last executing test programs:

3m5.29602201s ago: executing program 1 (id=2001):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x840000000002, 0x3, 0xff)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r4, 0x0, r6, 0x0, 0x1, 0x0)
vmsplice(r5, &(0x7f0000001280)=[{&(0x7f0000001180)="830d", 0x2}], 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1106}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x40}}, 0x40080c0)
vmsplice(r6, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6)
write(r3, 0x0, 0x0)
sendmmsg$inet(r1, &(0x7f0000003b00), 0x0, 0x4004044)
r8 = socket(0x21, 0x80000, 0x80000000)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000100)=[{0x28, 0x8, 0x0, 0xbffffffe}, {0x80000006, 0x80, 0x9, 0x6}]}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[], 0x0)
r10 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r11=>0x0})
r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000003a72c000000070000000001000a00000000100000000000000a02000000008db4cb273729c4ab418efe15551faff234d6cf6d765c5bcc4917aadecd6e308f02acfa494d2acae911cec7331abddd27a40657e8e2f8de0163dc7abf56368560edd93c9fcc60cf1e068a4191312209fb6f03eed46c43df9dba"], &(0x7f00000000c0)=""/63, 0x33, 0x3f, 0x0, 0x6}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r12, 0x20, &(0x7f0000000200)={&(0x7f0000000140)=""/33, 0x21, 0x0, &(0x7f0000000180)=""/51, 0x33}}, 0x10)
socket$key(0xf, 0x3, 0x2)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in6=@private1, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x4, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x200, 0x70bd26, 0x25d7dbfd, {0x0, 0x0, 0x0, r11, {0x10, 0xfff3}, {0x1, 0xc}, {0xfff3, 0xa}}, ["", "", "", ""]}, 0x24}}, 0x0)
bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
r14 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})

3m4.995632524s ago: executing program 1 (id=2003):
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000004, 0x3032, 0xffffffffffffffff, 0xffffc000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES16=r0, @ANYBLOB='\x00'/28], 0x48)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x480000000102, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x25, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000ff0f0000000000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000182b0000", @ANYRES32=r1, @ANYBLOB="000000000201000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018450000010000000000000000000000ad474000ffffffff180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000800000008500000006000000bf91000000000000b7020000030000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
pwritev(r4, 0x0, 0x0, 0x40, 0x401)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
syz_emit_ethernet(0xb9, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffc4aaaaaaaa000011000077ef77b9001cfa4678bd99d0b73e966d29e5643aa66fe5344eb3cb4dd54898e8e0fddcca3c0e7c2b912920b6ac1e74cd985e3c1131875c0a82697958a13d5b86d8404ac4be0598ab758f765586efe2691edd1e3b32f2c29b613ecf7a5bca28021fa1a9c59f4eb42f15a6d60eb04c4147c6f3dce1b2d723e8d0f4860de57d0faeb72f8b3005465895676278a106c304b5ab58c4dd04587c22caef53ce865a9fbf44c411a781a735edb7d940fc05f2e10b1a1ee9a8d3412b063b5d5a2b6c"], 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000000c0)={0x1ff, 0x8, 0x2, 0xe, r6}, &(0x7f0000000100)=0x10)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000040010000000000000101410000001c001700060000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000e60f00000000000000000095000000e8f4000085000000003be7a00135502c6106fb1750af0db26c2cdd48c92f3c9a1c8443"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10)
setsockopt$sock_int(r10, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r11, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r11, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
listen(0xffffffffffffffff, 0x1)
listen(r11, 0x0)

3m4.896119447s ago: executing program 1 (id=2004):
accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0xc0800) (async)
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0xc0800)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e24, @private=0xa010102}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e20, @multicast1}], 0x70)
ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f0000000300)={0x80})
ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f00000003c0))
bind$rds(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) (async)
bind$rds(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10)
connect$netlink(0xffffffffffffffff, &(0x7f0000000440)=@unspec, 0xc)
setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000480)={@multicast1, @loopback}, 0x8) (async)
setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000480)={@multicast1, @loopback}, 0x8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000540)=0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0xc010000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=@ipv6_getnexthop={0x48, 0x6a, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NHA_GROUPS={0x4}, @NHA_OIF={0x8}, @NHA_OIF={0x8, 0x5, r4}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_OIF={0x8, 0x5, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
r6 = accept$unix(0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000740)=0x6e)
connect$unix(r6, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e)
socket$inet6(0xa, 0x5, 0x7) (async)
r7 = socket$inet6(0xa, 0x5, 0x7)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000800)={<r8=>0x0, 0x2e, "f8493be7fe4c1d5cf937b1a92edd5700626156c28ac4599ca9f137ec3fb39f327895737fd01d97c497cb3f2675f2"}, &(0x7f0000000840)=0x36)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000880)={r8, 0x28, "ac4955c1fb8ff90b4ab1611502d14e9713c678e7450542fc29a6c745a4f12778c8db9c05e6d25035"}, &(0x7f00000008c0)=0x30) (async)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000880)={<r9=>r8, 0x28, "ac4955c1fb8ff90b4ab1611502d14e9713c678e7450542fc29a6c745a4f12778c8db9c05e6d25035"}, &(0x7f00000008c0)=0x30)
r10 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r10, 0x0, 0xc8, &(0x7f0000000900), 0x4)
socketpair(0x25, 0x1, 0x0, &(0x7f0000000940)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
getpeername$llc(r11, &(0x7f0000000980)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000009c0)=0x10) (async)
getpeername$llc(r11, &(0x7f0000000980)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000009c0)=0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000a00), r12)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r11, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8010)
bind$inet(r11, &(0x7f0000000b40)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), r11) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), r11)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r7, 0x80047210, &(0x7f0000000bc0)) (async)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r7, 0x80047210, &(0x7f0000000bc0))
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000c00)={r9, 0xac}, &(0x7f0000000c40)=0x8)

3m4.81450378s ago: executing program 1 (id=2005):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}}, @NFT_MSG_DELOBJ={0x1b4, 0x14, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x91, 0x8, "d789d6872b89943d72bbdf5139672ae77b452d7b24075f511006e1a0cfd0c39350c4cb5c35c225721312747b0e2ad7f97f275e8f71e63d9d8aab464662570f407feb1d8024967f3ef558513b6c9ab8851ab095776667aedacf66f90afd3fcda51bff0e0ce3147bf9c51c1c3d890f758864c92511d712bfcb94733ffbbcd00dfffc173670a698c214caba88440c"}, @NFTA_OBJ_USERDATA={0x52, 0x8, "57465797b99a9a3227a1bd2e279f9756722366ae893dd9cb9640590df4a10b6f7e1141a203c2d030b735044945cf1f798cd1b59e134b5dad7204a1cf660d33bb5c70b2c15d19035f01c3ca2e669f"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x8a, 0x8, "042b206813ab2870bdfaea4a07da030f24b47a546108ff5882357eede123adeed42ba27d72835905dd045b2b0a2e2441a1ed8d7e5170a3831fac67c6a49762e9f39490f943df022461eb82ef041fd72f60724fe9286781535c032d739f3b9bac1c3b3ea7f6d9f66734223126d39f33ea0b3643ab4f2a13aa9d9556c7bc02aa2cb35116927ed5"}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0xbcc8c9aebf91a27f}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x230}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000)

3m4.812270157s ago: executing program 1 (id=2007):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r1, @ANYRES16=r2, @ANYBLOB="05aba340585ee28107af0ae22b88a50295c9c996138586e020eec90000e908000000"], 0x14}}, 0x20000840)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r4 = accept4(r3, 0x0, 0x0, 0x0)
r5 = socket$xdp(0x2c, 0x3, 0x0)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', <r7=>0x0})
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
socket$xdp(0x2c, 0x3, 0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r9, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)="28b3", 0x2}], 0x1, &(0x7f00000019c0)=ANY=[@ANYBLOB="24000000000000002001000000000000000000000000000e14b65b156c4d1400", @ANYRES32=0x0, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac910fe8800000000000000000000000001010014000000000000002900000008000000070000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}, {{&(0x7f0000001a80)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3}, 0x1c, &(0x7f0000002e00)=[{&(0x7f0000001ac0)="01", 0x1}], 0x1}}], 0x2, 0x931766f6319eed40)
shutdown(r9, 0x1)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r9, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x8, 0xb}, 0x8)
setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', <r11=>0x0})
setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000001780)=0x13200d0, 0x4)
bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r11}, 0x10)
bind$xdp(r5, &(0x7f0000000240)={0x2c, 0x1, r7, 0x0, r8}, 0x10)
connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x2710}, 0x10)
recvmmsg$unix(r4, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000003900)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_WOWLAN(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000008ac0)=ANY=[], 0xff8}, 0x1, 0x0, 0x0, 0x2404e0d0}, 0x404c845)

3m4.655110656s ago: executing program 1 (id=2010):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x4c)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010001000000fedbdf250200000014000200626f6e643000000000000000000000000900010073797a32000000000900030073797a3100001300"], 0x40}}, 0x0)
r4 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000009cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x108, 0x0, 0x1000, "1ed3270b894201673f50984104bf304bc1b1062b37d2939d306e8dcf7446b981289124e4851125b649ae658e9942f9c8f84e1a05e64edb8d1ba8f96e6b330f1670e0b53387073811c45cf6e1ac94dbc816f3738becac806bf098560992441e235773ee9d6711654b3842e059a291d22a111d97757ccd0901752317782c72e4aa86bd2b5b9282cab6ac7b273cc73b979d7f91dfd32eb9e8205da1ac7e4478abf00bb8755aca28348d853d0aba83012f1368ea259b0e40b8cdb98ced718684e1f44042caedf34cde2d4a0e82a72d05328cebf3e4c98cf35ea0125b533a75e46950fba4382385a4d1a9340e38ec0930aba18774"}, {0x1010, 0x0, 0xa87, "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"}, {0xf0, 0xff, 0x6, "34489571538d673de7dfb10a98fa8f5dbb3581961a7b46acb0ea8131897e7d4025f00569c85d9eba9445b499bbae5d1f263716eca26e91fb19e1508220bf3a8b8fe1da89c69fd9375f86510b26a81fd1d8389b77f7c36046501246af408ddd7ccb6c9dba7e890f63709c687d218ef40750817cd5ef9f6f465b547efa56345069bdbd16b59b6e325702ad1b15b9fee5ca5555c7d6257f4078622f71c1f98c6ef9749c18a272127511469ba8668edde9ad066c4ea386c2f85c0ee82d0bdd1fe2a476690952cda54d6d7b1096979b6b4991fb416c33570b8814c4"}, {0x118, 0x0, 0x9, "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"}, {0x90, 0x10e, 0x9, "256ef31f75793145a6962e8a4ce0ca206da28bad1c1864f10e86280dc5922f0f51098dd87cbfaf99a4b60a93e76d944d3c59b7dc93d0207e8156b53b6b96333598c22863b4d5c8be23ff936169f21848b763db6ede7b4224f2e363305834eea4793f079548efc8b6353c28142f3d40cbac16d1f8722e0d9d30"}, {0x50, 0x110, 0xda, "d11154ac4966c2d49739d0fb9e6828ba39b8e5d80f579719dd34123151a663819e83e4ade1f30d104f08c587a878baf1f599ffc4b5d082e2d7d040"}, {0x28, 0x102, 0xd, "fa35d515fceb2543394c30d7cfc55d1ef9"}, {0xc78, 0x119, 0x4, "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"}], 0x20a0}, 0x40) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000005c40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=ANY=[@ANYRES32=r5], 0x24}, {0x0}], 0x2a, 0x0, 0x0, 0x80}, 0x4000040)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a0000000060a010400000000000000000100000008000b400000000078000480340001800b0001006578746864720000400001800c0001006269747769736500300002800800034000000002080001400000001408000240000000120c0007800800010080000000f1ff0640000000010900010073797a3000000000140000001100010000000000000000000100000a"], 0x114}}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, 0x0, 0x0) (async)
write(r6, &(0x7f0000000000)="05000000", 0x4) (async)
close(r3)

3m4.537657865s ago: executing program 32 (id=2010):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x4c)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010001000000fedbdf250200000014000200626f6e643000000000000000000000000900010073797a32000000000900030073797a3100001300"], 0x40}}, 0x0)
r4 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000009cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x108, 0x0, 0x1000, "1ed3270b894201673f50984104bf304bc1b1062b37d2939d306e8dcf7446b981289124e4851125b649ae658e9942f9c8f84e1a05e64edb8d1ba8f96e6b330f1670e0b53387073811c45cf6e1ac94dbc816f3738becac806bf098560992441e235773ee9d6711654b3842e059a291d22a111d97757ccd0901752317782c72e4aa86bd2b5b9282cab6ac7b273cc73b979d7f91dfd32eb9e8205da1ac7e4478abf00bb8755aca28348d853d0aba83012f1368ea259b0e40b8cdb98ced718684e1f44042caedf34cde2d4a0e82a72d05328cebf3e4c98cf35ea0125b533a75e46950fba4382385a4d1a9340e38ec0930aba18774"}, {0x1010, 0x0, 0xa87, "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"}, {0xf0, 0xff, 0x6, "34489571538d673de7dfb10a98fa8f5dbb3581961a7b46acb0ea8131897e7d4025f00569c85d9eba9445b499bbae5d1f263716eca26e91fb19e1508220bf3a8b8fe1da89c69fd9375f86510b26a81fd1d8389b77f7c36046501246af408ddd7ccb6c9dba7e890f63709c687d218ef40750817cd5ef9f6f465b547efa56345069bdbd16b59b6e325702ad1b15b9fee5ca5555c7d6257f4078622f71c1f98c6ef9749c18a272127511469ba8668edde9ad066c4ea386c2f85c0ee82d0bdd1fe2a476690952cda54d6d7b1096979b6b4991fb416c33570b8814c4"}, {0x118, 0x0, 0x9, "9f11f1e904372ee08822446947c4affe1e9187d5358e7be3ec98b8d93a50cf6a6c20a160174ace86253b7198982904e9e24d9e48600938e3bcc56fb36912a8e6b55bb024f614034320e310bbab6f2751779823e92aecec0ef699fdd09264963f0f7e05e2da12f1d6fc3acfe19fac1b8fd48da9e9bc339e0dd38d62a0fbe927155176526c20d85dadee0157f6b88844b00bc163e9a2c554c83d93e06a4a672c19683e96ff0566ea132fa82e87d613fd561e3cb0c5fca1a6f7e28bad9f3bc1dae533d589d956c0dbd96ccd6c8a696994bcf9e82b21b8ad1a8a1a27539526f200cc9ae96709dd8b0c89c8da6af3bfe7fe8d62f1bd6aa977e132583a8c00729bdd0f4ea5a2d26ef3e8e9"}, {0x90, 0x10e, 0x9, "256ef31f75793145a6962e8a4ce0ca206da28bad1c1864f10e86280dc5922f0f51098dd87cbfaf99a4b60a93e76d944d3c59b7dc93d0207e8156b53b6b96333598c22863b4d5c8be23ff936169f21848b763db6ede7b4224f2e363305834eea4793f079548efc8b6353c28142f3d40cbac16d1f8722e0d9d30"}, {0x50, 0x110, 0xda, "d11154ac4966c2d49739d0fb9e6828ba39b8e5d80f579719dd34123151a663819e83e4ade1f30d104f08c587a878baf1f599ffc4b5d082e2d7d040"}, {0x28, 0x102, 0xd, "fa35d515fceb2543394c30d7cfc55d1ef9"}, {0xc78, 0x119, 0x4, "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"}], 0x20a0}, 0x40) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000005c40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=ANY=[@ANYRES32=r5], 0x24}, {0x0}], 0x2a, 0x0, 0x0, 0x80}, 0x4000040)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a0000000060a010400000000000000000100000008000b400000000078000480340001800b0001006578746864720000400001800c0001006269747769736500300002800800034000000002080001400000001408000240000000120c0007800800010080000000f1ff0640000000010900010073797a3000000000140000001100010000000000000000000100000a"], 0x114}}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, 0x0, 0x0) (async)
write(r6, &(0x7f0000000000)="05000000", 0x4) (async)
close(r3)

1.210970844s ago: executing program 2 (id=4693):
r0 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x52, 0x4)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4)
recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000001580)=""/238, 0xee}], 0x2}}], 0x1, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x900)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
socket$netlink(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x52, 0x4) (async)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) (async)
recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000001580)=""/238, 0xee}], 0x2}}], 0x1, 0x2, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x900) (async)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async)

1.154050533s ago: executing program 2 (id=4695):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="280400664f883fa06b1e2f6189ce0d4d44126d69cb1dcb0cff34dc3d65dc305113bb8e7b27136b7bd44cf33e0bc105177e29db5cc5374f0ecd88815d915e04cf1756"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYRES16], 0x128}, 0x2004c815)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
close(r7)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
socketpair(0x1, 0x5, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$FOU_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000d2bb9b7c37fc8544db2397712969307bd5a9b841cc683bcc858fd4beaf7f13b5ca5c8aa99e99936dd39ff61b208ee24c472a713a8f80130c984616f71b2e2cf035f2", @ANYRES16, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x14)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_GET(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES16, @ANYBLOB="01002cbd70010080000034000000080073000000000008000300fcffffff0e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x44}}, 0x20000000)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r11, 0x84, 0x70, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e20, 0xffffffff, @empty, 0x1ad8}}, [0x16bb, 0x7123, 0x1, 0x7, 0x7, 0x1, 0x8000000000000001, 0x5ca5a46, 0x9, 0xf, 0xc61, 0x5504, 0x7, 0x9, 0x4]}, &(0x7f0000000580)=0x100)
syz_emit_ethernet(0x93, &(0x7f0000000540)=ANY=[@ANYBLOB="016cc2000000bbbbbbbbbbbb86dd6a01a600005d1106fe8000000000000000000000000000aaff0200000000000000000000000000014e234e20005d90"], 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)

609.409088ms ago: executing program 0 (id=4702):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x7)
getsockopt(r3, 0x1, 0x5, &(0x7f0000000b00)=""/63, &(0x7f0000000b40)=0x3f)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x800, 0x70bd26, 0x25dfdbfd}, 0x14}}, 0x8010)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'hsr0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="ffc30000000000003c0012800c0001006d6163766c616e002c0002800a000900ffffbfffffff00000a000400aaaaaaaaaabb00000600020001000000440003000000000008000500", @ANYRES32=r5], 0x64}}, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x3, 0x181a}, {@private=0xa010101, 0x4e20, 0x4, 0xa, 0x80012d58, 0x12d5c}}, 0x44)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0)

514.218069ms ago: executing program 0 (id=4703):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getlink={0x3c, 0x12, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x2108, 0x43502}, [@IFLA_EXT_MASK={0x8}, @IFLA_IFNAME={0x14, 0x3, 'pim6reg1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c080}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x20040880)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)

511.344096ms ago: executing program 0 (id=4704):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TRIM(r0, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000003400)={0x10, 0x3f6, 0x8, 0x70bd25, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x24000004}, 0x8044)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
read$alg(r1, &(0x7f0000000100)=""/246, 0xf6)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r2, r2, 0x2f}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x700, 0x1, 0x4, 0x2688000, {{0x2f, 0x4, 0x2, 0x2, 0xbc, 0x67, 0x0, 0x7f, 0x2f, 0x0, @broadcast, @private=0xa010102, {[@rr={0x7, 0x7, 0x25, [@multicast2]}, @ssrr={0x89, 0x7, 0x2b, [@broadcast]}, @timestamp_prespec={0x44, 0x34, 0x3e, 0x3, 0xc, [{@multicast1, 0xc9}, {@local, 0x10001}, {@broadcast, 0xe14}, {@rand_addr=0x64010102, 0x406}, {@local, 0xff}, {@rand_addr=0x64010102, 0x5}]}, @timestamp_prespec={0x44, 0xc, 0x3b, 0x3, 0x6, [{@loopback, 0x100}]}, @end, @timestamp={0x44, 0x10, 0xf9, 0x0, 0x8, [0x9ca351a, 0x1cd, 0x401]}, @noop, @cipso={0x86, 0x23, 0xffffffffffffffff, [{0x5, 0x3, '\f'}, {0x0, 0xe, "0554a2ddcde75fa9b320bab0"}, {0x0, 0x4, "34e4"}, {0x4, 0x8, "b623570abed5"}]}, @lsrr={0x83, 0x23, 0xf7, [@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @empty, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast1]}]}}}}})
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r5, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000))
syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
socket$pppoe(0x18, 0x1, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socket$rds(0x15, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6(0xa, 0x3, 0x87)
socket$nl_netfilter(0x10, 0x3, 0xc)

