last executing test programs:

1.331746737s ago: executing program 2 (id=1348):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0xfffffffffffffe4a}}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000) (async)
getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9c0000000001010400000000000000000a000000440001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280050001000000000006000340000100003c0002802c00018014000300fe8000000000000000000000000000aa140004007e8000000000000000000000000000aa0c00028005000100000000000800074000000000"], 0x9c}}, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1420000002010c0000000000000000000200000810388c9eccd4a1bb26f3f6403c3c90fe92d7aac4d913948eb3ae1f3279f11f7d6ec30800000000000000f61be6b75c1118f7218b29397f9bf36aa6bd62cef52ed0d383e0176094e15d42494efd0ff6d48a28b25d66285cf9078e98804e6c92d9c690633f53f56d87986db591659bc628e50b3e0da8d8ee465b868383e88e33db4009b62aa72cd61583590cb8e0b5895952a7e138f08cc6948a"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) (async)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00120000009404006c0012800b00010062726964676500005c0002800c001e00000000000000000005002a00ff0000000500260001000000050019000000000008001a00d80300000c001f0000000000000000000500240000000000050024000100000008001a0007000000050007000700000008000a00", @ANYRES32=r3], 0x9c}}, 0x40) (async)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
r8 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) (async)
setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) (async)
setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000]}}, 0x5c) (async)
setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x89f, 0x8, 0x1]}}, 0x5c) (async)
setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r10 = openat$cgroup_devices(r9, &(0x7f0000001bc0)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r10, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8) (async)
setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100"/523], 0x290)
setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f00000001c0)={0x9, {{0x2, 0xfffe, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e23, @loopback}}]}, 0x110)

1.252769434s ago: executing program 0 (id=1351):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a0104fff50000000000000700000008000a40000000000900020073797a31040000000900010073797a30000000000800054000000021380000001d0a03000000000000000000070000000900010073797a3000000000090002"], 0xbc}, 0x1, 0x0, 0x0, 0x20008800}, 0x48004)

1.250939236s ago: executing program 2 (id=1352):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01d90000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32=r3], 0x3c}}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
close(r5)
r6 = socket$alg(0x26, 0x5, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@bridge_setlink={0x2d8, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r8}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x3, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8}]}}]}, @IFLA_VF_PORTS={0x1d4, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0xc}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "714abbd2547de97cbbf6efb226f19bf9"}, @IFLA_PORT_PROFILE={0xd, 0x2, ':(\x8e^[[Z@\x00'}]}, {0x60, 0x7, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "293a02149f3b75a67093c28fd6f55a23"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e48f01e49713f0c2d839f940d9f088d8"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_ilave_0\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '\f\x00\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x58}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4d2906d0880fc8acc30fe2020f984967"}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a1085e7df341b9dc3d8008a2feffdaad"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9c7e472c916020fe41bcc5aa8f56c947"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "80ab8be51421cfa3c9e5cbfe8217e0af"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0xc, 0x2, 'syztnl0\x00'}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e078d277f38ed3a40a448f3f6b6763e8"}]}, {0x3c, 0xc, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x25}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x19, "03dd96197aca85b64424a37dbda7b694"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x7, "eb052fcd3dd4d3e8bbcbf1de857c0e1c"}]}, {0x3c, 0x18, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b2112a97bf9704ee57915340334b8271"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e8635392a70f36f95f4b9b352920ebec"}]}]}, @IFLA_GSO_MAX_SEGS={0x8}, @IFLA_AF_SPEC={0xc8, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_BRIDGE={0x4}, @AF_INET6={0x60, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x40}]}]}]}, 0x2d8}}, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58)
accept4(r6, 0x0, 0x0, 0x0)
socket$inet(0x2, 0xa, 0x7)
socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/19, @ANYRES32=r10, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000500170000000000060018"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4080)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.202127081s ago: executing program 0 (id=1353):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110b5000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0xce, '\x00', @loopback}}}}}}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
shutdown(r2, 0x1)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r5=>0x0})
socket$xdp(0x2c, 0x3, 0x0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)={0xf4, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xacac981}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbe12}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c800)
setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
r8 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@fadd={0x58, 0x114, 0x6, {{}, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}}], 0x58}, 0x0)
setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980), 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r9=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10)
bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r6}, 0x60)

1.102070027s ago: executing program 0 (id=1354):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
unshare(0x24020400)
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x34b9}, 0x50)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req={0x0, 0x71, 0x7fffffff, 0x80000001}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x1}}}}]}]}, 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x224}}, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
accept(r2, 0x0, &(0x7f0000000140))
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x4000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r7, &(0x7f00000007c0), 0x0}, 0x20)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x2}}, 0x2e)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a0220782500000000002020207b1af8ff00000000bfa100000000000004010000f8ffffffb702000008000000b50a000000000000856e0000060000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0xa, 0xd5, &(0x7f0000000340)=""/213, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a01020000000000000000050000060900010073797a3100000000580004805400018009000100261a54f75d7753086d6574610000000044000280080001400000000c080003400000000d08000240000003ff0800014000000000080002400000000108000340000000000800"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r11)

1.012313509s ago: executing program 2 (id=1355):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'})
sendmsg$nl_route(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
close(r1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'ipvlan0\x00'})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0)
unshare(0x22020400)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r2, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'})
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000001000010027bd7800fbdbdfa500000000", @ANYRESOCT=r4, @ANYBLOB="892e0a001162050034001280110001f06172696467655f736c617665000000001c0005"], 0x54}, 0x1, 0x0, 0x0, 0x8c041}, 0x2)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560284606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0x48}], 0x1)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r5)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="07ef28bd7000ffdbdf2508"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080)
socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r8, &(0x7f0000000000)="d1", 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x5}, 0x1c)
connect$inet6(r8, &(0x7f0000000480)={0xa, 0xce23, 0x2, @private1, 0x9}, 0x1f)
shutdown(r8, 0x1)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x80, 0x30, 0xb, 0xfffffffd, 0x2, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x7}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_ACTION={0x14, 0x3, 0x2a}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, {0x4, 0x6, "54f25b3a808e9427dd4edf308e7ed3c189df6a254756db4edc0ece00fe1680a5ab035637ed3c82e67ec8dbc31c428e3653fe6d4b8393069e212d1bc52e1b4f7a3f80200abdde3707a5ffcbaae71b33c15896841c1b2d9ff0fb79bf833b85c87019e0ec46558fc9b1a16cc557261e9796b7"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x80}}, 0x30000080)
shutdown(r9, 0x0)

1.011251748s ago: executing program 0 (id=1356):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000001ac0)={'vcan0\x00', 0x6})
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000009000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000bff9a3299648e7fdd7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c00000002060101000000000000000000000001120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c00018008"], 0x6c}}, 0x20048084)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="016f0800010027000000270000004500004000000000008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba00001690780018090300050a00000000000000000008d58838068b910000007b317e4158cc4632dff0a3545db908bd1399cf0f094bdfed652ac2c7f61a684ee494c27b3cc7"], 0x4e)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}})
r8 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x2c, 0x6, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0xab, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7f}, 0x1c)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, 0x0, 0x0)
pipe(0x0)
close(0xffffffffffffffff)
pselect6(0x4b, &(0x7f0000000040), &(0x7f00000000c0)={0x9}, 0x0, 0x0, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a0003000000000004000400"], 0x1c}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800490400000000000014000a100000000000000100000008001e0001000000"], 0x24}}, 0x0)

396.448311ms ago: executing program 1 (id=1359):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0)

320.481953ms ago: executing program 1 (id=1360):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110b5000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0xce, '\x00', @loopback}}}}}}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
shutdown(r2, 0x1)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r5=>0x0})
socket$xdp(0x2c, 0x3, 0x0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)={0xf4, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xacac981}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbe12}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c800)
setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
r8 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@fadd={0x58, 0x114, 0x6, {{}, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0010000000000}}], 0x58}, 0x0)
setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980), 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r9=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10)
bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r6}, 0x60)

242.289518ms ago: executing program 1 (id=1361):
socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x2a, 0x80000, 0x6)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x470d0, 0x40}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0xe0000000}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x2}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}}, 0x8000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}], {0x14, 0x10}}, 0xc8}}, 0x0)
unshare(0x20020c80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850)
sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010400000000000000000000000014000780946106400008000208000840000000360500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a69700053fcfce78bf39b5171bbb34fdcada8912ea4b0c61cb2ef62"], 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r6, &(0x7f0000000b00), 0x0}, 0x20)
sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r5, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x600000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x518}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000014}, 0x40000)

187.34581ms ago: executing program 1 (id=1362):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x8)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x25, 0x5, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000980)=ANY=[@ANYBLOB="2a87bdc7e3eb8c36d3ff1432549b346daa09850def0e24d8d7930e723d0d12e6830e56073154e3ba945ea63dc89cd61395dc59bb1e3b3817129f40567f59", @ANYRES16=0x0, @ANYBLOB="006fb3b370fd8bd9ee19659d5be6ffffff00"/28], 0x14}}, 0x4000)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32=r3], 0x3c}}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f00000038c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe, 0x0, 0xfffffffd}, 0x10, 0x0, r0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
close(r5)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0) (async)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58)
accept4(r6, 0x0, 0x0, 0x0)
socket$inet(0x2, 0xa, 0x7) (async)
socket$inet(0x2, 0xa, 0x7)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/48, 0x30}, {&(0x7f00000003c0)=""/203, 0xcb}, {&(0x7f0000000340)}, {&(0x7f0000000600)=""/231, 0xe7}, {&(0x7f0000000700)=""/191, 0xbf}, {&(0x7f00000004c0)=""/48, 0x30}], 0x7, 0x8, 0x10) (async)
preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/48, 0x30}, {&(0x7f00000003c0)=""/203, 0xcb}, {&(0x7f0000000340)}, {&(0x7f0000000600)=""/231, 0xe7}, {&(0x7f0000000700)=""/191, 0xbf}, {&(0x7f00000004c0)=""/48, 0x30}], 0x7, 0x8, 0x10)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="500000001000010400"/19, @ANYRES32, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000500170000000000060018", @ANYRES16=r7], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4080)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a090400000000000000000200fffe0900020073797a3200000000090001008024000180090001006d657461000000001400028008000140000000010800024000000023140000001100010000000000000000000000000a00"/124], 0x7c}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x58, 0x30, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_mpls={0x40, 0x19, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x2}, @TCA_MPLS_LABEL={0x8, 0x5, 0x73842}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0)

186.559795ms ago: executing program 2 (id=1363):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000002000000000700000008000a40000000000900020073797a31040000000900010073797a30000000000800054000000021380000001d0a03000000000000000000070000000900010073797a3000000000090002"], 0xbc}, 0x1, 0x0, 0x0, 0x20008800}, 0x48004)

121.886263ms ago: executing program 2 (id=1364):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001480)='sys_enter\x00', r0}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='sys_enter\x00'}, 0x1b)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002980)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280080004000000000004001200080005"], 0x48}}, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={<r2=>0x0}, &(0x7f00000000c0)=0xc)
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf, 0xa1}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'vxcan1\x00', <r4=>0x0})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000006c0)=<r5=>0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x33}, 0x4e20, 0x0, 0x4e20, 0x5, 0xa, 0x120, 0xa0, 0x3b, r4, r5}, {0x4498a237, 0x7, 0x1, 0x29085b9a, 0x3, 0x6, 0xe5, 0x6}, {0x7f, 0x8, 0xa3da, 0x6}, 0x2, 0x6e6bb1, 0x1, 0x0, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x4d3, 0x2b}, 0x0, @in6=@loopback, 0x3507, 0x0, 0x0, 0xb2, 0x9ac, 0x80000001, 0x854}}, 0xe8)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, <r6=>0x0}, &(0x7f0000000140)=0xc)
setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={r2, r5, r6}, 0xc)
bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x200}, 0xc)

58.269916ms ago: executing program 2 (id=1365):
syz_emit_ethernet(0x66, &(0x7f0000001580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1486dd60cb653e00300f79b463dbca6894f5b0578743ab3a0000000000000000000006ffffac1414bbff020000000100000000000000000001a10b90780000000060256b5400000000ff010000000000000000000000000001fe80000000000000000000000000003b0ddbccb8be7dee74f72638eb2564bae994621791fcb84c281eb0087d77ade1db62e003a81726e5bcd95ff0a4e540e5337f0b982e4caeb011ce3475d3e3a9dd4081659de320280b880c00"/205], 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a0b0400000000000000000200000088000480240001800b000100736f636b6574000014000280080002400000000308000140000000024c0001800b00010065787468647200003c000280080002400000007508000340000000590800064000000002080006400000000108000440000000b905000200070000000500020007000000140001800a00010071756f7461000000040002800900010073797a30000000000900020073797a32"], 0x17c}}, 0x40880)
recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000340)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r3, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0)
r4 = socket(0x22, 0x4, 0x1)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c03000000000010000000020000000007000000", @ANYRES32=r6, @ANYBLOB="0000d20b"], 0x1c}}, 0x0)
accept4$inet(r4, 0x0, 0x0, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r8, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0x1a)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x2, &(0x7f0000000000)=0x18, 0x4)
ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)=@ethtool_cmd={0x45, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x87, 0x0, 0xfffffffd, 0x0, 0x1, 0xb8, 0x0, 0x80000048, [0x2, 0x89ff]}})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a", 0xa}], 0x1}, 0x0)
recvmmsg(r10, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001500)=""/128, 0x80}, {&(0x7f00000002c0)}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x42, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000e2000008000400cdff000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
r11 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x3, 0x3, 0xc, 0x100, 0x1ff}, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc)

58.105876ms ago: executing program 0 (id=1366):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4008891}, 0x0)

57.799903ms ago: executing program 1 (id=1367):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="01000000ffffffff"], 0x38}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}, @IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffffc}]}}}]}, 0x44}}, 0x0)

