096701][T24648]  ? aa_sock_opt_perm+0xff/0x1b0
[  392.096715][T24648]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  392.096728][T24648]  ? __pfx_xsk_setsockopt+0x10/0x10
[  392.096745][T24648]  do_sock_setsockopt+0x17c/0x1b0
[  392.096762][T24648]  __x64_sys_setsockopt+0x13f/0x1b0
[  392.096778][T24648]  do_syscall_64+0xfa/0x3b0
[  392.096788][T24648]  ? lockdep_hardirqs_on+0x9c/0x150
[  392.096805][T24648]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.096816][T24648]  ? exc_page_fault+0x9f/0xf0
[  392.096864][T24648]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.096877][T24648] RIP: 0033:0x7effa078ebe9
[  392.096889][T24648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  392.096900][T24648] RSP: 002b:00007effa154a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  392.096915][T24648] RAX: ffffffffffffffda RBX: 00007effa09c5fa0 RCX: 00007effa078ebe9
[  392.096923][T24648] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  392.096931][T24648] RBP: 00007effa0811e19 R08: 0000000000000004 R09: 0000000000000000
[  392.096938][T24648] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  392.096945][T24648] R13: 00007effa09c6038 R14: 00007effa09c5fa0 R15: 00007ffcec89d878
[  392.096966][T24648]  </TASK>
[  392.096971][T24648] Mem-Info:
[  392.223983][T24648] active_anon:4999 inactive_anon:0 isolated_anon:0
[  392.223983][T24648]  active_file:1494 inactive_file:38355 isolated_file:0
[  392.223983][T24648]  unevictable:1768 dirty:154 writeback:0
[  392.223983][T24648]  slab_reclaimable:13317 slab_unreclaimable:163768
[  392.223983][T24648]  mapped:18307 shmem:2463 pagetables:1066
[  392.223983][T24648]  sec_pagetables:0 bounce:0
[  392.223983][T24648]  kernel_misc_reclaimable:0
[  392.223983][T24648]  free:178128 free_pcp:16864 free_cma:0
[  392.241554][T24648] Node 0 active_anon:11088kB inactive_anon:0kB active_file:3772kB inactive_file:147640kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38304kB dirty:168kB writeback:0kB shmem:4992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11548kB pagetables:2872kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  392.254098][T24648] Node 1 active_anon:8908kB inactive_anon:0kB active_file:2204kB inactive_file:5780kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35060kB dirty:448kB writeback:0kB shmem:4860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8732kB pagetables:1392kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  392.266041][T24648] Node 0 DMA free:13412kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:720kB local_pcp:320kB free_cma:0kB
[  392.276502][T24648] lowmem_reserve[]: 0 811 811 811 811
[  392.278567][T24648] Node 0 DMA32 free:69884kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10952kB inactive_anon:0kB active_file:3772kB inactive_file:147640kB unevictable:3536kB writepending:168kB present:1556484kB managed:830928kB mlocked:0kB bounce:0kB free_pcp:22696kB local_pcp:13544kB free_cma:0kB
[  392.291856][T24648] lowmem_reserve[]: 0 0 0 0 0
[  392.293797][T24648] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  392.305618][T24648] lowmem_reserve[]: 0 0 854 854 854
[  392.307637][T24648] Node 1 Normal free:170724kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8908kB inactive_anon:0kB active_file:2204kB inactive_file:5780kB unevictable:3536kB writepending:448kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:44188kB local_pcp:23792kB free_cma:0kB
[  392.324688][T24648] lowmem_reserve[]: 0 0 0 0 0
[  392.334505][T24648] Node 0 DMA: 7*4kB (UM) 9*8kB (U) 8*16kB (UM) 16*32kB (U) 10*64kB (U) 10*128kB (UM) 6*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 0*2048kB 1*4096kB (U) = 13412kB
[  392.342068][T24648] Node 0 DMA32: 2151*4kB (UM) 542*8kB (UME) 471*16kB (UM) 203*32kB (UME) 84*64kB (UME) 43*128kB (UM) 27*256kB (UM) 11*512kB (UM) 9*1024kB (UM) 5*2048kB (UM) 0*4096kB = 69852kB
[  392.348513][T24648] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  392.356997][T24658] netlink: 'syz.2.5308': attribute type 1 has an invalid length.
[  392.363703][T24648] Node 1 Normal: 1*4kB (E) 3*8kB (UME) 368*16kB (UME) 441*32kB (UME) 126*64kB (UM) 36*128kB (UM) 17*256kB (UM) 5*512kB (UM) 2*1024kB (M) 7*2048kB (UME) 28*4096kB (UM) = 170684kB
[  392.370693][T24648] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  392.373886][T24648] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  392.378137][T24648] 42312 total pagecache pages
[  392.382087][T24648] 0 pages in swap cache
[  392.383407][T24648] Free swap  = 124996kB
[  392.385063][T24648] Total swap = 124996kB
[  392.386921][T24648] 786301 pages RAM
[  392.388197][T24648] 0 pages HighMem/MovableOnly
[  392.390098][T24648] 241337 pages reserved
[  392.390903][T24658] bond49: entered promiscuous mode
[  392.391507][T24648] 0 pages cma reserved
[  392.397047][T24658] 8021q: adding VLAN 0 to HW filter on device bond49
[  392.413039][T24658] 8021q: adding VLAN 0 to HW filter on device bond49
[  392.416808][T24658] bond49: (slave vxcan3): The slave device specified does not support setting the MAC address
[  392.423670][T24658] bond49: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[  392.431740][T24658] bond49: (slave vxcan3): making interface the new active one
[  392.434251][T24658] vxcan3: entered promiscuous mode
[  392.436569][T24658] bond49: (slave vxcan3): Enslaving as an active interface with an up link
[  392.449123][T24666] netlink: 'syz.0.5310': attribute type 1 has an invalid length.
[  392.545165][T24670] netlink: 'syz.2.5313': attribute type 1 has an invalid length.
[  392.608165][T24672] sctp: [Deprecated]: syz.2.5313 (pid 24672) Use of struct sctp_assoc_value in delayed_ack socket option.
[  392.608165][T24672] Use struct sctp_sack_info instead
[  392.614758][T24672] sctp: [Deprecated]: syz.2.5313 (pid 24672) Use of struct sctp_assoc_value in delayed_ack socket option.
[  392.614758][T24672] Use struct sctp_sack_info instead
[  393.243299][T24674] batadv_slave_0: entered promiscuous mode
[  393.258187][T24673] batadv_slave_0: left promiscuous mode
[  393.317259][T24678] tipc: Resetting bearer <eth:team0>
[  393.408931][T24678] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  393.622485][T24699] vlan3: entered promiscuous mode
[  393.947718][T24716] tipc: Resetting bearer <eth:syzkaller0>
[  394.013595][T24716] vlan0: left allmulticast mode
[  394.015719][T24716] bond44: left allmulticast mode
[  394.017657][T24716] vlan0: left promiscuous mode
[  394.019912][T24716] bond44: left promiscuous mode
[  394.054235][T24717] geneve6: entered promiscuous mode
[  394.056302][T24717] geneve6: entered allmulticast mode
[  394.072295][ T5877] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  394.075687][ T5877] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 19999 - 0
[  394.090645][ T5877] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  394.093728][ T5877] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 19999 - 0
[  394.106417][ T5877] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  394.120115][ T5877] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 19999 - 0
[  394.126737][ T5877] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  394.132060][ T5877] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 19999 - 0
[  394.292687][T24730] __nla_validate_parse: 35 callbacks suppressed
[  394.292702][T24730] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5332'.
[  394.301059][T24730] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5332'.
[  394.310452][T24730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5332'.
[  394.324736][T24730] macvlan7: entered allmulticast mode
[  394.438995][T24739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5333'.
[  394.449737][T24737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5334'.
[  394.702791][T24755] netlink: 'syz.1.5336': attribute type 1 has an invalid length.
[  394.790725][T24752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5337'.
[  394.822987][T24768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5339'.
[  395.018227][T24779] netlink: 508 bytes leftover after parsing attributes in process `syz.2.5342'.
[  395.024286][T24779] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5342'.
[  395.070792][T24781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5343'.
[  395.208709][T24781] netlink: 'syz.0.5343': attribute type 3 has an invalid length.
[  395.212372][T24781] netlink: 'syz.0.5343': attribute type 1 has an invalid length.
[  395.884364][T24838] netlink: 'syz.0.5360': attribute type 1 has an invalid length.
[  395.920851][T24838] 8021q: adding VLAN 0 to HW filter on device bond71
[  395.946309][T24838] 8021q: adding VLAN 0 to HW filter on device bond71
[  395.951846][T24838] bond71: (slave vxcan5): The slave device specified does not support setting the MAC address
[  395.957325][T24838] bond71: (slave vxcan5): Error -95 calling set_mac_address
[  396.082005][T24840] veth35: entered promiscuous mode
[  396.087465][T24840] bond71: (slave veth35): Enslaving as an active interface with a down link
[  396.356026][T24849] netlink: 'syz.2.5362': attribute type 7 has an invalid length.
[  396.736733][T24869] sctp: [Deprecated]: syz.0.5371 (pid 24869) Use of struct sctp_assoc_value in delayed_ack socket option.