384.26933ms ago: executing program 0 (id=4705):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0))
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000003e000701fefffffffcffffff017c0000040042800800018004001e800400028008e2fc6180afcea8ce39a5bb9a445fda366a3d5a"], 0x24}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xde68446556a58d2b}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x48021)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
recvmmsg(0xffffffffffffffff, &(0x7f0000006140), 0x0, 0x40010001, 0x0) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000006140), 0x0, 0x40010001, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r1, 0x0, 0x0)
sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x1, 0xb, 0x0, 0x0, 0x8, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000180)) (async)
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000180))
unshare(0x6a040000)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001a80)={'syztnl0\x00', 0x0}) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001a80)={'syztnl0\x00', 0x0})
openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x60880, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
socket$packet(0x11, 0x3, 0x300) (async)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000540)=[{0x6, 0x37, 0x0, 0x9}]}, 0x10) (async)
setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000540)=[{0x6, 0x37, 0x0, 0x9}]}, 0x10)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x80)
socket$unix(0x1, 0x1, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, 0x0, 0x0)

252.158333ms ago: executing program 2 (id=4708):
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x8)
socket$inet_udp(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r2, @ANYBLOB="14000200ff02000000000000000000000000000108000800028d"], 0x34}}, 0x0)
r3 = socket(0x1e, 0x1, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x8a, &(0x7f0000000040), 0x4)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x64, 0x4, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x40084)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

249.733516ms ago: executing program 0 (id=4709):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x38, 0x20, 0x70bd28, 0x5dfdbfd, {0x6}}, 0x14}}, 0x0)
r3 = socket$kcm(0x2, 0xa, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0x13, &(0x7f0000000b40)=ANY=[@ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r4 = socket$nl_rdma(0x10, 0x3, 0x14) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r8, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r7}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r10, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x24, r9, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r11}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0) (async)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r12, 0x1, 0x0, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x101, 0xd}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x15}, 0x2004c088) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) (async)
pipe(0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0)
r14 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x334, 0x8}, 0xc)
pipe(&(0x7f00000001c0)) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xb15a, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50)

248.677275ms ago: executing program 3 (id=4710):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=<r1=>0x0) (async)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=<r2=>0x0) (async)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000680)=0xc)
setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0)={r1, r2, r3}, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x1a4, 0x3, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0xbf, 0xc, "1588c21f34d86771a76883ed9c71208d1b7c66da2a340103067ec1e877a7e1c89ac740f47c6082abefea86f7aa1a4c85fe385a063ca34ea672bbde387c73773d5876ef685af56aecbb6f60542e4201b2e9b07c6b543cc8ed20cdc22ee86555dbe993542af6f5ccd99fd54cb049c79cd9988808bb7b38d76c220c56aaa00810eff3457fcfde956f719665ef9b4dce4e8b3af38a9e787d51950eb65ee47ca164e3a4dc2f7fc6b2c762c5fb765c5f84019dd4d883ddfcdf4567687e86"}, @NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x71}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1e5782c7}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6c9ed9b}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x54, 0x8, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0x3d, 0x7, 0x1, 0x0, "1b3838b41f36f6ba8ac4ea877f49cdd13257f2609f28ec6f5a9a2100f8f5b9d10960071c438bf593b65148123d1a5638ab8d199b1bc5ffb8bb"}]}, @NFT_MSG_NEWFLOWTABLE={0x1a4, 0x16, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x98, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x59490d52}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0xb8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'batadv0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'tunl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8001}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c4}, 0x1, 0x0, 0x0, 0x80}, 0x20000004)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xb4}]}]}, 0x58}}, 0x2)

244.318986ms ago: executing program 2 (id=4711):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000000) (async)
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='bond_slave_1\x00') (async, rerun: 64)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000000c0)={0xc, 0x1, 0x14, 0x9}, 0x10) (async, rerun: 64)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x34, 0x2, [@TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x7fffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffffa}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x40}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}]}}]}, 0x68}}, 0x4000090)

243.380762ms ago: executing program 3 (id=4712):
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', <r0=>0x0, 0x0, 0x14, 0x3, 0xffffffff, 0x4, @loopback, @empty, 0x80, 0x700, 0x1000, 0xe}})
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4a, r0})
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000100)={<r1=>0x0, 0x48, "8a2d6d5d3c21f534f4b8f2d3922d099a372b378a7cad3ae86534fc83633a5416e05af091a8c66351527b2d7be68e952b8c14f7161b613b864d3560bd6e18cbafaa91e85ebfe9c567"}, &(0x7f0000000180)=0x50)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={<r2=>r1, 0xcc2, 0x20}, &(0x7f0000000200)=0xc)
r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14, 0x0)
sendto$packet(r3, &(0x7f00000002c0)="494ae651511156fb069ed7d36899acb5d7d24b8f26ef4572213ebfae86a9bc12dad3969075b16312042b3d3998cf94c6f1d57c85ddd971645a3348", 0x3b, 0x24040051, &(0x7f0000000300)={0x11, 0x4, 0x0, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000008}, 0x4000805)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'erspan0\x00', &(0x7f00000004c0)={'sit0\x00', <r7=>r0, 0x26, 0x1, 0x8, 0x3, {{0x6, 0x4, 0x1, 0x4, 0x18, 0x66, 0x0, 0xdb, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @rand_addr=0x64010102, {[@ra={0x94, 0x4}]}}}}})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000540)=<r8=>0x0, &(0x7f0000000580)=0x4)
sendmsg$ETHTOOL_MSG_WOL_GET(r6, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x140, r5, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040090)
socketpair(0x8, 0x2, 0x0, &(0x7f0000000780)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000000840)={'syztnl2\x00', &(0x7f00000007c0)={'syztnl2\x00', r4, 0x4, 0x9, 0x3, 0x8, 0x28, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x8, 0x200, 0x6}})
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_LIST(r11, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x94, r12, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x14, 0x7, '/usr/sbin/cupsd\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r13 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a80), r9)
r14 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
sendmsg$GTP_CMD_NEWPDP(r10, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x48, r13, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r14}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @GTPA_FAMILY={0x5, 0xd, 0x5}]}, 0x48}}, 0x8000)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r6)
sendmsg$NL80211_CMD_GET_KEY(r9, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x40, r15, 0x322, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x6e}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x410)
setsockopt$bt_BT_SECURITY(r10, 0x112, 0x4, &(0x7f0000000d00)={0x0, 0xff}, 0x2)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000d40)={<r16=>r2, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x40, 0xff}, &(0x7f0000000e00)=0x90)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f0000000e40)={r16, 0xc1, 0x9, 0xffffffff, 0x8, 0x7}, &(0x7f0000000e80)=0x14)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000014, 0x1010, r3, 0xbe82a000)
socket$igmp6(0xa, 0x3, 0x2)
r17 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000f00), r6)
sendmsg$TIPC_NL_NAME_TABLE_GET(r10, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x40, r17, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8ce5)

150.542849ms ago: executing program 3 (id=4713):
bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x11}, 0x11)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300)=r1, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000f7ffffff00000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$nl_xfrm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000001640)=@allocspi={0xf8, 0x28, 0x339, 0x0, 0x0, {{{@in=@multicast1, @in=@multicast1, 0x0, 0x376}, {@in, 0x20, 0x32}, @in6=@loopback, {}, {}, {0x0, 0x0, 0x2}}, 0x0, 0x4}}, 0xf8}}, 0x0)

63.73632ms ago: executing program 0 (id=4714):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112})
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0200000004000000010000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000002d000000000000000000dfff1f0000000000000007db00ae76e5d03d23519f44aa1bb7e38e0998c3066de2bcda9e0f8bd0a1c0f52f8754ee65c80b7db0ddf4ddae216f6df40000c01dec20242f"], 0x50)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@getae={0x40, 0x1f, 0x319, 0x0, 0x0, {{@in=@empty}, @in6=@mcast2}}, 0x40}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r6, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
pipe(&(0x7f00000000c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = socket$inet(0x2, 0x3, 0x7f)
bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r10, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4)
connect$inet(r10, &(0x7f0000000040)={0x2, 0x3, @multicast1}, 0x10)
splice(r8, 0x0, r10, 0x0, 0x8000, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r5}, 0x8)
sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x188, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x14c, 0x22, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x12be4566}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x200}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xe476}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x94a}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xd}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xb0}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xb}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1000}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7fffffff}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xf976}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7ff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}, @NL80211_ATTR_FREQ_RANGE_END={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7c}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x15}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2a}]}, 0x188}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f0000000400)=<r11=>0x0, &(0x7f0000000540)=0x4)
r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x9, [@float={0x6, 0x0, 0x0, 0x10, 0x2}, @fwd={0xb}, @restrict={0x10, 0x0, 0x0, 0xb, 0x2}, @fwd={0x7}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x1, 0x5}, {0xb}]}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x61, 0x5f, 0x5f]}}, &(0x7f0000000600)=""/179, 0x6d, 0xb3, 0x0, 0x0, 0x10000, @value=r8}, 0x28)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x12, 0x94f, 0xb, 0x2, 0x8011, r4, 0x80000001, '\x00', r11, r12, 0x5, 0x0, 0x1, 0x0, @value=r9}, 0x50)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r7, r13}, 0xc)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r7, r13}, 0xc)
r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', <r15=>0x0})
r16 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r7, 0x0, &(0x7f0000000340)="d90235ece793a62697349f8acb3b35701434e207a6ffd4f0165e911a437b14afafdfd04671f2512a58b5f3adf0b4f93460005d463fba7842046f4e277f329d45d38c5f52ad9ce7561603e259b50f94e08b44b0041d0ae0450a71ea09970b08e9bb125cde016bf68b9da71d9206cda95cce3913339877030a0f78024bfa03b24f6de27d5a11afc83eaa226fbed9972a3fb679655735f6f4bcddb5b604002fd2112eb1f80d4a7fc0e9483b14cced707c92b17a748792e9ed0389f6")
sendmsg$nl_route(r16, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r15], 0x20}}, 0x0)

62.997898ms ago: executing program 3 (id=4715):
r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
setsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000080)="e261bf214e538f3ecee8f9566004073ac12e9047ea2e889437c6cc50c2af5bfb5f", 0x21)
setsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f00000000c0)="08cf72418480188fe55a2ca3749a332192feb6d0db9af9a7f86d66717882dddc8e64c12e8c021bddc841b079dd2532ed9134254a7103435659df58815eef5fcf902c19322130119257cc827493bb4794fd460daabac0fb75da2ee1461f93ce73fa7a5d4f3d79ea85426b7065fff2ed73e1c745f24462544da29ada2a6893d2df1012fa07e7d18b7d16ec2c6e8f817c826defaeea21026943945e425bd68868567088ab323c1a2782a4f84c70aca9fea6cea1031f223c45bdded11858", 0xbc)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$inet(0x2, 0x6, 0x80000000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000200), r2)
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000240))
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000300)={'veth0_virt_wifi\x00', &(0x7f0000000280)=@ethtool_regs={0x4, 0xe7d0, 0x72, "15730317432d94c6b9651b92f0741950097b4d8a7865937d27d2c9b49209ca5c24864071aabf306ea9f4894cf60c97388d1099b5add3f14625f15774e0250da00663418e0d13e6b1ba3ea1962252003eb285e310223636e80a97383a12478e1a6706aecfc2f1bf0248e80b79d3a1130844c0"}})
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000340)={0x1277, 0x0, 0xca0, 0x2, <r3=>0x0}, &(0x7f0000000380)=0x10)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000003c0)={r3, 0x2}, 0x8)
getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000400), &(0x7f0000000440)=0xe)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='blkio.bfq.time\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r2)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x7c, r5, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r4)
sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000800)={&(0x7f0000000700), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r7, 0x400, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x80)
bind$inet6(r4, &(0x7f0000000840)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000880), &(0x7f00000008c0)=0x4)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000900)={0x101, 0x1, 0xfffe, 0x1}, 0x8)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000980)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x54, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x2d}}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x200}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5a}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000)
getpeername$inet(r4, &(0x7f0000000ac0)={0x2, 0x0, @multicast2}, &(0x7f0000000b00)=0x10)

4.178171ms ago: executing program 3 (id=4716):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$igmp6(0xa, 0x3, 0x2)
splice(r0, 0xfffffffffffffffe, r1, 0x0, 0x8, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "12"}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000080)=@hopopts={0x3c, 0xb, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x1, 0x59, [0x2, 0x8, 0x3ff]}}, @generic={0xc3, 0x1f, "b44173c44f7170eea8311b742d616ebb0ec4666081506c754ef999b19b60e9"}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x1, 0x2, 0x1, 0x4, [0x0]}}]}, 0x68)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)

3.240673ms ago: executing program 2 (id=4717):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000400000071106d000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
accept(r1, &(0x7f0000000180)=@nl=@unspec, 0x0) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
unshare(0x6a040000) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) (async)
r3 = socket$kcm(0x10, 0x2, 0x4) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r5, 0x39e)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x2) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0)
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) (async)
close(r10) (async)
socket$unix(0x1, 0x1, 0x0)

2.600357ms ago: executing program 3 (id=4718):
socket$tipc(0x1e, 0x5, 0x0)
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x1}}, 0x10)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
unshare(0x68040200)
unshare(0x40040100)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002536702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r2}, 0x18)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600640006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010001000000e9a6955e03c68bf713fe8e247b752d83cbccfb7fa6bc86c818f52d17a13717d8a1fab39af6953511d413bac48bc4dec5309195ef0764604d6e8dd34ec4485735d33804bc1aad00000000000000000000b76f7a61e708629b0000000004"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000203030f0800"/28], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000340))
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1bcd000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x88)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001"], 0x48)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0xc800)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r7)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1)
sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010000000000000000000f00000008000100015d00"], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000c00000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000200000073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000b00000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f"], 0x104}}, 0x40)
listen(0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 2 (id=4719):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="7d1068a4", 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x308)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0)
close(r4) (async)
close(r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xa1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xa1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0)
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f00000000c0)) (async)
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f00000000c0))
socket$can_bcm(0x1d, 0x2, 0x2) (async)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r7=>0x0})
connect$can_bcm(r6, &(0x7f0000000140)={0x1d, r7}, 0x10) (async)
connect$can_bcm(r6, &(0x7f0000000140)={0x1d, r7}, 0x10)
sendmsg$can_bcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x4, 0x901, 0x80000000, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0xff, 0x2, 0x0, 0x0, "d7c1399ed4fe372efadba3417665ffb2b92af56c860f29402f8111302ae84c15b9dd43bd01000000347f0000592c7c94fc00"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000840}, 0x4040040) (async)
sendmsg$can_bcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x4, 0x901, 0x80000000, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0xff, 0x2, 0x0, 0x0, "d7c1399ed4fe372efadba3417665ffb2b92af56c860f29402f8111302ae84c15b9dd43bd01000000347f0000592c7c94fc00"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000840}, 0x4040040)
clock_gettime(0x0, &(0x7f0000000280)={<r8=>0x0, <r9=>0x0})
pselect6(0x40, &(0x7f0000000180)={0x8, 0x7, 0x80000001, 0x1, 0x100, 0x1, 0x9, 0x6}, &(0x7f00000001c0)={0x490, 0xb, 0x4, 0x8a2, 0x2, 0x7ff, 0x5, 0x8}, &(0x7f0000000200)={0x298, 0x401, 0xa48, 0xfffffffffffff800, 0x840, 0x38, 0x1000, 0x8}, &(0x7f0000000500)={r8, r9+10000000}, &(0x7f0000000580)={&(0x7f0000000540)={[0x5]}, 0x8})
socket$kcm(0xa, 0x2, 0x88)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r11 = openat$cgroup_subtree(r10, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_subtree(r11, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6)
write$cgroup_subtree(r11, &(0x7f0000000500)={[{0x2d, 'pids'}]}, 0x6)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

kernel console output (not intermixed with test programs):