832.048µs ago: executing program 0 (id=1368):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f00000024c0)=ANY=[@ANYBLOB="00000800000003000000000000000000000045000fbc0000001100219078ac141400ffffffff0420880b000000000000080050726483718ba3e6d08f7571cc59e627d3ed353e879da15784c220746fc2eba11f56fe932b544f53b43a34b265bd5d44fd38791b56b3b8767c382bc52ee2b8fcbbd661f151afd5315d5f502920c297a3916d7ea039eb558ebb06336662367e15363058de9b806035d5c980832248d1fc96c6b2fb2a4dffa91026dd0228974f70bea2a8e3fe0c9aae345d6e19f2000086ddac10ef31176d1af88e863d588661a0756365388ef6f2d7b69fb82dc9e7de475e5aad52fa5b61fb1730a4f8ba342b81d86460c5cc35df8bdc3e55e1e92140c9ed10cfd396d4fb331e1901da8dfd47cd7431fd6cb967f7d84f0ba6de4a73b26c286edc3684534e70f60b30b7aefec9309c13a29b35e134d47c3579870d43bcc2babd71412ade39c68b036b5e7a6e90c25efe7a5b3ff3fae0fe7459e71cb431cb8f6a45a9a21d938cbd1de67fde856f05154095c3d86b9f4bac02987d8a06aae5f8d3da56748f1f6b1e9de4d1afaea08c70a943b080bf77494e5dcc17fe38bb0a0b36a008f7805cfdbe5a89e2e12e013b6ff42e3f9e825f3d604768f87273edad56c12c8a5eacd9b63ea6fa1ecf16139cb19c579c4f0a125a755439e6dc9c1637c0d23c1c281af2982cca306b2d3dbaede299bfe4f2ebd822abfabafef3f159049cc24f01a412fafe3d43841a6a4dbed78566e34544a074d4c01cedbb22527e955e8f93ef5a927fdec293a3c78693cae45de7481fdf0f65a43b50d26904594676b7af375752c99e2ba3e00286ab9d438af7b8834c0e71d245c0428ecc5a59f29ab0bca9b1913b9bb5373a94e1daae374d0ed7e7ffd0a1188c83e61e8ee28625483a96a246b9e1cdc8da085de61834a15afd5e7726d711c5ecc008914b9b9f35603330113e548e4509516bac6bc1150b2ace667a540ec84d22c0d0200056918fa3ac596cddd501f7b34f3b97c12c3c10e4b0c67ef01059c2feed93f9169498278daabd27d8537882a87b2edd4b2e6789b90d065ba7a064b2b4ecc1622c8662b3145844c12491ee85dd2acbe057479db9d24e500d9f1af37745f39e7fc7d4e513fa839556155db1ba6d62465a464184f2f4f9c4c822e64c6a357d7bc06caf64db283f0a3a427b400b7dd4df488c9e30db1fdb1774038d32557b69f9c1eba7ec66309bc68c19200aa5f05ec21c1cc9a12667cbae2863198913eac1de18df558c1b5fbceb0e6b521e120e98b39ecc8cabb6c25cdc31d827eeb549fe548f6b29d4f65b176ea0a20411d750f02c660cba2c62935fad8c51324f6f437daa53c81ff2e19b94140f1d72a2540b3fa74ffe85c696a4e4411d4449744ca4b5e8b921c7d62208b88a1df38030c4e09cd264a9c534259737ed6ea798cbc2d0054845dc84e97295efad0f5228fc61710e75a4445a889e230887845fa7f02be62593c352cb344a0f947bdb6c4cf3aab5ecedbd4fdde781c496db32a51f700b2fc19b2c36e257bbb2c735e0f03cd9e49700aee6edaa6952bdc2feef2d2e5463b6778fde3c7ef73477e22a181816883192beee132b3866c4ec977e0cd0b995de650c4c7d3e6e483685f75f9d82f69868d67e64a59e7320707847040bed7bb8c24d5e6a1da326d3226e71933484a2c619592a00db3b086d5fee139abaae14d65698937ef8c066acc7134f085e1e8ccd04a67e128c2d775740f0727c14dfbf8a2ed7f25d353285ab0fd03a8788d725163d27ac13ced25669301f672fb1f404451d85e92e1d0049fa9558c8492cc336ddd5133cb1b307f2901341fb6a021e1b751f22412e76fad6ea2b4a7d756559619fa47b22bc55ef8fdc19fbd6136becc60ff19748e60452e704752c82beb4861ea118875e9fe75a9e6c10c8b922dd8054ef8dd15963db6d505e7eab028322801bb4328d8257e726d937ca83c8efca320c8ecd24313eb5e8114c604781ed936a82740340ac6692bfc3613d2f49bf8284cf60cee6513fd154034e49af838146872e8735962da7f7bbd301f2fd85e597c1b6f8418352ebec83286f9dfab4a0b4dbb8b9c7b55aaf9ac1628d1493c1786c78a8a0b8c58596f1e1ba92b7fcdb80e867fdd299c78b902ac2de3c6d6bad6c5fb0c5db603b7c3c7ff8a64dc4488e07d2b506db960db1503ad72dab8ef405549a5f12a62052be8f7ad3fad32ba8560a8874c06f815ec9912dfcc16d8e0f8c9ab9afceae435a63dcdd1dc6b1e4d186f306ec1c8af08e69ad8fc9860c9bad1af0654c51e0711ecfa47c6b4411010076c975057db6609b47fda736f6ef81863387e3c971479a572145aab35a24475ffea35c1626b644ba12ef8d92cf9310f722b493b2da8ea4c5dcd99d75167e1404642aafbf5db3f8ce95382d7bbd550c0bae73af75dc913ead260ce475b30879d4279efeae49e88b0071661725e9ec5b3579c1716d70971fd301d8ee090a98120bf35ffa62101077362a2a3564022b0bff01e76e641fc01ff731a834509600aadeffe2f00276de348a3c57778865063bd8e348b6e68b5c74298ba911a184f5bfdefd6473272c174c9e644abdf22b3ac39e246ae947ffef4773bcfec3b2a8d03dc8971471dfc50cd5ef6d32ae3486f7d14b0137e80a313910d9bc87aed8c41c6563f646b39c2a26f4add083ab6efb5753fc6b78e7907b9cd8a2cabdf87e202239fffc99e0446915c3bc147635398f73201d7369902225184d8da01641759645bf92b5d73ab153f2150264c3333ce12747ce2642aa04aeeb85513170a67dd93b010e8fd0f3cb290e1fc0040d32bdad7d8b41c4f2d10a3c170dbc3e264e29714a34dd220c2bf3e273d7cb3a9397b16a47c85cca75e4cac2def7c976fb7f38b24bdb8f80486e9cec55574d9f2864085289fd2fc497a3a7fab762877629db9ff70201f07897246f9f5211ced9266b732e9988805669dc1bc8e4ddd235562c7785e2379f1f0dd1e71a98b6d204e6c1a1ee163ceb35f6c436bb2547522bed2a55814a3f5f53d3eceee6c847c12af75fdc8452116ab891a5c6424a79b33c4b56a5412700a907f3eca800fcfba133f8bab9ebae32c699b548aff3ac702699f293fceb7445a7107956adad16a6b73a2fe0c88232f2d9831b238b92c511e4a6e02f784ee328bd979c4728ba0f86cc4ed9a69c6d5bc23496729a6512c4664006afc08de2f4dd89e52108f7c081d11facccb91ebc82415691b6bf05818638b3a4d809ae307f4b2d867a34417dbaad8c01a3773d8ebe56890230bd4a2e2a027d59839e1710cb5d25cec245ed8f86b7d4ed8e4ec48c53387ab1ea059406bf2612a6c730750b41a47bdf51cbec2c3f1b07fd6aba2ea390e138868d71f0a73990e87b383757a199f53bcd25f93b15efaf84a9a3758f5cbc2223a809ba784a5af2d36a3b99e3d143310ecf2bb9d2dd8fe9defdfa3d82e005c52514f13beb97476fb7a0f7ab62892977c9da0b950dbbc89bdd58472619f3bdbf46def88488e7bdf0633ee908a4e4e795e92037b74db18672e168514e2ad0a2df94357f2dc2c593b251894657c6bea65abfcd76b7037bd5817ab73be94f00031150f375442e0f0d0e7236ed4150637c14f62ecb6713f897889d77d814ead5774d726f307fe32c020cdefda72151798fcde65af6fbe6594eeb078a8c414b949c0c2217a0cc82049c43f6fb3cb7c00fc0305b86dddde708dd8a61a63e799abdd49d6ff1c41b8ecb230891037ca36d7a7e1f6280f52a5d45ff872f11df408ae09fc9b9d371ccf4f2777626ad84426d925dac9bbacc785acb5c29cbf9d6aec77d5ac48778ab4682b7bb611f342a72c26417a5e432e5d956844e19739e61999a78c615acc09f415032031ac6cb839da764331d131acbe66b502e7f1a5b9dc68df7f5524e7bc6fdfa982b39af2cbff69052d04be78821282dbfc034e64943004375f16cf4741526aaafebfc1a6d4a38d4c345aa22c94922f145b6c449a216b6c382565598125156fad8097c2e7ea65063cdfe34e50fb75939f3b3cf5ab8a3448ead3cc36358f45b0eaabf8ff2b64a1923407226f24420978d03d6bcefc2b45a74425017c11146e25f6d41912f39afecaa19090123ea2605994978b00a347aba322cd10822933e3f5988477ce1b2aff651553ec4977b185e5c7aaa4c64b4fb49cfc0cad75e85c0617e19f26fd0932a4bba0821d5a4d9449773c2d3c25e8aee59155346502b72a4d6818f143695acd5b83a336d02e2d1b9da5740e287c4694012f9648656c51cd44431c54301ea55f48197d1280421793598db89820937aa6a41d69618f55fd9c40dc0742e77d4ddf4a68a6cecba47ff0a22e2734bc9556193642b92838c891b4ed109af35190332aabb9aab184076cfc99f08814bebe47fccd12005ad926a643c791ecda50458a1106a033408fb90da10f8d6e42b3a462e9f9a1a2752c21967884ea79a1148f3dd0304bef05747458c7859dbf7f6df08074e9ac221677b70546909329c5557adb255cc33c1f9b762188e2498a7744f066df3fb8bee6261db37489b63f9bda047a06cbc588ff1255e3b2e1d2f897d9bd7c5cebe6ddac1e763a86a5ca353160e0dc4088ea691c768f5d36397cb64c6db2d5bd39473a9d1209d021b8017434874ed5f99d9fc27d5549eaecdcfb7093549acaea45610221192942e108def0efbc004bbfef195af7dcdc0b75097eba13d621c2ca5ee3bfd2845b21a910e8ea21536768e1e5081997ae7415a55e58e1294d8ff3bc95faf96a65501b922382f4f75a0f938b290fd66bb3ccdc33734bafa18a3765d23f151951b8c8c6939de018c4e9ca253dff4a1fc70a601bba8c2e146a79166745e5fd1748c638a7a945e5f5aea0a93c7861446ef5996e37231e573245dae58b168c0564c8b27ada3fde66bb00f51f7e47970855d1057739ccf583666055187173bfd1454a5fbcfd59f39b6ad63fbfbe0fea9a6b336a41ec316acedd38cc6fab7de1190c97bed6e8f1cdb47d59941955f87a59d953c0f60f68a63fcf8f6f76b3eb5d79d94a2eeb3fb28781b1bbd31937c6f6e2d6fa7d2f4134702fdc0a2250bbec420c73a89c1643379235a492c2cbb3280ec3e676fcc1b33aaa645234eebefb1c28c52646a33c1989a386d537cd5ebf89f50b575b37b9a337f653919a569229009080088be00000000100000000100000000000000080022eb0000000020000000020000000000000000000000080065580000000020e62929c11cb0549208c925145acbdc02d1fec745f9b654f2d97c9269199fc2293765cfbba8e22fa0ba230c891eb5a9490864bc2e2993a2831d52a0f75fda3f213ec297d9acaa7a8aedc6826e3274b7f48681313b4b677b469a77dd667c84aaf2766d84d9f6dd1b6aa2ab1860b1394813e57c4c6d557a4d049d74cdc674b82da3e6c6f0b9a890edc47dd5a6801c24ba1da62ac03a3620d1f109122a34cd8f552730c4239a81f09bc9174d89403e8011a5436bc7abbd69d49f68a786837a51689f7a4b422061f4768c9052c000016fffffe700e53f083b13e53ef485d121779c5da2b6ce80f9cc4a030570a1cc071d9a6845b6018baaa77418d5fb030700f7b63620c369c466108465b7c7967c0c84a9b828118c9ba7808abfe69f783c3795ecbe1714d91d56b64b9e8e7f86d3fff9c8084b5ec69fcf586b23c29dc078db3fda0fe8cfaed8ab7a5a39bc2ec6a1410270ea7d41ecbd90e45fc60062bc"], 0xfce)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000000906010800000001000000000200ffff0900020073797a310000000008000940000000390600010007000000100008"], 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r5 = socket$tipc(0x1e, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r6=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xc, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40488d9}, 0x20004804)
r11 = socket(0x400000000010, 0x3, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000240)={'team0\x00', <r15=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r13, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000005c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r15, @ANYBLOB="4400028040000110240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000000004000800000008000700000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r16=>0x0})
syz_emit_ethernet(0x7c, &(0x7f00000001c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "0300", 0x46, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x892f, [0x80]}, {}, {}, {0xa888}}}}}}}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r16, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0800050008000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)