[  396.736733][T24869] Use struct sctp_sack_info instead
[  396.807762][T24873] macsec2: entered promiscuous mode
[  396.815390][T24873] batman_adv: batadv0: Adding interface: macsec2
[  396.818265][T24873] batman_adv: batadv0: The MTU of interface macsec2 is too small (267) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  396.827709][T24873] batman_adv: batadv0: Interface activated: macsec2
[  396.952922][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  396.973159][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  396.979706][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  396.985432][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  397.138458][T24887] ip6tnl4: entered promiscuous mode
[  397.150082][T24887] ip6tnl4: entered allmulticast mode
[  397.403136][T24901] vlan4: entered promiscuous mode
[  397.588962][T24906] tipc: Resetting bearer <eth:gre0>
[  397.604320][T24906] tipc: Resetting bearer <ib:ip6gre0>
[  397.624612][T24906] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  398.413245][T24941] IPv6: Can't replace route, no match found
[  399.160871][T24993] netlink: 'syz.0.5404': attribute type 15 has an invalid length.
[  399.241213][T24999] IPVS: set_ctl: invalid protocol: 58 172.20.20.10:20000
[  399.348238][T25006] __nla_validate_parse: 28 callbacks suppressed
[  399.348255][T25006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5409'.
[  399.359511][T25006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5409'.
[  399.376200][T25006] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  399.427297][T25008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5410'.
[  399.452388][T25009] netlink: 'syz.0.5409': attribute type 1 has an invalid length.
[  399.462045][T25009] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.5409'.
[  399.776788][T25022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5414'.
[  399.810871][T25022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5414'.
[  399.869694][T25045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5419'.
[  399.875018][T25045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5419'.
[  399.885002][T25045] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  399.933144][T25052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5421'.
[  400.087015][T25060] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5423'.
[  400.091935][T25060] netlink: 'syz.1.5423': attribute type 6 has an invalid length.
[  400.095942][T25060] netlink: 'syz.1.5423': attribute type 5 has an invalid length.
[  400.101166][T25060] netlink: 'syz.1.5423': attribute type 1 has an invalid length.
[  400.592004][T25099] bridge0: port 1(erspan0) entered blocking state
[  400.599797][T25099] bridge0: port 1(erspan0) entered disabled state
[  400.602052][T25099] erspan0: entered allmulticast mode
[  400.611385][T25099] erspan0: entered promiscuous mode
[  400.653891][T25102] erspan0: left allmulticast mode
[  400.655793][T25102] erspan0: left promiscuous mode
[  400.658071][T25102] bridge0: port 1(erspan0) entered disabled state
[  400.875940][T25117] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  400.879878][T25117] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.896007][T25115] pimreg3: entered allmulticast mode
[  400.953372][T25117] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  400.956586][T25117] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.032858][T25117] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  401.036754][T25117] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.084581][T25117] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  401.088886][T25117] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.165319][ T5878] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  401.168017][ T5878] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  401.196391][ T5877] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  401.199223][ T5877] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  401.215704][ T5877] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  401.221298][ T5877] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  401.233614][ T5878] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  401.236395][ T5878] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  401.688886][T25163] netlink: 'syz.0.5452': attribute type 1 has an invalid length.
[  401.690035][T25164] netlink: 'syz.0.5452': attribute type 1 has an invalid length.
[  401.710496][T25164] 8021q: adding VLAN 0 to HW filter on device bond72
[  401.792952][T25164] bond72 (unregistering): Released all slaves
[  401.804328][T25167] netlink: 'syz.2.5453': attribute type 21 has an invalid length.
[  401.811483][T25167] netlink: 'syz.2.5453': attribute type 5 has an invalid length.
[  401.814099][T25167] netlink: 'syz.2.5453': attribute type 6 has an invalid length.
[  401.906332][T25175] 8021q: adding VLAN 0 to HW filter on device bond17
[  401.926571][T25174] bond17: (slave macvlan2): Error -22 calling dev_set_mtu
[  401.987339][T25177] bond0: (slave dummy0): Releasing backup interface
[  401.990973][T25177] dummy0: left promiscuous mode
[  401.997075][T25177] bond69: (slave bridge333): Releasing active interface
[  402.002648][T25177] bond71: (slave veth35): Releasing active interface
[  402.006691][T25177] batman_adv: batadv0: Interface deactivated: macsec2
[  402.009097][T25177] batman_adv: batadv0: Removing interface: macsec2
[  402.215933][T25198] bond45: (slave bridge369): Releasing active interface
[  402.229163][T25198] bond45: (slave bridge369): the permanent HWaddr of slave - f2:66:1b:34:c7:76 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  402.243283][T25198] bond45: (slave bridge370): Releasing active interface
[  402.248981][T25198] bond46: (slave vxcan1): Releasing backup interface
[  402.253015][T25198] vxcan1: left promiscuous mode
[  402.257030][T25198] bond47: (slave geneve5): Releasing active interface
[  402.262361][T25198] bond48: (slave bridge378): Releasing active interface
[  402.267450][T25198] bond49: (slave vxcan3): Releasing backup interface
[  402.271314][T25198] vxcan3: left promiscuous mode
[  402.588172][T25222] 8021q: adding VLAN 0 to HW filter on device bond51
[  402.593684][T25222] bond50: (slave bond51): Enslaving as an active interface with an up link
[  402.610032][T25222] bond50 (unregistering): (slave bond51): Releasing backup interface
[  402.621683][T25222] bond50 (unregistering): Released all slaves
[  402.958451][T25257] openvswitch: netlink: Actions may not be safe on all matching packets
[  403.042344][T25265] policy can only be matched on NF_INET_PRE_ROUTING
[  403.042355][T25265] unable to load match
[  403.514508][T25299] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  404.142513][T25349] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  404.413896][T25358] validate_nla: 6 callbacks suppressed
[  404.413906][T25358] netlink: 'syz.2.5514': attribute type 1 has an invalid length.
[  404.440890][T25358] bond50: (slave bridge404): making interface the new active one
[  404.444134][T25358] bond50: (slave bridge404): Enslaving as an active interface with an up link
[  404.454592][T25359] bond50: (slave bridge405): Enslaving as an active interface with a down link
[  404.672393][T25366] __nla_validate_parse: 103 callbacks suppressed
[  404.672407][T25366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5516'.
[  404.679071][T25366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5516'.
[  404.686488][T25366] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  404.724400][T25369] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5515'.
[  405.001543][T25373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5517'.
[  405.027391][T25382] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5520'.
[  405.033925][T25383] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5520'.
[  405.101686][T25386] netlink: 15 bytes leftover after parsing attributes in process `syz.1.5521'.
[  405.177817][T25393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5523'.
[  405.257219][T25397] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5524'.
[  405.268408][T25397] netlink: 'syz.1.5524': attribute type 1 has an invalid length.
[  405.268419][T25399] netlink: 'syz.1.5524': attribute type 1 has an invalid length.
[  405.276950][T25400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5525'.
[  405.283514][T25399] bond1: (slave vcan0): The slave device specified does not support setting the MAC address
[  405.289136][T25399] bond1: (slave vcan0): Error -95 calling set_mac_address
[  405.496305][T25409] netlink: 'syz.2.5528': attribute type 1 has an invalid length.
[  405.521880][T25409] 8021q: adding VLAN 0 to HW filter on device bond52
[  405.552391][T25409] bond52: (slave veth31): Enslaving as an active interface with a down link
[  405.874166][T25429] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  406.135156][T25437] bridge406: port 1(veth33) entered blocking state
[  406.139012][T25437] bridge406: port 1(veth33) entered disabled state
[  406.146087][T25437] veth33: entered allmulticast mode
[  406.160896][T25437] veth33: entered promiscuous mode
[  406.167520][T25438] bridge406: port 2(veth0_to_bond) entered blocking state
[  406.192867][T25438] bridge406: port 2(veth0_to_bond) entered disabled state
[  406.205212][T25438] veth0_to_bond: entered allmulticast mode
[  406.213957][T25438] veth0_to_bond: entered promiscuous mode
[  406.466920][T25449] netlink: 'syz.2.5539': attribute type 1 has an invalid length.
[  406.476495][T25449] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  406.711132][T25468] sctp: [Deprecated]: syz.0.5545 (pid 25468) Use of int in max_burst socket option deprecated.
[  406.711132][T25468] Use struct sctp_assoc_value instead
[  406.855293][T25484] xt_time: unknown flags 0xf4
[  407.206878][T25505] bond72: (slave vxcan5): The slave device specified does not support setting the MAC address
[  407.217174][T25505] bond72: (slave vxcan5): Error -95 calling set_mac_address
[  407.232341][T25509] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  407.245078][T25510] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  407.702882][T25545] netlink: 'syz.0.5569': attribute type 1 has an invalid length.
[  407.838996][T25550] 8021q: adding VLAN 0 to HW filter on device bond73
[  407.852955][T25545] veth37: entered promiscuous mode
[  407.857189][T25545] bond73: (slave veth37): Enslaving as a backup interface with a down link
[  407.865600][T25545] bond73: (slave veth37): Releasing backup interface
[  408.393103][T25596] netlink: 'syz.1.5581': attribute type 10 has an invalid length.
[  408.402988][T25596] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  408.405971][T25596] bond0: (slave wlan1): Enslaving as an active interface with a down link
[  408.526727][T25601] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma?