l block 2, async page read
[  309.132162][ T7201] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  309.136048][ T7201] Buffer I/O error on dev nbd0, logical block 3, async page read
[  309.139038][ T7201] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  309.142124][ T7201] Buffer I/O error on dev nbd0, logical block 0, async page read
[  309.145585][ T7201] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  309.149546][ T7201] Buffer I/O error on dev nbd0, logical block 1, async page read
[  309.154469][ T7201] ldm_validate_partition_table(): Disk read failed.
[  309.158943][ T7201] Dev nbd0: unable to read RDB block 0
[  309.162898][ T7201]  nbd0: unable to read partition table
[  309.170505][ T7201] ldm_validate_partition_table(): Disk read failed.
[  309.175327][ T7201] Dev nbd0: unable to read RDB block 0
[  309.180952][ T7201]  nbd0: unable to read partition table
[  310.109969][T17768] dvmrp1: entered allmulticast mode
[  310.128518][T17782] IPv6: sit7: Disabled Multicast RS
[  310.193695][T17791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3250'.
[  310.249947][T17793] tipc: Resetting bearer <eth:team0>
[  310.490576][T17793] tipc: Disabling bearer <eth:team0>
[  310.742907][T17807] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  311.089088][T17814] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3255'.
[  311.520794][T17823] netlink: 'syz.2.3257': attribute type 4 has an invalid length.
[  311.555609][   T61] block nbd2: Possible stuck request ffff8880387e0000: control (read@0,1024B). Runtime 30 seconds
[  311.560145][   T61] block nbd2: Possible stuck request ffff8880387e0200: control (read@1024,1024B). Runtime 30 seconds
[  311.564490][   T61] block nbd2: Possible stuck request ffff8880387e0400: control (read@2048,1024B). Runtime 30 seconds
[  311.569117][   T61] block nbd2: Possible stuck request ffff8880387e0600: control (read@3072,1024B). Runtime 30 seconds
[  311.589548][T17825] netlink: 'syz.2.3258': attribute type 4 has an invalid length.
[  311.616858][T17827] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3259'.
[  311.622412][T17827] netlink: 'syz.2.3259': attribute type 58 has an invalid length.
[  311.625919][T17827] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3259'.
[  311.758986][T17839] 8021q: adding VLAN 0 to HW filter on device bond3
[  311.762349][T17839] bridge0: port 1(bond3) entered blocking state
[  311.764486][T17839] bridge0: port 1(bond3) entered disabled state
[  311.767742][T17839] bond3: entered allmulticast mode
[  311.770435][T17839] bond3: entered promiscuous mode
[  311.772715][T17839] bridge0: port 1(bond3) entered blocking state
[  311.775044][T17839] bridge0: port 1(bond3) entered listening state
[  311.779978][ T6382] bridge0: port 1(bond3) entered disabled state
[  311.794988][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  311.839940][T17847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3265'.
[  312.034724][ T5748] page_pool_release_retry() stalled pool shutdown: id 25, 51 inflight 180 sec
[  312.048115][T17853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3268'.
[  312.051051][T17853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3268'.
[  312.054032][T17853] netlink: 'syz.3.3268': attribute type 12 has an invalid length.
[  312.063836][T17853] netlink: 'syz.3.3268': attribute type 11 has an invalid length.
[  312.073270][T17854] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  312.401916][T17877] netlink: 'syz.3.3275': attribute type 1 has an invalid length.
[  312.416189][T17877] 8021q: adding VLAN 0 to HW filter on device bond4
[  312.437269][T17877] veth9: entered promiscuous mode
[  312.442986][T17877] bond4: (slave veth9): Enslaving as an active interface with a down link
[  312.448703][T17877] erspan0: entered allmulticast mode
[  312.649990][ T5907] IPVS: starting estimator thread 0...
[  312.744666][T17885] IPVS: using max 77 ests per chain, 184800 per kthread
[  312.992678][ T9971] IPVS: stop unused estimator thread 0...
[  313.024973][T17922] mac80211_hwsim hwsim43 wlan1: entered allmulticast mode
[  313.030098][T17922] netlink: 'syz.3.3282': attribute type 10 has an invalid length.
[  313.032957][T17922] mac80211_hwsim hwsim43 wlan1: left allmulticast mode
[  313.037098][T17922] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  313.040129][T17922] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  313.093444][T17927] netlink: 'syz.2.3284': attribute type 1 has an invalid length.
[  313.103869][T17927] vti1: entered promiscuous mode
[  313.183409][T17933] netlink: 'syz.2.3286': attribute type 39 has an invalid length.
[  313.294935][T17936] bridge13: entered promiscuous mode
[  313.880892][T17939] netlink: 'syz.3.3288': attribute type 4 has an invalid length.
[  313.890616][T17939] netlink: 'syz.3.3288': attribute type 4 has an invalid length.
[  313.937903][T17941] tipc: Resetting bearer <eth:gre0>
[  313.959703][T17941] veth1_to_team: left allmulticast mode
[  313.962916][T17941] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  313.966814][T17941] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  313.973089][T17941] ip6tnl1: left allmulticast mode
[  313.980494][T17941] sit4: left allmulticast mode
[  313.982724][T17941] macvlan4: left promiscuous mode
[  313.984482][T17941] macvlan4: left allmulticast mode
[  313.986696][T17941] gtp0: left promiscuous mode
[  313.988769][T17941] gtp0: left allmulticast mode
[  314.006310][T17941] vti1: left promiscuous mode
[  314.012713][T17950] __nla_validate_parse: 7 callbacks suppressed
[  314.012723][T17950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3291'.
[  314.088192][T17957] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3293'.
[  314.094877][T17957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3293'.
[  314.206797][T17963] veth1: entered allmulticast mode
[  314.219695][T17964] veth11: entered allmulticast mode
[  314.224161][T17963] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3295'.
[  314.224730][T17964] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3295'.
[  314.273019][T17972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3296'.
[  314.273611][T17968] netlink: 'syz.3.3297': attribute type 32 has an invalid length.
[  314.280038][T17968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3297'.
[  314.283543][T17968] (unnamed net_device) (uninitialized): option coupled_control: invalid value (114)
[  314.324462][T17974] sctp: [Deprecated]: syz.3.3298 (pid 17974) Use of int in max_burst socket option.
[  314.324462][T17974] Use struct sctp_assoc_value instead
[  314.411244][T17978] pim6reg: entered allmulticast mode
[  314.419542][T17990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3304'.
[  314.433574][T17978] pim6reg: left allmulticast mode
[  314.452899][T17987] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3303'.
[  314.461230][T17987] netlink: 212924 bytes leftover after parsing attributes in process `syz.2.3303'.
[  314.525106][T18003] mac80211_hwsim hwsim43 wlan1: entered allmulticast mode
[  314.533184][T18003] netlink: 'syz.3.3306': attribute type 10 has an invalid length.
[  314.554997][T18003] mac80211_hwsim hwsim43 wlan1: left allmulticast mode
[  314.563246][T18002] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  314.567640][T18002] syzkaller0: entered promiscuous mode
[  314.570038][T18002] syzkaller0: entered allmulticast mode
[  314.574941][T18003] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  314.578974][T18003] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  314.631074][T18010] mac80211_hwsim hwsim43 wlan1: entered allmulticast mode
[  314.718162][T18022] netlink: 'syz.3.3310': attribute type 5 has an invalid length.
[  314.807344][T18032] 8021q: adding VLAN 0 to HW filter on device bond20
[  314.998532][T18027] netlink: 'syz.3.3312': attribute type 13 has an invalid length.
[  315.001132][T18027] netlink: 'syz.3.3312': attribute type 17 has an invalid length.
[  315.007914][T18027] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  315.042950][T18054] netlink: 'syz.2.3315': attribute type 13 has an invalid length.
[  315.055090][T18054] netlink: 'syz.2.3315': attribute type 17 has an invalid length.
[  315.161440][T18054] 8021q: adding VLAN 0 to HW filter on device team0
[  315.183720][T18054] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  315.267967][T18076] bridge9: port 1(veth11) entered blocking state
[  315.270247][T18076] bridge9: port 1(veth11) entered disabled state
[  315.272423][T18076] veth11: entered allmulticast mode
[  315.277897][T18076] veth11: entered promiscuous mode
[  315.281680][T18078] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  315.286869][T18074] bridge9: port 2(veth0_to_bond) entered blocking state
[  315.289162][T18074] bridge9: port 2(veth0_to_bond) entered disabled state
[  315.291949][T18074] veth0_to_bond: entered allmulticast mode
[  315.296815][T18074] veth0_to_bond: entered promiscuous mode
[  315.318791][T18082] syzkaller0: mtu less than device minimum
[  315.412869][T18094] erspan0: entered promiscuous mode
[  315.416607][T18094] batman_adv: batadv0: Adding interface: macvlan0
[  315.418823][T18094] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  315.434736][T18094] batman_adv: batadv0: Interface activated: macvlan0
[  315.629285][T18117] netlink: 'syz.0.3330': attribute type 1 has an invalid length.
[  315.656478][T18117] veth11: entered promiscuous mode
[  315.661314][T18117] bond14: (slave veth11): Enslaving as a backup interface with a down link
[  315.668659][T18117] bond10: (slave veth5): Releasing backup interface
[  315.672482][T18117] bond0: (slave geneve4): Releasing active interface
[  315.674972][T18117] bond0: (slave geneve4): the permanent HWaddr of slave - b2:ef:43:d2:37:c0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  315.681762][T18117] bond11: (slave veth7): Releasing active interface
[  315.686575][T18117] bond0: (slave bond12): Releasing active interface
[  315.690557][T18117] bond14: (slave veth11): Releasing backup interface
[  315.825936][T18122] block nbd4: server does not support multiple connections per device.
[  315.829880][T18122] block nbd4: shutting down sockets
[  315.997729][T18143] bpq0: left promiscuous mode
[  316.062759][T18154] lo speed is unknown, defaulting to 1000
[  316.068143][T18154] lo speed is unknown, defaulting to 1000
[  316.074400][T18154] lo speed is unknown, defaulting to 1000
[  316.087302][T18154] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  316.111006][T18154] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  316.134360][T18154] lo speed is unknown, defaulting to 1000
[  316.141540][T18154] lo speed is unknown, defaulting to 1000
[  316.146154][T18154] lo speed is unknown, defaulting to 1000
[  316.149222][T18154] lo speed is unknown, defaulting to 1000
[  316.440213][T18186] syzkaller1: entered promiscuous mode
[  316.440304][T18182] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  316.442693][T18186] syzkaller1: entered allmulticast mode
[  316.446019][T18182] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  316.771162][T18213] tipc: Trying to set illegal importance in message
[  316.882519][T18236] lo speed is unknown, defaulting to 1000
[  316.898083][T18234] lo speed is unknown, defaulting to 1000
[  316.948560][T18241] lo speed is unknown, defaulting to 1000
[  316.992061][T18244] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  317.184701][T18266] wg1: entered promiscuous mode
[  317.186741][T18266] wg1: entered allmulticast mode
[  317.358313][T18279] lo speed is unknown, defaulting to 1000
[  317.447863][T18281] lo speed is unknown, defaulting to 1000
[  317.471298][T18279] gre0: entered promiscuous mode
[  317.473337][T18279] gre0: entered allmulticast mode
[  317.718337][T18284] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  317.721994][T18284] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  318.393042][T18322] lo speed is unknown, defaulting to 1000
[  318.587176][T18339] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  318.590296][T18339] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  318.592986][T18339] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  318.605288][   T61] block nbd3: Possible stuck request ffff888021e98000: control (read@0,4096B). Runtime 60 seconds
[  318.706992][T18350] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  318.781776][T18358] ip6gre1: entered allmulticast mode
[  318.838179][T18365] sch_tbf: burst 240 is lower than device lo mtu (327700) !
[  318.914892][    T9] page_pool_release_retry() stalled pool shutdown: id 26, 51 inflight 181 sec
[  319.031354][T18388] netlink: 'syz.0.3408': attribute type 11 has an invalid length.
[  319.047827][T18385] __nla_validate_parse: 70 callbacks suppressed
[  319.047837][T18385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3407'.
[  319.061838][T18384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3407'.
[  319.224078][T18399] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3412'.
[  319.276481][T18406] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  319.282780][T18407] netlink: 252 bytes leftover after parsing attributes in process `syz.2.3414'.
[  319.348726][T18413] validate_nla: 9 callbacks suppressed
[  319.348735][T18413] netlink: 'syz.2.3416': attribute type 1 has an invalid length.
[  319.397200][   T47] page_pool_release_retry() stalled pool shutdown: id 27, 51 inflight 181 sec
[  319.443379][T18422] netlink: 'syz.2.3419': attribute type 9 has an invalid length.
[  319.462117][T18422] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  319.517543][T18428] openvswitch: netlink: Duplicate or invalid key (type 0).
[  319.520135][T18428] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  319.528824][T18428] netlink: 'syz.2.3422': attribute type 1 has an invalid length.
[  319.553120][T18428] veth13: entered promiscuous mode
[  319.557742][T18428] bond25: (slave veth13): Enslaving as a backup interface with a down link
[  319.623980][T18438] netlink: 'syz.2.3424': attribute type 2 has an invalid length.
[  319.632736][T18438] : entered promiscuous mode
[  319.939317][T18460] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  319.943242][T18460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3431'.
[  319.979975][T18462] bridge0: port 1(erspan0) entered blocking state
[  319.982706][T18462] bridge0: port 1(erspan0) entered disabled state
[  319.985249][T18462] erspan0: entered allmulticast mode
[  319.987905][T18462] erspan0: left allmulticast mode
[  320.092054][T18471] netlink: 'syz.2.3434': attribute type 1 has an invalid length.
[  320.263079][T18479] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  320.407087][T18490] pim6reg: left allmulticast mode
[  320.468546][T18490] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3439'.
[  320.635848][T18501] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3441'.
[  320.640068][T18501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3441'.
[  320.686032][T18506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3440'.
[  320.696488][T18509] IPv6: sit8: Disabled Multicast RS
[  320.698759][T18509] sit8: entered allmulticast mode
[  320.833737][T18522] openvswitch: netlink: IPv6 tunnel dst address is zero
[  321.057913][T18542] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3451'.
[  321.218668][    C0] vcan0: j1939_tp_txtimer: 0xffff888029d1b000: tx aborted with unknown reason: -2
[  321.224097][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802874ac00: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250)
[  321.233114][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888029d1b000: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250)
[  321.602928][T18569] netlink: 'syz.0.3459': attribute type 1 has an invalid length.
[  321.606755][T18571] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20003
[  321.637172][T18569] 8021q: adding VLAN 0 to HW filter on device bond15
[  321.653469][T18569] veth13: entered promiscuous mode
[  321.659071][T18569] bond15: (slave veth13): Enslaving as a backup interface with a down link
[  321.666406][T18569] bond15: (slave veth13): Releasing backup interface
[  321.901150][T18594] netlink: 'syz.0.3464': attribute type 29 has an invalid length.
[  321.949919][   T33] audit: type=1800 audit(1754981692.498:4): pid=18577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3461" name="cgroup.controllers" dev="tmpfs" ino=6079 res=0 errno=0
[  322.095103][T18599] bridge0: port 2(macvlan4) entered blocking state
[  322.101256][T18599] bridge0: port 2(macvlan4) entered disabled state
[  322.103661][T18599] macvlan4: entered allmulticast mode
[  322.108932][T18599] bridge0: entered allmulticast mode
[  322.113880][T18599] macvlan4: left allmulticast mode
[  322.117875][T18599] bridge0: left allmulticast mode
[  322.190344][T18605] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  322.413769][T18635] erspan0: left allmulticast mode
[  322.468569][T18635] mac80211_hwsim hwsim43 wlan1: left allmulticast mode
[  322.472646][T18635] mac80211_hwsim hwsim43 syzkaller0: left promiscuous mode
[  322.476003][T18635] mac80211_hwsim hwsim43 syzkaller0: left allmulticast mode
[  322.478479][T18635] xfrm1: left allmulticast mode
[  322.480358][T18635] ip6gre1: left allmulticast mode
[  322.488105][T18635] vlan3: left allmulticast mode
[  322.491468][T18635] bond0: left promiscuous mode
[  322.493758][T18635] bond1: left promiscuous mode
[  322.498127][T18635] batadv1: left promiscuous mode
[  322.499737][T18635] batadv1: left allmulticast mode
[  322.503134][T18635] bond2: left promiscuous mode
[  322.510386][T18635] batadv2: left promiscuous mode
[  322.512002][T18635] batadv2: left allmulticast mode
[  322.531182][T18635] veth9: left promiscuous mode
[  322.684463][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  322.690207][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  322.700232][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  322.702796][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  322.809070][T18675] netlink: 'syz.2.3486': attribute type 21 has an invalid length.
[  322.898906][T18679] netlink: zone id is out of range
[  322.901058][T18679] netlink: zone id is out of range
[  323.231106][T18707] netlink: 'syz.2.3494': attribute type 1 has an invalid length.
[  323.248458][T18707] bond26: entered promiscuous mode
[  323.250963][T18707] 8021q: adding VLAN 0 to HW filter on device bond26
[  323.258106][T18707] batadv2: entered promiscuous mode
[  323.259927][T18707] batadv2: entered allmulticast mode
[  323.262536][T18707] 8021q: adding VLAN 0 to HW filter on device batadv2
[  323.268854][T18707] bond26: (slave batadv2): making interface the new active one
[  323.272082][T18707] bond26: (slave batadv2): Enslaving as an active interface with an up link
[  323.500293][T18728] mac80211_hwsim hwsim44 wlan1: entered allmulticast mode
[  323.554422][T18740] netlink: 'syz.2.3501': attribute type 3 has an invalid length.
[  323.565209][ T5907] page_pool_release_retry() stalled pool shutdown: id 28, 51 inflight 181 sec
[  323.578040][T18740] ip_vti0: entered allmulticast mode
[  323.589421][T18740] gre0: left promiscuous mode
[  323.591071][T18740] gre0: left allmulticast mode
[  323.608412][T18740] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  323.615904][    T9] lo speed is unknown, defaulting to 1000
[  323.617398][T18739] ip_vti0: left allmulticast mode
[  323.683847][T18749] lo speed is unknown, defaulting to 1000
[  323.905401][T18786] openvswitch: netlink: Duplicate or invalid key (type 0).
[  323.909795][T18786] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  323.970676][T18791] batman_adv: batadv0: Interface deactivated: macvlan0
[  323.972935][T18791] batman_adv: batadv0: Removing interface: macvlan0
[  323.977094][T18791] bond25: (slave veth13): Releasing backup interface
[  323.982610][T18791] bond26: (slave batadv2): Releasing active interface
[  323.992529][T18791] team0: Mode changed to "broadcast"
[  323.995710][T18791] team0: Device vlan0 is already an upper device of the team interface
[  323.998626][T18791] tipc: Enabled bearer <eth:team0>, priority 0
[  324.003084][T18793] mac80211_hwsim hwsim43 syzkaller0: entered promiscuous mode
[  324.006238][T18793] mac80211_hwsim hwsim43 syzkaller0: entered allmulticast mode
[  324.082330][T18805] syzkaller1: entered promiscuous mode
[  324.094456][T18805] syzkaller1: entered allmulticast mode
[  324.239919][T18819] __nla_validate_parse: 19 callbacks suppressed
[  324.239929][T18819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3524'.
[  324.523823][T18845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3528'.
[  324.530704][T18845] bond3: left allmulticast mode
[  324.532367][T18845] bond3: left promiscuous mode
[  324.534251][T18845] bridge0: port 1(bond3) entered disabled state
[  324.710370][T18855] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  324.760726][T18860] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3534'.
[  324.764340][T18860] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3534'.
[  324.860641][T18868] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  324.864293][T18868] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  324.867487][T18868] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  324.883064][T18868] mac80211_hwsim hwsim44 wlan1: left allmulticast mode
[  324.883764][T18872] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  324.890275][T18868] veth11: left promiscuous mode
[  324.894411][T18868] veth13: left promiscuous mode
[  324.904687][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  324.907468][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  324.910580][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  324.918514][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  325.047792][T18889] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3543'.
[  325.061661][T18889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3543'.
[  325.203300][T18901] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3548'.
[  325.208629][T18907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3549'.
[  325.223597][T18907] 8021q: adding VLAN 0 to HW filter on device bond27
[  325.277949][T18914] pimreg: entered allmulticast mode
[  325.281389][T18915] pimreg: left allmulticast mode
[  325.284432][T18914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3552'.
[  325.351753][T18920] tap0: tun_chr_ioctl cmd 1074025678
[  325.354003][T18920] tap0: group set to 0
[  325.647234][T18955] netlink: 161716 bytes leftover after parsing attributes in process `syz.0.3562'.
[  325.650339][T18955] netlink: zone id is out of range
[  325.652029][T18955] netlink: zone id is out of range
[  325.653775][T18955] netlink: zone id is out of range
[  325.655726][T18955] netlink: zone id is out of range
[  325.703797][T18959] IPVS: persistence engine module ip_vs_pe_ not found
[  325.890195][T18970] lo speed is unknown, defaulting to 1000
[  325.988289][T18970] validate_nla: 3 callbacks suppressed
[  325.988306][T18970] netlink: 'syz.0.3567': attribute type 13 has an invalid length.
[  326.162237][T18986] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  326.237061][T18996] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  326.240454][T18996] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  326.242916][T18996] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  326.441287][T19012] netlink: 'syz.3.3579': attribute type 12 has an invalid length.
[  326.760710][T19042] netlink: 'syz.2.3586': attribute type 15 has an invalid length.
[  327.018828][T19059] netlink: 'syz.2.3592': attribute type 1 has an invalid length.
[  327.052215][T19061] veth1_to_team: entered allmulticast mode
[  327.196798][T19069] IPVS: Unknown mcast interface: vcan0
[  327.286714][T19074] pim6reg: entered allmulticast mode
[  327.532758][T19086] netlink: 'syz.2.3599': attribute type 3 has an invalid length.
[  327.842249][T19124] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  327.934035][T19135] tipc: Enabling of bearer <udp:sy{> rejected, max 3 bearers permitted
[  328.023490][T19146] lo speed is unknown, defaulting to 1000
[  328.156309][T19146] netlink: 'syz.0.3616': attribute type 13 has an invalid length.
[  328.489286][T19159] netlink: 'syz.2.3621': attribute type 3 has an invalid length.
[  328.549413][T19169] unsupported nlmsg_type 40
[  328.666969][T19179] netlink: 'syz.2.3626': attribute type 11 has an invalid length.
[  328.674778][    T9] page_pool_release_retry() stalled pool shutdown: id 35, 51 inflight 181 sec
[  328.923210][T19188] syzkaller0: left promiscuous mode
[  328.927462][T19188] syzkaller0: left allmulticast mode
[  329.277978][T19206] lo speed is unknown, defaulting to 1000
[  329.348584][T19209] __nla_validate_parse: 24 callbacks suppressed
[  329.348594][T19209] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3635'.
[  329.356122][T19209] netlink: 'syz.0.3635': attribute type 9 has an invalid length.
[  329.358782][T19209] netlink: 'syz.0.3635': attribute type 6 has an invalid length.
[  329.361434][T19209] netlink: 'syz.0.3635': attribute type 7 has an invalid length.
[  329.786358][T19219] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3638'.
[  329.930609][T19224] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  329.973965][T19224] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3640'.
[  330.451374][T19253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3648'.
[  330.642670][T19259] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3651'.
[  330.648781][T19263] netlink: 211872 bytes leftover after parsing attributes in process `syz.0.3651'.
[  330.651909][T19263] net_ratelimit: 21 callbacks suppressed
[  330.651916][T19263] openvswitch: netlink: Message has 5 unknown bytes.
[  330.659977][T19263] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3651'.
[  330.880020][T19290] delete_channel: no stack
[  330.915855][T19292] lo speed is unknown, defaulting to 1000