0s ago: executing program 1 (id=1369):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d000000040105"], 0x254}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48105}, 0x6044850)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:64754' (ED25519) to the list of known hosts.
syzkaller login: [   49.726717][ T5832] cgroup: Unknown subsys name 'net'
[   49.839509][ T5832] cgroup: Unknown subsys name 'cpuset'
[   49.843441][ T5832] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.342303][ T5832] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.767339][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.770798][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.774076][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.778164][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.794548][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.798066][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.801395][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.834973][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.840285][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.843128][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.866094][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.869242][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.871911][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.874998][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.877995][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.088547][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   55.149908][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   55.180367][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   55.229208][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.232088][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.234814][ T5843] bridge_slave_0: entered allmulticast mode
[   55.238321][ T5843] bridge_slave_0: entered promiscuous mode
[   55.255948][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.260078][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.263258][ T5843] bridge_slave_1: entered allmulticast mode
[   55.266989][ T5843] bridge_slave_1: entered promiscuous mode
[   55.319777][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.322886][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.325412][ T5852] bridge_slave_0: entered allmulticast mode
[   55.328616][ T5852] bridge_slave_0: entered promiscuous mode
[   55.340468][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.344204][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.347771][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.350895][ T5852] bridge_slave_1: entered allmulticast mode
[   55.354063][ T5852] bridge_slave_1: entered promiscuous mode
[   55.363822][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.366727][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.370959][ T5848] bridge_slave_0: entered allmulticast mode
[   55.374149][ T5848] bridge_slave_0: entered promiscuous mode
[   55.379136][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.382340][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.385246][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.388688][ T5848] bridge_slave_1: entered allmulticast mode
[   55.391452][ T5848] bridge_slave_1: entered promiscuous mode
[   55.419353][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.438753][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.442858][ T5843] team0: Port device team_slave_0 added
[   55.446522][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.466906][ T5843] team0: Port device team_slave_1 added
[   55.470815][ T5852] team0: Port device team_slave_0 added
[   55.474828][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.500460][ T5852] team0: Port device team_slave_1 added
[   55.535997][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.540061][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.550340][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.555761][ T5848] team0: Port device team_slave_0 added
[   55.565848][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.569868][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.578489][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.583254][ T5848] team0: Port device team_slave_1 added
[   55.585548][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.588686][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.597509][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.614519][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.617268][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.625838][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.697771][ T5843] hsr_slave_0: entered promiscuous mode
[   55.701415][ T5843] hsr_slave_1: entered promiscuous mode
[   55.705147][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.708539][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.721265][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.729914][ T5852] hsr_slave_0: entered promiscuous mode
[   55.732806][ T5852] hsr_slave_1: entered promiscuous mode
[   55.735204][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   55.738331][ T5852] Cannot create hsr debugfs directory
[   55.741332][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.744365][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.756184][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.838090][ T5848] hsr_slave_0: entered promiscuous mode
[   55.840492][ T5848] hsr_slave_1: entered promiscuous mode
[   55.842710][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   55.844699][ T5848] Cannot create hsr debugfs directory
[   56.073516][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.082322][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.101782][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.107255][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.133290][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.143328][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.151207][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.164036][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.210481][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.218470][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.225460][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.232417][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.317421][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.335388][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   56.350980][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.353461][ T3638] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.361269][ T3638] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.363836][ T3638] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.375612][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.402363][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.414750][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   56.428992][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   56.436588][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.439720][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.445493][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.447970][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.461012][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.463408][ T3638] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.476277][ T5852] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.484028][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.494212][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.496880][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.545379][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.641603][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.659947][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.695951][ T5848] veth0_vlan: entered promiscuous mode
[   56.710022][ T5852] veth0_vlan: entered promiscuous mode
[   56.722119][ T5852] veth1_vlan: entered promiscuous mode
[   56.728578][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.733697][ T5848] veth1_vlan: entered promiscuous mode
[   56.751434][ T5852] veth0_macvtap: entered promiscuous mode
[   56.756666][ T5852] veth1_macvtap: entered promiscuous mode
[   56.783613][ T5848] veth0_macvtap: entered promiscuous mode
[   56.788584][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.799317][ T5848] veth1_macvtap: entered promiscuous mode
[   56.803830][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.809856][ T5843] veth0_vlan: entered promiscuous mode
[   56.824964][ T5739] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.830364][ T5739] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.834467][ T5843] veth1_vlan: entered promiscuous mode
[   56.837971][ T5850] Bluetooth: hci0: command tx timeout
[   56.844393][ T5739] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.850110][ T5739] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.862445][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.892246][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.899000][ T5843] veth0_macvtap: entered promiscuous mode
[   56.917625][ T5850] Bluetooth: hci2: command tx timeout
[   56.917736][ T5846] Bluetooth: hci1: command tx timeout
[   56.923005][ T5873] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.927695][ T5873] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.936328][ T5843] veth1_macvtap: entered promiscuous mode
[   56.946407][ T5873] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.951458][ T5873] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.992709][ T3638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.998705][ T3638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.020610][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.033955][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.051237][ T5873] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.064685][ T5739] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.069599][ T5739] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.073300][ T5739] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.079205][ T3638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.081986][ T3638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.097833][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.101175][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.136331][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.159667][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.162872][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.186660][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.189584][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.210448][ T3638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.213691][ T3638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.229697][ T5909] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.300794][ T5913] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'.
[   57.495143][ T5922] veth0: entered promiscuous mode
[   57.498830][ T5922] vlan2: entered promiscuous mode
[   57.554349][ T5928] netlink: 'syz.2.7': attribute type 13 has an invalid length.
[   57.564508][ T5928] netlink: 'syz.2.7': attribute type 17 has an invalid length.
[   57.593195][ T5922] syz.1.6 (5922) used greatest stack depth: 19960 bytes left
[   57.626410][ T5940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9'.
[   57.653427][ T5928] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   57.668056][ T5942] bridge_slave_0: left allmulticast mode
[   57.669904][ T5942] bridge_slave_0: left promiscuous mode
[   57.672751][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.681138][ T5942] bridge_slave_1: left allmulticast mode
[   57.684902][ T5942] bridge_slave_1: left promiscuous mode
[   57.689149][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.695591][ T5942] bond0: (slave bond_slave_0): Releasing backup interface
[   57.701952][ T5942] bond0: (slave bond_slave_1): Releasing backup interface
[   57.709382][ T5942] team0: Port device team_slave_0 removed
[   57.714188][ T5942] team0: Port device team_slave_1 removed
[   57.716687][ T5942] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.723715][ T5942] batman_adv: batadv0: Removing interface: batadv_slave_0
[   57.727687][ T5942] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.730479][ T5942] batman_adv: batadv0: Removing interface: batadv_slave_1
[   57.773678][ T5928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   57.801855][ T5945] pim6reg1: entered promiscuous mode
[   57.803823][ T5945] pim6reg1: entered allmulticast mode
[   57.834962][ T5948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   57.902801][ T5928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   57.904943][ T5959] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12'.
[   58.492691][ T5982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19'.
[   58.496575][ T5982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19'.
[   58.514929][ T5983] netlink: 92 bytes leftover after parsing attributes in process `syz.2.20'.
[   58.557511][ T5983] netlink: 64 bytes leftover after parsing attributes in process `syz.2.20'.
[   58.572454][ T5985] netlink: 332 bytes leftover after parsing attributes in process `syz.1.21'.
[   58.614705][ T5985] netpci0: tun_chr_ioctl cmd 1074025681
[   58.719858][ T5993] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.732408][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'.
[   58.739242][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'.
[   58.997032][ T5846] Bluetooth: hci1: command tx timeout
[   59.007819][ T5846] Bluetooth: hci2: command tx timeout
[   59.641132][ T6007] Zero length message leads to an empty skb
[   59.713388][ T6018] lo speed is unknown, defaulting to 1000
[   59.716140][ T6018] lo speed is unknown, defaulting to 1000
[   59.737125][ T6018] lo speed is unknown, defaulting to 1000
[   59.745561][ T6018] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   59.760887][ T6018] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   59.801429][ T6018] lo speed is unknown, defaulting to 1000
[   59.822881][ T6018] lo speed is unknown, defaulting to 1000
[   59.826710][ T6021] Driver unsupported XDP return value 0 on prog  (id 12) dev N/A, expect packet loss!
[   59.847241][ T6018] lo speed is unknown, defaulting to 1000
[   59.958928][ T6027] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   60.273633][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810fc44c00: rx timeout, send abort
[   60.773855][    C1] vcan0: j1939_tp_rxtimer: 0xffff888123592c00: rx timeout, send abort
[   60.777836][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810fc44c00: abort rx timeout. Force session deactivation
[   60.817838][ T6049] netlink: 'syz.2.38': attribute type 10 has an invalid length.
[   60.827317][ T6049] 8021q: adding VLAN 0 to HW filter on device team0
[   60.833126][ T6049] bond0: (slave team0): Enslaving as an active interface with an up link
[   60.955149][ T6055] netlink: 'syz.1.41': attribute type 10 has an invalid length.
[   60.959445][ T6055] macvlan0: entered promiscuous mode
[   60.966150][ T6055] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[   61.086966][ T5846] Bluetooth: hci2: command tx timeout
[   61.087156][ T5850] Bluetooth: hci1: command tx timeout
[   61.277532][    C1] vcan0: j1939_tp_rxtimer: 0xffff888123592c00: abort rx timeout. Force session deactivation
[   61.363086][ T6068] syzkaller1: entered promiscuous mode
[   61.364989][ T6068] syzkaller1: entered allmulticast mode
[   61.420614][ T6068] Bluetooth: MGMT ver 1.23
[   61.562300][ T6082] vxcan2: entered promiscuous mode
[   61.625979][ T6084] netlink: 'syz.2.52': attribute type 3 has an invalid length.
[   61.818671][ T6101] syz.2.59 uses obsolete (PF_INET,SOCK_PACKET)
[   61.953471][ T6106] netlink: 'syz.2.60': attribute type 21 has an invalid length.
[   61.987849][ T6108] vxcan1: entered allmulticast mode
[   62.440074][ T6137] __nla_validate_parse: 30 callbacks suppressed
[   62.440084][ T6137] netlink: 32 bytes leftover after parsing attributes in process `syz.0.69'.
[   62.873166][ T6147] netlink: 'syz.1.72': attribute type 3 has an invalid length.
[   62.882782][ T6147] syz_tun: entered allmulticast mode
[   62.886368][ T6146] syz_tun: left allmulticast mode
[   62.921622][ T6149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.73'.
[   62.924605][ T6149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.73'.
[   62.999695][ T6156] syzkaller0: entered promiscuous mode
[   63.002006][ T6156] syzkaller0: entered allmulticast mode
[   63.010103][ T6156] tap0: tun_chr_ioctl cmd 35108
[   63.024171][ T6156] wg2: mtu less than device minimum
[   63.042490][ T6158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.76'.
[   63.157241][ T5850] Bluetooth: hci2: command tx timeout
[   63.157259][ T5846] Bluetooth: hci1: command tx timeout
[   63.196533][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.79'.
[   63.213682][ T6169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.80'.
[   63.216688][ T6169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.80'.
[   63.282485][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.84'.
[   63.293075][ T6177] netlink: 64 bytes leftover after parsing attributes in process `syz.2.83'.
[   63.298816][ T6177] netlink: 64 bytes leftover after parsing attributes in process `syz.2.83'.
[   63.445956][ T6189] warning: `syz.2.89' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   63.456025][ T6193] netlink: 'syz.0.88': attribute type 13 has an invalid length.
[   63.459155][ T6193] netlink: 'syz.0.88': attribute type 17 has an invalid length.
[   63.524331][ T6193] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   63.530438][ T6198] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   63.556218][ T6196] lo speed is unknown, defaulting to 1000
[   63.592471][ T6193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.652798][ T6186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.679525][ T6208] lo speed is unknown, defaulting to 1000
[   63.711063][ T6186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.720938][ T6210] netlink: 'syz.2.93': attribute type 10 has an invalid length.
[   63.725141][ T6210] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.728289][ T6210] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.735951][ T6210] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.738967][ T6210] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.742285][ T6210] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.745270][ T6210] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.750283][ T6210] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   63.844456][ T6218] syzkaller1: entered promiscuous mode
[   63.846300][ T6218] syzkaller1: entered allmulticast mode
[   64.259837][ T6236] tipc: Started in network mode
[   64.262073][ T6236] tipc: Node identity 0a7d0f96cbac, cluster identity 4711
[   64.265226][ T6236] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.269664][ T6236] syzkaller0: entered promiscuous mode
[   64.272063][ T6236] syzkaller0: entered allmulticast mode
[   64.329262][ T6236] tipc: Resetting bearer <eth:syzkaller0>
[   64.343490][ T6235] tipc: Resetting bearer <eth:syzkaller0>
[   64.361439][ T6235] tipc: Disabling bearer <eth:syzkaller0>
[   64.630651][ T6258] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.750712][ T6274] tipc: Started in network mode
[   64.752410][ T6274] tipc: Node identity be752c96f40c, cluster identity 4711