[  408.752321][T25625] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  408.756882][T25625] syzkaller0: entered promiscuous mode
[  408.758774][T25625] syzkaller0: entered allmulticast mode
[  408.804396][T25625] tipc: Resetting bearer <eth:syzkaller0>
[  408.823472][T25624] tipc: Resetting bearer <eth:syzkaller0>
[  408.846127][T25624] tipc: Disabling bearer <eth:syzkaller0>
[  408.987253][T25649] nbd: must specify a size in bytes for the device
[  408.995062][T25649] nbd: nbd1 already in use
[  408.997628][T25653] 8021q: VLANs not supported on ipvlan1
[  409.065008][T25658] 8021q: adding VLAN 0 to HW filter on device bond46
[  409.068683][T25658] bond45: (slave bond46): Enslaving as an active interface with an up link
[  409.080155][T25658] bond45 (unregistering): (slave bond46): Releasing backup interface
[  409.085905][T25658] bond45 (unregistering): Released all slaves
[  409.545183][T25693] syzkaller0: entered promiscuous mode
[  409.547469][T25693] syzkaller0: entered allmulticast mode
[  409.798759][T25703] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  409.803099][T25703] syzkaller0: entered promiscuous mode
[  409.805394][T25703] syzkaller0: entered allmulticast mode
[  409.814419][T25704] tipc: Resetting bearer <eth:syzkaller0>
[  409.820001][T25703] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  409.822959][T25704] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  409.828024][T25702] tipc: Resetting bearer <eth:syzkaller0>
[  409.847427][T25702] tipc: Disabling bearer <eth:syzkaller0>
[  409.987230][T25710] __nla_validate_parse: 42 callbacks suppressed
[  409.987240][T25710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5610'.
[  410.217558][T25728] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5616'.
[  410.225790][T25728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5616'.
[  410.258233][T25735] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  410.266011][T25732] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5617'.
[  410.348345][T25740] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5620'.
[  410.348654][T25744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5620'.
[  410.377303][T25740] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5620'.
[  410.448276][T25752] tipc: Resetting bearer <eth:team0>
[  410.452445][T25752] bond0: (slave wlan1): Releasing backup interface
[  410.457167][T25752] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  410.487810][T25754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5624'.
[  410.505183][T25752] warn_alloc: 1 callbacks suppressed
[  410.505199][T25752] syz.1.5623: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  410.516053][T25752] CPU: 1 UID: 0 PID: 25752 Comm: syz.1.5623 Not tainted syzkaller #0 PREEMPT(full) 
[  410.516073][T25752] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  410.516082][T25752] Call Trace:
[  410.516088][T25752]  <TASK>
[  410.516094][T25752]  dump_stack_lvl+0x189/0x250
[  410.516117][T25752]  ? __pfx_dump_stack_lvl+0x10/0x10
[  410.516133][T25752]  ? __pfx__printk+0x10/0x10
[  410.516148][T25752]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  410.516163][T25752]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  410.516180][T25752]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  410.516197][T25752]  warn_alloc+0x214/0x310
[  410.516218][T25752]  ? stack_depot_save_flags+0x40/0x860
[  410.516236][T25752]  ? __pfx_warn_alloc+0x10/0x10
[  410.516256][T25752]  ? kasan_save_track+0x4f/0x80
[  410.516270][T25752]  ? xskq_create+0x56/0x170
[  410.516283][T25752]  ? xsk_init_queue+0xb0/0x110
[  410.516295][T25752]  ? xsk_setsockopt+0x4dc/0x8d0
[  410.516308][T25752]  ? do_sock_setsockopt+0x17c/0x1b0
[  410.516317][T25752]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  410.516328][T25752]  ? do_syscall_64+0xfa/0x3b0
[  410.516336][T25752]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.516351][T25752]  __vmalloc_node_range_noprof+0x125/0x12f0
[  410.516395][T25752]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  410.516417][T25752]  ? __kasan_kmalloc+0x93/0xb0
[  410.516435][T25752]  vmalloc_user_noprof+0xad/0xf0
[  410.516450][T25752]  ? xskq_create+0xbf/0x170
[  410.516466][T25752]  xskq_create+0xbf/0x170
[  410.516483][T25752]  xsk_init_queue+0xb0/0x110
[  410.516498][T25752]  xsk_setsockopt+0x4dc/0x8d0
[  410.516516][T25752]  ? __pfx_xsk_setsockopt+0x10/0x10
[  410.516531][T25752]  ? __pfx_aa_sk_perm+0x10/0x10
[  410.516573][T25752]  ? aa_sock_opt_perm+0xff/0x1b0
[  410.516588][T25752]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  410.516601][T25752]  ? __pfx_xsk_setsockopt+0x10/0x10
[  410.516618][T25752]  do_sock_setsockopt+0x17c/0x1b0
[  410.516636][T25752]  __x64_sys_setsockopt+0x13f/0x1b0
[  410.516652][T25752]  do_syscall_64+0xfa/0x3b0
[  410.516662][T25752]  ? lockdep_hardirqs_on+0x9c/0x150
[  410.516677][T25752]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.516720][T25752]  ? exc_page_fault+0x9f/0xf0
[  410.516740][T25752]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.516753][T25752] RIP: 0033:0x7effa078ebe9
[  410.516767][T25752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  410.516777][T25752] RSP: 002b:00007effa154a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  410.516791][T25752] RAX: ffffffffffffffda RBX: 00007effa09c5fa0 RCX: 00007effa078ebe9
[  410.516799][T25752] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  410.516807][T25752] RBP: 00007effa0811e19 R08: 0000000000000004 R09: 0000000000000000
[  410.516814][T25752] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  410.516822][T25752] R13: 00007effa09c6038 R14: 00007effa09c5fa0 R15: 00007ffcec89d878
[  410.516846][T25752]  </TASK>
[  410.516954][T25752] Mem-Info:
[  410.608808][T25760] netlink: 'syz.2.5625': attribute type 21 has an invalid length.
[  410.629654][T25752] active_anon:4982 inactive_anon:0 isolated_anon:0
[  410.629654][T25752]  active_file:1633 inactive_file:38363 isolated_file:0
[  410.629654][T25752]  unevictable:1768 dirty:188 writeback:0
[  410.629654][T25752]  slab_reclaimable:13360 slab_unreclaimable:167291
[  410.629654][T25752]  mapped:18442 shmem:2463 pagetables:1049
[  410.629654][T25752]  sec_pagetables:0 bounce:0
[  410.629654][T25752]  kernel_misc_reclaimable:0
[  410.629654][T25752]  free:171657 free_pcp:18859 free_cma:0
[  410.670912][T25752] Node 0 active_anon:10900kB inactive_anon:0kB active_file:3772kB inactive_file:147672kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38232kB dirty:132kB writeback:0kB shmem:4992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11632kB pagetables:2644kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  410.684137][T25752] Node 1 active_anon:9068kB inactive_anon:0kB active_file:2760kB inactive_file:5780kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35508kB dirty:620kB writeback:0kB shmem:4860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8868kB pagetables:1540kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  410.695367][T25752] Node 0 DMA free:13532kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:636kB local_pcp:304kB free_cma:0kB
[  410.719432][T25760] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5625'.
[  410.723887][T25760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5625'.
[  410.735647][T25752] lowmem_reserve[]: 0 811 811 811 811
[  410.737736][T25752] Node 0 DMA32 free:54896kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10764kB inactive_anon:0kB active_file:3772kB inactive_file:147672kB unevictable:3536kB writepending:132kB present:1556484kB managed:830928kB mlocked:0kB bounce:0kB free_pcp:30868kB local_pcp:14904kB free_cma:0kB
[  410.759111][T25752] lowmem_reserve[]: 0 0 0 0 0
[  410.761073][T25752] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  410.780049][T25752] lowmem_reserve[]: 0 0 854 854 854
[  410.783849][T25752] Node 1 Normal free:159700kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9096kB inactive_anon:0kB active_file:2760kB inactive_file:5780kB unevictable:3536kB writepending:608kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:44100kB local_pcp:23848kB free_cma:0kB
[  410.798613][T25752] lowmem_reserve[]: 0 0 0 0 0
[  410.805052][T25752] Node 0 DMA: 2*4kB (U) 5*8kB (UM) 9*16kB (UM) 21*32kB (UM) 14*64kB (UM) 12*128kB (UM) 8*256kB (UM) 6*512kB (UM) 5*1024kB (UM) 0*2048kB 
[  410.805589][T25769] netlink: 'syz.2.5627': attribute type 1 has an invalid length.
[  410.814543][T25752] 0*4096kB = 13536kB
[  410.816132][T25752] Node 0 DMA32: 1114*4kB (UE) 257*8kB (UE) 342*16kB (UME) 172*32kB (UME) 82*64kB (UME) 27*128kB (UME) 16*256kB (UME) 6*512kB (UME) 7*1024kB (ME) 5*2048kB (UME) 1*4096kB (M) = 54864kB
[  410.831814][T25752] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  410.844482][T25769] 8021q: adding VLAN 0 to HW filter on device bond53
[  410.855592][T25752] Node 1 Normal: 763*4kB (UME) 597*8kB (UME) 356*16kB (UME) 206*32kB (UME) 129*64kB (UM) 42*128kB (UM) 18*256kB (UM) 3*512kB (M) 3*1024kB (UM) 5*2048kB (UME) 26*4096kB (UM) = 159700kB
[  410.862176][T25752] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  410.866093][T25752] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  410.873771][T25769] 8021q: adding VLAN 0 to HW filter on device bond53
[  410.874288][T25752] 42459 total pagecache pages
[  410.877002][T25769] bond53: (slave vxcan5): The slave device specified does not support setting the MAC address
[  410.878437][T25752] 0 pages in swap cache
[  410.885521][T25752] Free swap  = 124996kB
[  410.886845][T25769] bond53: (slave vxcan5): Error -95 calling set_mac_address
[  410.892849][T25752] Total swap = 124996kB
[  410.894766][T25752] 786301 pages RAM
[  410.896514][T25752] 0 pages HighMem/MovableOnly
[  410.898337][T25752] 241337 pages reserved
[  410.900663][T25752] 0 pages cma reserved
[  410.929428][T25778] veth35: entered promiscuous mode
[  410.982520][T25780] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  411.216779][T25780] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  411.296244][T25780] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  411.358623][T25780] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  411.466138][ T5693] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  411.525284][ T5693] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  411.527998][ T5693] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  411.532721][ T5693] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  411.538314][T25804] netlink: 'syz.2.5637': attribute type 21 has an invalid length.