[  331.072538][T19308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3663'.
[  331.175716][T19315] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3664'.
[  331.408140][T19329] lo speed is unknown, defaulting to 1000
[  331.445504][T19329] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  331.680328][T19344] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3673'.
[  331.759192][T19350] syzkaller0: entered promiscuous mode
[  331.761556][T19350] syzkaller0: entered allmulticast mode
[  331.814240][T19358] validate_nla: 4 callbacks suppressed
[  331.814254][T19358] netlink: 'syz.3.3678': attribute type 1 has an invalid length.
[  331.862956][T19358] bond6: entered promiscuous mode
[  331.865544][T19358] 8021q: adding VLAN 0 to HW filter on device bond6
[  331.904085][T19356] 8021q: adding VLAN 0 to HW filter on device bond6
[  331.908364][T19356] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address
[  331.912083][T19356] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  331.918994][T19356] bond6: (slave wireguard0): making interface the new active one
[  331.921557][T19356] wireguard0: entered promiscuous mode
[  331.924109][T19356] bond6: (slave wireguard0): Enslaving as an active interface with an up link
[  331.950151][T19367] lo speed is unknown, defaulting to 1000
[  331.985164][T19372] netlink: 'syz.3.3682': attribute type 4 has an invalid length.
[  332.009017][T19376] netlink: 'syz.0.3683': attribute type 1 has an invalid length.
[  332.017224][T19367] veth1: entered promiscuous mode
[  332.037150][T19376] bond16: entered promiscuous mode
[  332.039206][T19376] 8021q: adding VLAN 0 to HW filter on device bond16
[  332.052151][ T5312] block nbd1: Possible stuck request ffff888021df8000: control (read@0,1024B). Runtime 270 seconds
[  332.057648][ T5312] block nbd1: Possible stuck request ffff888021df8200: control (read@1024,1024B). Runtime 270 seconds
[  332.061996][ T5312] block nbd1: Possible stuck request ffff888021df8400: control (read@2048,1024B). Runtime 270 seconds
[  332.066429][T19376] 8021q: adding VLAN 0 to HW filter on device bond16
[  332.069011][T19376] bond16: (slave wireguard2): The slave device specified does not support setting the MAC address
[  332.069482][ T5312] block nbd1: Possible stuck request ffff888021df8600: control (read@3072,1024B). Runtime 270 seconds
[  332.077885][T19376] bond16: (slave wireguard2): Setting fail_over_mac to active for active-backup mode
[  332.085344][T19376] bond16: (slave wireguard2): making interface the new active one
[  332.088518][T19376] wireguard2: entered promiscuous mode
[  332.091170][T19376] bond16: (slave wireguard2): Enslaving as an active interface with an up link
[  332.155979][T19376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  332.159028][T19376] IPv6: NLM_F_CREATE should be set when creating new route
[  332.162106][T19376] IPv6: NLM_F_CREATE should be set when creating new route
[  332.165415][T19376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  332.875921][T19396] netlink: 'syz.3.3687': attribute type 1 has an invalid length.
[  333.024336][T19413] netlink: 'syz.2.3693': attribute type 7 has an invalid length.
[  333.061615][T19417] netem: change failed
[  333.112880][T19424] netlink: 'syz.2.3696': attribute type 5 has an invalid length.
[  333.151527][T19426] openvswitch: netlink: nsh attr 7939 is out of range max 3
[  333.157602][T19426] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  333.181620][T19428] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  333.199807][T19431] netlink: 'syz.0.3699': attribute type 3 has an invalid length.
[  333.220843][T19431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  333.255579][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  333.279363][T19436] lo speed is unknown, defaulting to 1000
[  333.287934][T19439] netlink: 'syz.2.3702': attribute type 1 has an invalid length.
[  333.293876][T19439] netlink: 'syz.2.3702': attribute type 1 has an invalid length.
[  333.308884][T19439] 8021q: adding VLAN 0 to HW filter on device bond28
[  333.395187][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  333.399235][T19444] openvswitch: netlink: Flow actions attr not present in new flow.
[  333.522480][T19448] wg1 speed is unknown, defaulting to 1000
[  333.525463][T19448] wg1 speed is unknown, defaulting to 1000
[  333.528605][T19448] wg1 speed is unknown, defaulting to 1000
[  333.535608][ T9971] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  333.540539][T19448] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  333.558464][T19448] wg1 speed is unknown, defaulting to 1000
[  333.563258][T19448] wg1 speed is unknown, defaulting to 1000
[  333.567446][T19448] wg1 speed is unknown, defaulting to 1000
[  333.571352][T19448] wg1 speed is unknown, defaulting to 1000
[  333.575722][T19448] wg1 speed is unknown, defaulting to 1000
[  333.893244][T19452] openvswitch: netlink: nsh attr 7939 is out of range max 3
[  333.897631][T19452] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  333.941110][T19451] wg1: left promiscuous mode
[  333.943407][T19451] wg1: left allmulticast mode
[  333.949188][T19451] veth1_to_team: left allmulticast mode
[  333.954320][T19451] vlan0: left promiscuous mode
[  333.960386][T19451] tipc: Resetting bearer <eth:syzkaller0>
[  333.963579][T19451] syzkaller0: left promiscuous mode
[  333.965849][T19451] syzkaller0: left allmulticast mode
[  333.972110][T19451] vti1: left promiscuous mode
[  333.975003][T19451] bridge13: left promiscuous mode
[  333.976978][T19451] veth1: left allmulticast mode
[  333.978774][T19451] veth11: left allmulticast mode
[  333.982547][T19451] ip6gre1: left allmulticast mode
[  333.985639][T19451] veth13: left promiscuous mode
[  333.988746][T19451] bond26: left promiscuous mode
[  333.991362][T19451] batadv2: left promiscuous mode
[  333.992938][T19451] batadv2: left allmulticast mode
[  333.999317][ T5907] wg1 speed is unknown, defaulting to 1000
[  334.001969][ T5907] syz0: Port: 1 Link DOWN
[  334.004226][T19455] bridge0: port 1(vlan2) entered blocking state
[  334.006719][T19455] bridge0: port 1(vlan2) entered disabled state
[  334.008792][T19455] vlan2: entered allmulticast mode
[  334.010483][T19455] bridge0: entered allmulticast mode
[  334.010925][   T47] lo speed is unknown, defaulting to 1000
[  334.017239][T19455] vlan2: left allmulticast mode
[  334.018916][   T47] syz1: Port: 1 Link DOWN
[  334.018919][T19455] bridge0: left allmulticast mode
[  334.052431][T19458] mac80211_hwsim hwsim43 syzkaller0: left promiscuous mode
[  334.058048][T19458] mac80211_hwsim hwsim43 syzkaller0: left allmulticast mode
[  334.064168][T19455] tipc: Resetting bearer <eth:syzkaller0>
[  334.595453][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  334.598328][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  334.837453][T19502] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  334.840834][T19502] mac80211_hwsim hwsim43 syzkaller0: entered promiscuous mode
[  334.843532][T19502] mac80211_hwsim hwsim43 syzkaller0: entered allmulticast mode
[  334.849850][T19502] tipc: Resetting bearer <eth:syzkaller0>
[  334.908646][T19504] 8021q: adding VLAN 0 to HW filter on device bond7
[  334.919831][ T5748] page_pool_release_retry() stalled pool shutdown: id 40, 51 inflight 180 sec
[  334.965253][ T5748] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  335.080534][T19508] lo speed is unknown, defaulting to 1000
[  335.084258][T19508] wg1 speed is unknown, defaulting to 1000
[  335.121404][T19509] netlink: 'syz.2.3719': attribute type 21 has an invalid length.
[  335.124240][T19509] __nla_validate_parse: 17 callbacks suppressed
[  335.124247][T19509] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3719'.
[  335.177967][T19513] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  335.331441][T19518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3722'.
[  335.335440][T19517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3722'.
[  335.340123][T19517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3722'.
[  335.414025][T19530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3726'.
[  335.492618][T19533] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  335.596975][T19545] ip6gretap3: entered promiscuous mode
[  335.637543][T19542] lo speed is unknown, defaulting to 1000
[  335.642803][T19542] wg1 speed is unknown, defaulting to 1000
[  335.678664][T19552] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  335.705531][ T5748] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  335.909372][T19574] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3734'.
[  335.912787][T19574] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3734'.
[  336.190911][T19607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3744'.
[  336.249251][ T5748] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  336.271092][T19615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3747'.
[  336.327813][T19619] bond8: entered promiscuous mode
[  336.330188][T19619] 8021q: adding VLAN 0 to HW filter on device bond8
[  336.338597][T19619] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3748'.
[  336.348223][T19619] batadv3: entered promiscuous mode
[  336.350214][T19619] batadv3: entered allmulticast mode
[  336.353427][T19619] 8021q: adding VLAN 0 to HW filter on device batadv3
[  336.358666][T19619] bond8: (slave batadv3): making interface the new active one
[  336.362207][T19619] bond8: (slave batadv3): Enslaving as an active interface with an up link
[  336.537554][T19637] bpq0: entered promiscuous mode
[  336.597804][T19640] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  336.721695][T19646] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  336.816590][T19666] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  336.821562][T19666] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  336.826638][T19666] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  336.831489][T19666] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  336.838615][T19666] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  336.847852][T19666] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  336.855461][T19666] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  336.865857][T19666] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  336.872383][T19666] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  336.882496][T19666] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  336.889386][T19666] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  336.895891][T19666] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  336.902264][T19666] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  336.915715][T19663] batman_adv: batadv0: Adding interface: ip6gretap1
[  336.918755][T19663] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  336.929728][T19663] batman_adv: batadv0: Interface activated: ip6gretap1
[  336.933743][T19666] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  336.958638][T19666] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  336.969654][T19666] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  336.975158][T19666] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  336.983643][T19666] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  336.988991][T19666] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  336.993731][T19666] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  337.001613][T19666] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  337.006590][T19666] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  337.020592][T19666] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  337.026000][T19666] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  337.030865][T19666] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  337.036792][T19666] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  337.045045][T19666] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  337.049787][T19666] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  337.054771][T19666] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  337.059909][T19666] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  337.064908][T19666] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  337.070472][T19666] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  337.077684][T19666] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  337.162233][T19686] validate_nla: 5 callbacks suppressed
[  337.162246][T19686] netlink: 'syz.2.3767': attribute type 1 has an invalid length.
[  337.188531][T19686] 8021q: adding VLAN 0 to HW filter on device bond29
[  337.203319][T19686] 8021q: adding VLAN 0 to HW filter on device bond29
[  337.207033][T19686] bond29: (slave vcan0): The slave device specified does not support setting the MAC address
[  337.211842][T19686] bond29: (slave vcan0): Error -95 calling set_mac_address
[  337.221514][T19688] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  337.251115][T19692] syzkaller1: entered promiscuous mode
[  337.253221][T19692] syzkaller1: entered allmulticast mode
[  337.811948][T19724] 8021q: adding VLAN 0 to HW filter on device bond9
[  337.832691][T19724] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  337.839380][T19724] bond9: (slave macvlan4): Enslaving as a backup interface with a down link
[  338.021384][T19738] netlink: 'syz.3.3781': attribute type 1 has an invalid length.
[  338.062800][T19740] netlink: 'syz.2.3782': attribute type 11 has an invalid length.
[  338.183308][T19751] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  338.210237][T19751] bond30: entered promiscuous mode
[  338.214482][T19751] bond30: entered allmulticast mode
[  338.217161][T19751] 8021q: adding VLAN 0 to HW filter on device bond30
[  338.402760][T19767] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  338.411792][T19770] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  338.444686][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  338.728162][T19792] erspan0: left promiscuous mode
[  338.746412][T19792] 8021q: adding VLAN 0 to HW filter on device team0
[  338.749800][T19792] tipc: Resetting bearer <eth:team0>
[  338.752196][T19792] tipc: Resetting bearer <eth:team0>
[  338.757642][T19792] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  338.764056][ T5748] lo speed is unknown, defaulting to 1000
[  338.767106][ T5748] syz1: Port: 1 Link ACTIVE
[  339.172222][ T5294] udevd[5294]: worker [7200] /devices/virtual/block/nbd3 is taking a long time
[  339.248938][T19799] lo speed is unknown, defaulting to 1000
[  339.252681][T19799] wg1 speed is unknown, defaulting to 1000
[  339.342618][T19806] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  339.539835][T19819] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  339.588192][T19821] netlink: 'syz.2.3806': attribute type 11 has an invalid length.
[  339.767757][T19832] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  339.771093][T19832] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  339.939068][T19835] netlink: zone id is out of range
[  339.943261][T19835] netlink: zone id is out of range
[  339.947372][T19835] netlink: zone id is out of range
[  339.949145][T19835] netlink: zone id is out of range
[  339.951215][T19835] netlink: zone id is out of range
[  339.952901][T19835] netlink: zone id is out of range
[  339.954862][T19835] netlink: zone id is out of range
[  339.956607][T19835] netlink: zone id is out of range
[  340.527781][T19863] netlink: 'syz.0.3818': attribute type 3 has an invalid length.
[  340.626250][T19872] siw: device registration error -23
[  340.633103][T19872] __nla_validate_parse: 17 callbacks suppressed
[  340.633113][T19872] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3819'.
[  340.672359][T19874] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.3820'.
[  340.723663][T19877] netlink: 'syz.2.3821': attribute type 1 has an invalid length.
[  340.731797][T19877] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.3821'.
[  340.818233][T19883] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  340.821299][T19883] IPv6: NLM_F_CREATE should be set when creating new route
[  340.867170][T19887] lo speed is unknown, defaulting to 1000
[  340.870869][T19887] wg1 speed is unknown, defaulting to 1000
[  341.004384][T19894] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3827'.
[  341.042783][T19887] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3826'.
[  341.342978][T19919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3835'.
[  341.347875][T19919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3835'.
[  341.350778][T19919] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3835'.
[  341.363137][T19918] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3834'.
[  341.642010][   T61] block nbd2: Possible stuck request ffff8880387e0000: control (read@0,1024B). Runtime 60 seconds
[  341.646617][   T61] block nbd2: Possible stuck request ffff8880387e0200: control (read@1024,1024B). Runtime 60 seconds
[  341.651031][   T61] block nbd2: Possible stuck request ffff8880387e0400: control (read@2048,1024B). Runtime 60 seconds
[  341.655638][   T61] block nbd2: Possible stuck request ffff8880387e0600: control (read@3072,1024B). Runtime 60 seconds
[  341.699416][T19938] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3839'.
[  341.861883][T19950] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  341.865095][T19950] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  341.868594][T19950] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  341.871798][T19950] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  341.879646][T19950] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  341.883432][T19950] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  341.887858][T19950] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  341.891436][T19950] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  341.905178][T19950] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  341.908834][T19950] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  341.915940][T19950] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  341.919679][T19950] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  341.924086][T19950] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  341.927963][T19950] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  341.932473][T19950] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  341.937245][T19950] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  341.941499][T19952] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  341.944962][T19950] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  341.949443][T19950] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  341.954017][T19952] syzkaller0: entered promiscuous mode
[  341.958963][T19952] syzkaller0: entered allmulticast mode
[  341.962539][T19950] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  341.966554][T19950] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  341.970850][T19950] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  341.974454][T19950] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  341.977958][T19950] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  341.981021][T19950] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  341.986593][T19950] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  341.990253][T19950] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  341.994250][T19950] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  341.997220][T19950] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  342.000537][T19950] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  342.003809][T19950] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  342.007416][T19950] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  342.010741][T19950] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  342.015263][T19950] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  342.019122][T19950] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  342.023514][T19950] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  342.027665][T19950] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  342.032304][T19950] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  342.035953][T19950] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  342.039366][T19950] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  342.042362][T19950] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  342.046512][T19950] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  342.049428][T19950] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  342.052993][T19950] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  342.056146][T19950] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  342.059542][T19950] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  342.062482][T19950] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  342.066179][T19950] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  342.069104][T19950] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  342.073647][T19950] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  342.077068][T19950] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  342.080308][T19950] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  342.083044][T19950] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  342.086513][T19950] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  342.089431][T19950] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  342.092685][T19950] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  342.095705][T19950] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  342.099361][T19950] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  342.102115][T19950] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  342.105718][T19950] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  342.108635][T19950] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  342.112325][T19950] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  342.115712][T19950] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  342.119239][T19950] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  342.122268][T19950] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  342.126329][T19950] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  342.129964][T19950] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  342.204144][T19955] netlink: 'syz.3.3845': attribute type 1 has an invalid length.
[  342.461199][T19959] lo speed is unknown, defaulting to 1000
[  342.466741][T19959] wg1 speed is unknown, defaulting to 1000
[  342.614963][ T5907] IPVS: starting estimator thread 0...
[  342.719049][T19971] IPVS: using max 79 ests per chain, 189600 per kthread
[  342.746786][ T5907] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  342.861056][   T13] IPVS: stop unused estimator thread 0...
[  342.946666][ T5907] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  342.974513][T20001] lo speed is unknown, defaulting to 1000
[  342.982648][T20001] wg1 speed is unknown, defaulting to 1000
[  343.055192][ T5907] IPVS: starting estimator thread 0...
[  343.092607][T20016] vxcan0: entered promiscuous mode
[  343.155134][T20014] IPVS: using max 78 ests per chain, 187200 per kthread
[  343.160803][T20022] lo speed is unknown, defaulting to 1000
[  343.164722][T20025] siw: device registration error -23
[  343.173107][T20022] lo speed is unknown, defaulting to 1000
[  343.182482][T20022] lo speed is unknown, defaulting to 1000
[  343.190857][T20022] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  343.216332][T20022] lo speed is unknown, defaulting to 1000
[  343.221176][T20022] lo speed is unknown, defaulting to 1000
[  343.224019][T20022] lo speed is unknown, defaulting to 1000
[  343.246233][T20022] lo speed is unknown, defaulting to 1000
[  343.248990][T20022] lo speed is unknown, defaulting to 1000
[  343.338292][   T13] IPVS: stop unused estimator thread 0...
[  343.933524][T20063] net_ratelimit: 9 callbacks suppressed
[  343.933535][T20063] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  343.950994][T20063] netlink: 'syz.2.3876': attribute type 10 has an invalid length.
[  343.964600][T20063] team0: Device 0! failed to register rx_handler
[  343.981636][T20063] netlink: 'syz.2.3876': attribute type 10 has an invalid length.
[  344.025559][ T5748] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  344.355237][ T5748] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  344.384298][T20088] netlink: 'syz.0.3885': attribute type 2 has an invalid length.
[  344.402922][T20088] : entered promiscuous mode
[  344.431436][T20090] openvswitch: netlink: Flow actions attr not present in new flow.
[  344.480717][T20095] dvmrp8: entered allmulticast mode
[  344.497989][T20080] dvmrp8: left allmulticast mode
[  344.743526][T20112] tipc: Resetting bearer <eth:team0>
[  344.747859][T20112] tipc: Resetting bearer <eth:team0>
[  345.650584][T20169] __nla_validate_parse: 18 callbacks suppressed
[  345.650593][T20169] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3908'.
[  345.677405][T20169] 8021q: adding VLAN 0 to HW filter on device bond10
[  345.681164][T20169] bond0: (slave bond10): Enslaving as an active interface with a down link
[  345.755804][T20172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3909'.
[  345.896478][T20180] pim6reg1: entered allmulticast mode
[  346.019049][T20186] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3915'.
[  346.088984][T20188] netlink: 'syz.3.3916': attribute type 4 has an invalid length.
[  346.114845][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  346.148205][T20190] lo speed is unknown, defaulting to 1000
[  346.151248][T20190] wg1 speed is unknown, defaulting to 1000
[  346.153826][T20190] lo speed is unknown, defaulting to 1000
[  346.480965][T20206] lo speed is unknown, defaulting to 1000
[  346.486743][T20206] wg1 speed is unknown, defaulting to 1000
[  346.489666][T20206] lo speed is unknown, defaulting to 1000