[   64.754996][ T6274] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.773469][ T6274] syzkaller0: entered promiscuous mode
[   64.775458][ T6274] syzkaller0: entered allmulticast mode
[   64.785184][ T6274] tipc: Resetting bearer <eth:syzkaller0>
[   64.806306][ T6273] tipc: Resetting bearer <eth:syzkaller0>
[   64.818964][ T6273] tipc: Disabling bearer <eth:syzkaller0>
[   65.020411][ T6296] netlink: 'syz.0.128': attribute type 7 has an invalid length.
[   65.564169][ T6299] tipc: Started in network mode
[   65.565852][ T6299] tipc: Node identity 5252c36c6241, cluster identity 4711
[   65.571333][ T6299] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.577285][ T6299] syzkaller0: entered promiscuous mode
[   65.579221][ T6299] syzkaller0: entered allmulticast mode
[   65.597488][ T6299] tipc: Resetting bearer <eth:syzkaller0>
[   65.601354][ T6298] tipc: Resetting bearer <eth:syzkaller0>
[   65.617661][ T6298] tipc: Disabling bearer <eth:syzkaller0>
[   65.677754][ T6304] netlink: 'syz.0.131': attribute type 10 has an invalid length.
[   65.691248][ T6304] team0: Port device dummy0 added
[   65.695703][ T6304] netlink: 'syz.0.131': attribute type 10 has an invalid length.
[   65.702976][ T6304] team0: Port device dummy0 removed
[   65.710607][ T6304] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   66.694070][ T6336] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   66.764323][ T6340] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   66.943390][ T6345] lo speed is unknown, defaulting to 1000
[   66.966188][ T6349] netlink: 'syz.1.140': attribute type 10 has an invalid length.
[   66.989614][ T6349] team0: Port device dummy0 added
[   67.000101][ T6349] netlink: 'syz.1.140': attribute type 10 has an invalid length.
[   67.056348][ T6349] team0: Port device dummy0 removed
[   67.069749][ T6349] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   67.152964][ T6354] netlink: 'syz.0.143': attribute type 22 has an invalid length.
[   67.165681][ T6213] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   67.171884][ T6213] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   67.175661][ T6213] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   67.181466][ T6213] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   67.533898][ T6361] __nla_validate_parse: 32 callbacks suppressed
[   67.533911][ T6361] netlink: 20 bytes leftover after parsing attributes in process `syz.0.147'.
[   67.541405][ T6361] netlink: 20 bytes leftover after parsing attributes in process `syz.0.147'.
[   67.595832][ T6364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.149'.
[   67.643612][ T6365] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   67.647878][ T6367] pim6reg1: entered allmulticast mode
[   67.669725][ T6365] netlink: 68 bytes leftover after parsing attributes in process `syz.0.148'.
[   67.769754][ T6378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.153'.
[   67.810930][ T6373] netlink: 32 bytes leftover after parsing attributes in process `syz.2.150'.
[   67.830710][ T6373] 8021q: adding VLAN 0 to HW filter on device bond1
[   67.834572][ T6373] team0: Port device bond1 added
[   67.840660][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.154'.
[   67.852303][ T6382] vxcan1 (unregistering): left allmulticast mode
[   67.872249][ T6383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.155'.
[   68.093515][ T6403] netlink: 32 bytes leftover after parsing attributes in process `syz.1.160'.
[   68.128862][ T6405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.161'.
[   68.238887][ T6411] validate_nla: 1 callbacks suppressed
[   68.238897][ T6411] netlink: 'syz.1.164': attribute type 1 has an invalid length.
[   68.417747][ T6415] bond0: (slave dummy0): Releasing backup interface
[   68.736672][ T6440] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.745025][ T6440] syzkaller0: entered promiscuous mode
[   68.748420][ T6440] syzkaller0: entered allmulticast mode
[   68.752538][ T6437] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   68.770534][ T6440] tipc: Resetting bearer <eth:syzkaller0>
[   68.783796][ T6440] tipc: Disabling bearer <eth:syzkaller0>
[   68.925146][ T6448] pim6reg1: entered promiscuous mode
[   68.929360][ T6448] pim6reg1: entered allmulticast mode
[   68.954965][ T6450] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[   68.958887][ T6450] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.519391][ T6474] netlink: 'syz.2.182': attribute type 10 has an invalid length.
[   69.530441][ T6474] team0: Port device dummy0 added
[   69.546172][ T6474] netlink: 'syz.2.182': attribute type 10 has an invalid length.
[   69.558828][ T6474] team0: Port device dummy0 removed
[   69.570734][ T6474] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   69.593865][ T6475] netlink: 'syz.1.183': attribute type 16 has an invalid length.
[   69.599432][ T6475] netlink: 'syz.1.183': attribute type 17 has an invalid length.
[   69.713881][ T6475] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.717359][ T6475] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.860138][ T6475] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.880187][ T6475] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.078759][ T5845] lo speed is unknown, defaulting to 1000
[   70.081270][ T5845] syz1: Port: 1 Link DOWN
[   70.083494][ T6213] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.089435][ T6213] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.093286][ T6213] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.099413][ T6213] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.185876][ T6498] bridge_slave_1: default FDB implementation only supports local addresses
[   70.374579][ T6503] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   70.571176][ T6521] bridge0: port 3(erspan0) entered blocking state
[   70.575365][ T6521] bridge0: port 3(erspan0) entered disabled state
[   70.583908][ T6521] erspan0: entered allmulticast mode
[   70.587997][ T6521] erspan0: entered promiscuous mode
[   70.624415][ T6524] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.644436][ T6527] smc: net device bond0 applied user defined pnetid SYZ2
[   70.650193][ T6527] smc: net device bond0 erased user defined pnetid SYZ2
[   70.690198][ T6524] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.749106][ T6524] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.770130][ T6534] netlink: 'syz.1.203': attribute type 4 has an invalid length.
[   70.843632][ T6524] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.929058][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.952494][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.971041][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.988353][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.014439][ T6546] netlink: 'syz.1.206': attribute type 13 has an invalid length.
[   71.096826][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.099438][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.217941][ T6558] IPVS: stopping backup sync thread 6560 ...
[   71.320110][ T6571] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   71.345337][ T6577] "syz.1.216" (6577) uses obsolete ecb(arc4) skcipher
[   71.363372][ T6575] "syz.1.216" (6575) uses obsolete ecb(arc4) skcipher
[   71.457920][ T6592] netlink: 'syz.1.219': attribute type 1 has an invalid length.
[   71.460786][ T6592] netlink: 'syz.1.219': attribute type 1 has an invalid length.
[   71.552145][ T6604] netlink: 'syz.1.221': attribute type 22 has an invalid length.
[   71.572090][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   71.575877][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   71.580884][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   71.598803][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   71.664488][ T6607] bond2: (slave gretap1): making interface the new active one
[   71.669999][ T6607] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   71.928679][ T6628] lo speed is unknown, defaulting to 1000
[   72.419870][    T9] lo speed is unknown, defaulting to 1000
[   72.421817][    T9] syz1: Port: 1 Link ACTIVE
[   72.464948][ T6653] delete_channel: no stack
[   72.542509][ T6662] __nla_validate_parse: 42 callbacks suppressed
[   72.542519][ T6662] netlink: 32 bytes leftover after parsing attributes in process `syz.0.235'.
[   72.548690][ T6662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.235'.
[   72.567361][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'.
[   72.570564][ T6660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.234'.
[   72.784369][ T6677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.239'.
[   72.833808][ T5906] lo speed is unknown, defaulting to 1000
[   72.835879][ T5906] syz1: Port: 1 Link DOWN
[   72.943572][ T6686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.242'.
[   72.947607][ T6686] erspan0: left allmulticast mode
[   72.949570][ T6686] erspan0: left promiscuous mode
[   72.951626][ T6686] bridge0: port 3(erspan0) entered disabled state
[   72.957993][ T6686] bridge_slave_1: left allmulticast mode
[   72.960364][ T6686] bridge_slave_1: left promiscuous mode
[   72.963038][ T6686] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.968476][ T6686] bridge_slave_0: left allmulticast mode
[   72.970759][ T6686] bridge_slave_0: left promiscuous mode
[   72.973350][ T6686] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.091932][ T6688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.243'.
[   73.202397][ T6696] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.242146][ T6699] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   73.244741][ T6699] IPv6: NLM_F_CREATE should be set when creating new route
[   73.310225][ T6706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.250'.
[   73.368989][ T6711] netlink: 36 bytes leftover after parsing attributes in process `syz.2.249'.
[   73.376499][ T6711] syzkaller1: entered promiscuous mode
[   73.378855][ T6711] syzkaller1: entered allmulticast mode
[   73.489099][ T6722] netlink: 20 bytes leftover after parsing attributes in process `syz.0.253'.
[   73.580047][ T6729] validate_nla: 6 callbacks suppressed
[   73.580056][ T6729] netlink: 'syz.0.255': attribute type 4 has an invalid length.
[   73.589897][ T6729] netlink: 'syz.0.255': attribute type 4 has an invalid length.
[   73.938788][ T6759] IPVS: length: 244 != 8
[   74.037028][ T6766] syzkaller0: entered promiscuous mode
[   74.038928][ T6766] syzkaller0: entered allmulticast mode
[   74.060774][ T6768] lo speed is unknown, defaulting to 1000
[   74.640708][ T6780] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.644036][ T6780] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.664144][ T6780] netlink: 'syz.2.267': attribute type 16 has an invalid length.
[   74.668304][ T6780] netlink: 'syz.2.267': attribute type 17 has an invalid length.
[   74.685278][ T6780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   74.851191][ T6791] vcan0: tx drop: invalid sa for name 0x0000000000000003
[   75.058034][ T6811] sctp: [Deprecated]: syz.2.275 (pid 6811) Use of int in max_burst socket option.
[   75.058034][ T6811] Use struct sctp_assoc_value instead
[   75.062854][ T6811] sctp: [Deprecated]: syz.2.275 (pid 6811) Use of int in max_burst socket option.
[   75.062854][ T6811] Use struct sctp_assoc_value instead
[   75.149856][ T6820] netlink: 'syz.1.278': attribute type 1 has an invalid length.
[   75.170159][ T6817] lo speed is unknown, defaulting to 1000
[   75.173119][ T6817] lo speed is unknown, defaulting to 1000
[   75.176030][ T6817] lo speed is unknown, defaulting to 1000
[   75.401337][ T6837] netlink: 'syz.1.282': attribute type 1 has an invalid length.
[   75.419291][ T6817] infiniband syz0: set active
[   75.421691][ T6817] infiniband syz0: added lo
[   75.426608][ T5906] lo speed is unknown, defaulting to 1000
[   75.494934][ T6817] RDS/IB: syz0: added
[   75.496647][ T6817] smc: adding ib device syz0 with port count 1
[   75.513519][ T6831] bond1: (slave gretap1): making interface the new active one
[   75.518554][ T6817] smc:    ib device syz0 port 1 has pnetid 
[   75.519147][ T6831] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   75.525876][ T5906] lo speed is unknown, defaulting to 1000
[   75.530908][ T6831] 8021q: adding VLAN 0 to HW filter on device bond1
[   75.533737][ T6817] lo speed is unknown, defaulting to 1000
[   75.681649][ T6817] lo speed is unknown, defaulting to 1000
[   75.744935][ T6845] lo speed is unknown, defaulting to 1000
[   75.860469][ T6817] lo speed is unknown, defaulting to 1000
[   75.966300][ T6856] netlink: 'syz.2.285': attribute type 18 has an invalid length.
[   75.975822][ T6845] lo speed is unknown, defaulting to 1000
[   75.975850][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   75.981647][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   75.984289][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   75.987206][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   75.990273][ T6856] netlink: 'syz.2.285': attribute type 18 has an invalid length.
[   76.106277][ T6864] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.129985][ T6864] syzkaller0: entered promiscuous mode
[   76.131850][ T6864] syzkaller0: entered allmulticast mode
[   76.150613][ T6864] sch_fq: defrate 257 ignored.
[   76.164834][ T6864] tipc: Resetting bearer <eth:syzkaller0>
[   76.171506][ T6863] tipc: Resetting bearer <eth:syzkaller0>
[   76.179985][ T6863] tipc: Disabling bearer <eth:syzkaller0>
[   76.214611][ T6866] lo speed is unknown, defaulting to 1000
[   76.219601][ T6866] lo speed is unknown, defaulting to 1000
[   76.428882][ T6875] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[   76.457027][ T6875] tipc: Resetting bearer <eth:syzkaller0>
[   76.499097][ T6874] tipc: Resetting bearer <eth:syzkaller0>
[   77.263034][ T6874] tipc: Disabling bearer <eth:syzkaller0>
[   77.500801][ T6901] netlink: 'syz.0.300': attribute type 10 has an invalid length.
[   77.506994][ T6901] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   77.623104][ T6917] netlink: 'syz.0.306': attribute type 3 has an invalid length.
[   77.696911][ T6924] __nla_validate_parse: 24 callbacks suppressed
[   77.696924][ T6924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.308'.
[   77.724229][ T6926] netlink: 20 bytes leftover after parsing attributes in process `syz.0.309'.
[   77.742566][ T6926] netlink: 32 bytes leftover after parsing attributes in process `syz.0.309'.
[   77.747443][ T6926] netlink: 34 bytes leftover after parsing attributes in process `syz.0.309'.
[   77.801675][ T6935] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.312'.
[   77.855293][ T6939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.314'.
[   77.940120][ T6944] pim6reg: entered allmulticast mode
[   77.967879][ T6951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.317'.
[   77.978894][ T6944] pim6reg: left allmulticast mode
[   78.229753][ T6981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.322'.
[   78.260002][ T6974] netlink: 56 bytes leftover after parsing attributes in process `syz.2.321'.
[   78.398861][ T6997] bond0: (slave dummy0): Releasing backup interface
[   78.403914][ T6997] team0: Port device dummy0 added
[   78.415194][ T6997] team0: Port device dummy0 removed
[   78.419070][ T6997] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   78.432972][ T7003] netlink: 224 bytes leftover after parsing attributes in process `syz.1.324'.
[   78.950182][ T7044] syzkaller0: entered allmulticast mode
[   78.955630][ T7044] hsr0 speed is unknown, defaulting to 1000
[   78.958435][ T7044] hsr0 speed is unknown, defaulting to 1000
[   78.960748][ T7044] hsr0 speed is unknown, defaulting to 1000
[   78.969323][ T7044] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   78.981098][ T7044] hsr0 speed is unknown, defaulting to 1000
[   78.985161][ T7044] hsr0 speed is unknown, defaulting to 1000
[   78.988754][ T7044] hsr0 speed is unknown, defaulting to 1000
[   78.997264][ T7044] sctp: [Deprecated]: syz.0.331 (pid 7044) Use of struct sctp_assoc_value in delayed_ack socket option.
[   78.997264][ T7044] Use struct sctp_sack_info instead
[   79.874728][ T7056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.875886][ T7058] validate_nla: 5 callbacks suppressed
[   79.875898][ T7058] netlink: 'syz.0.336': attribute type 1 has an invalid length.
[   79.932470][ T7062] openvswitch: netlink: IPv4 tun info is not correct
[   79.974264][ T7058] 8021q: adding VLAN 0 to HW filter on device bond3
[   80.065485][ T7073] netlink: 'syz.2.340': attribute type 1 has an invalid length.
[   80.366718][ T7087] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   80.373593][ T7087] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   80.456681][ T7096] netlink: 'syz.0.344': attribute type 10 has an invalid length.
[   80.465507][ T7096] team0: Port device geneve0 added
[   80.506131][ T7098] netlink: 'syz.0.345': attribute type 1 has an invalid length.
[   80.556948][ T7100] 8021q: adding VLAN 0 to HW filter on device bond4
[   80.575737][ T7100] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[   80.581530][ T7100] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   80.589868][ T7100] bond4: (slave macvlan2): Enslaving as a backup interface with an up link
[   80.659823][   T13] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   80.680619][   T13] bond4: (slave macvlan2): link status up again after 0 ms
[   80.686977][   T13] bond4: (slave macvlan2): failed to get link speed/duplex
[   80.786937][ T6213] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   80.816645][ T7107] 8021q: adding VLAN 0 to HW filter on device bond5
[   80.857889][ T6213] bond4: (slave macvlan2): failed to get link speed/duplex
[   80.967176][ T5739] bond4: (slave macvlan2): failed to get link speed/duplex
[   81.074458][ T7127] bond0: (slave bridge0): Releasing backup interface
[   81.081801][ T7127] bond0: (slave team0): Releasing backup interface
[   81.086225][ T7127] bond0: (slave dummy0): Releasing backup interface
[   81.095402][ T7127] bridge_slave_0: left allmulticast mode
[   81.097625][ T7127] bridge_slave_0: left promiscuous mode
[   81.099687][ T7127] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.103517][ T7127] bridge_slave_1: left allmulticast mode
[   81.105499][ T7127] bridge_slave_1: left promiscuous mode
[   81.108992][ T7127] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.115675][ T7127] bond0: (slave bond_slave_0): Releasing backup interface
[   81.120993][ T7127] bond0: (slave bond_slave_1): Releasing backup interface
[   81.138293][ T7127] team0: Port device team_slave_0 removed
[   81.142438][ T7127] team0: Port device team_slave_1 removed
[   81.144675][ T7127] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.149010][ T7127] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.160828][ T7127] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.163292][ T7127] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.174916][ T7127] team0: Port device bond1 removed
[   81.195704][ T7142] 8021q: adding VLAN 0 to HW filter on device team0
[   81.202066][ T7142] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   81.261604][ T7150] syzkaller1: entered promiscuous mode
[   81.263573][ T7150] syzkaller1: entered allmulticast mode
[   81.329265][   T24] cfg80211: failed to load regulatory.db
[   81.452736][ T7170] netlink: 'syz.0.362': attribute type 4 has an invalid length.
[   81.457694][ T1271] lo speed is unknown, defaulting to 1000