[  411.553399][T25804] netlink: 'syz.2.5637': attribute type 5 has an invalid length.
[  411.556704][T25804] netlink: 'syz.2.5637': attribute type 6 has an invalid length.
[  411.936575][T25832] netlink: 'syz.2.5644': attribute type 10 has an invalid length.
[  411.941789][T25832] !: entered promiscuous mode
[  411.945549][T25832] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  411.959004][T25831] netlink: 'syz.1.5646': attribute type 83 has an invalid length.
[  411.967051][T25831] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  411.970316][T25831] IPv6: NLM_F_CREATE should be set when creating new route
[  411.973461][T25831] IPv6: NLM_F_CREATE should be set when creating new route
[  411.986446][T25831] gretap0: entered promiscuous mode
[  411.989117][T25831] vlan4: entered promiscuous mode
[  412.029945][T25834] netlink: 'syz.1.5646': attribute type 10 has an invalid length.
[  412.033301][T25834] team0: entered promiscuous mode
[  412.422356][T25872] netlink: 'syz.0.5658': attribute type 2 has an invalid length.
[  413.147382][T25941] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  413.427053][T25955] syzkaller0: left promiscuous mode
[  413.429141][T25955] syzkaller0: left allmulticast mode
[  413.478865][T25959] netlink: 'syz.0.5679': attribute type 12 has an invalid length.
[  413.730152][T25966] syzkaller0: entered promiscuous mode
[  413.732084][T25966] syzkaller0: entered allmulticast mode
[  414.562747][T25996] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  414.631596][T25996] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  414.679386][T25996] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  414.715303][T25996] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  414.872923][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  414.878564][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  414.899366][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  414.987912][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  415.037429][T26019] __nla_validate_parse: 299 callbacks suppressed
[  415.037447][T26019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5701'.
[  415.049640][T26019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5701'.
[  415.713180][T26038] pim6reg1: entered promiscuous mode
[  415.715189][T26038] pim6reg1: entered allmulticast mode
[  415.972787][T26040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5708'.
[  415.976239][T26040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5708'.
[  415.980588][T26040] validate_nla: 1 callbacks suppressed
[  415.980601][T26040] netlink: 'syz.1.5708': attribute type 13 has an invalid length.
[  415.986775][T26040] netlink: 'syz.1.5708': attribute type 12 has an invalid length.
[  416.267114][T26062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5715'.
[  416.275238][T26064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5716'.
[  416.279124][T26062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5715'.
[  416.294527][T26064] 8021q: adding VLAN 0 to HW filter on device bond74
[  416.302885][T26064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5716'.
[  416.310341][T26064] mac80211_hwsim hwsim57 wlan0: entered allmulticast mode
[  416.350344][T26069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5718'.
[  416.369209][T26069] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.5718'.
[  416.915451][T26099] netlink: 'syz.0.5729': attribute type 7 has an invalid length.
[  416.918031][T26099] netlink: 'syz.0.5729': attribute type 8 has an invalid length.
[  417.480381][   T61] block nbd1: Possible stuck request ffff88804af58000: control (read@0,1024B). Runtime 60 seconds
[  417.486263][   T61] block nbd1: Possible stuck request ffff88804af58200: control (read@1024,1024B). Runtime 60 seconds
[  417.490925][   T61] block nbd1: Possible stuck request ffff88804af58400: control (read@2048,1024B). Runtime 60 seconds
[  417.494519][   T61] block nbd1: Possible stuck request ffff88804af58600: control (read@3072,1024B). Runtime 60 seconds
[  418.088096][T26161] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  418.091122][T26161] IPv6: NLM_F_CREATE should be set when creating new route
[  418.094092][T26161] IPv6: NLM_F_CREATE should be set when creating new route
[  418.098241][T26161] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  418.293584][T26174] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  418.296760][T26174] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  418.506817][T26190] veth0_to_bond: left allmulticast mode
[  418.509393][T26190] veth0_to_bond: left promiscuous mode
[  418.512124][T26190] bridge406: port 2(veth0_to_bond) entered disabled state
[  418.522216][T26190] bond50: (slave bridge404): Releasing active interface
[  418.525952][T26190] bond50: (slave bridge404): the permanent HWaddr of slave - 02:50:46:f1:3c:86 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  418.537122][T26190] bond50: (slave bridge405): Releasing active interface
[  418.546442][T26190] bond52: (slave veth31): Releasing active interface
[  418.552620][T26190] veth33: left allmulticast mode
[  418.554874][T26190] veth33: left promiscuous mode
[  418.557586][T26190] bridge406: port 1(veth33) entered disabled state
[  418.689751][T26198] netlink: 'syz.2.5759': attribute type 3 has an invalid length.
[  418.692812][T26198] netlink: 'syz.2.5759': attribute type 1 has an invalid length.
[  418.958369][T26217] netlink: 'syz.2.5764': attribute type 4 has an invalid length.
[  419.007146][ T5295] udevd[5295]: worker [21587] /devices/virtual/block/nbd1 is taking a long time
[  419.896332][T26272] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  420.113866][T26296] __nla_validate_parse: 41 callbacks suppressed
[  420.113882][T26296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5792'.
[  420.121874][T26295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5793'.
[  420.125644][T26295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5793'.
[  420.132817][T26295] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5793'.
[  420.240830][T26303] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  420.252291][T26301] syzkaller0: entered promiscuous mode
[  420.254813][T26301] syzkaller0: entered allmulticast mode
[  420.344167][T26307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5796'.
[  420.678808][T26323] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5801'.
[  420.842262][T26333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5806'.
[  420.906766][T26333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5806'.
[  420.917706][T26336] netlink: 'syz.0.5805': attribute type 16 has an invalid length.
[  420.921779][T26336] netlink: 'syz.0.5805': attribute type 17 has an invalid length.
[  420.962589][T26338] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5807'.
[  420.966399][T26336] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  421.016083][T26340] netlink: 'syz.2.5808': attribute type 2 has an invalid length.
[  421.079137][T26340] 8021q: adding VLAN 0 to HW filter on device bond0
[  421.087119][T26340] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  421.305882][T26349] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5809'.
[  421.338346][T26349] netlink: 'syz.2.5809': attribute type 13 has an invalid length.
[  421.341872][T26349] netlink: 'syz.2.5809': attribute type 17 has an invalid length.
[  421.376593][T26349] !: left promiscuous mode
[  421.382100][T26349] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  421.867424][T26367] pim6reg1: entered allmulticast mode
[  421.885205][T26367] ip6gretap0: entered promiscuous mode
[  421.887858][T26367] macsec3: entered promiscuous mode
[  421.890275][T26367] macsec3: entered allmulticast mode
[  421.892021][T26367] ip6gretap0: entered allmulticast mode
[  422.035453][T26375] netlink: 'syz.0.5819': attribute type 4 has an invalid length.
[  422.040710][T26375] netlink: 'syz.0.5819': attribute type 4 has an invalid length.
[  422.170235][T26385] netlink: 'syz.0.5823': attribute type 1 has an invalid length.
[  422.195640][T26385] 8021q: adding VLAN 0 to HW filter on device bond75
[  422.277262][ T5885] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  422.296740][T26395] netlink: 'syz.2.5826': attribute type 1 has an invalid length.
[  422.326387][T26395] 8021q: adding VLAN 0 to HW filter on device bond54
[  422.461594][T26410] netlink: 'syz.2.5831': attribute type 1 has an invalid length.
[  422.487591][T26410] bond55: (slave bridge425): making interface the new active one
[  422.492461][T26410] bond55: (slave bridge425): Enslaving as an active interface with an up link
[  422.523977][T26416] netlink: 'syz.0.5833': attribute type 5 has an invalid length.
[  422.854151][T26443] netlink: 'syz.2.5841': attribute type 1 has an invalid length.
[  423.528923][T26469] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  423.538197][T26469] xfrm0: entered promiscuous mode
[  423.541156][T26469] xfrm0: entered allmulticast mode
[  423.549956][T11966] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  424.092798][T26490] bridge365: port 1(veth41) entered blocking state
[  424.095642][T26490] bridge365: port 1(veth41) entered disabled state
[  424.098072][T26490] veth41: entered allmulticast mode
[  424.102640][T26490] veth41: entered promiscuous mode
[  424.349937][T11966] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  424.868791][T26524] bond76: entered promiscuous mode
[  424.872151][T26524] 8021q: adding VLAN 0 to HW filter on device bond76
[  424.884406][T26524] 8021q: adding VLAN 0 to HW filter on device bond76
[  424.887517][T26524] bond76: (slave wireguard0): The slave device specified does not support setting the MAC address
[  424.891330][T26524] bond76: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  424.897521][T26524] bond76: (slave wireguard0): making interface the new active one
[  424.905441][T26524] wireguard0: entered promiscuous mode
[  424.908156][T26524] bond76: (slave wireguard0): Enslaving as an active interface with an up link
[  424.913066][T26524] vxcan1: left allmulticast mode
[  425.138501][T26534] xfrm3: entered promiscuous mode
[  425.267828][T26542] openvswitch: netlink: Unknown key attributes 2
[  425.639772][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  426.276000][T26593] __nla_validate_parse: 28 callbacks suppressed
[  426.276013][T26593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5890'.