[  347.378726][T20220] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  347.398543][T20222] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3926'.
[  347.478757][T20227] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3927'.
[  347.762282][T20235] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3929'.
[  348.268171][T20272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3940'.
[  348.311389][T20280] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3942'.
[  348.344421][T20280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3942'.
[  348.513201][T20301] netlink: 'syz.3.3948': attribute type 4 has an invalid length.
[  348.680839][   T61] block nbd3: Possible stuck request ffff888021e98000: control (read@0,4096B). Runtime 90 seconds
[  349.028681][T20328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3956'.
[  349.347187][T20352] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  349.507978][T20357] netlink: 'syz.2.3965': attribute type 33 has an invalid length.
[  349.606418][T20363] bond0: entered promiscuous mode
[  349.610414][T20363] bond0: left promiscuous mode
[  349.648197][T20363] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  349.984387][T20372] openvswitch: netlink: Flow key attr not present in new flow.
[  350.033367][T20375] smc: net device bond0 applied user defined pnetid SYZ2
[  350.033903][T20376] lo speed is unknown, defaulting to 1000
[  350.040356][T20376] wg1 speed is unknown, defaulting to 1000
[  350.049522][T20376] lo speed is unknown, defaulting to 1000
[  350.121434][T20381] lo speed is unknown, defaulting to 1000
[  350.124116][T20381] wg1 speed is unknown, defaulting to 1000
[  350.127438][T20381] lo speed is unknown, defaulting to 1000
[  350.300552][T20393] veth14: entered allmulticast mode
[  350.751977][T20401] __nla_validate_parse: 20 callbacks suppressed
[  350.751992][T20401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3978'.
[  350.829154][T20410] netlink: 'syz.0.3980': attribute type 1 has an invalid length.
[  350.847717][T20410] bond17: entered promiscuous mode
[  350.849832][T20410] 8021q: adding VLAN 0 to HW filter on device bond17
[  350.852647][T20410] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3980'.
[  350.917988][T20418] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3981'.
[  350.921895][T20418] netlink: 680 bytes leftover after parsing attributes in process `syz.0.3981'.
[  351.027932][T20428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3984'.
[  351.131287][T20439] netlink: 87 bytes leftover after parsing attributes in process `syz.3.3987'.
[  351.131288][T20438] netlink: 87 bytes leftover after parsing attributes in process `syz.3.3987'.
[  351.201003][T20437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3986'.
[  351.243026][T20448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3990'.
[  351.282893][T20456] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3992'.
[  351.407164][T20463] syz.3.3994: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  351.412167][T20463] CPU: 1 UID: 0 PID: 20463 Comm: syz.3.3994 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  351.412181][T20463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  351.412186][T20463] Call Trace:
[  351.412190][T20463]  <TASK>
[  351.412194][T20463]  dump_stack_lvl+0x189/0x250
[  351.412210][T20463]  ? __pfx_dump_stack_lvl+0x10/0x10
[  351.412219][T20463]  ? __pfx__printk+0x10/0x10
[  351.412230][T20463]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  351.412240][T20463]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  351.412251][T20463]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  351.412262][T20463]  warn_alloc+0x214/0x310
[  351.412274][T20463]  ? stack_depot_save_flags+0x40/0x860
[  351.412284][T20463]  ? __pfx_warn_alloc+0x10/0x10
[  351.412296][T20463]  ? kasan_save_track+0x4f/0x80
[  351.412306][T20463]  ? xskq_create+0x56/0x170
[  351.412314][T20463]  ? xsk_init_queue+0xb0/0x110
[  351.412321][T20463]  ? xsk_setsockopt+0x4dc/0x8d0
[  351.412329][T20463]  ? do_sock_setsockopt+0x17c/0x1b0
[  351.412338][T20463]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  351.412347][T20463]  ? do_syscall_64+0xfa/0x3b0
[  351.412357][T20463]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.412367][T20463]  __vmalloc_node_range_noprof+0x125/0x12f0
[  351.412390][T20463]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  351.412403][T20463]  ? __kasan_kmalloc+0x93/0xb0
[  351.412414][T20463]  vmalloc_user_noprof+0xad/0xf0
[  351.412425][T20463]  ? xskq_create+0xbf/0x170
[  351.412434][T20463]  xskq_create+0xbf/0x170
[  351.412443][T20463]  xsk_init_queue+0xb0/0x110
[  351.412453][T20463]  xsk_setsockopt+0x4dc/0x8d0
[  351.412461][T20463]  ? __pfx_xsk_setsockopt+0x10/0x10
[  351.412469][T20463]  ? __pfx_aa_sk_perm+0x10/0x10
[  351.412480][T20463]  ? aa_sock_opt_perm+0xff/0x1b0
[  351.412492][T20463]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  351.412499][T20463]  ? __pfx_xsk_setsockopt+0x10/0x10
[  351.412508][T20463]  do_sock_setsockopt+0x17c/0x1b0
[  351.412520][T20463]  __x64_sys_setsockopt+0x13f/0x1b0
[  351.412532][T20463]  do_syscall_64+0xfa/0x3b0
[  351.412541][T20463]  ? lockdep_hardirqs_on+0x9c/0x150
[  351.412549][T20463]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.412556][T20463]  ? exc_page_fault+0x9f/0xf0
[  351.412565][T20463]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.412573][T20463] RIP: 0033:0x7f7a9318ebe9
[  351.412580][T20463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  351.412587][T20463] RSP: 002b:00007f7a93ffc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  351.412596][T20463] RAX: ffffffffffffffda RBX: 00007f7a933b5fa0 RCX: 00007f7a9318ebe9
[  351.412602][T20463] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  351.412606][T20463] RBP: 00007f7a93211e19 R08: 0000000000000004 R09: 0000000000000000
[  351.412611][T20463] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  351.412616][T20463] R13: 00007f7a933b6038 R14: 00007f7a933b5fa0 R15: 00007ffc44594e58
[  351.412627][T20463]  </TASK>
[  351.412630][T20463] Mem-Info:
[  351.515169][T20463] active_anon:5427 inactive_anon:0 isolated_anon:0
[  351.515169][T20463]  active_file:1354 inactive_file:38324 isolated_file:0
[  351.515169][T20463]  unevictable:1768 dirty:91 writeback:0
[  351.515169][T20463]  slab_reclaimable:11933 slab_unreclaimable:96628
[  351.515169][T20463]  mapped:18450 shmem:2577 pagetables:1074
[  351.515169][T20463]  sec_pagetables:0 bounce:0
[  351.515169][T20463]  kernel_misc_reclaimable:0
[  351.515169][T20463]  free:251531 free_pcp:20090 free_cma:0
[  351.534316][T20463] Node 0 active_anon:11968kB inactive_anon:0kB active_file:2536kB inactive_file:12816kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38916kB dirty:244kB writeback:0kB shmem:4832kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7408kB pagetables:2432kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  351.544835][T20463] Node 1 active_anon:9740kB inactive_anon:0kB active_file:2880kB inactive_file:140480kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34884kB dirty:120kB writeback:0kB shmem:5476kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7500kB pagetables:1864kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  351.558140][T20463] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  351.568696][T20463] lowmem_reserve[]: 0 811 811 811 811
[  351.570872][T20463] Node 0 DMA32 free:299552kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11968kB inactive_anon:0kB active_file:2536kB inactive_file:12816kB unevictable:3536kB writepending:244kB present:1556484kB managed:830996kB mlocked:0kB bounce:0kB free_pcp:38344kB local_pcp:17608kB free_cma:0kB
[  351.581020][T20463] lowmem_reserve[]: 0 0 0 0 0
[  351.582727][T20463] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  351.592604][T20463] lowmem_reserve[]: 0 0 854 854 854
[  351.594490][T20463] Node 1 Normal free:232592kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9740kB inactive_anon:0kB active_file:2880kB inactive_file:140480kB unevictable:3536kB writepending:120kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:41916kB local_pcp:24428kB free_cma:0kB
[  351.605203][T20463] lowmem_reserve[]: 0 0 0 0 0
[  351.608017][T20463] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  351.612377][T20463] Node 0 DMA32: 1044*4kB (UM) 440*8kB (UME) 293*16kB (UME) 156*32kB (UME) 234*64kB (UM) 145*128kB (UM) 55*256kB (UME) 10*512kB (UME) 18*1024kB (UME) 3*2048kB (UM) 50*4096kB (UM) = 299488kB
[  351.624272][T20463] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  351.630535][T20463] Node 1 Normal: 452*4kB (UM) 742*8kB (UME) 201*16kB (UME) 462*32kB (UME) 94*64kB (UME) 21*128kB (U) 38*256kB (UME) 14*512kB (UM) 29*1024kB (UME) 8*2048kB (UM) 33*4096kB (UM) = 232592kB
[  351.637432][T20463] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  351.640645][T20463] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  351.643996][T20463] 42255 total pagecache pages
[  351.645832][T20463] 0 pages in swap cache
[  351.647450][T20463] Free swap  = 124996kB
[  351.649096][T20463] Total swap = 124996kB
[  351.650620][T20463] 786301 pages RAM
[  351.652273][T20463] 0 pages HighMem/MovableOnly
[  351.654423][T20463] 241320 pages reserved
[  351.656536][T20463] 0 pages cma reserved
[  351.790456][T20479] netlink: 'syz.2.3997': attribute type 5 has an invalid length.
[  351.806651][T20481] netlink: 'syz.3.3998': attribute type 1 has an invalid length.
[  351.821870][T20481] rdma_rxe: rxe_newlink: failed to add syzkaller0
[  351.862971][T20484] lo speed is unknown, defaulting to 1000
[  351.876672][T20484] wg1 speed is unknown, defaulting to 1000
[  351.881641][T20484] lo speed is unknown, defaulting to 1000
[  352.088863][T20496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  352.231100][T20509] tipc: Resetting bearer <eth:team0>
[  352.239185][T20509] tipc: Resetting bearer <eth:team0>
[  352.261935][T20512] lo speed is unknown, defaulting to 1000
[  352.267039][T20512] wg1 speed is unknown, defaulting to 1000
[  352.270197][T20512] lo speed is unknown, defaulting to 1000
[  352.394461][T20525] netlink: 'syz.0.4009': attribute type 14 has an invalid length.
[  352.498009][T20527] lo speed is unknown, defaulting to 1000
[  352.501850][T20527] wg1 speed is unknown, defaulting to 1000
[  352.513251][T20527] lo speed is unknown, defaulting to 1000
[  353.079123][T20548] lo speed is unknown, defaulting to 1000
[  353.081610][T20548] wg1 speed is unknown, defaulting to 1000
[  353.084144][T20548] lo speed is unknown, defaulting to 1000
[  353.391562][T20569] lo speed is unknown, defaulting to 1000
[  353.394869][T11624] page_pool_release_retry() stalled pool shutdown: id 56, 51 inflight 180 sec
[  353.399326][T20569] wg1 speed is unknown, defaulting to 1000
[  353.399920][T20571] netlink: 'syz.3.4021': attribute type 3 has an invalid length.
[  353.403258][T20569] lo speed is unknown, defaulting to 1000
[  353.534444][T20580] lo speed is unknown, defaulting to 1000
[  353.542227][T20580] wg1 speed is unknown, defaulting to 1000
[  353.553426][T20580] lo speed is unknown, defaulting to 1000
[  353.697880][T20595] netlink: 'syz.2.4024': attribute type 62 has an invalid length.
[  353.862404][T20606] netlink: 'syz.0.4028': attribute type 21 has an invalid length.
[  353.882502][T20605] lo speed is unknown, defaulting to 1000
[  353.893460][T20606] netlink: 'syz.0.4028': attribute type 6 has an invalid length.
[  353.900004][T20605] wg1 speed is unknown, defaulting to 1000
[  353.902653][T20605] lo speed is unknown, defaulting to 1000
[  354.034085][T20626] lo speed is unknown, defaulting to 1000
[  354.038063][T20626] wg1 speed is unknown, defaulting to 1000
[  354.102837][T20626] lo speed is unknown, defaulting to 1000
[  354.118229][T20628] ipvlan0: entered promiscuous mode
[  354.120859][T20628] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  354.249488][T20643] mac80211_hwsim hwsim43 syzkaller0: left promiscuous mode
[  354.251904][T20643] mac80211_hwsim hwsim43 syzkaller0: left allmulticast mode
[  354.258692][T20643] bond6: left promiscuous mode
[  354.260371][T20643] wireguard0: left promiscuous mode
[  354.273530][T20643] bond8: left promiscuous mode
[  354.281108][T20643] batadv3: left promiscuous mode
[  354.282862][T20643] batadv3: left allmulticast mode
[  354.287429][T20643] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  354.525418][T20663] lo speed is unknown, defaulting to 1000
[  354.528505][T20663] wg1 speed is unknown, defaulting to 1000
[  354.531173][T20663] lo speed is unknown, defaulting to 1000
[  354.604090][T20668] lo speed is unknown, defaulting to 1000
[  354.609302][T20668] wg1 speed is unknown, defaulting to 1000
[  354.612093][T20668] lo speed is unknown, defaulting to 1000
[  354.795327][T20682] netlink: 'syz.2.4048': attribute type 1 has an invalid length.
[  354.798028][T20682] netlink: 'syz.2.4048': attribute type 2 has an invalid length.
[  354.802513][T20682] netlink: 'syz.2.4048': attribute type 1 has an invalid length.
[  354.940518][T20694] dvmrp8: entered allmulticast mode
[  354.950531][T20696] netlink: 'syz.2.4053': attribute type 10 has an invalid length.
[  354.964899][T20697] netlink: 'syz.2.4053': attribute type 10 has an invalid length.
[  354.967474][T20697] tipc: Resetting bearer <eth:team0>
[  355.042131][T20701] lo speed is unknown, defaulting to 1000
[  355.052828][T20701] wg1 speed is unknown, defaulting to 1000
[  355.075011][T20701] lo speed is unknown, defaulting to 1000
[  355.078525][T20703] netlink: 'syz.0.4055': attribute type 4 has an invalid length.
[  355.091575][T20703] netlink: 'syz.0.4055': attribute type 4 has an invalid length.
[  355.365991][T20720] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  355.612838][T20741] lo speed is unknown, defaulting to 1000
[  355.621371][T20741] wg1 speed is unknown, defaulting to 1000
[  355.623970][T20741] lo speed is unknown, defaulting to 1000
[  355.728762][T20764] lo speed is unknown, defaulting to 1000
[  355.731691][T20764] wg1 speed is unknown, defaulting to 1000
[  355.740311][T20764] lo speed is unknown, defaulting to 1000
[  356.002227][T20786] lo speed is unknown, defaulting to 1000
[  356.019319][T20786] wg1 speed is unknown, defaulting to 1000
[  356.022163][T20786] lo speed is unknown, defaulting to 1000
[  356.055419][T20788] __nla_validate_parse: 39 callbacks suppressed
[  356.055431][T20788] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4077'.
[  356.060978][T20788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4077'.
[  356.146620][T20793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4078'.
[  356.149128][T20786] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4076'.
[  356.150533][T20793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4078'.
[  356.239214][T20800] lo speed is unknown, defaulting to 1000
[  356.242830][T20800] wg1 speed is unknown, defaulting to 1000
[  356.248339][T20800] lo speed is unknown, defaulting to 1000
[  356.287287][T20804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4079'.
[  356.387098][T20810] tipc: Resetting bearer <eth:team0>
[  356.389337][T20810] tipc: Resetting bearer <eth:team0>
[  356.392404][T20810] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  356.477762][T20816] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4084'.
[  356.512246][T20820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4082'.
[  356.518321][T20818] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4085'.
[  356.542581][T20822] veth14: entered allmulticast mode
[  356.558064][T20812] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4082'.
[  356.613843][T20825] lo speed is unknown, defaulting to 1000
[  356.617216][T20825] wg1 speed is unknown, defaulting to 1000
[  356.620318][T20825] lo speed is unknown, defaulting to 1000
[  356.664201][T20831] netem: change failed
[  356.796134][T20844] lo speed is unknown, defaulting to 1000
[  356.799375][T20844] wg1 speed is unknown, defaulting to 1000
[  356.802088][T20844] lo speed is unknown, defaulting to 1000
[  357.184287][T20867] lo speed is unknown, defaulting to 1000
[  357.188622][T20867] wg1 speed is unknown, defaulting to 1000
[  357.195630][T20870] lo speed is unknown, defaulting to 1000
[  357.199582][T20870] wg1 speed is unknown, defaulting to 1000
[  357.202867][T20870] lo speed is unknown, defaulting to 1000
[  357.203287][T20869] lo speed is unknown, defaulting to 1000
[  357.206835][T20867] lo speed is unknown, defaulting to 1000
[  357.233310][T20869] wg1 speed is unknown, defaulting to 1000
[  357.249656][T20869] lo speed is unknown, defaulting to 1000
[  357.560949][T20900] lo speed is unknown, defaulting to 1000
[  357.563590][T20900] wg1 speed is unknown, defaulting to 1000
[  357.571811][T20900] lo speed is unknown, defaulting to 1000
[  357.742490][T20913] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  357.888370][T20925] lo speed is unknown, defaulting to 1000
[  357.900658][T20925] wg1 speed is unknown, defaulting to 1000
[  357.907844][T20925] lo speed is unknown, defaulting to 1000
[  357.961763][T20931] ip_vti0: entered allmulticast mode
[  357.976790][T20931] dvmrp1: entered allmulticast mode
[  357.988116][T20930] ip_vti0: left allmulticast mode
[  358.231057][T20944] lo speed is unknown, defaulting to 1000
[  358.235107][T20944] wg1 speed is unknown, defaulting to 1000
[  358.238963][T20944] lo speed is unknown, defaulting to 1000
[  358.335367][T20948] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  358.342174][T20948] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  358.549838][T20958] lo speed is unknown, defaulting to 1000
[  358.552462][T20958] wg1 speed is unknown, defaulting to 1000
[  358.602093][T20958] lo speed is unknown, defaulting to 1000
[  359.082208][T20985] macsec2: entered promiscuous mode
[  359.084400][T20985] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode
[  359.087503][T20985] macsec2: entered allmulticast mode
[  359.089640][T20985] mac80211_hwsim hwsim42 wlan0: entered allmulticast mode
[  359.426487][T21009] lo speed is unknown, defaulting to 1000
[  359.430167][T21009] wg1 speed is unknown, defaulting to 1000
[  359.434035][T21009] lo speed is unknown, defaulting to 1000
[  360.322185][T21031] validate_nla: 66 callbacks suppressed
[  360.322201][T21031] netlink: 'syz.2.4142': attribute type 3 has an invalid length.
[  360.337316][T21031] ip_vti0: entered allmulticast mode
[  360.340898][T21031] dvmrp1: left allmulticast mode
[  360.426040][T21036] tipc: Resetting bearer <eth:team0>
[  360.429721][T21036] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  360.440558][T21030] ip_vti0: left allmulticast mode
[  360.587179][T21049] netlink: 'syz.2.4149': attribute type 1 has an invalid length.
[  360.661429][T21049] 8021q: adding VLAN 0 to HW filter on device bond31
[  360.670555][T21061] netlink: 'syz.0.4151': attribute type 12 has an invalid length.
[  360.683088][T21059] bond31: (slave ip6gretap4): making interface the new active one
[  360.688356][T21059] bond31: (slave ip6gretap4): Enslaving as an active interface with an up link
[  360.708530][T21049] veth17: entered promiscuous mode
[  360.712742][T21049] bond31: (slave veth17): Enslaving as an active interface with a down link
[  360.781972][T21068] bridge0: entered allmulticast mode
[  360.805692][T21068] bridge0 (unregistering): left allmulticast mode
[  360.866613][T21066] dvmrp8: entered allmulticast mode
[  360.878466][T21073] sctp: [Deprecated]: syz.0.4155 (pid 21073) Use of int in maxseg socket option.
[  360.878466][T21073] Use struct sctp_assoc_value instead
[  360.884382][T21073] netlink: 'syz.0.4155': attribute type 1 has an invalid length.
[  360.910346][T21073] 8021q: adding VLAN 0 to HW filter on device bond18
[  360.932919][T21073] bond18: (slave veth17): Enslaving as an active interface with a down link
[  360.947163][T21073] vlan1: entered allmulticast mode
[  360.954432][T21076] sctp: [Deprecated]: syz.2.4156 (pid 21076) Use of struct sctp_assoc_value in delayed_ack socket option.
[  360.954432][T21076] Use struct sctp_sack_info instead
[  360.992780][T21078] netlink: 'syz.2.4157': attribute type 1 has an invalid length.
[  361.023814][T21078] bond32: entered promiscuous mode
[  361.026510][T21078] 8021q: adding VLAN 0 to HW filter on device bond32
[  361.043082][T21078] 8021q: adding VLAN 0 to HW filter on device bond32
[  361.045633][T21078] bond32: (slave wireguard2): The slave device specified does not support setting the MAC address
[  361.049470][T21078] bond32: (slave wireguard2): Setting fail_over_mac to active for active-backup mode
[  361.058040][T21078] bond32: (slave wireguard2): making interface the new active one
[  361.060978][T21078] wireguard2: entered promiscuous mode
[  361.063318][T21078] bond32: (slave wireguard2): Enslaving as an active interface with an up link
[  361.078167][T21078] bond32: (slave wireguard3): The slave device specified does not support setting the MAC address
[  361.084165][T21078] bond32: (slave wireguard3): Enslaving as a backup interface with an up link
[  361.121528][T21083] netlink: 'syz.2.4158': attribute type 58 has an invalid length.
[  361.124340][T21083] __nla_validate_parse: 28 callbacks suppressed
[  361.124349][T21083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4158'.
[  361.472100][T21093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4161'.
[  361.477519][T21093] netlink: 'syz.2.4161': attribute type 1 has an invalid length.
[  361.498748][T21093] bond33: entered promiscuous mode
[  361.500982][T21093] bond33: entered allmulticast mode
[  361.504122][T21062] dvmrp8: left allmulticast mode
[  361.533450][T21093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4161'.
[  361.542966][T21093] bridge0: the hash_elasticity option has been deprecated and is always 16
[  361.607588][T21096] lo speed is unknown, defaulting to 1000
[  361.611160][T21096] wg1 speed is unknown, defaulting to 1000
[  361.615843][T21096] lo speed is unknown, defaulting to 1000
[  361.658440][T21071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  361.752873][T21110] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4166'.
[  361.757475][T21110] netlink: 19 bytes leftover after parsing attributes in process `syz.3.4166'.
[  361.765165][T21110] netlink: 19 bytes leftover after parsing attributes in process `syz.3.4166'.
[  361.770717][T21111] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4166'.
[  361.774312][T21111] netlink: 19 bytes leftover after parsing attributes in process `syz.3.4166'.
[  361.777912][T21111] netlink: 19 bytes leftover after parsing attributes in process `syz.3.4166'.
[  361.942416][T21124] netlink: 'syz.2.4169': attribute type 2 has an invalid length.
[  361.947428][T21124] netlink: 119 bytes leftover after parsing attributes in process `syz.2.4169'.
[  362.115272][ T5312] block nbd1: Possible stuck request ffff888021df8000: control (read@0,1024B). Runtime 300 seconds
[  362.119313][ T5312] block nbd1: Possible stuck request ffff888021df8200: control (read@1024,1024B). Runtime 300 seconds
[  362.123904][ T5312] block nbd1: Possible stuck request ffff888021df8400: control (read@2048,1024B). Runtime 300 seconds
[  362.127558][ T5312] block nbd1: Possible stuck request ffff888021df8600: control (read@3072,1024B). Runtime 300 seconds
[  362.302359][T21134] lo speed is unknown, defaulting to 1000
[  362.306056][T21134] wg1 speed is unknown, defaulting to 1000
[  362.309179][T21134] lo speed is unknown, defaulting to 1000
[  362.392583][T21138] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  362.521359][T21140] lo speed is unknown, defaulting to 1000
[  362.532906][T21140] wg1 speed is unknown, defaulting to 1000
[  362.546476][T21140] lo speed is unknown, defaulting to 1000
[  362.911811][T21163] lo speed is unknown, defaulting to 1000
[  362.912435][T21165] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  362.921786][T21163] lo speed is unknown, defaulting to 1000
[  362.923454][T21165] mac80211_hwsim hwsim43 syzkaller0: entered promiscuous mode
[  362.930269][T21165] mac80211_hwsim hwsim43 syzkaller0: entered allmulticast mode
[  362.948154][T21165] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  362.965911][T21166] 8021q: adding VLAN 0 to HW filter on device bond0
[  363.296143][T21182] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  363.303719][T21181] netlink: 'syz.2.4185': attribute type 10 has an invalid length.
[  363.310647][T21181] team0: Device 0! failed to register rx_handler
[  363.322270][T21181] netlink: 'syz.2.4185': attribute type 10 has an invalid length.
[  363.932601][T21190] lo speed is unknown, defaulting to 1000
[  363.938711][T21190] lo speed is unknown, defaulting to 1000
[  364.140316][T21194] Unsupported ieee802154 address type: 0
[  364.156828][T21199] lo speed is unknown, defaulting to 1000
[  364.160577][T21199] lo speed is unknown, defaulting to 1000
[  364.322008][T21209] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  364.326044][T21209] tipc: Resetting bearer <eth:syzkaller0>
[  364.329421][T21209] syzkaller0: left promiscuous mode
[  364.349752][T11624] lo speed is unknown, defaulting to 1000
[  364.352149][T11624] syz1: Port: 1 Link DOWN
[  364.364825][T11624] lo speed is unknown, defaulting to 1000
[  364.372028][T11624] syz1: Port: 1 Link ACTIVE
[  364.413401][T11624] lo speed is unknown, defaulting to 1000
[  364.417231][T11624] syz1: Port: 1 Link DOWN
[  364.508694][T21218] lo speed is unknown, defaulting to 1000
[  364.513726][T21218] lo speed is unknown, defaulting to 1000
[  364.560789][T21232] syzkaller0: entered promiscuous mode
[  364.563596][T21231] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  364.698280][T21241] lo speed is unknown, defaulting to 1000
[  364.701453][T21241] lo speed is unknown, defaulting to 1000
[  365.003805][T21260] lo speed is unknown, defaulting to 1000
[  365.006536][T21260] lo speed is unknown, defaulting to 1000
[  365.075092][   T47] page_pool_release_retry() stalled pool shutdown: id 65, 51 inflight 181 sec