[   81.459617][ T1271] syz0: Port: 1 Link DOWN
[   81.461719][ T1271] lo speed is unknown, defaulting to 1000
[   81.463866][ T7169] netlink: 'syz.0.362': attribute type 4 has an invalid length.
[   81.472094][ T1271] lo speed is unknown, defaulting to 1000
[   81.475194][ T1271] syz0: Port: 1 Link ACTIVE
[   81.482285][    T9] lo speed is unknown, defaulting to 1000
[   81.563427][ T7180] bridge_slave_1: default FDB implementation only supports local addresses
[   81.856831][ T7203] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[   82.064520][ T6492] lo speed is unknown, defaulting to 1000
[   82.069970][ T5906] hsr0 speed is unknown, defaulting to 1000
[   82.070002][ T6213] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   82.072830][ T5906] syz2: Port: 1 Link DOWN
[   82.080784][ T6492] syz0: Port: 1 Link DOWN
[   82.087550][ T6213] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.103596][ T5906] lo speed is unknown, defaulting to 1000
[   82.105109][ T6213] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   82.110942][ T6213] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.114690][ T6213] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   82.120104][ T6213] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.124256][ T6213] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   82.129790][ T6213] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.283144][ T7214] tap0: tun_chr_ioctl cmd 1074025680
[   82.286620][ T7214] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   83.003325][ T7262] __nla_validate_parse: 21 callbacks suppressed
[   83.003335][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.391'.
[   83.010202][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.391'.
[   83.013110][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.391'.
[   83.024964][ T7262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.391'.
[   83.043842][ T5739] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   83.047048][ T5739] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   83.049961][ T5739] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   83.052715][ T5739] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   83.066537][ T7271] netlink: 'syz.1.390': attribute type 4 has an invalid length.
[   83.067619][ T7264] geneve2: entered promiscuous mode
[   83.073974][ T5739] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[   83.078136][ T5739] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[   83.083422][ T5739] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[   83.088485][ T5739] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[   83.144459][ T7263] netlink: 'syz.1.390': attribute type 17 has an invalid length.
[   83.330166][ T7291] netlink: 'syz.1.397': attribute type 1 has an invalid length.
[   83.372857][ T7291] 8021q: adding VLAN 0 to HW filter on device bond3
[   83.381250][ T7294] bond3: (slave batadv1): Opening slave failed
[   83.432932][ T7301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'.
[   83.437046][ T7301] bridge_slave_1: default FDB implementation only supports local addresses
[   83.553178][ T7309] netlink: 256 bytes leftover after parsing attributes in process `syz.1.401'.
[   84.044723][ T7320] netlink: 47 bytes leftover after parsing attributes in process `syz.2.403'.
[   84.197945][   T24] hid-generic 0005:046D:FFF9.0001: item fetching failed at offset 0/1
[   84.201646][   T24] hid-generic 0005:046D:FFF9.0001: probe with driver hid-generic failed with error -22
[   84.244657][ T7327] netlink: 28 bytes leftover after parsing attributes in process `syz.2.406'.
[   84.248565][ T7327] netlink: 36 bytes leftover after parsing attributes in process `syz.2.406'.
[   84.290373][ T7333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.407'.
[   84.396897][ T7342] netlink: 'syz.2.411': attribute type 12 has an invalid length.
[   84.510591][ T7352] netlink: 'syz.1.412': attribute type 11 has an invalid length.
[   84.581804][ T7357] lo speed is unknown, defaulting to 1000
[   84.591144][ T7357] lo speed is unknown, defaulting to 1000
[   84.692777][ T7365] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   84.763933][ T7363] @000000000: renamed from veth0_vlan (while UP)
[   84.791398][ T7357] hsr0 speed is unknown, defaulting to 1000
[   85.534614][ T7436] netlink: 'syz.0.439': attribute type 11 has an invalid length.
[   85.835641][ T7468] bridge_slave_1: default FDB implementation only supports local addresses
[   85.874987][ T7469] batadv_slave_0: entered promiscuous mode
[   86.022453][ T7476] validate_nla: 2 callbacks suppressed
[   86.022462][ T7476] netlink: 'syz.0.448': attribute type 1 has an invalid length.
[   86.030582][ T7483] ieee802154 phy0 wpan0: encryption failed: -22
[   86.061858][ T7488] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[   86.082191][ T7490] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.084960][ T7490] syzkaller0: entered promiscuous mode
[   86.090612][ T7490] syzkaller0: entered allmulticast mode
[   86.094963][ T7490] netlink: 'syz.1.452': attribute type 29 has an invalid length.
[   86.101503][ T7489] tipc: Resetting bearer <eth:syzkaller0>
[   86.110204][ T7489] tipc: Disabling bearer <eth:syzkaller0>
[   86.164467][ T7492] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[   86.205614][ T5739] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   86.209212][ T5739] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   86.212318][ T5739] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   86.215914][ T5739] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   86.578262][ T7520] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   86.756167][ T7538] lo speed is unknown, defaulting to 1000
[   86.762835][ T7538] lo speed is unknown, defaulting to 1000
[   86.969592][ T7538] hsr0 speed is unknown, defaulting to 1000
[   87.152420][ T7575] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.155132][ T7575] syzkaller0: entered promiscuous mode
[   87.161302][ T7575] syzkaller0: entered allmulticast mode
[   87.174929][ T7579] batadv_slave_1: entered promiscuous mode
[   87.189528][ T7574] tipc: Resetting bearer <eth:syzkaller0>
[   87.200830][ T7574] tipc: Disabling bearer <eth:syzkaller0>
[   87.208266][ T7576] batadv_slave_1: left promiscuous mode
[   87.436386][ T7599] netlink: 'syz.1.486': attribute type 27 has an invalid length.
[   87.442261][ T7600] netlink: 'syz.1.486': attribute type 27 has an invalid length.
[   87.674068][ T7610] Bluetooth: MGMT ver 1.23
[   87.689540][ T7610] netlink: 'syz.1.489': attribute type 1 has an invalid length.
[   87.706049][ T7610] 8021q: adding VLAN 0 to HW filter on device bond4
[   87.748733][ T7610] bond4: (slave veth7): Enslaving as an active interface with a down link
[   87.781774][ T7610] 8021q: adding VLAN 0 to HW filter on device batadv1
[   87.788918][ T7610] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[   87.885643][ T7624] lo speed is unknown, defaulting to 1000
[   87.890815][ T7624] lo speed is unknown, defaulting to 1000
[   88.103409][ T7624] hsr0 speed is unknown, defaulting to 1000
[   88.247407][ T1271] IPVS: starting estimator thread 0...
[   88.249881][ T7634] __nla_validate_parse: 39 callbacks suppressed
[   88.249889][ T7634] netlink: 16 bytes leftover after parsing attributes in process `syz.2.494'.
[   88.257712][ T7634] netlink: 64 bytes leftover after parsing attributes in process `syz.2.494'.
[   88.260840][ T7634] netlink: 16 bytes leftover after parsing attributes in process `syz.2.494'.
[   88.337023][ T7635] IPVS: using max 79 ests per chain, 189600 per kthread
[   88.366104][ T7637] batman_adv: batadv0: Adding interface: gretap2
[   88.370809][ T7637] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.391518][ T7637] batman_adv: batadv0: Interface activated: gretap2
[   88.421877][ T7643] netlink: 209832 bytes leftover after parsing attributes in process `syz.0.496'.
[   88.571099][   T13] IPVS: stop unused estimator thread 0...
[   88.649686][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.500'.
[   88.654170][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.500'.
[   88.874557][ T7669] lo speed is unknown, defaulting to 1000
[   88.879194][ T7669] lo speed is unknown, defaulting to 1000
[   88.925044][ T7671] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[   89.015373][ T7669] hsr0 speed is unknown, defaulting to 1000
[   89.059661][ T7673] lo speed is unknown, defaulting to 1000
[   89.062969][ T7673] lo speed is unknown, defaulting to 1000
[   89.116135][ T7677] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073701165882)
[   89.127887][ T7677] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[   89.179297][ T7679] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   89.257367][ T7673] hsr0 speed is unknown, defaulting to 1000
[   89.424607][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.510'.
[   89.433075][ T7694] netlink: 'syz.0.511': attribute type 1 has an invalid length.
[   89.433764][ T7692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.510'.
[   89.490587][ T7695] netlink: 3 bytes leftover after parsing attributes in process `syz.0.511'.
[   89.592100][ T7694] bond6: entered promiscuous mode
[   89.594368][ T7694] 8021q: adding VLAN 0 to HW filter on device bond6
[   89.609487][ T7695] batadv2: entered promiscuous mode
[   89.611374][ T7695] batadv2: entered allmulticast mode
[   89.614037][ T7695] 8021q: adding VLAN 0 to HW filter on device batadv2
[   89.619377][ T7695] bond6: (slave batadv2): making interface the new active one
[   89.622707][ T7695] bond6: (slave batadv2): Enslaving as an active interface with an up link
[   89.628621][ T6213] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   89.631898][ T6213] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.638586][ T6213] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   89.641756][ T6213] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.644762][ T6213] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   89.649028][ T6213] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.651905][ T6213] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   89.654640][ T7694] netlink: 48 bytes leftover after parsing attributes in process `syz.0.511'.
[   89.655341][ T6213] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.949482][ T7709] netlink: 'syz.0.515': attribute type 1 has an invalid length.
[   90.100846][ T7718] bridge_slave_1: default FDB implementation only supports local addresses
[   90.114714][ T7720] netlink: 'syz.1.519': attribute type 1 has an invalid length.
[   90.122636][ T7721] netlink: 'syz.1.519': attribute type 11 has an invalid length.
[   90.142020][ T7720] net_ratelimit: 8 callbacks suppressed
[   90.142064][ T7720] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   90.291526][ T7732] netlink: 'syz.1.523': attribute type 8 has an invalid length.
[   90.308719][ T7732] netlink: 'syz.1.523': attribute type 5 has an invalid length.
[   90.546246][ T7746] lo speed is unknown, defaulting to 1000
[   90.550843][ T7746] lo speed is unknown, defaulting to 1000
[   90.608817][ T7751] syz_tun: entered allmulticast mode
[   90.639298][ T7751] bond0: (slave dummy0): Releasing backup interface
[   90.693954][ T7746] hsr0 speed is unknown, defaulting to 1000
[   90.703221][ T7750] syz_tun: left allmulticast mode
[   90.767059][ T7760] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   91.024081][ T7779] dummy0: entered promiscuous mode
[   91.029028][ T7779] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   91.204680][ T7793] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.217313][ T7793] syzkaller1: entered promiscuous mode
[   91.219686][ T7793] syzkaller1: entered allmulticast mode
[   91.233918][ T7801] bridge_slave_1: default FDB implementation only supports local addresses
[   91.276095][ T7803] netdevsim netdevsim1: Direct firmware load for 2Q failed with error -2
[   91.279286][ T7803] netdevsim netdevsim1: Falling back to sysfs fallback for: 2Q
[   92.150548][ T7826] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.155780][ T7826] syzkaller0: entered promiscuous mode
[   92.165931][ T7826] syzkaller0: entered allmulticast mode
[   92.224717][ T7831] syz0: rxe_newlink: already configured on lo
[   92.245660][ T7826] tipc: Resetting bearer <eth:syzkaller0>
[   92.251311][ T7825] tipc: Resetting bearer <eth:syzkaller0>
[   92.262950][ T7825] tipc: Disabling bearer <eth:syzkaller0>
[   92.348152][ T7840] bridge_slave_1: default FDB implementation only supports local addresses
[   92.402065][ T7842] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   92.404595][ T7842] IPv6: NLM_F_CREATE should be set when creating new route
[   92.633338][ T7860] validate_nla: 2 callbacks suppressed
[   92.633348][ T7860] netlink: 'syz.0.563': attribute type 7 has an invalid length.
[   92.654644][ T7860] : entered promiscuous mode
[   92.893289][ T7880] team0: Port device geneve0 removed
[   92.896426][ T7880] bond0: (slave wlan1): Releasing backup interface
[   92.901005][ T7880] bond2: (slave gretap1): Releasing active interface
[   92.904635][ T7880] bond4: (slave macvlan2): Removing an active aggregator
[   92.909187][ T7880] bond4: (slave macvlan2): Releasing backup interface
[   92.912472][ T7880] batman_adv: batadv0: Interface deactivated: gretap2
[   92.914936][ T7880] batman_adv: batadv0: Removing interface: gretap2
[   92.920552][ T7880] bond6: (slave batadv2): Releasing active interface
[   92.926620][ T7882] netlink: 'syz.2.572': attribute type 33 has an invalid length.
[   92.948034][ T7880] vlan0: entered promiscuous mode
[   93.030954][ T7892] macvlan0: entered allmulticast mode
[   93.032781][ T7892] veth1_vlan: entered allmulticast mode
[   93.138855][ T7894] syz.0.577: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   93.144623][ T7894] CPU: 0 UID: 0 PID: 7894 Comm: syz.0.577 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[   93.144636][ T7894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   93.144641][ T7894] Call Trace:
[   93.144645][ T7894]  <TASK>
[   93.144649][ T7894]  dump_stack_lvl+0x189/0x250
[   93.144663][ T7894]  ? __pfx_dump_stack_lvl+0x10/0x10
[   93.144672][ T7894]  ? __pfx__printk+0x10/0x10
[   93.144682][ T7894]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   93.144690][ T7894]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   93.144699][ T7894]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   93.144708][ T7894]  warn_alloc+0x214/0x310
[   93.144721][ T7894]  ? __pfx_warn_alloc+0x10/0x10
[   93.144735][ T7894]  ? __get_vm_area_node+0x28f/0x300
[   93.144744][ T7894]  ? xskq_create+0xbf/0x170
[   93.144754][ T7894]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   93.144776][ T7894]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   93.144788][ T7894]  ? __kasan_kmalloc+0x93/0xb0
[   93.144799][ T7894]  vmalloc_user_noprof+0xad/0xf0
[   93.144809][ T7894]  ? xskq_create+0xbf/0x170
[   93.144817][ T7894]  xskq_create+0xbf/0x170
[   93.144825][ T7894]  xsk_init_queue+0xb0/0x110
[   93.144834][ T7894]  xsk_setsockopt+0x57b/0x8d0
[   93.144842][ T7894]  ? __pfx_xsk_setsockopt+0x10/0x10
[   93.144850][ T7894]  ? __pfx_aa_sk_perm+0x10/0x10
[   93.144860][ T7894]  ? __fget_files+0x2a/0x420
[   93.144869][ T7894]  ? aa_sock_opt_perm+0xff/0x1b0
[   93.144880][ T7894]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   93.144887][ T7894]  ? __pfx_xsk_setsockopt+0x10/0x10
[   93.144895][ T7894]  do_sock_setsockopt+0x17c/0x1b0
[   93.144907][ T7894]  __x64_sys_setsockopt+0x13f/0x1b0
[   93.144919][ T7894]  do_syscall_64+0xfa/0x3b0
[   93.144928][ T7894]  ? lockdep_hardirqs_on+0x9c/0x150
[   93.144936][ T7894]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.144942][ T7894]  ? exc_page_fault+0x9f/0xf0
[   93.144951][ T7894]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.144958][ T7894] RIP: 0033:0x7fb8f978ebe9
[   93.144965][ T7894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   93.144971][ T7894] RSP: 002b:00007fb8fa5c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   93.144979][ T7894] RAX: ffffffffffffffda RBX: 00007fb8f99b5fa0 RCX: 00007fb8f978ebe9
[   93.144984][ T7894] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000047
[   93.144989][ T7894] RBP: 00007fb8f9811e19 R08: 0000000000000004 R09: 0000000000000000
[   93.144993][ T7894] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[   93.144997][ T7894] R13: 00007fb8f99b6038 R14: 00007fb8f99b5fa0 R15: 00007ffdb2981078
[   93.145008][ T7894]  </TASK>
[   93.145011][ T7894] Mem-Info:
[   93.237716][ T7894] active_anon:13937 inactive_anon:0 isolated_anon:0
[   93.237716][ T7894]  active_file:1053 inactive_file:38221 isolated_file:0
[   93.237716][ T7894]  unevictable:1768 dirty:55 writeback:0
[   93.237716][ T7894]  slab_reclaimable:9767 slab_unreclaimable:81502
[   93.237716][ T7894]  mapped:18385 shmem:2649 pagetables:1029
[   93.237716][ T7894]  sec_pagetables:0 bounce:0
[   93.237716][ T7894]  kernel_misc_reclaimable:0
[   93.237716][ T7894]  free:252312 free_pcp:25157 free_cma:0
[   93.252844][ T7894] Node 0 active_anon:11004kB inactive_anon:0kB active_file:3180kB inactive_file:21140kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30272kB dirty:156kB writeback:0kB shmem:5484kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5652kB pagetables:1816kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   93.265079][ T7894] Node 1 active_anon:44744kB inactive_anon:0kB active_file:1032kB inactive_file:131744kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43268kB dirty:64kB writeback:0kB shmem:5112kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6352kB pagetables:2164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   93.277933][ T7894] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   93.289842][ T7894] lowmem_reserve[]: 0 811 811 811 811
[   93.291600][ T7894] Node 0 DMA32 free:309780kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11004kB inactive_anon:0kB active_file:3180kB inactive_file:21140kB unevictable:3536kB writepending:156kB present:1556484kB managed:830996kB mlocked:0kB bounce:0kB free_pcp:42876kB local_pcp:28832kB free_cma:0kB
[   93.303107][ T7894] lowmem_reserve[]: 0 0 0 0 0
[   93.305905][ T7894] Node 1 DMA32 free:443936kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:14548kB local_pcp:248kB free_cma:0kB
[   93.318691][ T7894] lowmem_reserve[]: 0 0 854 854 854
[   93.321062][ T7894] Node 1 Normal free:240172kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44744kB inactive_anon:0kB active_file:1032kB inactive_file:131744kB unevictable:3536kB writepending:64kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:43432kB local_pcp:15168kB free_cma:0kB
[   93.334144][ T7894] lowmem_reserve[]: 0 0 0 0 0
[   93.336269][ T7894] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   93.340502][ T7894] Node 0 DMA32: 868*4kB (UM) 467*8kB (UME) 245*16kB (UME) 427*32kB (UME) 109*64kB (UME) 38*128kB (UME) 11*256kB (UME) 8*512kB (UME) 2*1024kB (ME) 5*2048kB (UME) 62*4096kB (M) = 309784kB
[   93.350050][ T7894] Node 1 DMA32: 4*4kB (U) 3*8kB (UM) 6*16kB (UM) 4*32kB (UM) 1*64kB (M) 2*128kB (UM) 2*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (M) 107*4096kB (M) = 443976kB
[   93.357402][ T7894] Node 1 Normal: 3*4kB (ME) 454*8kB (UE) 457*16kB (UME) 129*32kB (UME) 18*64kB (UE) 2*128kB (UE) 26*256kB (UE) 36*512kB (U) 24*1024kB (U) 9*2048kB (UM) 38*4096kB (U) = 240236kB
[   93.364655][ T7894] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   93.368960][ T7894] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   93.372876][ T7894] 41925 total pagecache pages