[  426.408632][T26597] veth41: left allmulticast mode
[  426.412765][T26597] veth41: left promiscuous mode
[  426.415183][T26597] bridge365: port 1(veth41) entered disabled state
[  426.424361][T26597] bond76: (slave wireguard0): Releasing backup interface
[  426.427332][T26597] wireguard0: left promiscuous mode
[  426.756809][T26601] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  427.205478][T26612] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5894'.
[  427.348448][T26626] erspan0: left allmulticast mode
[  427.361926][T26626] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  427.451769][T26632] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5902'.
[  427.477592][T26637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5903'.
[  427.501969][T26641] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5904'.
[  427.655956][T26646] validate_nla: 5 callbacks suppressed
[  427.655965][T26646] netlink: 'syz.1.5906': attribute type 2 has an invalid length.
[  427.672211][T26645] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5906'.
[  427.693903][T26649] erspan0: entered promiscuous mode
[  427.792963][T26664] smc: net device bond0 erased user defined pnetid SYZ
[  427.796826][T26664] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  427.879866][T26667] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5913'.
[  427.967388][T26681] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5917'.
[  427.987310][T26685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5918'.
[  428.059947][T26690] batadv_slave_0: entered promiscuous mode
[  428.062764][T26691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5919'.
[  428.095316][T26691] batadv_slave_0 (unregistering): left promiscuous mode
[  428.225215][T26703] syzkaller0: entered promiscuous mode
[  428.227411][T26703] syzkaller0: entered allmulticast mode
[  428.309780][T26707] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  428.390039][T26714] syzkaller0: left allmulticast mode
[  428.393112][T26714] bond37: left allmulticast mode
[  428.395319][T26714] xfrm0: left allmulticast mode
[  428.397730][T26714] macvlan6: left allmulticast mode
[  428.400985][T26714] xfrm2: left allmulticast mode
[  428.403191][T26714] bond43: left allmulticast mode
[  428.405492][T26714] bridge350: left allmulticast mode
[  428.410380][   T95] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  428.422330][T26714] geneve4: left allmulticast mode
[  428.432909][T26714] macvtap0: left allmulticast mode
[  428.437694][T26714] geneve6: left allmulticast mode
[  428.444506][T26714] macvlan7: left allmulticast mode
[  428.450247][T26714] bond55: (slave bridge425): Releasing active interface
[  428.683405][T26732] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  428.702473][T26732] bridge0: port 1(erspan0) entered blocking state
[  428.705479][T26732] bridge0: port 1(erspan0) entered disabled state
[  428.713359][T26732] erspan0: entered promiscuous mode
[  428.717502][T26732] erspan0: left promiscuous mode
[  428.720190][T26732] bridge0: port 1(erspan0) entered disabled state
[  429.030104][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  429.163117][T26760] tipc: Resetting bearer <eth:syzkaller0>
[  429.458170][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  429.477221][T26769] netlink: 'syz.1.5945': attribute type 21 has an invalid length.
[  429.628352][T26778] macvtap1: entered promiscuous mode
[  429.632354][T26778] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  429.646903][T26777] macvtap2: entered promiscuous mode
[  430.121596][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  430.139140][T26804] sctp: [Deprecated]: syz.1.5954 (pid 26804) Use of int in max_burst socket option.
[  430.139140][T26804] Use struct sctp_assoc_value instead
[  430.316470][T26807] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  430.319662][T26807] syzkaller0: entered allmulticast mode
[  430.486624][T26823] netlink: 'syz.0.5960': attribute type 1 has an invalid length.
[  430.540954][T26823] 8021q: adding VLAN 0 to HW filter on device bond77
[  430.740422][T26853] netlink: 'syz.0.5969': attribute type 1 has an invalid length.
[  430.763384][T26853] veth45: entered promiscuous mode
[  430.765472][T26853] veth45: entered allmulticast mode
[  431.288271][T26866] __nla_validate_parse: 36 callbacks suppressed
[  431.288288][T26866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5972'.
[  431.317105][T26866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5972'.
[  431.344799][T26866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5972'.
[  431.375292][T26866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5972'.
[  431.405836][T26866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5972'.
[  431.432099][T26866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5972'.
[  431.453010][T26866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5972'.
[  431.474237][T26866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5972'.
[  431.494596][T26866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5972'.
[  431.511094][T26866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5972'.
[  432.279451][T26961] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  432.288037][T26961] netlink: 'syz.1.5987': attribute type 4 has an invalid length.
[  432.295380][T26961] netlink: 'syz.1.5987': attribute type 4 has an invalid length.
[  432.416492][T26972] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  432.606117][T27001] 8021q: adding VLAN 0 to HW filter on device bond45
[  432.612514][T26997] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  432.616103][T26997] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.622412][T27001] mac80211_hwsim hwsim29 wlan0: entered promiscuous mode
[  432.671911][T26997] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  432.675411][T26997] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.726698][T26997] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  432.749672][T26997] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.783814][T26997] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  432.789818][T27012] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  432.795812][T26997] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.882719][ T5877] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  432.885704][ T5877] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  432.894672][   T95] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  432.902802][ T5877] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  432.906261][ T5877] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  432.974142][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  432.978215][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  432.994552][ T5877] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  432.997450][ T5877] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  433.227242][T27059] netlink: 'syz.2.6014': attribute type 1 has an invalid length.
[  433.261810][T27059] bond57: (slave geneve7): making interface the new active one
[  433.266374][T27059] bond57: (slave geneve7): Enslaving as an active interface with an up link
[  433.269315][ T5693] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  433.275018][ T5693] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  433.279249][ T5693] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  433.292156][ T5693] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  433.322799][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  433.360907][T27068] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  433.364884][T27068] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  433.390711][T27068] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  433.397788][T27059] 8021q: adding VLAN 0 to HW filter on device bond57
[  433.406224][T27067] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  433.411593][T27067] syzkaller0: entered promiscuous mode
[  433.413851][T27067] syzkaller0: entered allmulticast mode
[  433.455673][T27067] tipc: Resetting bearer <eth:syzkaller0>
[  433.460087][T27067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.475301][T27065] tipc: Resetting bearer <eth:syzkaller0>
[  433.488553][T27065] tipc: Disabling bearer <eth:syzkaller0>
[  433.808500][T27108] pim6reg: entered allmulticast mode
[  433.837781][T27108] pim6reg: left allmulticast mode
[  434.031036][T27122] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  434.119979][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  434.263703][T27140] syzkaller0: entered promiscuous mode
[  434.265595][T27140] syzkaller0: entered allmulticast mode
[  434.313825][T27140] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  434.585816][T27177] netlink: 'syz.0.6048': attribute type 1 has an invalid length.
[  434.605586][T27182] netlink: 'syz.1.6050': attribute type 12 has an invalid length.
[  434.616892][T27177] vxcan1: entered allmulticast mode
[  434.624043][T27177] vxcan1: left allmulticast mode
[  435.314982][T27212] xfrm3: entered allmulticast mode
[  436.451352][T27252] __nla_validate_parse: 48 callbacks suppressed
[  436.451363][T27252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6070'.
[  436.648096][T27263] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6072'.
[  436.659115][T27263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6072'.
[  436.846012][T27271] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6074'.
[  437.027275][T27286] sctp: [Deprecated]: syz.1.6077 (pid 27286) Use of struct sctp_assoc_value in delayed_ack socket option.
[  437.027275][T27286] Use struct sctp_sack_info instead
[  437.165133][T27289] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6078'.
[  437.562754][T27317] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6085'.
[  437.631697][ T5235] Bluetooth: hci2: command 0x0405 tx timeout
[  437.656716][T27321] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6086'.
[  437.667161][T27321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6086'.
[  438.234016][T27348] dvmrp0: left allmulticast mode
[  438.534451][T27360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6098'.
[  438.659398][T27374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6100'.
[  439.017409][T27395] macvlan2: entered allmulticast mode
[  439.019363][T27395] bond0: entered allmulticast mode
[  439.206383][T27404] syz_tun: entered allmulticast mode
[  439.224620][T27404] syz_tun: left allmulticast mode
[  439.232131][T27404] netlink: 'syz.1.6110': attribute type 39 has an invalid length.
[  439.369343][T27407] sctp: [Deprecated]: syz.1.6113 (pid 27407) Use of struct sctp_assoc_value in delayed_ack socket option.