[  365.203089][T21277] hsr_slave_0: left promiscuous mode
[  365.706901][T21302] validate_nla: 4 callbacks suppressed
[  365.706917][T21302] netlink: 'syz.2.4219': attribute type 1 has an invalid length.
[  365.745918][T21302] 8021q: adding VLAN 0 to HW filter on device bond35
[  365.770298][T21310] lo speed is unknown, defaulting to 1000
[  365.777083][T21310] lo speed is unknown, defaulting to 1000
[  366.112032][T21324] lo speed is unknown, defaulting to 1000
[  366.116781][T21324] lo speed is unknown, defaulting to 1000
[  366.357287][T21332] netlink: 'syz.0.4228': attribute type 1 has an invalid length.
[  366.381102][T21332] 8021q: adding VLAN 0 to HW filter on device bond19
[  366.414910][T21332] bond19: (slave batadv2): Opening slave failed
[  366.504376][T21337] lo speed is unknown, defaulting to 1000
[  366.507180][T21337] lo speed is unknown, defaulting to 1000
[  366.623418][T21343] __nla_validate_parse: 10 callbacks suppressed
[  366.623431][T21343] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4230'.
[  366.879422][T21367] lo speed is unknown, defaulting to 1000
[  366.883287][T21367] lo speed is unknown, defaulting to 1000
[  366.902271][T21370] netlink: 'syz.3.4235': attribute type 4 has an invalid length.
[  366.926360][T21370] netlink: 'syz.3.4235': attribute type 4 has an invalid length.
[  366.942059][   T47] lo speed is unknown, defaulting to 1000
[  366.945283][   T47] syz2: Port: 1 Link ACTIVE
[  367.026665][T21375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4238'.
[  367.081191][T21380] netlink: 'syz.0.4238': attribute type 1 has an invalid length.
[  367.102224][T21378] netlink: 'syz.2.4239': attribute type 4 has an invalid length.
[  367.109507][T21375] gretap3: entered promiscuous mode
[  367.262009][T21387] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4242'.
[  367.329597][T21391] lo speed is unknown, defaulting to 1000
[  367.332314][T21391] lo speed is unknown, defaulting to 1000
[  367.840130][T21417] lo speed is unknown, defaulting to 1000
[  367.844046][T21417] lo speed is unknown, defaulting to 1000
[  367.939548][T21425] netlink: 'syz.2.4252': attribute type 10 has an invalid length.
[  367.942333][T21425] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4252'.
[  367.951951][T21425] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  367.959239][T21425] netlink: 'syz.2.4252': attribute type 10 has an invalid length.
[  367.972719][T21425] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4252'.
[  367.981326][T21425] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  367.987115][T21425] netlink: 'syz.2.4252': attribute type 10 has an invalid length.
[  367.996935][T21425] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4252'.
[  368.000068][T21425] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  368.106628][T21437] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4256'.
[  368.110837][T21437] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4256'.
[  368.233945][T21452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4260'.
[  368.240538][T21452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4260'.
[  368.316290][T21452] lo speed is unknown, defaulting to 1000
[  368.318846][T21452] lo speed is unknown, defaulting to 1000
[  369.241115][T21485] lo speed is unknown, defaulting to 1000
[  369.244077][T21485] lo speed is unknown, defaulting to 1000
[  369.407711][T21491] netlink: 'syz.3.4273': attribute type 1 has an invalid length.
[  369.511380][T21498] 8021q: adding VLAN 0 to HW filter on device bond20
[  369.535519][T21505] lo speed is unknown, defaulting to 1000
[  369.538139][T21505] lo speed is unknown, defaulting to 1000
[  369.730632][T21530] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  369.850469][T21554] lo speed is unknown, defaulting to 1000
[  369.853129][T21554] lo speed is unknown, defaulting to 1000
[  370.423316][T21595] lo speed is unknown, defaulting to 1000
[  370.427852][T21595] lo speed is unknown, defaulting to 1000
[  370.810959][T21628] lo speed is unknown, defaulting to 1000
[  370.813651][T21628] lo speed is unknown, defaulting to 1000
[  370.895433][T21635] validate_nla: 3 callbacks suppressed
[  370.895446][T21635] netlink: 'syz.0.4309': attribute type 13 has an invalid length.
[  370.899645][T21635] netlink: 'syz.0.4309': attribute type 17 has an invalid length.
[  370.931199][T21639] netlink: 'syz.3.4312': attribute type 39 has an invalid length.
[  370.942361][T21635] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  371.004454][T21635] lo speed is unknown, defaulting to 1000
[  371.007915][T21635] lo speed is unknown, defaulting to 1000
[  371.053950][T21641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  371.159153][T21655] vlan2: entered allmulticast mode
[  371.161049][T21655] bridge0: entered allmulticast mode
[  371.163075][T21655] bridge16: port 1(vlan2) entered blocking state
[  371.168031][T21655] bridge16: port 1(vlan2) entered disabled state
[  371.171204][T21655] vlan2: entered promiscuous mode
[  371.173078][T21655] bridge0: entered promiscuous mode
[  371.178878][T21657] syzkaller0: Caught tx_queue_len zero misconfig
[  371.268499][T21669] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (256)
[  371.271784][T21669] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  371.290375][T21664] lo speed is unknown, defaulting to 1000
[  371.293159][T21664] lo speed is unknown, defaulting to 1000
[  371.318535][   T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  371.321399][   T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  371.332537][   T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  371.335808][   T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  371.385816][T21677] mac80211_hwsim hwsim43 wlan1: entered allmulticast mode
[  371.395476][T21677] veth0_to_bond: left allmulticast mode
[  371.397686][T21677] veth0_to_bond: left promiscuous mode
[  371.400371][T21677] bridge9: port 2(veth0_to_bond) entered disabled state
[  371.408359][T21677] bond2: (slave batadv2): Releasing active interface
[  371.419322][T21677] bond4: (slave veth9): Releasing active interface
[  371.427487][T21677] veth11: left allmulticast mode
[  371.429699][T21677] veth11: left promiscuous mode
[  371.431933][T21677] bridge9: port 1(veth11) entered disabled state
[  371.442842][T21677] bond6: (slave wireguard0): Releasing backup interface
[  371.455285][T21677] bond8: (slave batadv3): Releasing active interface
[  371.460169][T21677] batman_adv: batadv0: Removing interface: ip6gretap1
[  371.466217][T21677] bond9: (slave macvlan4): Releasing backup interface
[  371.471178][T21677] bond0: (slave bond10): Releasing active interface
[  371.477185][T21677] vlan2: left promiscuous mode
[  371.479267][T21677] bridge0: left promiscuous mode
[  371.481694][T21677] bridge16: port 1(vlan2) entered disabled state
[  371.496288][T21677] netlink: 'syz.3.4324': attribute type 10 has an invalid length.
[  371.503100][T21677] mac80211_hwsim hwsim43 wlan1: left allmulticast mode
[  371.512263][T21677] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  371.518937][T21677] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  371.591802][T21682] tipc: Resetting bearer <eth:team0>
[  371.632968][T21684] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  371.696842][T21686] lo speed is unknown, defaulting to 1000
[  371.699892][T21686] lo speed is unknown, defaulting to 1000
[  371.715607][   T61] block nbd2: Possible stuck request ffff8880387e0000: control (read@0,1024B). Runtime 90 seconds
[  371.719997][   T61] block nbd2: Possible stuck request ffff8880387e0200: control (read@1024,1024B). Runtime 90 seconds
[  371.724855][   T61] block nbd2: Possible stuck request ffff8880387e0400: control (read@2048,1024B). Runtime 90 seconds
[  371.729424][   T61] block nbd2: Possible stuck request ffff8880387e0600: control (read@3072,1024B). Runtime 90 seconds
[  371.803864][T21690] __nla_validate_parse: 17 callbacks suppressed
[  371.803880][T21690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4328'.
[  372.039277][T21699] netlink: 'syz.2.4331': attribute type 10 has an invalid length.
[  372.175778][T21707] netlink: 'syz.2.4334': attribute type 10 has an invalid length.
[  372.178376][T21707] tipc: Resetting bearer <eth:team0>
[  372.182093][T21707] netlink: 'syz.2.4334': attribute type 10 has an invalid length.
[  372.186880][T21707] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4334'.
[  372.220638][T21676] delete_channel: no stack
[  372.293044][T21719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4337'.
[  372.354931][T11623] page_pool_release_retry() stalled pool shutdown: id 25, 51 inflight 241 sec
[  372.408985][T21727] lo speed is unknown, defaulting to 1000
[  372.412477][T21727] lo speed is unknown, defaulting to 1000
[  372.589693][T21739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4343'.
[  372.669570][T21750] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4346'.
[  372.673111][T21750] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4346'.
[  372.686922][T21750] netlink: 22 bytes leftover after parsing attributes in process `syz.0.4346'.
[  372.691338][T21750] dvmrp8: left allmulticast mode
[  372.759895][T21753] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  372.822176][T21759] netlink: 'syz.2.4350': attribute type 10 has an invalid length.
[  372.856265][T21760] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4349'.
[  372.881391][T21768] erspan0: entered promiscuous mode
[  372.883187][T21768] macvlan0: entered allmulticast mode
[  372.888766][T21768] erspan0: entered allmulticast mode
[  373.019261][T21780] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4355'.
[  373.124418][T21775] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  373.127163][T21775] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  373.129989][T21775] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  373.239946][T21793] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4358'.
[  373.346844][T21812] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  373.361364][T21814] bond0: entered promiscuous mode
[  373.364175][T21814] bond0: left promiscuous mode
[  373.604065][T21834] lo speed is unknown, defaulting to 1000
[  373.607080][T21834] lo speed is unknown, defaulting to 1000
[  373.782781][T21849] pim6reg1: entered promiscuous mode
[  373.787390][T21849] pim6reg1: entered allmulticast mode
[  373.962272][T21870] lo speed is unknown, defaulting to 1000
[  373.965907][T21870] lo speed is unknown, defaulting to 1000
[  373.982827][T21867] syzkaller1: entered promiscuous mode
[  373.987701][T21867] syzkaller1: entered allmulticast mode
[  374.220027][T21889] 8021q: VLANs not supported on ip6tnl0
[  374.732636][T21920] netlink: 'syz.2.4392': attribute type 6 has an invalid length.
[  375.862838][T21946] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  375.873430][T21946] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  376.202809][T21981] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  376.442323][T21988] tipc: Resetting bearer <eth:team0>
[  376.446348][T21988] tipc: Resetting bearer <eth:team0>
[  376.459183][T21988] tipc: Resetting bearer <eth:syzkaller0>
[  376.462156][T21988] tipc: Resetting bearer <eth:syzkaller0>
[  376.598911][T21992] lo speed is unknown, defaulting to 1000
[  376.601636][T21992] lo speed is unknown, defaulting to 1000
[  376.894046][T22009] __nla_validate_parse: 15 callbacks suppressed
[  376.894060][T22009] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4416'.
[  376.905823][T22009] netlink: 'syz.2.4416': attribute type 15 has an invalid length.
[  376.909189][T22009] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4416'.
[  376.939723][T22004] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4414'.
[  376.972013][T22016] netlink: 'syz.2.4417': attribute type 1 has an invalid length.
[  376.978406][T22016] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4417'.
[  376.996638][T22016] geneve5: entered promiscuous mode
[  377.001680][ T5869] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  377.007705][ T5869] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  377.013378][ T5869] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  377.016980][ T5869] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  377.041159][T22022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4419'.
[  377.055569][T22022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4419'.
[  377.089350][T22026] netlink: 'syz.2.4420': attribute type 7 has an invalid length.
[  377.091847][T22026] netlink: 'syz.2.4420': attribute type 8 has an invalid length.
[  377.229175][T22037] lo speed is unknown, defaulting to 1000
[  377.232231][T22037] lo speed is unknown, defaulting to 1000
[  377.247704][T22041] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4425'.
[  377.282953][T22037] netlink: 'syz.2.4424': attribute type 10 has an invalid length.
[  377.327338][T22055] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4428'.
[  377.512523][T22062] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4429'.
[  377.668000][T22072] netlink: 'syz.2.4432': attribute type 1 has an invalid length.
[  377.670654][T22072] netlink: 'syz.2.4432': attribute type 3 has an invalid length.
[  377.673481][T22072] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4432'.
[  377.722420][T22077] netlink: 'syz.2.4433': attribute type 10 has an invalid length.
[  377.734403][T22077] team0: Device 0! failed to register rx_handler
[  377.775846][T22082] sctp: [Deprecated]: syz.2.4434 (pid 22082) Use of struct sctp_assoc_value in delayed_ack socket option.
[  377.775846][T22082] Use struct sctp_sack_info instead
[  377.778410][T22083] netlink: 'syz.2.4434': attribute type 10 has an invalid length.
[  378.730778][T22139] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  378.734852][T22139] CPU: 1 UID: 0 PID: 22139 Comm: syz.2.4449 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  378.734864][T22139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  378.734870][T22139] Call Trace:
[  378.734873][T22139]  <TASK>
[  378.734877][T22139]  dump_stack_lvl+0x189/0x250
[  378.734891][T22139]  ? __pfx_dump_stack_lvl+0x10/0x10
[  378.734901][T22139]  ? __pfx__printk+0x10/0x10
[  378.734913][T22139]  ? kernfs_path_from_node+0x2f/0x290
[  378.734922][T22139]  ? kernfs_path_from_node+0x250/0x290
[  378.734929][T22139]  ? kernfs_path_from_node+0x2f/0x290
[  378.734939][T22139]  sysfs_warn_dup+0x8e/0xa0
[  378.734947][T22139]  sysfs_do_create_link_sd+0xc0/0x110
[  378.734956][T22139]  device_add_class_symlinks+0x1cf/0x240
[  378.734968][T22139]  device_add+0x475/0xb50
[  378.734980][T22139]  wiphy_register+0x1ba6/0x28d0
[  378.734997][T22139]  ? __pfx_wiphy_register+0x10/0x10
[  378.735005][T22139]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  378.735019][T22139]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  378.735033][T22139]  ieee80211_register_hw+0x3425/0x4080
[  378.735052][T22139]  ? ieee80211_register_hw+0x1461/0x4080
[  378.735066][T22139]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  378.735078][T22139]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  378.735096][T22139]  ? __hrtimer_setup+0x187/0x210
[  378.735102][T22139]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  378.735113][T22139]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  378.735135][T22139]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  378.735143][T22139]  ? trace_kmalloc+0x1f/0xd0
[  378.735152][T22139]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  378.735162][T22139]  ? kstrndup+0xbf/0x160
[  378.735174][T22139]  hwsim_new_radio_nl+0xea4/0x1b10
[  378.735184][T22139]  ? __pfx___nla_validate_parse+0x10/0x10
[  378.735200][T22139]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  378.735214][T22139]  ? __nla_parse+0x40/0x60
[  378.735225][T22139]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  378.735236][T22139]  genl_family_rcv_msg_doit+0x215/0x300
[  378.735246][T22139]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  378.735258][T22139]  ? bpf_lsm_capable+0x9/0x20
[  378.735268][T22139]  ? security_capable+0x7e/0x2e0
[  378.735280][T22139]  genl_rcv_msg+0x60e/0x790
[  378.735289][T22139]  ? __pfx_genl_rcv_msg+0x10/0x10
[  378.735295][T22139]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  378.735309][T22139]  netlink_rcv_skb+0x208/0x470
[  378.735317][T22139]  ? __lock_acquire+0xab9/0xd20
[  378.735327][T22139]  ? __pfx_genl_rcv_msg+0x10/0x10
[  378.735335][T22139]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  378.735352][T22139]  ? down_read+0x1ad/0x2e0
[  378.735362][T22139]  genl_rcv+0x28/0x40
[  378.735372][T22139]  netlink_unicast+0x82f/0x9e0
[  378.735384][T22139]  ? __pfx_netlink_unicast+0x10/0x10
[  378.735393][T22139]  ? netlink_sendmsg+0x642/0xb30
[  378.735401][T22139]  ? skb_put+0x11b/0x210
[  378.735413][T22139]  netlink_sendmsg+0x805/0xb30
[  378.735451][T22139]  ? __pfx_netlink_sendmsg+0x10/0x10
[  378.735462][T22139]  ? aa_sock_msg_perm+0xf1/0x1d0
[  378.735473][T22139]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  378.735481][T22139]  ? __pfx_netlink_sendmsg+0x10/0x10
[  378.735492][T22139]  __sock_sendmsg+0x21c/0x270
[  378.735502][T22139]  ____sys_sendmsg+0x505/0x830
[  378.735515][T22139]  ? __pfx_____sys_sendmsg+0x10/0x10
[  378.735531][T22139]  ? import_iovec+0x74/0xa0
[  378.735540][T22139]  ___sys_sendmsg+0x21f/0x2a0
[  378.735551][T22139]  ? __pfx____sys_sendmsg+0x10/0x10
[  378.735578][T22139]  ? __fget_files+0x2a/0x420
[  378.735588][T22139]  ? __fget_files+0x3a0/0x420
[  378.735603][T22139]  __x64_sys_sendmsg+0x19b/0x260
[  378.735615][T22139]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  378.735629][T22139]  ? rcu_is_watching+0x15/0xb0
[  378.735639][T22139]  ? do_syscall_64+0xbe/0x3b0
[  378.735650][T22139]  do_syscall_64+0xfa/0x3b0
[  378.735658][T22139]  ? lockdep_hardirqs_on+0x9c/0x150
[  378.735666][T22139]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.735674][T22139]  ? exc_page_fault+0x9f/0xf0
[  378.735683][T22139]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.735689][T22139] RIP: 0033:0x7fe25f38ebe9
[  378.735697][T22139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  378.735703][T22139] RSP: 002b:00007fe2601ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  378.735713][T22139] RAX: ffffffffffffffda RBX: 00007fe25f5b5fa0 RCX: 00007fe25f38ebe9
[  378.735718][T22139] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000007
[  378.735723][T22139] RBP: 00007fe25f411e19 R08: 0000000000000000 R09: 0000000000000000
[  378.735727][T22139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  378.735731][T22139] R13: 00007fe25f5b6038 R14: 00007fe25f5b5fa0 R15: 00007ffcb1a0d0d8
[  378.735744][T22139]  </TASK>
[  378.805893][   T61] block nbd3: Possible stuck request ffff888021e98000: control (read@0,4096B). Runtime 120 seconds
[  378.947413][T22144] netlink: 'syz.3.4451': attribute type 2 has an invalid length.
[  378.958522][T22144] : entered promiscuous mode
[  378.969661][T22142] block nbd0: NBD_DISCONNECT
[  378.971250][T22142] block nbd0: Send disconnect failed -32
[  379.234782][T11623] page_pool_release_retry() stalled pool shutdown: id 26, 51 inflight 241 sec
[  379.266114][T22163] lo speed is unknown, defaulting to 1000
[  379.273864][T22163] lo speed is unknown, defaulting to 1000
[  379.506288][T22189] 8021q: adding VLAN 0 to HW filter on device bond36
[  379.549096][T22189] 8021q: adding VLAN 0 to HW filter on device bond36
[  379.552380][T22189] bond36: (slave vxcan3): The slave device specified does not support setting the MAC address
[  379.559526][T22189] bond36: (slave vxcan3): Error -95 calling set_mac_address
[  379.875001][ T5907] page_pool_release_retry() stalled pool shutdown: id 27, 51 inflight 241 sec
[  379.897519][T22217] 8021q: adding VLAN 0 to HW filter on device bond37
[  379.925336][T22217] bond37: (slave veth21): Enslaving as an active interface with a down link
[  380.486249][T22217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  380.592844][T22246] tipc: Enabling of bearer <ib:lo> rejected, max 3 bearers permitted
[  380.662813][T22248] nbd: illegal input index 65508
[  380.707834][T22260] mac80211_hwsim hwsim49 wlan1: entered allmulticast mode
[  380.808756][T22269] erspan0: left allmulticast mode
[  380.811031][T22269] erspan0: left promiscuous mode
[  380.823328][T22269] macvlan0: left allmulticast mode
[  380.889917][T22258] lo speed is unknown, defaulting to 1000
[  380.893691][T22258] lo speed is unknown, defaulting to 1000
[  381.243881][T22294] bond15: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  381.289795][T22294] veth13: entered promiscuous mode
[  381.293124][T22294] bond15: (slave veth13): Enslaving as a backup interface with a down link
[  381.343860][T22299] netlink: 'syz.0.4493': attribute type 11 has an invalid length.
[  381.395189][T22301] block nbd0: shutting down sockets
[  381.961015][T22325] __nla_validate_parse: 26 callbacks suppressed
[  381.961025][T22325] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.4503'.
[  382.130516][T22332] dvmrp8: entered allmulticast mode
[  382.133665][T22332] openvswitch: netlink: Flow key attr not present in new flow.
[  382.153594][T22330] dvmrp8: left allmulticast mode
[  382.202223][T22334] validate_nla: 15 callbacks suppressed
[  382.202232][T22334] netlink: 'syz.3.4505': attribute type 10 has an invalid length.
[  382.240842][T22336] netlink: 'syz.2.4506': attribute type 21 has an invalid length.
[  382.247084][T22336] netlink: 'syz.2.4506': attribute type 1 has an invalid length.
[  382.253160][T22336] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4506'.
[  382.346596][T22343] netlink: 'syz.2.4509': attribute type 2 has an invalid length.
[  382.717757][T22355] lo speed is unknown, defaulting to 1000
[  382.720538][T22356] netlink: 'syz.2.4512': attribute type 16 has an invalid length.
[  382.723774][T22356] netlink: 'syz.2.4512': attribute type 17 has an invalid length.
[  382.728622][T22355] lo speed is unknown, defaulting to 1000
[  382.754016][T22356] tipc: Resetting bearer <eth:team0>
[  382.759611][T22356] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  382.795577][T11623] lo speed is unknown, defaulting to 1000
[  382.798115][T11623] syz1: Port: 1 Link ACTIVE
[  382.922937][T22363] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4514'.
[  382.930235][T22363] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4514'.
[  383.021655][T22370] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  383.030492][T22370] sch_fq: defrate 257 ignored.
[  383.143073][T22374] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  383.224508][T22386] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4521'.
[  383.370060][T22397] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  383.373327][T22397] tipc: Resetting bearer <eth:syzkaller0>
[  383.378905][T22397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4526'.
[  383.422582][T22402] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4529'.
[  383.428555][T22402] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4529'.
[  383.477189][T22408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4528'.
[  383.630543][T22424] IPVS: set_ctl: invalid protocol: 4 224.0.0.1:20002
[  383.639432][T22424] syzkaller1: entered promiscuous mode
[  383.641317][T22424] syzkaller1: entered allmulticast mode
[  383.887763][T22432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4538'.
[  383.898557][T22432] xfrm1: entered promiscuous mode
[  383.900684][T22432] xfrm1: entered allmulticast mode
[  384.035845][ T5907] page_pool_release_retry() stalled pool shutdown: id 28, 51 inflight 241 sec
[  384.303301][T22447] netlink: 'syz.0.4545': attribute type 7 has an invalid length.
[  384.309483][T22447] netlink: 'syz.0.4545': attribute type 8 has an invalid length.
[  384.337754][T22449] macsec3: entered allmulticast mode
[  384.339559][T22449] macsec0: entered allmulticast mode
[  384.550556][T22468] netlink: 'syz.0.4550': attribute type 1 has an invalid length.
[  384.929157][T22496] netlink: 'syz.3.4554': attribute type 10 has an invalid length.
[  385.171780][T22510] netlink: 'syz.2.4558': attribute type 11 has an invalid length.
[  385.299008][T22522] lo speed is unknown, defaulting to 1000
[  385.301850][T22522] lo speed is unknown, defaulting to 1000
[  385.541185][T22543] "syz.2.4569" (22543) uses obsolete ecb(arc4) skcipher
[  385.583445][T22552] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  385.602622][T22556] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  385.851244][T22581] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  385.857850][T22581] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  385.911223][T22583] team1: entered promiscuous mode
[  385.913416][T22583] team1: entered allmulticast mode
[  385.928427][T22586] tipc: Failed to remove unknown binding: 66,1,1/3777492320:1838316224/1838316226
[  385.993064][T22595] openvswitch: netlink: Message has 8 unknown bytes.
[  386.137915][T22606] tipc: Resetting bearer <eth:team0>
[  386.154494][T22606] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  386.160854][T22607] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  386.166501][T11623] lo speed is unknown, defaulting to 1000
[  386.168488][T11623] syz1: Port: 1 Link DOWN
[  386.414158][T22634] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  386.598765][T22647] team0: Cannot enslave team device to itself
[  386.968629][T22672] __nla_validate_parse: 23 callbacks suppressed
[  386.968640][T22672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4602'.
[  387.013439][T22679] sch_tbf: burst 240 is lower than device lo mtu (11337746) !
[  387.176043][T22702] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4611'.
[  387.209873][T22706] syzkaller1: entered promiscuous mode
[  387.212398][T22706] syzkaller1: entered allmulticast mode
[  387.363835][T22717] syzkaller1: entered promiscuous mode
[  387.366433][T22717] syzkaller1: entered allmulticast mode