[   93.374983][ T7894] 0 pages in swap cache
[   93.377378][ T7894] Free swap  = 124996kB
[   93.379257][ T7894] Total swap = 124996kB
[   93.381179][ T7894] 786301 pages RAM
[   93.382919][ T7894] 0 pages HighMem/MovableOnly
[   93.385040][ T7894] 241320 pages reserved
[   93.387928][ T7894] 0 pages cma reserved
[   93.495025][ T7912] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.506263][ T7914] tipc: Resetting bearer <eth:syzkaller0>
[   93.515302][ T7914] tipc: Disabling bearer <eth:syzkaller0>
[   93.667199][ T7920] lo speed is unknown, defaulting to 1000
[   93.671097][ T7920] lo speed is unknown, defaulting to 1000
[   93.702696][ T7927] __nla_validate_parse: 64 callbacks suppressed
[   93.702705][ T7927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.584'.
[   93.821405][ T7920] hsr0 speed is unknown, defaulting to 1000
[   93.913980][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.586'.
[   93.918268][ T7932] bridge_slave_1: default FDB implementation only supports local addresses
[   94.053035][ T7940] netlink: 24 bytes leftover after parsing attributes in process `syz.2.588'.
[   94.057766][ T7940] netlink: 24 bytes leftover after parsing attributes in process `syz.2.588'.
[   94.071064][ T7940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.588'.
[   94.226368][ T7942] netlink: 404 bytes leftover after parsing attributes in process `syz.2.589'.
[   94.229534][ T7942] netlink: 28 bytes leftover after parsing attributes in process `syz.2.589'.
[   94.232556][ T7942] netlink: 28 bytes leftover after parsing attributes in process `syz.2.589'.
[   94.235841][ T7942] netlink: 20 bytes leftover after parsing attributes in process `syz.2.589'.
[   94.249511][ T7942] netlink: 28 bytes leftover after parsing attributes in process `syz.2.589'.
[   94.253368][ T7942] gretap0: mtu less than device minimum
[   94.361472][ T7952] bond0: entered promiscuous mode
[   94.364561][ T7952] bond0: left promiscuous mode
[   94.492429][ T7957] lo speed is unknown, defaulting to 1000
[   94.495815][ T7957] lo speed is unknown, defaulting to 1000
[   94.553293][ T7958] lo speed is unknown, defaulting to 1000
[   94.597752][ T7962] netlink: 'syz.1.596': attribute type 4 has an invalid length.
[   94.613830][ T7958] lo speed is unknown, defaulting to 1000
[   94.616132][ T7957] hsr0 speed is unknown, defaulting to 1000
[   94.729793][ T7958] hsr0 speed is unknown, defaulting to 1000
[   94.817476][ T7977] netlink: 'syz.0.601': attribute type 21 has an invalid length.
[   94.989209][ T7988] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.992251][ T7988] syzkaller0: entered promiscuous mode
[   94.994192][ T7988] syzkaller0: entered allmulticast mode
[   95.046677][ T7988] tipc: Resetting bearer <eth:syzkaller0>
[   95.073187][ T7987] tipc: Resetting bearer <eth:syzkaller0>
[   95.115090][ T7987] tipc: Disabling bearer <eth:syzkaller0>
[   95.135306][ T7992] netlink: 'syz.0.604': attribute type 1 has an invalid length.
[   95.296518][ T8002] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[   95.296905][ T1271] IPVS: starting estimator thread 0...
[   95.398355][ T8007] IPVS: using max 78 ests per chain, 187200 per kthread
[   95.540624][ T8017] syzkaller0: entered promiscuous mode
[   95.543110][ T8017] syzkaller0: entered allmulticast mode
[   95.675248][ T8020] ip6gre1: entered allmulticast mode
[   96.161511][ T8042] netlink: 'syz.1.622': attribute type 10 has an invalid length.
[   96.171334][ T8042] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   96.175265][ T8042] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   96.693210][ T8058] netlink: 'syz.2.625': attribute type 9 has an invalid length.
[   96.954754][ T8065] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   97.004255][ T8065] netlink: 'syz.1.627': attribute type 6 has an invalid length.
[   97.041429][ T8072] openvswitch: netlink: Key type 207 is out of range max 32
[   97.045662][ T8073] openvswitch: netlink: Key type 207 is out of range max 32
[   97.076899][ T5850] Bluetooth: hci2: command 0x0405 tx timeout
[   97.562445][ T8098] bridge_slave_1: default FDB implementation only supports local addresses
[   97.690901][ T8111] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   97.728531][ T8113] netlink: 'syz.0.649': attribute type 1 has an invalid length.
[   97.740285][ T8115] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[   98.409268][ T8132] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[   98.469729][ T8135] netlink: zone id is out of range
[   98.471694][ T8135] netlink: zone id is out of range
[   98.473841][ T8135] netlink: zone id is out of range
[   98.475754][ T8135] netlink: zone id is out of range
[   98.477896][ T8135] netlink: zone id is out of range
[   98.480139][ T8135] netlink: zone id is out of range
[   98.545627][ T8141] lo speed is unknown, defaulting to 1000
[   98.550922][ T8141] lo speed is unknown, defaulting to 1000
[   98.663946][ T8141] hsr0 speed is unknown, defaulting to 1000
[   98.686308][ T8160] bridge_slave_1: default FDB implementation only supports local addresses
[   98.738047][ T6492] tipc: Node number set to 3251703702
[   99.085186][ T8173] __nla_validate_parse: 21 callbacks suppressed
[   99.085200][ T8173] netlink: 16 bytes leftover after parsing attributes in process `syz.1.663'.
[   99.091646][ T8173] netlink: 16 bytes leftover after parsing attributes in process `syz.1.663'.
[   99.240867][ T8180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.665'.
[   99.543841][ T8191] netlink: 'syz.0.669': attribute type 1 has an invalid length.
[   99.546513][ T8191] netlink: 'syz.0.669': attribute type 1 has an invalid length.
[   99.549283][ T2277] tipc: Node number set to 806601580
[   99.620305][ T8194] netlink: 52 bytes leftover after parsing attributes in process `syz.2.670'.
[   99.624180][ T8192] netlink: 'syz.0.669': attribute type 10 has an invalid length.
[   99.630173][ T8192] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.632376][ T8192] team0: Device bond0 failed to register rx_handler
[   99.683380][ T8197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.671'.
[   99.691503][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.671'.
[   99.829859][ T8209] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[   99.832868][ T8209] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  100.460650][ T8222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.680'.
[  100.469260][ T8222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.680'.
[  100.789289][ T8233] netlink: 32 bytes leftover after parsing attributes in process `syz.0.684'.
[  100.904735][ T8242] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.911337][ T8242] syzkaller0: entered promiscuous mode
[  100.913879][ T8242] syzkaller0: entered allmulticast mode
[  100.938019][ T8242] tipc: Resetting bearer <eth:syzkaller0>
[  100.942801][ T8241] tipc: Resetting bearer <eth:syzkaller0>
[  100.955690][ T8241] tipc: Disabling bearer <eth:syzkaller0>
[  100.966734][ T8244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.689'.
[  100.972792][ T8244] bridge_slave_1: default FDB implementation only supports local addresses
[  101.461374][ T8282] netlink: 'syz.1.699': attribute type 2 has an invalid length.
[  101.497242][ T8280] nbd2: detected capacity change from 0 to 63
[  101.507456][ T7079] block nbd2: Send control failed (result -32)
[  101.507875][ T8283] block nbd2: Receive control failed (result -104)
[  101.510566][ T7079] block nbd2: Request send failed, requeueing
[  101.519180][   T61] block nbd2: Dead connection, failed to find a fallback
[  101.523738][   T61] block nbd2: shutting down sockets
[  101.526155][ T7079] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  101.526223][ T7079] Buffer I/O error on dev nbd2, logical block 3, async page read
[  101.533304][   T61] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  101.539226][   T61] Buffer I/O error on dev nbd2, logical block 2, async page read
[  101.765098][ T8302] netlink: 'syz.2.708': attribute type 2 has an invalid length.
[  101.841469][ T8307] batadv_slave_0: entered promiscuous mode
[  101.999389][ T8317] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.003483][ T8317] net_ratelimit: 18 callbacks suppressed
[  102.003494][ T8317] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  102.014391][ T2277] lo speed is unknown, defaulting to 1000
[  102.020203][ T2277] syz1: Port: 1 Link ACTIVE
[  102.031223][ T8317] syz.1.711 (8317) used greatest stack depth: 19928 bytes left
[  102.123254][ T8334] bridge_slave_1: default FDB implementation only supports local addresses
[  102.193712][ T8339] lo speed is unknown, defaulting to 1000
[  102.196441][ T8339] lo speed is unknown, defaulting to 1000
[  102.277333][ T8339] hsr0 speed is unknown, defaulting to 1000
[  102.453721][ T8345] bond0: Device is already in use.
[  103.700516][ T8438] lo speed is unknown, defaulting to 1000
[  103.704198][ T8438] lo speed is unknown, defaulting to 1000
[  103.858698][ T8438] hsr0 speed is unknown, defaulting to 1000
[  104.118434][ T8480] __nla_validate_parse: 17 callbacks suppressed
[  104.118445][ T8480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.742'.
[  104.125902][ T8480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.742'.
[  104.142594][ T8484] tc_dump_action: action bad kind
[  104.154330][ T8484] lo speed is unknown, defaulting to 1000
[  104.157323][ T8484] lo speed is unknown, defaulting to 1000
[  104.246302][ T8487] netlink: 'syz.0.743': attribute type 29 has an invalid length.
[  104.251516][ T8487] netlink: 'syz.0.743': attribute type 29 has an invalid length.
[  104.270027][ T8486] lo speed is unknown, defaulting to 1000
[  104.276217][ T8486] lo speed is unknown, defaulting to 1000
[  104.276901][ T8484] hsr0 speed is unknown, defaulting to 1000
[  104.452603][ T8486] hsr0 speed is unknown, defaulting to 1000
[  104.660249][ T8508] netlink: 28 bytes leftover after parsing attributes in process `syz.2.748'.
[  104.663326][ T8508] netlink: 28 bytes leftover after parsing attributes in process `syz.2.748'.
[  104.669449][ T8508] gretap0: entered promiscuous mode
[  104.673704][ T8499] netlink: 14489 bytes leftover after parsing attributes in process `syz.1.745'.
[  104.677096][ T8508] batadv_slave_1: entered promiscuous mode
[  104.679993][ T8508] hsr1: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network
[  104.683443][ T8508] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[  104.760380][ T8515] netlink: 'syz.2.752': attribute type 4 has an invalid length.
[  104.766918][ T8515] netlink: 'syz.2.752': attribute type 4 has an invalid length.
[  104.832683][ T8524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.754'.
[  104.838186][ T8525] netlink: 108 bytes leftover after parsing attributes in process `syz.2.755'.
[  104.842425][ T8525] netlink: 108 bytes leftover after parsing attributes in process `syz.2.755'.
[  104.860961][ T8524] syz_tun: entered allmulticast mode
[  104.869219][ T8524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.754'.
[  104.873574][ T8522] syz_tun: left allmulticast mode
[  104.952028][ T8537] netlink: 248 bytes leftover after parsing attributes in process `syz.1.759'.
[  105.089581][ T8555] tipc: Enabled bearer <udp:syz2>, priority 10
[  105.196389][ T8563] ip6tnl2: entered promiscuous mode
[  106.186543][ T8604] netlink: 'syz.2.780': attribute type 13 has an invalid length.
[  106.189419][ T8604] netlink: 'syz.2.780': attribute type 17 has an invalid length.
[  106.208691][ T8604] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.211587][ T8604] 8021q: adding VLAN 0 to HW filter on device team0
[  106.215834][ T8604] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  106.225645][ T8606] netlink: 'syz.1.781': attribute type 10 has an invalid length.
[  106.232540][ T8606] team0: Port device netdevsim0 added
[  106.252428][ T8604] lo speed is unknown, defaulting to 1000
[  106.255611][ T8604] lo speed is unknown, defaulting to 1000
[  106.299796][ T8612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.388469][ T8604] hsr0 speed is unknown, defaulting to 1000
[  106.425408][ T8614] smc: removing ib device syz0
[  107.065708][ T8636] netlink: 'syz.1.788': attribute type 8 has an invalid length.
[  107.316042][ T8648] geneve3: entered promiscuous mode
[  107.318927][   T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[  107.323331][   T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[  107.326637][   T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[  107.329936][   T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[  107.495996][ T8659] lo speed is unknown, defaulting to 1000
[  107.499631][ T8659] hsr0 speed is unknown, defaulting to 1000
[  107.701359][ T8676] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.704018][ T8676] syzkaller0: entered promiscuous mode
[  107.706133][ T8676] syzkaller0: entered allmulticast mode
[  107.711893][ T8676] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  107.733700][ T8675] tipc: Resetting bearer <eth:syzkaller0>
[  107.752473][ T8675] tipc: Disabling bearer <eth:syzkaller0>
[  107.842898][ T8683] 8021q: VLANs not supported on nlmon0
[  107.882356][ T8687] netlink: 'syz.2.805': attribute type 10 has an invalid length.
[  107.891661][ T8687] 8021q: adding VLAN 0 to HW filter on device team0
[  107.894827][ T8687] bond0: (slave team0): Enslaving as an active interface with an up link
[  108.066562][ T8702] netlink: 'syz.2.811': attribute type 1 has an invalid length.
[  108.217511][ T8706] nbd: must specify at least one socket
[  108.492616][ T8742] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  109.742273][ T8802] __nla_validate_parse: 19 callbacks suppressed
[  109.742283][ T8802] netlink: 10 bytes leftover after parsing attributes in process `syz.0.845'.
[  109.759150][ T8802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.845'.
[  109.760318][ T8806] validate_nla: 1 callbacks suppressed
[  109.760327][ T8806] netlink: 'syz.1.844': attribute type 5 has an invalid length.
[  109.772024][ T8807] netlink: 14 bytes leftover after parsing attributes in process `syz.1.844'.
[  109.776385][ T8806] netlink: 'syz.1.844': attribute type 5 has an invalid length.
[  109.783646][ T8807] hsr_slave_0: left promiscuous mode
[  109.799778][ T8807] hsr_slave_1: left promiscuous mode
[  109.850607][ T8818] vlan0: left promiscuous mode
[  109.856441][ T8818] veth1_vlan: left allmulticast mode
[  109.862249][ T8818] macvlan0: left allmulticast mode
[  109.874171][ T8818] geneve2: left promiscuous mode
[  109.888645][ T8818] bond6: left promiscuous mode
[  109.891862][ T8818] batadv2: left promiscuous mode
[  109.893555][ T8818] batadv2: left allmulticast mode
[  109.898767][ T8818] ip6tnl2: left promiscuous mode
[  109.907146][ T8818] geneve3: left promiscuous mode
[  109.910823][   T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.913859][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  109.919745][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0
[  109.934997][   T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.944783][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  109.952118][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0
[  109.958052][   T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.961058][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  109.972093][ T8830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.851'.
[  109.975311][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0
[  109.978914][   T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.983132][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  109.986254][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0
[  110.044314][ T8834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.853'.
[  110.074653][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.854'.
[  110.082502][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.854'.
[  110.085116][ T8837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.852'.
[  110.141370][ T8848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.858'.
[  110.145338][ T8846] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.161560][ T8846] syzkaller0: entered promiscuous mode
[  110.163396][ T8846] syzkaller0: entered allmulticast mode
[  110.190447][ T8846] tipc: Resetting bearer <eth:syzkaller0>
[  110.193000][ T8852] netlink: 248 bytes leftover after parsing attributes in process `syz.2.860'.
[  110.196292][ T8845] tipc: Resetting bearer <eth:syzkaller0>
[  110.206545][ T8845] tipc: Disabling bearer <eth:syzkaller0>
[  110.320995][ T8856] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  110.381854][ T8866] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.384668][ T8865] syzkaller0: entered promiscuous mode
[  110.386577][ T8865] syzkaller0: entered allmulticast mode
[  110.397459][ T8865] tipc: Resetting bearer <eth:syzkaller0>
[  110.402026][ T8864] tipc: Resetting bearer <eth:syzkaller0>
[  110.409785][ T8864] tipc: Disabling bearer <eth:syzkaller0>
[  110.565491][ T8879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  110.569744][ T8879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  110.574285][ T8879] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  110.577911][ T8879] bond0 (unregistering): Released all slaves
[  110.627500][ T8885] ieee802154 phy0 wpan0: encryption failed: -22
[  110.678623][ T8893] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.684511][ T8893] syzkaller0: entered promiscuous mode
[  110.686349][ T8893] syzkaller0: entered allmulticast mode
[  110.741659][ T8893] tipc: Resetting bearer <eth:syzkaller0>
[  110.748064][ T8892] tipc: Resetting bearer <eth:syzkaller0>
[  110.767685][ T8892] tipc: Disabling bearer <eth:syzkaller0>
[  110.790041][ T8898] tipc: Resetting bearer <ib:ip6gre0>
[  110.799162][ T8898] batadv_slave_0: left promiscuous mode
[  110.990236][ T8917] lo speed is unknown, defaulting to 1000
[  110.992939][ T8917] hsr0 speed is unknown, defaulting to 1000
[  111.086268][ T8929] netlink: 'syz.0.882': attribute type 8 has an invalid length.
[  111.102603][ T8931] netlink: 'syz.1.883': attribute type 6 has an invalid length.
[  111.928780][ T8938] netlink: 'syz.2.885': attribute type 5 has an invalid length.
[  112.128959][ T8957] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.290694][ T8966] macsec1: entered promiscuous mode
[  112.292929][ T8966] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  112.296032][ T8966] macsec1: entered allmulticast mode
[  112.297408][ T8969] netlink: 'syz.2.893': attribute type 8 has an invalid length.
[  112.299062][ T8966] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  112.335787][ T8971] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.340416][ T8971] syzkaller0: entered promiscuous mode
[  112.342763][ T8971] syzkaller0: entered allmulticast mode
[  112.354461][ T8973] netlink: 'syz.0.895': attribute type 2 has an invalid length.
[  112.360058][ T8971] tipc: Resetting bearer <eth:syzkaller0>
[  112.365775][ T8970] tipc: Resetting bearer <eth:syzkaller0>
[  112.377883][ T8970] tipc: Disabling bearer <eth:syzkaller0>
[  112.455506][ T8977] bridge_slave_1: default FDB implementation only supports local addresses
[  112.472606][ T8981] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.484705][ T8981] tipc: Disabling bearer <eth:syzkaller0>
[  113.354309][ T9015] netlink: 'syz.2.909': attribute type 3 has an invalid length.
[  113.359559][ T9016] bond0: (slave team0): Releasing backup interface