[  439.369343][T27407] Use struct sctp_sack_info instead
[  439.490107][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  439.493574][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  439.497258][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  439.501996][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  439.504725][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  439.594107][ T7783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  439.596870][ T7783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  439.825175][T27410] chnl_net:caif_netlink_parms(): no params data found
[  440.085300][T27410] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.088528][T27410] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.092201][T27410] bridge_slave_0: entered allmulticast mode
[  440.096418][T27410] bridge_slave_0: entered promiscuous mode
[  440.102896][T27410] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.105831][T27410] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.108659][T27410] bridge_slave_1: entered allmulticast mode
[  440.112710][T27410] bridge_slave_1: entered promiscuous mode
[  440.165155][T27410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  440.176868][T27410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  440.218195][T27410] team0: Port device team_slave_0 added
[  440.224375][T27410] team0: Port device team_slave_1 added
[  440.254082][T27410] batman_adv: batadv0: Adding interface: batadv_slave_0
[  440.256814][T27410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  440.267122][T27410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  440.278305][T27410] batman_adv: batadv0: Adding interface: batadv_slave_1
[  440.282348][T27410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  440.291489][T27410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  440.344612][T27410] hsr_slave_0: entered promiscuous mode
[  440.347937][T27410] hsr_slave_1: entered promiscuous mode
[  440.351192][T27410] debugfs: 'hsr0' already exists in 'hsr'
[  440.353181][T27410] Cannot create hsr debugfs directory
[  440.571935][T27410] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  440.582230][T27410] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  440.588374][T27410] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  440.599679][T27410] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  440.656777][T27410] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.659873][T27410] bridge0: port 2(bridge_slave_1) entered forwarding state
[  440.663107][T27410] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.666112][T27410] bridge0: port 1(bridge_slave_0) entered forwarding state
[  440.795419][T27410] 8021q: adding VLAN 0 to HW filter on device bond0
[  440.807049][T27410] 8021q: adding VLAN 0 to HW filter on device team0
[  440.813556][ T7783] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.817241][ T7783] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.845137][ T7783] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.847588][ T7783] bridge0: port 1(bridge_slave_0) entered forwarding state
[  440.854548][T15127] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.857020][T15127] bridge0: port 2(bridge_slave_1) entered forwarding state
[  441.079221][T27410] 8021q: adding VLAN 0 to HW filter on device batadv0
[  441.120153][T27410] veth0_vlan: entered promiscuous mode
[  441.125329][T27410] veth1_vlan: entered promiscuous mode
[  441.162093][T27410] veth0_macvtap: entered promiscuous mode
[  441.167270][T27410] veth1_macvtap: entered promiscuous mode
[  441.178695][T27410] batman_adv: batadv0: Interface activated: batadv_slave_0
[  441.188266][T27410] batman_adv: batadv0: Interface activated: batadv_slave_1
[  441.201741][T27474] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  441.211826][T27474] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  441.215130][T27474] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  441.226089][T27474] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  441.303207][ T7780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  441.308259][ T7780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  441.341045][ T7783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  441.344166][ T7783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  441.395657][T27485] netlink: 'syz.0.6130': attribute type 10 has an invalid length.
[  441.560928][ T5851] Bluetooth: hci2: command tx timeout
[  441.593854][T27495] __nla_validate_parse: 5 callbacks suppressed
[  441.593867][T27495] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6132'.
[  441.601807][T27495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6132'.
[  441.765417][T27497] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6133'.
[  441.770777][T27497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6133'.
[  441.779484][T27502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6135'.
[  441.912722][T27513] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6138'.
[  441.920539][T27512] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6138'.
[  442.060262][T27531] : renamed from wg2 (while UP)
[  442.427127][T27548] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6146'.
[  442.468550][T27548] netlink: 'syz.0.6146': attribute type 2 has an invalid length.
[  442.476111][T27548] netlink: 4856 bytes leftover after parsing attributes in process `syz.0.6146'.
[  442.736079][T27558] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  442.799065][T27559] 8021q: adding VLAN 0 to HW filter on device batadv0
[  442.803982][T27559] batadv0: entered promiscuous mode
[  442.807154][T27559] team0: Failed to send port change of device batadv0 via netlink (err -105)
[  442.814396][T27559] team0: Failed to send options change via netlink (err -105)
[  442.819037][T27559] team0: Port device batadv0 added
[  442.825130][T27558] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  442.907914][T27558] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  442.976632][T27558] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  442.986837][T27563] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6151'.
[  443.104265][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  443.108983][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  443.124333][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  443.142743][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  443.496138][T27598] netlink: 'syz.0.6162': attribute type 1 has an invalid length.
[  443.522387][T27598] 8021q: adding VLAN 0 to HW filter on device bond79
[  443.572648][T27598] veth47: entered promiscuous mode
[  443.576936][T27598] bond79: (slave veth47): Enslaving as an active interface with a down link
[  443.582177][T27598] erspan0: entered allmulticast mode
[  443.587703][T27598] bond79: (slave erspan0): making interface the new active one
[  443.593477][T27598] erspan0: entered promiscuous mode
[  443.595560][T27598] bond79: (slave erspan0): Enslaving as an active interface with an up link
[  443.630279][ T5851] Bluetooth: hci2: command tx timeout
[  443.768112][T27614] netlink: 'syz.1.6167': attribute type 1 has an invalid length.
[  443.856065][T27625] lo speed is unknown, defaulting to 1000
[  443.872084][T27625] lo speed is unknown, defaulting to 1000
[  443.878235][T27625] lo speed is unknown, defaulting to 1000
[  443.933013][T27627] erspan0: left allmulticast mode
[  443.957514][T27627] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  443.981320][T27629] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  444.084995][T27629] batman_adv: batadv0: Removing interface: batadv_slave_0
[  444.110842][T27625] infiniband syz0: set active
[  444.113251][T27625] infiniband syz0: added lo
[  444.135638][T27625] RDS/IB: syz0: added
[  444.137169][T27625] smc: adding ib device syz0 with port count 1
[  444.141099][T27625] smc:    ib device syz0 port 1 has pnetid 
[  444.170121][   T24] lo speed is unknown, defaulting to 1000
[  444.173995][ T5885] lo speed is unknown, defaulting to 1000
[  444.177806][T27625] lo speed is unknown, defaulting to 1000
[  444.225115][T27638] xfrm4: entered promiscuous mode
[  444.398742][T27625] lo speed is unknown, defaulting to 1000
[  444.704877][T27625] lo speed is unknown, defaulting to 1000
[  444.865684][T27625] lo speed is unknown, defaulting to 1000
[  445.092985][T27625] lo speed is unknown, defaulting to 1000
[  445.537507][T27675] 8021q: VLANs not supported on v
[  445.715685][ T5851] Bluetooth: hci2: command tx timeout
[  446.047192][T27696] pim6reg1: entered promiscuous mode
[  446.055445][T27696] pim6reg1: entered allmulticast mode
[  446.104531][T27687] lo speed is unknown, defaulting to 1000
[  446.304593][T27698] 8021q: adding VLAN 0 to HW filter on device bond48
[  446.309074][T27698] bond48: entered promiscuous mode
[  446.315925][T27698] team0: Port device bond48 added
[  446.346879][T27684] lo speed is unknown, defaulting to 1000
[  446.636175][T27708] __nla_validate_parse: 26 callbacks suppressed
[  446.636190][T27708] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6196'.
[  447.059155][T27734] netlink: 'syz.0.6201': attribute type 1 has an invalid length.
[  447.069072][T27734] workqueue: Failed to create a rescuer kthread for wq "bond80": -EINTR
[  447.117472][T27740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6203'.
[  447.187579][T27744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6204'.
[  447.277126][T27752] sctp: [Deprecated]: syz.3.6207 (pid 27752) Use of int in max_burst socket option.
[  447.277126][T27752] Use struct sctp_assoc_value instead
[  447.402165][T27764] !: renamed from dummy0 (while UP)
[  447.464844][T27771] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  447.551431][   T61] block nbd1: Possible stuck request ffff88804af58000: control (read@0,1024B). Runtime 90 seconds
[  447.555355][   T61] block nbd1: Possible stuck request ffff88804af58200: control (read@1024,1024B). Runtime 90 seconds
[  447.559971][   T61] block nbd1: Possible stuck request ffff88804af58400: control (read@2048,1024B). Runtime 90 seconds
[  447.564769][   T61] block nbd1: Possible stuck request ffff88804af58600: control (read@3072,1024B). Runtime 90 seconds
[  447.616929][T27776] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6213'.
[  447.624683][T27776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6213'.
[  447.642047][T27784] syzkaller1: entered promiscuous mode
[  447.644296][T27784] syzkaller1: entered allmulticast mode
[  447.649402][T27783] netlink: 'syz.1.6215': attribute type 13 has an invalid length.
[  447.652529][T27783] netlink: 'syz.1.6215': attribute type 17 has an invalid length.
[  447.656850][T27784] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6214'.
[  447.662262][T27783] erspan0: left allmulticast mode
[  447.665695][T27783] team0: left promiscuous mode
[  447.667329][T27783] batadv0: left promiscuous mode
[  447.669084][T27783] bond48: left promiscuous mode
[  447.675447][T27783] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  447.768787][T27792] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6218'.
[  447.785191][T27792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6218'.
[  447.799942][ T5851] Bluetooth: hci2: command tx timeout
[  447.857095][T27783] lo speed is unknown, defaulting to 1000
[  448.118832][T27797] lo speed is unknown, defaulting to 1000
[  448.185202][T27809] netlink: 'syz.1.6224': attribute type 1 has an invalid length.
[  448.216007][T27809] 8021q: adding VLAN 0 to HW filter on device bond49
[  448.270076][T27812] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6223'.
[  448.289457][T27809] 8021q: adding VLAN 0 to HW filter on device bond49
[  448.293908][T27809] bond49: (slave vxcan3): The slave device specified does not support setting the MAC address
[  448.299485][T27809] bond49: (slave vxcan3): Error -95 calling set_mac_address
[  448.304870][T27812] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6223'.