[  387.647819][T22723] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  387.650378][T22723] CPU: 0 UID: 0 PID: 22723 Comm: syz.3.4618 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  387.650390][T22723] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  387.650396][T22723] Call Trace:
[  387.650400][T22723]  <TASK>
[  387.650404][T22723]  dump_stack_lvl+0x189/0x250
[  387.650418][T22723]  ? __pfx_dump_stack_lvl+0x10/0x10
[  387.650427][T22723]  ? __pfx__printk+0x10/0x10
[  387.650440][T22723]  ? kernfs_path_from_node+0x2f/0x290
[  387.650449][T22723]  ? kernfs_path_from_node+0x250/0x290
[  387.650456][T22723]  ? kernfs_path_from_node+0x2f/0x290
[  387.650466][T22723]  sysfs_warn_dup+0x8e/0xa0
[  387.650475][T22723]  sysfs_do_create_link_sd+0xc0/0x110
[  387.650485][T22723]  device_add_class_symlinks+0x1cf/0x240
[  387.650497][T22723]  device_add+0x475/0xb50
[  387.650510][T22723]  wiphy_register+0x1ba6/0x28d0
[  387.650527][T22723]  ? __pfx_wiphy_register+0x10/0x10
[  387.650535][T22723]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  387.650551][T22723]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  387.650564][T22723]  ieee80211_register_hw+0x3425/0x4080
[  387.650582][T22723]  ? ieee80211_register_hw+0x1461/0x4080
[  387.650595][T22723]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  387.650608][T22723]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  387.650619][T22723]  ? __hrtimer_setup+0x187/0x210
[  387.650626][T22723]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  387.650637][T22723]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  387.650657][T22723]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  387.650664][T22723]  ? trace_kmalloc+0x1f/0xd0
[  387.650673][T22723]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  387.650683][T22723]  ? kstrndup+0xbf/0x160
[  387.650694][T22723]  hwsim_new_radio_nl+0xea4/0x1b10
[  387.650703][T22723]  ? __pfx___nla_validate_parse+0x10/0x10
[  387.650720][T22723]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  387.650734][T22723]  ? __nla_parse+0x40/0x60
[  387.650745][T22723]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  387.650756][T22723]  genl_family_rcv_msg_doit+0x215/0x300
[  387.650766][T22723]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  387.650779][T22723]  ? bpf_lsm_capable+0x9/0x20
[  387.650788][T22723]  ? security_capable+0x7e/0x2e0
[  387.650800][T22723]  genl_rcv_msg+0x60e/0x790
[  387.650810][T22723]  ? __pfx_genl_rcv_msg+0x10/0x10
[  387.650816][T22723]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  387.650830][T22723]  netlink_rcv_skb+0x208/0x470
[  387.650839][T22723]  ? __lock_acquire+0xab9/0xd20
[  387.650850][T22723]  ? __pfx_genl_rcv_msg+0x10/0x10
[  387.650857][T22723]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  387.650874][T22723]  ? down_read+0x1ad/0x2e0
[  387.650884][T22723]  genl_rcv+0x28/0x40
[  387.650894][T22723]  netlink_unicast+0x82f/0x9e0
[  387.650906][T22723]  ? __pfx_netlink_unicast+0x10/0x10
[  387.650915][T22723]  ? netlink_sendmsg+0x642/0xb30
[  387.650923][T22723]  ? skb_put+0x11b/0x210
[  387.650934][T22723]  netlink_sendmsg+0x805/0xb30
[  387.650947][T22723]  ? __pfx_netlink_sendmsg+0x10/0x10
[  387.650958][T22723]  ? aa_sock_msg_perm+0xf1/0x1d0
[  387.650968][T22723]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  387.650976][T22723]  ? __pfx_netlink_sendmsg+0x10/0x10
[  387.650985][T22723]  __sock_sendmsg+0x21c/0x270
[  387.651002][T22723]  ____sys_sendmsg+0x505/0x830
[  387.651016][T22723]  ? __pfx_____sys_sendmsg+0x10/0x10
[  387.651031][T22723]  ? import_iovec+0x74/0xa0
[  387.651040][T22723]  ___sys_sendmsg+0x21f/0x2a0
[  387.651052][T22723]  ? __pfx____sys_sendmsg+0x10/0x10
[  387.651079][T22723]  ? __fget_files+0x2a/0x420
[  387.651090][T22723]  ? __fget_files+0x3a0/0x420
[  387.651106][T22723]  __x64_sys_sendmsg+0x19b/0x260
[  387.651117][T22723]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  387.651133][T22723]  ? rcu_is_watching+0x15/0xb0
[  387.651143][T22723]  ? do_syscall_64+0xbe/0x3b0
[  387.651155][T22723]  do_syscall_64+0xfa/0x3b0
[  387.651163][T22723]  ? lockdep_hardirqs_on+0x9c/0x150
[  387.651172][T22723]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.651178][T22723]  ? exc_page_fault+0x9f/0xf0
[  387.651188][T22723]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.651195][T22723] RIP: 0033:0x7f7a9318ebe9
[  387.651202][T22723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  387.651208][T22723] RSP: 002b:00007f7a93ffc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  387.651217][T22723] RAX: ffffffffffffffda RBX: 00007f7a933b5fa0 RCX: 00007f7a9318ebe9
[  387.651223][T22723] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  387.651227][T22723] RBP: 00007f7a93211e19 R08: 0000000000000000 R09: 0000000000000000
[  387.651232][T22723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  387.651236][T22723] R13: 00007f7a933b6038 R14: 00007f7a933b5fa0 R15: 00007ffc44594e58
[  387.651248][T22723]  </TASK>
[  387.911427][T22731] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4620'.
[  387.950448][T22733] syzkaller1: entered promiscuous mode
[  387.952426][T22733] syzkaller1: entered allmulticast mode
[  388.001546][T22735] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  388.230092][T22753] lo speed is unknown, defaulting to 1000
[  388.233920][T22753] lo speed is unknown, defaulting to 1000
[  388.312879][   T33] audit: type=1800 audit(1754981758.858:5): pid=22744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4623" name="memory.events" dev="tmpfs" ino=7882 res=0 errno=0
[  388.460987][T22753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4627'.
[  388.464019][T22753] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4627'.
[  388.467642][T22753] validate_nla: 7 callbacks suppressed
[  388.467650][T22753] netlink: 'syz.2.4627': attribute type 13 has an invalid length.
[  388.472276][T22753] netlink: 'syz.2.4627': attribute type 17 has an invalid length.
[  388.480921][T22753] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  388.506755][T22769] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4631'.
[  388.593802][T22774] mac80211_hwsim hwsim43 wlan1: entered allmulticast mode
[  388.611761][T22774] bond15: (slave ip6gretap2): Releasing backup interface
[  388.629678][T22774] bond15: (slave ip6gretap2): the permanent HWaddr of slave - 26:90:7e:c1:dd:04 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  388.653940][T22780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4634'.
[  388.662561][T22774] bond15: (slave veth13): Releasing backup interface
[  388.668613][T22774] netlink: 'syz.3.4632': attribute type 10 has an invalid length.
[  388.691803][T22774] mac80211_hwsim hwsim43 wlan1: left allmulticast mode
[  388.700971][T22774] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  388.706723][T22774] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  388.723364][T22788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4635'.
[  388.802193][T22795] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4638'.
[  388.890596][T22799] netlink: 'syz.2.4639': attribute type 9 has an invalid length.
[  388.894098][T22799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4639'.
[  388.903845][T22799] macvlan2: entered promiscuous mode
[  388.906458][T22799] hsr0: entered promiscuous mode
[  388.908776][T22799] macvlan2: entered allmulticast mode
[  388.911035][T22799] hsr0: entered allmulticast mode
[  388.913207][T22799] hsr_slave_0: entered allmulticast mode
[  388.915884][T22799] hsr_slave_1: entered allmulticast mode
[  388.995011][T11624] page_pool_release_retry() stalled pool shutdown: id 35, 51 inflight 241 sec
[  389.833739][T22820] lo speed is unknown, defaulting to 1000
[  389.837925][T22820] lo speed is unknown, defaulting to 1000
[  390.390679][T22830] nbd: nbd3 already in use
[  391.162319][T22895] lo speed is unknown, defaulting to 1000
[  391.187536][T22896] lo speed is unknown, defaulting to 1000
[  391.190145][T22895] lo speed is unknown, defaulting to 1000
[  391.200768][T22896] lo speed is unknown, defaulting to 1000
[  391.287989][T22898] lo speed is unknown, defaulting to 1000
[  391.291080][T22898] lo speed is unknown, defaulting to 1000
[  391.362041][T22902] netlink: 'syz.0.4671': attribute type 29 has an invalid length.
[  391.383210][T22903] netlink: 'syz.0.4671': attribute type 29 has an invalid length.
[  391.926283][T22925] netlink: 'syz.2.4678': attribute type 3 has an invalid length.
[  391.942204][T22925] ip_vti0: entered allmulticast mode
[  391.966640][T22925] tipc: Resetting bearer <eth:team0>
[  391.968508][T22925] tipc: Resetting bearer <eth:team0>
[  391.973045][T22925] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  391.981636][ T5907] lo speed is unknown, defaulting to 1000
[  391.994579][ T5907] syz1: Port: 1 Link ACTIVE
[  392.000609][T22924] ip_vti0: left allmulticast mode
[  392.029734][T22934] __nla_validate_parse: 7 callbacks suppressed
[  392.029744][T22934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4681'.
[  392.077095][T22937] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4682'.
[  392.110808][T22943] netlink: 'syz.0.4685': attribute type 1 has an invalid length.
[  392.113591][T22944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4684'.
[  392.142735][T22943] 8021q: adding VLAN 0 to HW filter on device bond21
[  392.162589][T22943] bond21: (slave ip6gretap0): making interface the new active one
[  392.165923][T22943] bond21: (slave ip6gretap0): Enslaving as an active interface with an up link
[  392.172366][T22943] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  392.178915][T22943] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  392.181333][T22943] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  392.202550][T22953] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  392.206109][ T5312] block nbd1: Possible stuck request ffff888021df8000: control (read@0,1024B). Runtime 330 seconds
[  392.209764][ T5312] block nbd1: Possible stuck request ffff888021df8200: control (read@1024,1024B). Runtime 330 seconds
[  392.214050][ T5312] block nbd1: Possible stuck request ffff888021df8400: control (read@2048,1024B). Runtime 330 seconds
[  392.221356][ T5312] block nbd1: Possible stuck request ffff888021df8600: control (read@3072,1024B). Runtime 330 seconds
[  392.250052][T22943] veth19: entered promiscuous mode
[  392.253346][T22943] bond21: (slave veth19): Enslaving as an active interface with a down link
[  392.356365][T22971] tap0: tun_chr_ioctl cmd 35108
[  392.395478][T22977] netlink: 'syz.2.4693': attribute type 10 has an invalid length.
[  392.401740][T22977] team0: Device 0! failed to register rx_handler
[  392.406491][T22977] netlink: 'syz.2.4693': attribute type 10 has an invalid length.
[  392.453026][T22983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4694'.
[  392.458816][T22989] netlink: 428 bytes leftover after parsing attributes in process `syz.3.4690'.
[  392.462592][T22989] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4690'.
[  392.508528][T22991] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4696'.
[  392.687489][T22999] lo speed is unknown, defaulting to 1000
[  392.691467][T22999] lo speed is unknown, defaulting to 1000
[  392.728216][T23002] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4697'.
[  392.738137][T23002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4697'.
[  392.919104][T23015] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4699'.
[  392.963678][T23019] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  393.153915][T23027] bpq0: left promiscuous mode
[  393.210026][T23031] openvswitch: netlink: Key type 30 is not supported
[  393.218091][T23034] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  393.232527][T23032] lo speed is unknown, defaulting to 1000
[  393.237114][T23032] lo speed is unknown, defaulting to 1000
[  393.623573][T23076] lo speed is unknown, defaulting to 1000
[  393.627519][T23076] lo speed is unknown, defaulting to 1000
[  393.665706][ T5906] ==================================================================
[  393.668478][ T5906] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  393.671339][ T5906] Read of size 1 at addr ffff8880239e6bb0 by task kworker/u8:4/5906
[  393.674526][ T5906] 
[  393.675662][ T5906] CPU: 1 UID: 0 PID: 5906 Comm: kworker/u8:4 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  393.675673][ T5906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  393.675679][ T5906] Workqueue: ipv6_addrconf addrconf_dad_work
[  393.675695][ T5906] Call Trace:
[  393.675699][ T5906]  <TASK>
[  393.675703][ T5906]  dump_stack_lvl+0x189/0x250
[  393.675713][ T5906]  ? __kasan_check_byte+0x12/0x40
[  393.675723][ T5906]  ? __pfx_dump_stack_lvl+0x10/0x10
[  393.675731][ T5906]  ? lock_release+0x4b/0x3e0
[  393.675742][ T5906]  ? __virt_addr_valid+0x4a5/0x5c0
[  393.675752][ T5906]  print_report+0xca/0x240
[  393.675758][ T5906]  ? xfrm_state_find+0x2cf2/0x5400
[  393.675767][ T5906]  kasan_report+0x118/0x150
[  393.675777][ T5906]  ? xfrm_state_find+0x2cf2/0x5400
[  393.675787][ T5906]  xfrm_state_find+0x2cf2/0x5400
[  393.675800][ T5906]  ? xfrm_state_find+0x1da/0x5400
[  393.675810][ T5906]  ? __pfx_xfrm_state_find+0x10/0x10
[  393.675821][ T5906]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  393.675833][ T5906]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  393.675841][ T5906]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  393.675849][ T5906]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  393.675855][ T5906]  ? addrconf_dad_work+0xc36/0x14b0
[  393.675870][ T5906]  ? __lock_acquire+0xab9/0xd20
[  393.675879][ T5906]  ? xfrm_expand_policies+0x41f/0x6a0
[  393.675887][ T5906]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  393.675893][ T5906]  ? lockdep_hardirqs_on+0x9c/0x150
[  393.675905][ T5906]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  393.675911][ T5906]  ? do_raw_spin_unlock+0x4d/0x240
[  393.675919][ T5906]  ? icmp6_dst_alloc+0x3a5/0x420
[  393.675926][ T5906]  ? icmp6_dst_alloc+0x3a5/0x420
[  393.675933][ T5906]  mld_sendpack+0x678/0xd80
[  393.675943][ T5906]  ? mld_sendpack+0x1de/0xd80
[  393.675950][ T5906]  ? __pfx_mld_sendpack+0x10/0x10
[  393.675959][ T5906]  ? mld_send_initial_cr+0x352/0x550
[  393.675966][ T5906]  ipv6_mc_dad_complete+0x88/0x410
[  393.675973][ T5906]  addrconf_dad_completed+0x6d5/0xd60
[  393.675985][ T5906]  ? __pfx_addrconf_dad_completed+0x10/0x10
[  393.675995][ T5906]  ? addrconf_dad_work+0xd83/0x14b0
[  393.676006][ T5906]  addrconf_dad_work+0xc36/0x14b0
[  393.676015][ T5906]  ? __lock_acquire+0xab9/0xd20
[  393.676026][ T5906]  ? __pfx_addrconf_dad_work+0x10/0x10
[  393.676036][ T5906]  ? process_scheduled_works+0x9ef/0x17b0
[  393.676043][ T5906]  ? _raw_spin_unlock_irq+0x23/0x50
[  393.676051][ T5906]  ? process_scheduled_works+0x9ef/0x17b0
[  393.676057][ T5906]  ? process_scheduled_works+0x9ef/0x17b0
[  393.676063][ T5906]  process_scheduled_works+0xae1/0x17b0
[  393.676075][ T5906]  ? __pfx_process_scheduled_works+0x10/0x10
[  393.676084][ T5906]  worker_thread+0x8a0/0xda0
[  393.676091][ T5906]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  393.676100][ T5906]  ? __kthread_parkme+0x7b/0x200
[  393.676109][ T5906]  kthread+0x711/0x8a0
[  393.676117][ T5906]  ? __pfx_worker_thread+0x10/0x10
[  393.676124][ T5906]  ? __pfx_kthread+0x10/0x10
[  393.676132][ T5906]  ? _raw_spin_unlock_irq+0x23/0x50
[  393.676139][ T5906]  ? lockdep_hardirqs_on+0x9c/0x150
[  393.676152][ T5906]  ? __pfx_kthread+0x10/0x10
[  393.676160][ T5906]  ret_from_fork+0x3fc/0x770
[  393.676168][ T5906]  ? __pfx_ret_from_fork+0x10/0x10
[  393.676175][ T5906]  ? __switch_to_asm+0x39/0x70
[  393.676184][ T5906]  ? __switch_to_asm+0x33/0x70
[  393.676192][ T5906]  ? __pfx_kthread+0x10/0x10
[  393.676200][ T5906]  ret_from_fork_asm+0x1a/0x30
[  393.676211][ T5906]  </TASK>
[  393.676214][ T5906] 
[  393.790952][ T5906] Allocated by task 20146:
[  393.792403][ T5906]  kasan_save_track+0x3e/0x80
[  393.793901][ T5906]  __kasan_slab_alloc+0x6c/0x80
[  393.795421][ T5906]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  393.797118][ T5906]  xfrm_state_alloc+0x24/0x2f0
[  393.798640][ T5906]  __find_acq_core+0x8a7/0x1c00
[  393.800207][ T5906]  xfrm_find_acq+0x78/0xa0
[  393.801623][ T5906]  xfrm_alloc_userspi+0x6b3/0xc90
[  393.803242][ T5906]  xfrm_user_rcv_msg+0x7a3/0xab0
[  393.804871][ T5906]  netlink_rcv_skb+0x208/0x470
[  393.806421][ T5906]  xfrm_netlink_rcv+0x79/0x90
[  393.807918][ T5906]  netlink_unicast+0x82f/0x9e0
[  393.809441][ T5906]  netlink_sendmsg+0x805/0xb30
[  393.811020][ T5906]  __sock_sendmsg+0x21c/0x270
[  393.812586][ T5906]  ____sys_sendmsg+0x505/0x830
[  393.814182][ T5906]  ___sys_sendmsg+0x21f/0x2a0
[  393.815770][ T5906]  __x64_sys_sendmsg+0x19b/0x260
[  393.817433][ T5906]  do_syscall_64+0xfa/0x3b0
[  393.818945][ T5906]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.820889][ T5906] 
[  393.821672][ T5906] Freed by task 11623:
[  393.822990][ T5906]  kasan_save_track+0x3e/0x80
[  393.824524][ T5906]  kasan_save_free_info+0x46/0x50
[  393.826153][ T5906]  __kasan_slab_free+0x5b/0x80
[  393.827660][ T5906]  kmem_cache_free+0x18f/0x400
[  393.829180][ T5906]  xfrm_state_gc_task+0x52d/0x6b0
[  393.830836][ T5906]  process_scheduled_works+0xae1/0x17b0
[  393.832586][ T5906]  worker_thread+0x8a0/0xda0
[  393.834023][ T5906]  kthread+0x711/0x8a0
[  393.835396][ T5906]  ret_from_fork+0x3fc/0x770
[  393.836926][ T5906]  ret_from_fork_asm+0x1a/0x30
[  393.838444][ T5906] 
[  393.839190][ T5906] The buggy address belongs to the object at ffff8880239e6880
[  393.839190][ T5906]  which belongs to the cache xfrm_state of size 928
[  393.843421][ T5906] The buggy address is located 816 bytes inside of
[  393.843421][ T5906]  freed 928-byte region [ffff8880239e6880, ffff8880239e6c20)
[  393.847607][ T5906] 
[  393.848399][ T5906] The buggy address belongs to the physical page:
[  393.850638][ T5906] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880239e7180 pfn:0x239e4
[  393.854617][ T5906] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  393.857934][ T5906] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  393.860964][ T5906] page_type: f5(slab)
[  393.862619][ T5906] raw: 00fff00000000040 ffff88801e24a3c0 dead000000000122 0000000000000000
[  393.866087][ T5906] raw: ffff8880239e7180 00000000800e000a 00000000f5000000 0000000000000000
[  393.869509][ T5906] head: 00fff00000000040 ffff88801e24a3c0 dead000000000122 0000000000000000
[  393.872516][ T5906] head: ffff8880239e7180 00000000800e000a 00000000f5000000 0000000000000000
[  393.875932][ T5906] head: 00fff00000000002 ffffea00008e7901 00000000ffffffff 00000000ffffffff
[  393.879360][ T5906] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  393.882746][ T5906] page dumped because: kasan: bad access detected
[  393.885313][ T5906] page_owner tracks the page as allocated
[  393.887350][ T5906] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 11330, tgid 11326 (syz.1.1507), ts 174386399377, free_ts 174339342574
[  393.893826][ T5906]  post_alloc_hook+0x240/0x2a0
[  393.895642][ T5906]  get_page_from_freelist+0x21e4/0x22c0
[  393.897566][ T5906]  __alloc_frozen_pages_noprof+0x181/0x370
[  393.899850][ T5906]  alloc_pages_mpol+0x232/0x4a0
[  393.901674][ T5906]  allocate_slab+0x8a/0x370
[  393.903211][ T5906]  ___slab_alloc+0xbeb/0x1410
[  393.904956][ T5906]  kmem_cache_alloc_noprof+0x283/0x3c0
[  393.906781][ T5906]  xfrm_state_alloc+0x24/0x2f0
[  393.908558][ T5906]  xfrm_state_find+0x37d4/0x5400
[  393.910379][ T5906]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  393.912594][ T5906]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  393.914284][ T5906]  xfrm_lookup_route+0x3c/0x1c0
[  393.915842][ T5906]  udp_sendmsg+0x142e/0x2170
[  393.917382][ T5906]  __sock_sendmsg+0x19c/0x270
[  393.918934][ T5906]  ____sys_sendmsg+0x52d/0x830
[  393.920470][ T5906]  ___sys_sendmsg+0x21f/0x2a0
[  393.921959][ T5906] page last free pid 5843 tgid 5843 stack trace:
[  393.923962][ T5906]  __free_frozen_pages+0xbc4/0xd30
[  393.925570][ T5906]  __put_partials+0x156/0x1a0
[  393.927061][ T5906]  put_cpu_partial+0x17c/0x250
[  393.928584][ T5906]  __slab_free+0x2d5/0x3c0
[  393.930029][ T5906]  qlist_free_all+0x97/0x140
[  393.931532][ T5906]  kasan_quarantine_reduce+0x148/0x160
[  393.933276][ T5906]  __kasan_slab_alloc+0x22/0x80
[  393.934948][ T5906]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  393.936663][ T5906]  vm_area_dup+0x2b/0x680
[  393.938029][ T5906]  dup_mmap+0x90c/0x1ac0
[  393.939353][ T5906]  copy_mm+0x13c/0x4b0
[  393.940625][ T5906]  copy_process+0x1706/0x3c00
[  393.942135][ T5906]  kernel_clone+0x21e/0x840
[  393.943584][ T5906]  __x64_sys_clone+0x18b/0x1e0
[  393.945092][ T5906]  do_syscall_64+0xfa/0x3b0
[  393.946535][ T5906]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.948400][ T5906] 
[  393.949161][ T5906] Memory state around the buggy address:
[  393.951237][ T5906]  ffff8880239e6a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  393.953908][ T5906]  ffff8880239e6b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  393.956634][ T5906] >ffff8880239e6b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  393.959334][ T5906]                                      ^
[  393.961369][ T5906]  ffff8880239e6c00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  393.964323][ T5906]  ffff8880239e6c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  393.966941][ T5906] ==================================================================
[  393.988071][T23083] validate_nla: 4 callbacks suppressed
[  393.988087][T23083] netlink: 'syz.3.4718': attribute type 21 has an invalid length.
[  393.989008][ T5906] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  393.989018][ T5906] CPU: 1 UID: 0 PID: 5906 Comm: kworker/u8:4 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  393.989028][ T5906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  393.989034][ T5906] Workqueue: ipv6_addrconf addrconf_dad_work
[  393.989050][ T5906] Call Trace:
[  393.989053][ T5906]  <TASK>
[  393.989057][ T5906]  dump_stack_lvl+0x99/0x250
[  393.989068][ T5906]  ? __asan_memcpy+0x40/0x70
[  393.989076][ T5906]  ? __pfx_dump_stack_lvl+0x10/0x10
[  393.989084][ T5906]  ? __pfx__printk+0x10/0x10
[  393.989096][ T5906]  vpanic+0x281/0x750
[  393.989103][ T5906]  ? preempt_schedule+0xae/0xc0
[  393.989113][ T5906]  ? __pfx_vpanic+0x10/0x10
[  393.989120][ T5906]  ? preempt_schedule_common+0x83/0xd0
[  393.989128][ T5906]  ? preempt_schedule+0xae/0xc0
[  393.989135][ T5906]  ? __pfx_preempt_schedule+0x10/0x10
[  393.989169][ T5906]  panic+0xb9/0xc0
[  393.989181][ T5906]  ? __pfx_panic+0x10/0x10
[  393.989195][ T5906]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  393.989211][ T5906]  ? xfrm_state_find+0x2cf2/0x5400
[  393.989257][ T5906]  check_panic_on_warn+0x89/0xb0
[  393.989273][ T5906]  ? xfrm_state_find+0x2cf2/0x5400
[  393.989288][ T5906]  end_report+0x78/0x160
[  393.989304][ T5906]  kasan_report+0x129/0x150
[  393.989322][ T5906]  ? xfrm_state_find+0x2cf2/0x5400
[  393.989336][ T5906]  xfrm_state_find+0x2cf2/0x5400
[  393.989350][ T5906]  ? xfrm_state_find+0x1da/0x5400
[  393.989360][ T5906]  ? __pfx_xfrm_state_find+0x10/0x10
[  393.989372][ T5906]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  393.989385][ T5906]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  393.989392][ T5906]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  393.989400][ T5906]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  393.989407][ T5906]  ? addrconf_dad_work+0xc36/0x14b0
[  393.989423][ T5906]  ? __lock_acquire+0xab9/0xd20
[  393.989432][ T5906]  ? xfrm_expand_policies+0x41f/0x6a0
[  393.989440][ T5906]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  393.989447][ T5906]  ? lockdep_hardirqs_on+0x9c/0x150
[  393.989457][ T5906]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  393.989464][ T5906]  ? do_raw_spin_unlock+0x4d/0x240
[  393.989472][ T5906]  ? icmp6_dst_alloc+0x3a5/0x420
[  393.989480][ T5906]  ? icmp6_dst_alloc+0x3a5/0x420
[  393.989487][ T5906]  mld_sendpack+0x678/0xd80
[  393.989498][ T5906]  ? mld_sendpack+0x1de/0xd80
[  393.989505][ T5906]  ? __pfx_mld_sendpack+0x10/0x10
[  393.989515][ T5906]  ? mld_send_initial_cr+0x352/0x550
[  393.989522][ T5906]  ipv6_mc_dad_complete+0x88/0x410
[  393.989530][ T5906]  addrconf_dad_completed+0x6d5/0xd60
[  393.989541][ T5906]  ? __pfx_addrconf_dad_completed+0x10/0x10
[  393.989552][ T5906]  ? addrconf_dad_work+0xd83/0x14b0
[  393.989563][ T5906]  addrconf_dad_work+0xc36/0x14b0
[  393.989573][ T5906]  ? __lock_acquire+0xab9/0xd20
[  393.989584][ T5906]  ? __pfx_addrconf_dad_work+0x10/0x10
[  393.989594][ T5906]  ? process_scheduled_works+0x9ef/0x17b0
[  393.989602][ T5906]  ? _raw_spin_unlock_irq+0x23/0x50
[  393.989609][ T5906]  ? process_scheduled_works+0x9ef/0x17b0
[  393.989615][ T5906]  ? process_scheduled_works+0x9ef/0x17b0
[  393.989622][ T5906]  process_scheduled_works+0xae1/0x17b0
[  393.989633][ T5906]  ? __pfx_process_scheduled_works+0x10/0x10
[  393.989644][ T5906]  worker_thread+0x8a0/0xda0
[  393.989656][ T5906]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  393.989670][ T5906]  ? __kthread_parkme+0x7b/0x200
[  393.989683][ T5906]  kthread+0x711/0x8a0
[  393.989697][ T5906]  ? __pfx_worker_thread+0x10/0x10
[  393.989710][ T5906]  ? __pfx_kthread+0x10/0x10
[  393.989723][ T5906]  ? _raw_spin_unlock_irq+0x23/0x50
[  393.989734][ T5906]  ? lockdep_hardirqs_on+0x9c/0x150
[  393.989746][ T5906]  ? __pfx_kthread+0x10/0x10
[  393.989758][ T5906]  ret_from_fork+0x3fc/0x770
[  393.989771][ T5906]  ? __pfx_ret_from_fork+0x10/0x10
[  393.989784][ T5906]  ? __switch_to_asm+0x39/0x70
[  393.989799][ T5906]  ? __switch_to_asm+0x33/0x70
[  393.989813][ T5906]  ? __pfx_kthread+0x10/0x10
[  393.989827][ T5906]  ret_from_fork_asm+0x1a/0x30
[  393.989847][ T5906]  </TASK>
[  393.991273][ T5906] Kernel Offset: disabled