[  113.378481][ T9020] netlink: 'syz.0.910': attribute type 1 has an invalid length.
[  113.419162][ T9025] netlink: zone id is out of range
[  113.421444][ T9025] netlink: zone id is out of range
[  113.423556][ T9025] netlink: zone id is out of range
[  113.425795][ T9025] netlink: zone id is out of range
[  113.428082][ T9025] netlink: zone id is out of range
[  113.430182][ T9025] netlink: zone id is out of range
[  113.433228][ T9025] netlink: zone id is out of range
[  113.436077][ T9025] netlink: zone id is out of range
[  113.466003][ T9028] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  113.487712][ T9028] netlink: 'syz.1.913': attribute type 23 has an invalid length.
[  113.517233][ T9032] bridge_slave_1: default FDB implementation only supports local addresses
[  113.665923][ T9051] syzkaller1: entered promiscuous mode
[  113.670332][ T9051] syzkaller1: entered allmulticast mode
[  113.673390][ T9051] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  114.272260][ T9081] pim6reg: entered allmulticast mode
[  114.277219][ T9081] pim6reg: left allmulticast mode
[  114.630718][ T9097] bridge_slave_1: default FDB implementation only supports local addresses
[  114.981287][ T9101] __nla_validate_parse: 34 callbacks suppressed
[  114.981300][ T9101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.937'.
[  115.117244][ T9103] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.938'.
[  115.168049][ T9107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.939'.
[  115.174600][ T9107] vlan2: entered promiscuous mode
[  115.176541][ T9107] team0: entered promiscuous mode
[  115.178829][ T9107] team_slave_0: entered promiscuous mode
[  115.181226][ T9107] team_slave_1: entered promiscuous mode
[  115.183780][ T9107] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  115.254906][ T9109] validate_nla: 4 callbacks suppressed
[  115.254916][ T9109] netlink: 'syz.1.940': attribute type 1 has an invalid length.
[  115.272664][ T9109] bond0: entered promiscuous mode
[  115.274905][ T9109] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.291669][ T9109] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.294492][ T9109] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address
[  115.298271][ T9109] bond0: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  115.305277][ T9109] bond0: (slave wireguard0): making interface the new active one
[  115.308622][ T9109] wireguard0: entered promiscuous mode
[  115.312271][ T9109] bond0: (slave wireguard0): Enslaving as an active interface with an up link
[  115.320377][ T9109] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  115.323485][ T9109] IPv6: NLM_F_CREATE should be set when creating new route
[  115.326469][ T9109] IPv6: NLM_F_CREATE should be set when creating new route
[  115.331514][ T9109] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  115.341745][ T9109] bond0: (slave wireguard1): The slave device specified does not support setting the MAC address
[  115.350068][ T9109] bond0: (slave wireguard1): Enslaving as a backup interface with an up link
[  115.390721][ T9114] netlink: 'syz.1.941': attribute type 11 has an invalid length.
[  115.393924][ T9114] netlink: 'syz.1.941': attribute type 11 has an invalid length.
[  115.397192][ T9114] netlink: 224 bytes leftover after parsing attributes in process `syz.1.941'.
[  115.401261][ T9114] netlink: 'syz.1.941': attribute type 10 has an invalid length.
[  115.495165][ T9121] netlink: 'syz.0.943': attribute type 3 has an invalid length.
[  115.502780][ T9123] netlink: 6 bytes leftover after parsing attributes in process `syz.1.942'.
[  115.518198][ T9123] net_ratelimit: 17 callbacks suppressed
[  115.518212][ T9123] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  115.611004][ T9125] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  115.942212][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.949'.
[  115.949087][ T9149] netlink: 240 bytes leftover after parsing attributes in process `syz.0.949'.
[  116.023814][ T9153] netlink: 28 bytes leftover after parsing attributes in process `syz.0.951'.
[  116.120007][ T9164] !: renamed from dummy0
[  116.124473][ T9165] netlink: 16 bytes leftover after parsing attributes in process `syz.0.954'.
[  116.139827][ T9165] team0: Mode changed to "broadcast"
[  116.303671][ T9173] lo speed is unknown, defaulting to 1000
[  116.303993][ T9177] netlink: 16 bytes leftover after parsing attributes in process `syz.0.956'.
[  116.317263][ T9173] hsr0 speed is unknown, defaulting to 1000
[  116.697982][ T9207] netlink: 'syz.1.960': attribute type 21 has an invalid length.
[  116.700498][ T9207] netlink: 'syz.1.960': attribute type 5 has an invalid length.
[  116.702908][ T9207] netlink: 'syz.1.960': attribute type 6 has an invalid length.
[  116.882793][ T9220] bridge_slave_1: default FDB implementation only supports local addresses
[  116.912476][ T9222] netlink: 'syz.2.965': attribute type 1 has an invalid length.
[  117.047610][ T9227] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.050553][ T9227] syzkaller0: entered promiscuous mode
[  117.052543][ T9227] syzkaller0: entered allmulticast mode
[  117.063867][ T9227] tipc: Resetting bearer <eth:syzkaller0>
[  117.067127][ T9226] tipc: Resetting bearer <eth:syzkaller0>
[  117.075139][ T9226] tipc: Disabling bearer <eth:syzkaller0>
[  117.303427][ T9240] rdma_rxe: rxe_newlink: failed to add syzkaller0
[  117.306410][ T9240] nbd: must specify a device to reconfigure
[  117.494974][ T9252] pim6reg: entered allmulticast mode
[  117.503073][ T9252] pim6reg: left allmulticast mode
[  117.599796][ T9256] netlink: 'syz.0.978': attribute type 9 has an invalid length.
[  117.783193][ T9265] netlink: 'syz.1.982': attribute type 13 has an invalid length.
[  117.833889][ T9262] netlink: 'syz.0.980': attribute type 1 has an invalid length.
[  118.366240][ T9282] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  118.403275][ T9287] syzkaller1: entered promiscuous mode
[  118.405227][ T9287] syzkaller1: entered allmulticast mode
[  118.663692][ T9302] lo speed is unknown, defaulting to 1000
[  118.666649][ T9302] hsr0 speed is unknown, defaulting to 1000
[  118.776165][  T482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.779209][  T482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.496729][ T9334] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  119.976350][ T9346] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  120.141343][ T9360] __nla_validate_parse: 22 callbacks suppressed
[  120.141392][ T9360] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1011'.
[  120.181769][ T9362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1012'.
[  120.322640][ T9370] validate_nla: 3 callbacks suppressed
[  120.322650][ T9370] netlink: 'syz.1.1015': attribute type 46 has an invalid length.
[  120.328864][ T9370] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1015'.
[  120.413980][ T9375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1017'.
[  120.584158][ T9381] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1019'.
[  120.893750][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'.
[  121.007979][ T9396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1025'.
[  121.026445][ T9397] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1025'.
[  121.078318][ T5850] Bluetooth: hci2: command 0x0405 tx timeout
[  121.142850][ T9404] netlink: 'syz.0.1027': attribute type 4 has an invalid length.
[  121.206698][ T9411] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1030'.
[  121.412974][ T9438] openvswitch: netlink: IP tunnel TTL not specified.
[  121.493873][ T9442] netlink: 'syz.1.1036': attribute type 1 has an invalid length.
[  121.496364][ T9442] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1036'.
[  121.699044][ T9461] bridge0: entered allmulticast mode
[  121.923402][ T9480] netlink: 'syz.1.1052': attribute type 1 has an invalid length.
[  121.931424][ T9480] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  121.975216][ T9487] team_slave_0: left promiscuous mode
[  121.981193][ T9487] team0: Port device team_slave_0 removed
[  121.983764][ T9487] team_slave_1: left promiscuous mode
[  121.986701][ T9487] team0: Port device team_slave_1 removed
[  121.990291][ T9487] batman_adv: batadv0: Removing interface: batadv_slave_0
[  121.993333][ T9487] batman_adv: batadv0: Removing interface: batadv_slave_1
[  121.998454][ T9487] team0: Port device netdevsim0 removed
[  122.001918][ T9487] bond1: (slave gretap1): Releasing backup interface
[  122.005595][ T9487] bond4: (slave veth7): Releasing active interface
[  122.011576][ T9487] bond0: (slave wireguard0): Releasing backup interface
[  122.014148][ T9487] wireguard0: left promiscuous mode
[  122.015981][ T9487] bond0: (slave wireguard1): making interface the new active one
[  122.019039][ T9487] wireguard1: entered promiscuous mode
[  122.023876][ T9487] bond0: (slave wireguard1): Releasing backup interface
[  122.026266][ T9487] wireguard1: left promiscuous mode
[  122.034347][ T9488] 8021q: adding VLAN 0 to HW filter on device team0
[  122.049084][ T9488] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  122.060397][ T9487] syz.1.1053 (9487) used greatest stack depth: 19752 bytes left
[  122.318148][ T9497] IPv6: Can't replace route, no match found
[  122.848256][ T9520] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  123.084329][ T9537] bridge0: port 1(erspan0) entered blocking state
[  123.086575][ T9537] bridge0: port 1(erspan0) entered disabled state
[  123.107599][ T9537] erspan0: entered allmulticast mode
[  123.110291][ T9537] erspan0: entered promiscuous mode
[  123.115352][ T9537] erspan0: left allmulticast mode
[  123.119622][ T9537] erspan0: left promiscuous mode
[  123.122068][ T9537] bridge0: port 1(erspan0) entered disabled state
[  123.249688][ T9547] lo speed is unknown, defaulting to 1000
[  123.252287][ T9547] hsr0 speed is unknown, defaulting to 1000
[  123.290317][ T9553] netlink: 'syz.2.1075': attribute type 3 has an invalid length.
[  123.985464][ T9592] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  124.374287][ T9597] netlink: 'syz.2.1087': attribute type 1 has an invalid length.
[  124.391842][ T9597] 8021q: adding VLAN 0 to HW filter on device bond2
[  124.419172][ T9597] bond2: (slave ip6gretap1): making interface the new active one
[  124.423489][ T9597] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  124.654348][ T9637] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  124.658340][ T9637] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  124.706327][ T9642] netlink: 'syz.0.1098': attribute type 7 has an invalid length.
[  124.707924][ T9641] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.711664][ T9641] syzkaller0: entered promiscuous mode
[  124.713563][ T9641] syzkaller0: entered allmulticast mode
[  124.723389][ T9641] tipc: Resetting bearer <eth:syzkaller0>
[  124.727676][ T9640] tipc: Resetting bearer <eth:syzkaller0>
[  124.735764][ T9640] tipc: Disabling bearer <eth:syzkaller0>
[  124.878643][ T9646] netlink: 'syz.2.1102': attribute type 3 has an invalid length.
[  124.884331][ T9646] sit0: entered allmulticast mode
[  124.888593][ T9645] sit0: left allmulticast mode
[  125.162529][ T9662] __nla_validate_parse: 23 callbacks suppressed
[  125.162543][ T9662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1109'.
[  125.169453][ T9662] bridge_slave_1: default FDB implementation only supports local addresses
[  125.450182][ T9669] bridge0: port 1(syz_tun) entered blocking state
[  125.452298][ T9669] bridge0: port 1(syz_tun) entered disabled state
[  125.454541][ T9669] syz_tun: entered allmulticast mode
[  125.459654][ T9669] syz_tun: entered promiscuous mode
[  125.551994][ T9678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1114'.
[  125.556274][ T9676] netlink: 'syz.0.1113': attribute type 22 has an invalid length.
[  125.562870][ T9676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1113'.
[  125.569710][ T9676] netlink: 'syz.0.1113': attribute type 22 has an invalid length.
[  125.573758][ T9676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1113'.
[  125.767745][ T9688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1118'.
[  126.016683][ T5850] Bluetooth: hci2: link tx timeout
[  126.018966][ T5850] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  126.470622][ T9694] netlink: 'syz.0.1120': attribute type 1 has an invalid length.
[  126.473843][ T9694] netlink: 'syz.0.1120': attribute type 2 has an invalid length.
[  126.508925][ T9696] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20004
[  126.560858][ T9698] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.564274][ T9698] syzkaller0: entered promiscuous mode
[  126.566217][ T9698] syzkaller0: entered allmulticast mode
[  126.580970][ T9698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1122'.
[  126.583490][ T9700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1123'.
[  126.590502][ T9698] tipc: Resetting bearer <eth:syzkaller0>
[  126.594551][ T9697] tipc: Resetting bearer <eth:syzkaller0>
[  126.604470][ T9697] tipc: Disabling bearer <eth:syzkaller0>
[  126.652418][ T9702] lo speed is unknown, defaulting to 1000
[  126.654988][ T9702] hsr0 speed is unknown, defaulting to 1000
[  126.705678][ T9704] lo speed is unknown, defaulting to 1000
[  126.710240][ T9704] hsr0 speed is unknown, defaulting to 1000
[  126.778010][ T9722] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.784243][ T9722] syzkaller1: entered promiscuous mode
[  126.786252][ T9722] syzkaller1: entered allmulticast mode
[  126.838945][ T9726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1130'.
[  126.881477][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1131'.
[  126.884383][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1131'.
[  126.912782][ T9732] netlink: 'syz.2.1132': attribute type 1 has an invalid length.
[  126.930066][ T9732] netlink: 'syz.2.1132': attribute type 1 has an invalid length.
[  126.936878][ T9733] netlink: 'syz.2.1132': attribute type 1 has an invalid length.
[  127.044413][ T9750] tun0: tun_chr_ioctl cmd 2148553947
[  127.101221][ T9750] lo speed is unknown, defaulting to 1000
[  127.111671][ T9750] hsr0 speed is unknown, defaulting to 1000
[  127.398645][ T9765] lo speed is unknown, defaulting to 1000
[  127.402498][ T9765] lo speed is unknown, defaulting to 1000
[  127.404802][ T9765] lo speed is unknown, defaulting to 1000
[  127.541652][ T9765] infiniband syz0: set down
[  127.543472][ T9765] infiniband syz0: added lo
[  127.562468][ T9765] RDS/IB: syz0: added
[  127.563990][ T9765] smc: adding ib device syz0 with port count 1
[  127.566127][ T9765] smc:    ib device syz0 port 1 has pnetid 
[  127.590238][ T6492] lo speed is unknown, defaulting to 1000
[  127.592402][   T24] lo speed is unknown, defaulting to 1000
[  127.594559][ T9765] lo speed is unknown, defaulting to 1000
[  127.733125][ T9785] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  127.743162][ T9765] lo speed is unknown, defaulting to 1000
[  127.841902][ T9765] lo speed is unknown, defaulting to 1000
[  127.934370][ T9765] syz.2.1141 (9765) used greatest stack depth: 19648 bytes left
[  128.021050][ T9804] netlink: 'syz.2.1152': attribute type 4 has an invalid length.
[  128.036926][ T5846] Bluetooth: hci2: command 0x0405 tx timeout
[  128.072089][ T9809] netlink: 'syz.1.1154': attribute type 2 has an invalid length.
[  128.098007][ T9814] netlink: 'syz.2.1156': attribute type 1 has an invalid length.
[  128.525338][ T9847] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  128.818714][ T9871] pim6reg: entered allmulticast mode
[  128.821952][ T9863] pim6reg: left allmulticast mode
[  128.994141][ T9881] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  129.187059][ T9889] bond7: entered promiscuous mode
[  129.188830][ T9889] bond7: entered allmulticast mode
[  129.191927][ T9889] 8021q: adding VLAN 0 to HW filter on device bond7
[  129.250912][ T9893] bridge_slave_1: default FDB implementation only supports local addresses
[  129.719109][ T9906] syzkaller1: entered promiscuous mode
[  129.720903][ T9906] syzkaller1: entered allmulticast mode
[  130.009181][ T9928] macvtap0: entered allmulticast mode
[  130.204702][ T9946] __nla_validate_parse: 20 callbacks suppressed
[  130.204715][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1194'.
[  130.305281][ T9964] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1199'.
[  130.309010][ T9962] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1197'.
[  130.352935][ T9973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1201'.
[  130.422481][ T9977] bond4: entered promiscuous mode
[  130.424434][ T9977] 8021q: adding VLAN 0 to HW filter on device bond4
[  130.429472][ T9977] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1203'.
[  130.435406][ T9977] batadv0: entered promiscuous mode
[  130.437862][ T9977] batadv0: entered allmulticast mode
[  130.440445][ T9977] 8021q: adding VLAN 0 to HW filter on device batadv0
[  130.443613][ T9977] bond4: (slave batadv0): making interface the new active one
[  130.446522][ T9977] bond4: (slave batadv0): Enslaving as an active interface with an up link
[  130.549937][ T9977] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1203'.
[  130.703057][ T9985] lo speed is unknown, defaulting to 1000
[  130.706898][ T9985] hsr0 speed is unknown, defaulting to 1000
[  130.710689][ T9985] lo speed is unknown, defaulting to 1000
[  130.760518][ T9987] lo speed is unknown, defaulting to 1000
[  130.763297][ T9987] hsr0 speed is unknown, defaulting to 1000
[  130.809295][ T9987] lo speed is unknown, defaulting to 1000
[  131.421594][T10013] C: renamed from team_slave_0
[  131.425411][T10013] validate_nla: 3 callbacks suppressed
[  131.425424][T10013] netlink: 'syz.1.1212': attribute type 1 has an invalid length.
[  131.434543][T10013] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1212'.
[  131.446924][T10013] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  131.490487][T10017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1214'.
[  131.545188][T10017] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1214'.
[  131.634461][T10023] lo speed is unknown, defaulting to 1000
[  131.641427][T10023] hsr0 speed is unknown, defaulting to 1000
[  131.644224][T10023] lo speed is unknown, defaulting to 1000
[  131.710054][T10026] lo speed is unknown, defaulting to 1000
[  131.713787][T10026] hsr0 speed is unknown, defaulting to 1000
[  131.719571][T10028] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1217'.
[  131.759347][T10026] lo speed is unknown, defaulting to 1000
[  131.878994][   T61] block nbd2: Possible stuck request ffff888020960000: control (read@0,1024B). Runtime 30 seconds
[  131.882528][   T61] block nbd2: Possible stuck request ffff888020960200: control (read@1024,1024B). Runtime 30 seconds
[  132.011747][T10039] bridge_slave_1: default FDB implementation only supports local addresses
[  132.035293][T10043] netlink: 'syz.0.1223': attribute type 2 has an invalid length.
[  132.096714][T10046] lo speed is unknown, defaulting to 1000
[  132.103226][T10046] hsr0 speed is unknown, defaulting to 1000
[  132.108550][T10046] lo speed is unknown, defaulting to 1000
[  132.520195][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  133.246539][T10080] lo: entered allmulticast mode
[  133.249890][T10080] tunl0: entered allmulticast mode
[  133.258732][T10080] gre0: entered allmulticast mode
[  133.267261][T10080] gretap0: entered allmulticast mode
[  133.271171][T10080] erspan0: entered allmulticast mode
[  133.274482][T10080] ip_vti0: entered allmulticast mode