[  448.372133][T27813] veth43: entered promiscuous mode
[  448.387779][T27813] bond49: (slave veth43): Enslaving as an active interface with a down link
[  449.017192][T27824] lo speed is unknown, defaulting to 1000
[  449.411964][T27853] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  449.695142][   T10] IPVS: starting estimator thread 0...
[  449.714329][T27878] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  449.803222][T27874] IPVS: using max 80 ests per chain, 192000 per kthread
[  449.939475][T27886] erspan0: entered promiscuous mode
[  450.037727][T27903] netlink: 'syz.1.6250': attribute type 10 has an invalid length.
[  450.045148][T27905] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  450.068309][T27905] syzkaller0: mtu less than device minimum
[  450.109886][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  450.135522][T27914] netlink: 'syz.0.6254': attribute type 1 has an invalid length.
[  450.160253][T27914] bond80 (unregistering): Released all slaves
[  450.177619][T27918] tipc: Resetting bearer <eth:team0>
[  450.186018][T27918] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  450.605784][T27941] netlink: 'syz.0.6264': attribute type 13 has an invalid length.
[  450.608437][T27941] netlink: 'syz.0.6264': attribute type 17 has an invalid length.
[  450.622627][T27941] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  450.630647][   T24] lo speed is unknown, defaulting to 1000
[  451.414098][T28015] syz_tun: entered allmulticast mode
[  451.482565][T28015] netlink: 'syz.1.6284': attribute type 4 has an invalid length.
[  452.072675][T28018] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  452.083194][T28018] tipc: Started in network mode
[  452.087775][T28018] tipc: Node identity e63bd38a4844, cluster identity 4711
[  452.092153][T28018] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  452.097317][T28018] syzkaller0: entered promiscuous mode
[  452.099498][T28018] syzkaller0: entered allmulticast mode
[  452.144465][T28018] tipc: Resetting bearer <eth:syzkaller0>
[  452.155844][T28017] tipc: Resetting bearer <eth:syzkaller0>
[  452.220979][T28017] tipc: Disabling bearer <eth:syzkaller0>
[  452.249215][T28013] syz_tun: left allmulticast mode
[  452.255658][T28014] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  452.482443][T28033] netlink: 'syz.3.6290': attribute type 12 has an invalid length.
[  452.526757][T28035] __nla_validate_parse: 42 callbacks suppressed
[  452.526771][T28035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6291'.
[  452.634042][T28035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6291'.
[  452.768532][T28049] tipc: Resetting bearer <eth:team0>
[  452.916619][T28059] bond50: entered allmulticast mode
[  452.933413][T28040] lo speed is unknown, defaulting to 1000
[  452.995204][T28066] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6298'.
[  453.100139][T28068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6299'.
[  453.198575][T28056] lo speed is unknown, defaulting to 1000
[  453.378423][T28079] pim6reg: entered allmulticast mode
[  453.385805][T28079] pim6reg: left allmulticast mode
[  453.716993][T28087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6305'.
[  453.738960][T28089] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6305'.
[  453.754181][T28091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6306'.
[  453.996288][T28093] bond80: (slave vxcan5): The slave device specified does not support setting the MAC address
[  454.067152][T28093] bond80: (slave vxcan5): Error -95 calling set_mac_address
[  454.088548][T28095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6307'.
[  454.133919][T28097] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6307'.
[  454.188189][T28098] bridge384: entered allmulticast mode
[  454.228452][T28103] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6308'.
[  454.992659][T28145] lo speed is unknown, defaulting to 1000
[  455.030643][T27474] erspan0: left promiscuous mode
[  455.074722][T28163] netlink: 'syz.0.6325': attribute type 1 has an invalid length.
[  455.077444][T28163] netlink: 'syz.0.6325': attribute type 2 has an invalid length.
[  455.103123][T28163] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  455.358597][T28179] netlink: 'syz.0.6329': attribute type 2 has an invalid length.
[  455.426586][T28182] veth0_to_team: entered promiscuous mode
[  455.428630][T28182] veth0_to_team: entered allmulticast mode
[  455.512955][T28189] netlink: 'syz.0.6331': attribute type 1 has an invalid length.
[  455.516653][T28189] vlan0: entered promiscuous mode
[  455.518944][T28189] veth1: entered promiscuous mode
[  455.523623][T28191] netlink: 'syz.0.6331': attribute type 1 has an invalid length.
[  455.954535][T28226] pimreg: tun_chr_ioctl cmd 2147767506
[  456.190279][    C1] ------------[ cut here ]------------
[  456.192583][    C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  456.197052][    C1] WARNING: CPU: 1 PID: 5849 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  456.201227][    C1] Modules linked in:
[  456.203312][    C1] CPU: 1 UID: 0 PID: 5849 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  456.208196][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  456.212436][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  456.215122][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 80 7c b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 02 00 93 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  456.223221][    C1] RSP: 0018:ffffc900001e0538 EFLAGS: 00010246
[  456.225843][    C1] RAX: c9bc906d87be7b00 RBX: 000000000000000c RCX: ffff888107229cc0
[  456.229142][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  456.232488][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  456.235768][    C1] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888120fbdb28
[  456.239019][    C1] R13: 0000000000000000 R14: ffff8881267a8e40 R15: ffff8881267ab0d8
[  456.242492][    C1] FS:  000055558ed4b500(0000) GS:ffff8881a3c18000(0000) knlGS:0000000000000000
[  456.246176][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  456.248903][    C1] CR2: 00007effa14f56c0 CR3: 0000000029032000 CR4: 00000000000006f0
[  456.252247][    C1] Call Trace:
[  456.253711][    C1]  <IRQ>
[  456.254969][    C1]  rate_control_send_low+0x194/0x7a0
[  456.257158][    C1]  rate_control_get_rate+0x20b/0x5d0
[  456.259386][    C1]  ieee80211_beacon_get_finish+0x39a/0x6c0
[  456.261971][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  456.264640][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[  456.266925][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  456.269310][    C1]  ieee80211_beacon_get_ap+0x1868/0x1f30
[  456.271814][    C1]  ? __pfx_ieee80211_beacon_get_ap+0x10/0x10
[  456.274275][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  456.276632][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  456.278972][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  456.281443][    C1]  __ieee80211_beacon_get+0x118e/0x1880
[  456.283828][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  456.286179][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  456.288466][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  456.291074][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  456.293291][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  456.296370][    C1]  __iterate_interfaces+0x2ab/0x590
[  456.298554][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  456.301200][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  456.304335][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  456.306940][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  456.310088][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  456.312265][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  456.314787][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  456.317093][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  456.319674][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  456.322223][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  456.324402][    C1]  handle_softirqs+0x286/0x870
[  456.326495][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  456.328596][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  456.330962][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  456.333217][    C1]  __irq_exit_rcu+0xca/0x1f0
[  456.335160][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  456.337376][    C1]  irq_exit_rcu+0x9/0x30
[  456.339212][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  456.341705][    C1]  </IRQ>
[  456.342984][    C1]  <TASK>
[  456.344283][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  456.346793][    C1] RIP: 0010:__kasan_check_write+0x0/0x20
[  456.349074][    C1] Code: 48 8b 0c 24 31 d2 e9 ef e4 ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 89 f6 48 8b 0c 24 ba 01 00 00 00 e9 bc e4 ff ff 66 66
[  456.356734][    C1] RSP: 0018:ffffc9000329f398 EFLAGS: 00000293
[  456.359104][    C1] RAX: ffffffff820ba83f RBX: 0000000000000000 RCX: ffff888107229cc0
[  456.362281][    C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffea0000e192f0
[  456.365527][    C1] RBP: ffffc9000329f630 R08: ffffea0000e192c7 R09: 1ffffd40001c3258
[  456.368707][    C1] R10: dffffc0000000000 R11: fffff940001c3259 R12: 00007eff9f5ec000
[  456.371943][    C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffea0000e192c0
[  456.375126][    C1]  ? copy_pmd_range+0xb2f/0x71d0
[  456.377135][    C1]  copy_pmd_range+0xb3d/0x71d0
[  456.379049][    C1]  ? stack_depot_save_flags+0x40/0x860
[  456.381439][    C1]  ? __pfx_copy_pmd_range+0x10/0x10
[  456.383567][    C1]  copy_page_range+0xc14/0x1270
[  456.385579][    C1]  ? __lock_acquire+0xab9/0xd20
[  456.387651][    C1]  ? __pfx_copy_page_range+0x10/0x10
[  456.389889][    C1]  ? up_write+0x1c4/0x420
[  456.391715][    C1]  ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10
[  456.394514][    C1]  dup_mmap+0xf57/0x1ac0
[  456.396317][    C1]  ? __pfx_dup_mmap+0x10/0x10
[  456.398380][    C1]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  456.400944][    C1]  ? mm_init+0xcc3/0xef0
[  456.402750][    C1]  copy_mm+0x13c/0x4b0
[  456.404498][    C1]  copy_process+0x1706/0x3c00
[  456.406530][    C1]  ? copy_process+0x97f/0x3c00
[  456.408499][    C1]  ? __pfx_copy_process+0x10/0x10
[  456.410697][    C1]  kernel_clone+0x21e/0x840