VM DIAGNOSIS:
06:56:04  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=ffff8880249825c0 RCX=ffff888105e61cc0 RDX=0000000000000000
RSI=ffffffff8dba3bae RDI=ffffffff8be32680 RBP=ffff88812925c368 RSP=ffffc90003c4fa18
R8 =0000000000000000 R9 =ffffffff8b464652 R10=dffffc0000000000 R11=ffffffff8b464580
R12=dffffc0000000000 R13=ffffffff8b464652 R14=ffff8881293fcd80 R15=000000000000006d
RIP=ffffffff8b7b9be0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffcaba32fe8 CR3=0000000111454000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000010011
XMM02=5ca9cd06921da79d 8bf66b01de5c12bb XMM03=4fb203fa4b02780f 0a037798331339ce
XMM04=3f2a97d9be6f22aa 3ec8af115a7de26d XMM05=f68903ede9928774 7ab1927c70edcc14
XMM06=3b48e9c07f4a0df8 b12e11d22f0004b6 XMM07=b5ddbcf4f6355765 79b63f2a97d9be6f
XMM08=22aa3ec8af115a7d e26d4fb203fa4b02 XMM09=0000000000000000 00007f7c0a012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000033 RBX=0000000000000033 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003eae870
R8 =ffff888107280237 R9 =1ffff11020e50046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af48c6 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3fe8774870 CR3=000000011faa8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f XMM01=0000000000000000 0000ff00000000ff
XMM02=00ff000000000000 0000000000000000 XMM03=0000000000000000 000000000042494c
XMM04=6362696c5f5f0045 5441564952505f43 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