[  133.278982][T10080] ip6_vti0: entered allmulticast mode
[  133.281780][T10080] sit0: entered allmulticast mode
[  133.285784][T10080] ip6tnl0: entered allmulticast mode
[  133.294014][T10080] tipc: Resetting bearer <ib:ip6gre0>
[  133.297783][T10080] ip6gre0: entered allmulticast mode
[  133.304044][T10080] ip6gretap0: entered allmulticast mode
[  133.309417][T10080] vcan0: entered allmulticast mode
[  133.311769][T10080] team0: entered allmulticast mode
[  133.314520][T10080] nlmon0: entered allmulticast mode
[  133.317053][T10080] caif0: entered allmulticast mode
[  133.319124][T10080] batadv0: entered allmulticast mode
[  133.321202][T10080] veth0: entered allmulticast mode
[  133.323403][T10080] veth1: entered allmulticast mode
[  133.325484][T10080] wg0: entered allmulticast mode
[  133.329298][T10080] wg1: entered allmulticast mode
[  133.331473][T10080] wg2: entered allmulticast mode
[  133.333691][T10080] veth0_to_bridge: entered allmulticast mode
[  133.336389][T10080] bridge_slave_0: entered allmulticast mode
[  133.339910][T10080] veth1_to_bridge: entered allmulticast mode
[  133.342465][T10080] bridge_slave_1: entered allmulticast mode
[  133.345037][T10080] veth0_to_bond: entered allmulticast mode
[  133.348763][T10080] bond_slave_0: entered allmulticast mode
[  133.352203][T10080] veth1_to_bond: entered allmulticast mode
[  133.354769][T10080] bond_slave_1: entered allmulticast mode
[  133.357845][T10080] veth0_to_team: entered allmulticast mode
[  133.360573][T10080] C: entered allmulticast mode
[  133.362696][T10080] veth1_to_team: entered allmulticast mode
[  133.365347][T10080] team_slave_1: entered allmulticast mode
[  133.367863][T10080] veth0_to_batadv: entered allmulticast mode
[  133.370449][T10080] batadv_slave_0: left promiscuous mode
[  133.372863][T10080] batadv_slave_0: entered allmulticast mode
[  133.375413][T10080] veth1_to_batadv: entered allmulticast mode
[  133.379129][T10080] batadv_slave_1: entered allmulticast mode
[  133.382388][T10080] xfrm0: entered allmulticast mode
[  133.384890][T10080] veth0_to_hsr: entered allmulticast mode
[  133.387785][T10080] hsr_slave_0: entered allmulticast mode
[  133.390283][T10080] veth1_to_hsr: entered allmulticast mode
[  133.392833][T10080] hsr_slave_1: entered allmulticast mode
[  133.395335][T10080] veth1_virt_wifi: entered allmulticast mode
[  133.398161][T10080] veth0_virt_wifi: entered allmulticast mode
[  133.400828][T10080] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  133.404017][T10080] veth1_vlan: entered allmulticast mode
[  133.406357][T10080] veth0_vlan: entered allmulticast mode
[  133.409542][T10080] vlan0: entered allmulticast mode
[  133.411963][T10080] vlan1: entered allmulticast mode
[  133.414288][T10080] macvlan0: left promiscuous mode
[  133.416499][T10080] macvlan0: entered allmulticast mode
[  133.419071][T10080] macvlan1: entered allmulticast mode
[  133.421544][T10080] ipvlan0: entered allmulticast mode
[  133.423955][T10080] ipvlan1: entered allmulticast mode
[  133.426409][T10080] geneve0: entered allmulticast mode
[  133.429020][T10080] geneve1: entered allmulticast mode
[  133.431448][T10080] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  133.434451][T10080] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  133.437863][T10080] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[  133.441247][T10080] netdevsim netdevsim1 netdevsim2: entered allmulticast mode
[  133.444561][T10080] netdevsim netdevsim1 netdevsim3: entered allmulticast mode
[  133.451908][T10080] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  133.458803][T10080] gre1: entered allmulticast mode
[  133.461210][T10080] macvlan2: entered allmulticast mode
[  133.463701][T10080] bridge1: entered allmulticast mode
[  133.466131][T10080] @: entered allmulticast mode
[  133.468674][T10080] bond1: entered allmulticast mode
[  133.471015][T10080] gretap1: entered allmulticast mode
[  133.473473][T10080] bond2: entered allmulticast mode
[  133.475935][T10080] veth2: entered allmulticast mode
[  133.478971][T10080] veth3: entered allmulticast mode
[  133.481259][T10080] veth4: entered allmulticast mode
[  133.483510][T10080] veth5: entered allmulticast mode
[  133.485876][T10080] bond3: entered allmulticast mode
[  133.488558][T10080] mac80211_hwsim hwsim12 wlan2: entered allmulticast mode
[  133.491734][T10080] syztnl0: entered allmulticast mode
[  133.494488][T10080] bond4: entered allmulticast mode
[  133.497421][T10080] veth6: entered allmulticast mode
[  133.499658][T10080] veth7: entered allmulticast mode
[  133.501916][T10080] mac80211_hwsim hwsim6 veth1_to_bod: entered allmulticast mode
[  133.505260][T10080] gre2: entered allmulticast mode
[  133.508472][T10080] gretap2: entered allmulticast mode
[  133.510765][T10080] syztnl2: entered allmulticast mode
[  133.513058][T10080] ip6tnl1: entered allmulticast mode
[  133.515486][T10080] ip6tnl2: entered allmulticast mode
[  133.519309][T10080] vti60: entered allmulticast mode
[  133.522175][T10080] bond0: left promiscuous mode
[  133.524143][T10080] bond0: entered allmulticast mode
[  133.527677][T10080] wireguard0: entered allmulticast mode
[  133.530047][T10080] wireguard1: entered allmulticast mode
[  133.532428][T10080] gre3: entered allmulticast mode
[  133.534699][T10080] ip6erspan0: entered allmulticast mode
[  133.537403][T10080] veth8: entered allmulticast mode
[  133.539689][T10080] veth9: entered allmulticast mode
[  133.542161][T10080] gre4: entered allmulticast mode
[  133.545271][T10080] bridge2: entered allmulticast mode
[  133.549247][T10080] bridge3: entered allmulticast mode
[  133.551547][T10080] bond5: entered allmulticast mode
[  133.553898][ T5907] lo speed is unknown, defaulting to 1000
[  133.556224][ T5907] syz1: Port: 1 Link DOWN
[  133.559886][T10086] bridge_slave_1: default FDB implementation only supports local addresses
[  133.951267][T10110] netlink: 'syz.2.1241': attribute type 5 has an invalid length.
[  133.998931][T10110] lo speed is unknown, defaulting to 1000
[  134.002993][T10110] hsr0 speed is unknown, defaulting to 1000
[  134.008067][T10110] lo speed is unknown, defaulting to 1000
[  134.364908][T10130] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  134.470655][T10138] netlink: 'syz.0.1249': attribute type 21 has an invalid length.
[  134.578643][T10152] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  134.640998][T10155] bridge0: port 1(erspan0) entered blocking state
[  134.643871][T10155] bridge0: port 1(erspan0) entered disabled state
[  134.647000][T10155] erspan0: entered allmulticast mode
[  134.650742][T10155] erspan0: entered promiscuous mode
[  134.682643][T10155] erspan0: left allmulticast mode
[  134.684888][T10155] erspan0: left promiscuous mode
[  134.687488][T10155] bridge0: port 1(erspan0) entered disabled state
[  134.708545][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.712114][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.719491][T10154] bridge0: port 1(erspan0) entered blocking state
[  134.722416][T10154] bridge0: port 1(erspan0) entered disabled state
[  134.724654][T10154] erspan0: entered allmulticast mode
[  134.728244][T10154] erspan0: entered promiscuous mode
[  134.956109][T10176] netlink: 'syz.2.1260': attribute type 7 has an invalid length.
[  135.058361][T10182] sit0: entered allmulticast mode
[  135.065235][T10181] sit0: left allmulticast mode
[  136.134351][T10224] lo speed is unknown, defaulting to 1000
[  136.138132][T10224] hsr0 speed is unknown, defaulting to 1000
[  136.141886][T10224] lo speed is unknown, defaulting to 1000
[  136.173382][T10231] __nla_validate_parse: 161 callbacks suppressed
[  136.173396][T10231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1275'.
[  136.178837][T10234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1273'.
[  136.335760][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1278'.
[  136.339655][T10244] netlink: 'syz.1.1278': attribute type 5 has an invalid length.
[  136.342506][T10244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1278'.
[  136.466299][T10251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1280'.
[  136.491227][T10255] geneve4: entered promiscuous mode
[  136.507350][ T5739] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.510611][ T5739] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.523366][ T5739] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.526391][ T5739] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.579990][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1284'.
[  136.830398][T10275] netlink: 'syz.0.1290': attribute type 1 has an invalid length.
[  136.833844][T10275] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1290'.
[  136.903745][T10291] netlink: 'syz.0.1293': attribute type 83 has an invalid length.
[  136.943225][T10301] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1297'.
[  137.002289][T10306] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1298'.
[  137.034565][T10309] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1300'.
[  137.060506][T10309] syzkaller0: entered promiscuous mode
[  137.062395][T10309] syzkaller0: entered allmulticast mode
[  137.165051][T10315] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  137.209306][T10317] openvswitch: netlink: Flow key attribute not present in set flow.
[  138.208535][T10353] batadv_slave_1: entered promiscuous mode
[  138.214356][T10350] batadv_slave_1: left promiscuous mode
[  138.484660][T10374] netlink: 'syz.1.1324': attribute type 1 has an invalid length.
[  138.501454][T10374] 8021q: adding VLAN 0 to HW filter on device bond6
[  138.513013][T10374] unsupported nlmsg_type 40
[  138.640467][T10398] netlink: 'syz.2.1330': attribute type 1 has an invalid length.
[  138.643912][T10398] netlink: 'syz.2.1330': attribute type 4 has an invalid length.
[  138.860448][T10422] bridge0: port 1(vlan2) entered blocking state
[  138.863004][T10422] bridge0: port 1(vlan2) entered disabled state
[  138.865778][T10422] vlan2: entered allmulticast mode
[  138.871997][T10422] bridge0: entered allmulticast mode
[  138.876446][T10422] vlan2: left allmulticast mode
[  138.881203][T10422] bridge0: left allmulticast mode
[  139.003176][T10441] vlan0: left allmulticast mode
[  139.092992][T10449] syzkaller0: entered promiscuous mode
[  139.095224][T10449] syzkaller0: entered allmulticast mode
[  139.143737][T10456] netlink: 'syz.2.1348': attribute type 1 has an invalid length.
[  139.160419][T10456] bond5: entered promiscuous mode
[  139.162312][T10456] bond5: entered allmulticast mode
[  139.175505][T10456] bridge6: the hash_elasticity option has been deprecated and is always 16
[  139.230330][T10468] netlink: 'syz.2.1352': attribute type 1 has an invalid length.
[  139.254409][T10468] bond6: entered promiscuous mode
[  139.258815][T10468] 8021q: adding VLAN 0 to HW filter on device bond6
[  139.286648][T10468] batadv1: entered promiscuous mode
[  139.295198][T10468] batadv1: entered allmulticast mode
[  139.299447][T10468] 8021q: adding VLAN 0 to HW filter on device batadv1
[  139.307755][T10468] bond6: (slave batadv1): making interface the new active one
[  139.311303][T10468] bond6: (slave batadv1): Enslaving as an active interface with an up link
[  139.514635][T10484] netlink: 'syz.2.1355': attribute type 3 has an invalid length.
[  139.558032][   T36] wlan1: Trigger new scan to find an IBSS to join
[  140.437820][T10508] netlink: 'syz.2.1365': attribute type 2 has an invalid length.
[  140.438704][T10513] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[  140.445486][T10513] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  140.488657][T10515] netlink: 'syz.0.1368': attribute type 1 has an invalid length.
[  140.509379][   T36] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  140.516002][   T12] ------------[ cut here ]------------
[  140.518857][   T12] WARNING: CPU: 0 PID: 12 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3ca/0x440
[  140.522857][   T12] Modules linked in:
[  140.524460][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  140.529943][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  140.533674][   T12] Workqueue: cfg80211 cfg80211_event_work
[  140.535793][   T12] RIP: 0010:__cfg80211_ibss_joined+0x3ca/0x440
[  140.538245][   T12] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 c2 fe e7 f6 90 0f 0b 90 eb bd e8 b7 fe e7 f6 90 <0f> 0b 90 4c 8b 6c 24 18 eb ad e8 a7 fe e7 f6 90 0f 0b 90 e9 de fd
[  140.545457][   T12] RSP: 0000:ffffc900000f78e0 EFLAGS: 00010293
[  140.548108][   T12] RAX: ffffffff8ad7acf9 RBX: dffffc0000000000 RCX: ffff88801c685640
[  140.551113][   T12] RDX: 0000000000000000 RSI: ffffffff8d9b4b89 RDI: ffffffff8be32680
[  140.554129][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa34937 R09: 1ffffffff1f46926
[  140.557377][   T12] R10: dffffc0000000000 R11: fffffbfff1f46927 R12: ffff888030808d90
[  140.560414][   T12] R13: 1ffff9200001ef24 R14: ffff888030723338 R15: 0000000000000006
[  140.563156][   T12] FS:  0000000000000000(0000) GS:ffff8880b8621000(0000) knlGS:0000000000000000
[  140.566143][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  140.568474][   T12] CR2: 000000110c3d1dcc CR3: 0000000028db2000 CR4: 00000000000006f0
[  140.571556][   T12] Call Trace:
[  140.572925][   T12]  <TASK>
[  140.574122][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  140.576308][   T12]  ? __pfx___cfg80211_ibss_joined+0x10/0x10
[  140.578639][   T12]  ? __pfx___mutex_lock+0x10/0x10
[  140.580282][   T12]  cfg80211_process_wdev_events+0x38a/0x4f0
[  140.582325][   T12]  cfg80211_process_rdev_events+0xa1/0x110
[  140.584521][   T12]  cfg80211_event_work+0x31/0x70
[  140.586236][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  140.588414][   T12]  process_scheduled_works+0xae1/0x17b0
[  140.590298][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  140.592256][   T12]  worker_thread+0x8a0/0xda0
[  140.594185][   T12]  kthread+0x711/0x8a0
[  140.595928][   T12]  ? __pfx_worker_thread+0x10/0x10
[  140.598110][   T12]  ? __pfx_kthread+0x10/0x10
[  140.599848][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  140.601501][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  140.603323][   T12]  ? __pfx_kthread+0x10/0x10
[  140.605035][   T12]  ret_from_fork+0x3fc/0x770
[  140.606626][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  140.608415][   T12]  ? __switch_to_asm+0x39/0x70
[  140.610069][   T12]  ? __switch_to_asm+0x33/0x70
[  140.611866][   T12]  ? __pfx_kthread+0x10/0x10
[  140.613447][   T12]  ret_from_fork_asm+0x1a/0x30
[  140.615107][   T12]  </TASK>
[  140.616189][   T12] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  140.618755][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  140.622749][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  140.626087][   T12] Workqueue: cfg80211 cfg80211_event_work
[  140.628002][   T12] Call Trace:
[  140.629131][   T12]  <TASK>
[  140.630140][   T12]  dump_stack_lvl+0x99/0x250
[  140.631719][   T12]  ? __asan_memcpy+0x40/0x70
[  140.633286][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[  140.634986][   T12]  ? __pfx__printk+0x10/0x10
[  140.636554][   T12]  vpanic+0x281/0x750
[  140.638118][   T12]  ? __pfx__printk+0x10/0x10
[  140.639865][   T12]  ? __pfx_vpanic+0x10/0x10
[  140.641307][   T12]  ? is_bpf_text_address+0x26/0x2b0
[  140.643000][   T12]  panic+0xb9/0xc0
[  140.644420][   T12]  ? __pfx_panic+0x10/0x10
[  140.646228][   T12]  __warn+0x31b/0x4b0
[  140.647647][   T12]  ? __cfg80211_ibss_joined+0x3ca/0x440
[  140.649500][   T12]  ? __cfg80211_ibss_joined+0x3ca/0x440
[  140.651292][   T12]  report_bug+0x2be/0x4f0
[  140.652734][   T12]  ? __cfg80211_ibss_joined+0x3ca/0x440
[  140.654621][   T12]  ? __cfg80211_ibss_joined+0x3ca/0x440
[  140.656790][   T12]  ? __cfg80211_ibss_joined+0x3cc/0x440
[  140.658650][   T12]  handle_bug+0x84/0x160
[  140.660073][   T12]  exc_invalid_op+0x1a/0x50
[  140.661613][   T12]  asm_exc_invalid_op+0x1a/0x20
[  140.663452][   T12] RIP: 0010:__cfg80211_ibss_joined+0x3ca/0x440
[  140.666048][   T12] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 c2 fe e7 f6 90 0f 0b 90 eb bd e8 b7 fe e7 f6 90 <0f> 0b 90 4c 8b 6c 24 18 eb ad e8 a7 fe e7 f6 90 0f 0b 90 e9 de fd
[  140.673932][   T12] RSP: 0000:ffffc900000f78e0 EFLAGS: 00010293
[  140.676607][   T12] RAX: ffffffff8ad7acf9 RBX: dffffc0000000000 RCX: ffff88801c685640
[  140.680044][   T12] RDX: 0000000000000000 RSI: ffffffff8d9b4b89 RDI: ffffffff8be32680
[  140.683478][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa34937 R09: 1ffffffff1f46926
[  140.686938][   T12] R10: dffffc0000000000 R11: fffffbfff1f46927 R12: ffff888030808d90
[  140.690346][   T12] R13: 1ffff9200001ef24 R14: ffff888030723338 R15: 0000000000000006
[  140.693782][   T12]  ? __cfg80211_ibss_joined+0x3c9/0x440
[  140.696221][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  140.698553][   T12]  ? __pfx___cfg80211_ibss_joined+0x10/0x10
[  140.701135][   T12]  ? __pfx___mutex_lock+0x10/0x10
[  140.703341][   T12]  cfg80211_process_wdev_events+0x38a/0x4f0
[  140.705936][   T12]  cfg80211_process_rdev_events+0xa1/0x110
[  140.708476][   T12]  cfg80211_event_work+0x31/0x70
[  140.710665][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  140.713162][   T12]  process_scheduled_works+0xae1/0x17b0
[  140.715431][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  140.717994][   T12]  worker_thread+0x8a0/0xda0
[  140.719919][   T12]  kthread+0x711/0x8a0
[  140.721738][   T12]  ? __pfx_worker_thread+0x10/0x10
[  140.723980][   T12]  ? __pfx_kthread+0x10/0x10
[  140.726019][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  140.728277][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  140.730560][   T12]  ? __pfx_kthread+0x10/0x10
[  140.732591][   T12]  ret_from_fork+0x3fc/0x770
[  140.734622][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  140.736844][   T12]  ? __switch_to_asm+0x39/0x70
[  140.738969][   T12]  ? __switch_to_asm+0x33/0x70
[  140.741040][   T12]  ? __pfx_kthread+0x10/0x10
[  140.743071][   T12]  ret_from_fork_asm+0x1a/0x30
[  140.745191][   T12]  </TASK>
[  140.747360][   T12] Kernel Offset: disabled
[  140.749264][   T12] Rebooting in 86400 seconds..

VM DIAGNOSIS:
06:25:19  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000005d RBX=000000000000005d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000f7090
R8 =ffff88801fd90237 R9 =1ffff11003fb2046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af48ce R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3d1dcc CR3=0000000028db2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000001000
XMM02=e10000000000000d 6500000000000000 XMM03=00000fff00000007 0000000000000000
XMM04=00000000000b0008 0000000000000000 XMM05=0501040000005d00 0000000015000c00
XMM06=0000000016000800 000000000b000800 XMM07=0000000000000000 000fff0000000700
XMM08=00000000000000e1 0000000000000d65 XMM09=0000000000000000 00007fddcb812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=40d2725d3af3a700 RBX=ffffffff81968308 RCX=40d2725d3af3a700 RDX=0000000000000001
RSI=ffffffff8d9b4b89 RDI=ffffffff8be32680 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa34930 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d5000
RIP=ffffffff8b78b3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c35a5b7 CR3=0000000028780000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fddcb812e53
XMM06=0000000000000000 00007fddcb812e4d XMM07=0000000000000000 00007fddcb812e61
XMM08=0000000000000000 00007fddcb812ee7 XMM09=0000000000000000 00007fddcb812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