[  456.412676][    C1]  ? css_rstat_updated+0x23a/0x4f0
[  456.414820][    C1]  ? __pfx_kernel_clone+0x10/0x10
[  456.416934][    C1]  __x64_sys_clone+0x18b/0x1e0
[  456.418711][    C1]  ? count_memcg_event_mm+0x21/0x260
[  456.420803][    C1]  ? __pfx___x64_sys_clone+0x10/0x10
[  456.422999][    C1]  ? do_user_addr_fault+0xc8a/0x1390
[  456.425257][    C1]  ? do_syscall_64+0xbe/0x3b0
[  456.427231][    C1]  do_syscall_64+0xfa/0x3b0
[  456.429185][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  456.431596][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.434248][    C1]  ? exc_page_fault+0x9f/0xf0
[  456.436268][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.438763][    C1] RIP: 0033:0x7effa0785453
[  456.440796][    C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00
[  456.448798][    C1] RSP: 002b:00007ffcec89daf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  456.452426][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007effa0785453
[  456.455751][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  456.459033][    C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001
[  456.462458][    C1] R10: 000055558ed4b7d0 R11: 0000000000000246 R12: 0000000000000000
[  456.465773][    C1] R13: 00000000000927c0 R14: 000000000006f566 R15: 00007ffcec89dc90
[  456.469029][    C1]  </TASK>
[  456.470393][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  456.473425][    C1] CPU: 1 UID: 0 PID: 5849 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  456.477238][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  456.481419][    C1] Call Trace:
[  456.482845][    C1]  <IRQ>
[  456.484091][    C1]  dump_stack_lvl+0x99/0x250
[  456.486090][    C1]  ? __asan_memcpy+0x40/0x70
[  456.488048][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  456.490193][    C1]  ? __pfx__printk+0x10/0x10
[  456.491960][    C1]  vpanic+0x281/0x750
[  456.493580][    C1]  ? __pfx__printk+0x10/0x10
[  456.495514][    C1]  ? __pfx_vpanic+0x10/0x10
[  456.497394][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  456.499592][    C1]  panic+0xb9/0xc0
[  456.501143][    C1]  ? __pfx_panic+0x10/0x10
[  456.503025][    C1]  __warn+0x31b/0x4b0
[  456.504716][    C1]  ? __rate_control_send_low+0x5df/0x820
[  456.507033][    C1]  ? __rate_control_send_low+0x5df/0x820
[  456.509362][    C1]  report_bug+0x2be/0x4f0
[  456.511142][    C1]  ? __rate_control_send_low+0x5df/0x820
[  456.513468][    C1]  ? __rate_control_send_low+0x5df/0x820
[  456.515738][    C1]  ? __rate_control_send_low+0x5e1/0x820
[  456.518012][    C1]  handle_bug+0x84/0x160
[  456.519810][    C1]  exc_invalid_op+0x1a/0x50
[  456.521708][    C1]  asm_exc_invalid_op+0x1a/0x20
[  456.523759][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  456.526224][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 80 7c b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 02 00 93 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  456.534083][    C1] RSP: 0018:ffffc900001e0538 EFLAGS: 00010246
[  456.536675][    C1] RAX: c9bc906d87be7b00 RBX: 000000000000000c RCX: ffff888107229cc0
[  456.539922][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  456.543068][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  456.546267][    C1] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888120fbdb28
[  456.549554][    C1] R13: 0000000000000000 R14: ffff8881267a8e40 R15: ffff8881267ab0d8
[  456.552743][    C1]  ? __rate_control_send_low+0x5de/0x820
[  456.555079][    C1]  rate_control_send_low+0x194/0x7a0
[  456.557245][    C1]  rate_control_get_rate+0x20b/0x5d0
[  456.559406][    C1]  ieee80211_beacon_get_finish+0x39a/0x6c0
[  456.561764][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  456.564228][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[  456.566453][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  456.568731][    C1]  ieee80211_beacon_get_ap+0x1868/0x1f30
[  456.571079][    C1]  ? __pfx_ieee80211_beacon_get_ap+0x10/0x10
[  456.573547][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  456.575807][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  456.578075][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  456.580315][    C1]  __ieee80211_beacon_get+0x118e/0x1880
[  456.582580][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  456.584968][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  456.587245][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  456.589777][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  456.592051][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  456.595175][    C1]  __iterate_interfaces+0x2ab/0x590
[  456.597366][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  456.599823][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  456.602693][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  456.605184][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  456.608007][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  456.610239][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  456.612624][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  456.614776][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  456.617192][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  456.619590][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  456.621680][    C1]  handle_softirqs+0x286/0x870
[  456.623695][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  456.625701][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  456.627986][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  456.630131][    C1]  __irq_exit_rcu+0xca/0x1f0
[  456.632018][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  456.634176][    C1]  irq_exit_rcu+0x9/0x30
[  456.635993][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  456.638403][    C1]  </IRQ>
[  456.639684][    C1]  <TASK>
[  456.641084][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  456.643676][    C1] RIP: 0010:__kasan_check_write+0x0/0x20
[  456.646087][    C1] Code: 48 8b 0c 24 31 d2 e9 ef e4 ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 89 f6 48 8b 0c 24 ba 01 00 00 00 e9 bc e4 ff ff 66 66
[  456.653983][    C1] RSP: 0018:ffffc9000329f398 EFLAGS: 00000293
[  456.656483][    C1] RAX: ffffffff820ba83f RBX: 0000000000000000 RCX: ffff888107229cc0
[  456.659791][    C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffea0000e192f0
[  456.663014][    C1] RBP: ffffc9000329f630 R08: ffffea0000e192c7 R09: 1ffffd40001c3258
[  456.666221][    C1] R10: dffffc0000000000 R11: fffff940001c3259 R12: 00007eff9f5ec000
[  456.669479][    C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffea0000e192c0
[  456.672645][    C1]  ? copy_pmd_range+0xb2f/0x71d0
[  456.674747][    C1]  copy_pmd_range+0xb3d/0x71d0
[  456.676835][    C1]  ? stack_depot_save_flags+0x40/0x860
[  456.679087][    C1]  ? __pfx_copy_pmd_range+0x10/0x10
[  456.681218][    C1]  copy_page_range+0xc14/0x1270
[  456.683321][    C1]  ? __lock_acquire+0xab9/0xd20
[  456.685543][    C1]  ? __pfx_copy_page_range+0x10/0x10
[  456.687843][    C1]  ? up_write+0x1c4/0x420
[  456.689684][    C1]  ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10
[  456.692531][    C1]  dup_mmap+0xf57/0x1ac0
[  456.694389][    C1]  ? __pfx_dup_mmap+0x10/0x10
[  456.696383][    C1]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  456.698855][    C1]  ? mm_init+0xcc3/0xef0
[  456.700570][    C1]  copy_mm+0x13c/0x4b0
[  456.702191][    C1]  copy_process+0x1706/0x3c00
[  456.703830][    C1]  ? copy_process+0x97f/0x3c00
[  456.705574][    C1]  ? __pfx_copy_process+0x10/0x10
[  456.707464][    C1]  kernel_clone+0x21e/0x840
[  456.709072][    C1]  ? css_rstat_updated+0x23a/0x4f0
[  456.711073][    C1]  ? __pfx_kernel_clone+0x10/0x10
[  456.713087][    C1]  __x64_sys_clone+0x18b/0x1e0
[  456.714696][    C1]  ? count_memcg_event_mm+0x21/0x260
[  456.716775][    C1]  ? __pfx___x64_sys_clone+0x10/0x10
[  456.718810][    C1]  ? do_user_addr_fault+0xc8a/0x1390
[  456.720570][    C1]  ? do_syscall_64+0xbe/0x3b0
[  456.722233][    C1]  do_syscall_64+0xfa/0x3b0
[  456.724101][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  456.725901][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.728320][    C1]  ? exc_page_fault+0x9f/0xf0
[  456.729852][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.731652][    C1] RIP: 0033:0x7effa0785453
[  456.733031][    C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00
[  456.739925][    C1] RSP: 002b:00007ffcec89daf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  456.742723][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007effa0785453
[  456.745273][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  456.748225][    C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001
[  456.751036][    C1] R10: 000055558ed4b7d0 R11: 0000000000000246 R12: 0000000000000000
[  456.753615][    C1] R13: 00000000000927c0 R14: 000000000006f566 R15: 00007ffcec89dc90
[  456.756365][    C1]  </TASK>
[  456.758282][    C1] Kernel Offset: disabled
[  456.759909][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:00:52  Registers:
info registers vcpu 0

CPU#0
RAX=3cdcd05b4aba8800 RBX=ffffffff819683c8 RCX=3cdcd05b4aba8800 RDX=0000000000000001
RSI=ffffffff8d9b8166 RDI=ffffffff8be33800 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa39030 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b79c3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001580 CR3=000000011a368000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f8a7a797498 00007f8a7a797470 XMM03=00007f8a7a7974a8 00007f8a7a7974a0
XMM04=00007f8a7b2fd100 00007f8a7a797460 XMM05=00007f8a7a797478 00007f8a7a7974c0
XMM06=00007f8a7a7974b8 00007f8a7a7974b0 XMM07=00007f8a7a7974a8 00007f8a7a7974a0
XMM08=0000000000000000 00007f8a7a612ee7 XMM09=0000000000000000 00007f8a7a612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000049 RBX=0000000000000049 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001dfcd0
R8 =ffff888021908237 R9 =1ffff11004321046 R10=dffffc0000000000 R11=ffffffff854f38c0
R12=dffffc0000000000 R13=ffffffff99afd8e0 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f393c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558ed4b500 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007effa14f56c0 CR3=0000000029032000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=0000000000000000 00007effa0812ee7 XMM09=0000000000000000 00007effa0812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
