last executing test programs:

6.017108116s ago: executing program 1 (id=1285):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x5)
clock_gettime(0x0, &(0x7f0000000940)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f0000000000)=[{r0, 0x4020}], 0x1, &(0x7f0000000100)={r1, r2+10000000}, 0x0, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000001c0)={0x1})

5.051419848s ago: executing program 1 (id=1294):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x5, 0x0) (async)
r2 = socket(0xa, 0x3, 0x3a)
sendmmsg$unix(r2, &(0x7f0000003a80)=[{{&(0x7f0000000540)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1000001c0000000000000005000000000000003fa604f9d8d6e0f49061c64abc690cfa8659cc74a6fe8a7cac59c09b05b43155f26757f9b59caf0693b0c73b2d442df7c1eeccb703cafd37f4d7b53dc282fac485477836e714e000"/101, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30, 0x4004}}], 0x1, 0x80) (async)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r1, &(0x7f0000000340)={0xa, 0x4e20, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r3, &(0x7f0000000540)="0b09207965b0b9f1", 0xffeb, 0x0, &(0x7f0000000340), 0x10) (async)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a)
sendfile(r4, r5, 0x0, 0xffffffff000)
ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e23, @multicast2}, 0x12, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)='bridge0\x00', 0xfff, 0x8, 0x4})
r6 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00', <r7=>0x0})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000400)={'ip6tnl0\x00', r7, 0x4, 0xf9, 0xff, 0x9c1, 0x23, @empty, @ipv4={'\x00', '\xff\xff', @local}, 0x7, 0x80, 0x60, 0x5}}) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500000004000000040000000a00000040000000", @ANYRES32, @ANYBLOB="000000000000000000000010000021000000000072e8a3b6d59498f6e8aab9e5340f54bbc4e3a74ec011b4855c127c80cc62d92c50576ecd4369b0415a394c4a814d366dd225f7776485ecae77be2d86ff32d76c328fbcb0c4696770ae", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000740)='q', 0x0, 0x0, 0x0, 0xa09, r9}, 0x38) (async)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x11}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x280048d1}, 0x80) (async)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r7, @ANYBLOB="050006000100000005000700000000005bef53a5b5587cb0863f71d1000300df00000008000200", @ANYRES64=r0], 0x68}}, 0x0)

4.890803661s ago: executing program 1 (id=1295):
r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$alg(0x26, 0x5, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000400)={@remote, @rand_addr, <r4=>0x0}, &(0x7f0000000440)=0xc)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r4, 0x4, 0x40, 0xfd, 0x8, 0x40, @mcast1, @private0, 0x20, 0x1, 0x2}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
socket$kcm(0x2, 0x1000000000000005, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r5], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$bt_hci(r7, 0x0, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r6)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0xf4, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x27}}}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x2, 0x2, 0x0, {0x0, 0x2, 0x0, 0x121, 0x0, 0x0, 0x0, 0x3}, 0x6, 0x4, 0x6}}, @NL80211_ATTR_MAC={0xa, 0x6, @random="fb84068b42d4"}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x10000000, {0x9d, 0xa1a8, 0x2, 0x3ff}}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8000, 0x2, 0x3, 0x0, {0x6, 0xe92, 0x0, 0xe3, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x800, 0x8, 0x7f}}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_FILS_KEK={0xa, 0xf2, "5c3224f03ce7"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_DISABLE_HT={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x196}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x200000, {0xe4f0, 0x2, 0x81, 0x2}}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x10}, 0x0)

4.790821037s ago: executing program 1 (id=1296):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0xa4}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, "dc"}, {0x10, 0x113}, {0x10, 0x117}], 0x38}, 0x404f444)
socket$pppl2tp(0x18, 0x1, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
unshare(0x6a040000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020600000000000000000000000500000000000000001b7f5b920d6a47d20c0000000900020200000000000000001100030068f733e31f58"], 0x58}}, 0x0)
connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
recvmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000)
sendmsg$nl_generic(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x39, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
socketpair(0x1a, 0x6, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff})
sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20048010}, 0x30)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

4.238804441s ago: executing program 0 (id=1299):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'gre0\x00', @broadcast}) (async)
bind$netlink(r0, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000140)=ANY=[@ANYRESOCT=0x0], 0xd4}, 0x1, 0x0, 0x0, 0x804}, 0x4040094)

4.148561216s ago: executing program 0 (id=1301):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000002100)={0x1, 0x8, 0x0, 0x7, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
unshare(0x400)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x23, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socket$packet(0x11, 0x2, 0x300)
socket(0x1d, 0x4, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
connect$unix(r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000340)={0x0, 0x3, 0xec, &(0x7f00000006c0)=""/236})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-neonbs\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffff000000000000080045f8ac1e0001ac1414aa0480907800000000452106c2006400071827478182c54edf290c00cfedb6101c51100f84a89dce7271d8d8aa1b174dc8dc87ecce4333b50c81819a75962554e0504315545ea158f21ff2e6a339bc3669c298f1807af666c23ab81583e13ef8f6e7e1eaa8110d2bc76ef5cfdf552c160d9aa471445f0e44021a56198082ef8ef16be4ae39a6ca8630d0186bfdbe0d172b54b566e17b480f64c923060a65ff1838368fc69cea"], 0x0)
socket$netlink(0x10, 0x3, 0x72f9a55bbc154bbd)
socket$netlink(0x10, 0x3, 0x2)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r6}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5}, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000ffdbdf25010000000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x0)
ppoll(0x0, 0xffffffffffffff35, 0x0, &(0x7f0000000040)={[0xfe9]}, 0x8)
socket(0x10, 0x803, 0x0)

3.89890562s ago: executing program 1 (id=1302):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket(0x2b, 0x80801, 0x1)
setsockopt$inet6_int(r1, 0x29, 0x1e, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c)

3.648283628s ago: executing program 0 (id=1303):
r0 = socket(0x28, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0x5, @usr_ip6_spec={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x23}, 0xfffffff8, 0x3d, 0xe}, {0x0, @local, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @multicast1, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x8, [0xf, 0x9]}, 0xff, 0x3}}})
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket(0x1e, 0x4, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})
getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', r3, 0x29, 0x9, 0x8, 0x800, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x10, 0x0, 0xe7, 0x3}})
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$rds(0x15, 0x5, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x19, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX, @ANYRES16=r4], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x18)
ppoll(&(0x7f0000000500)=[{r5, 0x1004}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000440)={0x7, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0xe26, 0x8000000000, 0x800000003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
r9 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r10 = accept4(r9, 0x0, 0x0, 0x80000)
setsockopt(r10, 0x64, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000540)={'gretap0\x00', 0x0, 0x40, 0x700, 0x7, 0x7, {{0x19, 0x4, 0x1, 0x1, 0x64, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0x8010101, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @ssrr={0x89, 0x13, 0x3e, [@multicast2, @empty, @broadcast, @loopback]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @ra={0x94, 0x4}]}}}}})
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'})
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x2, 0x4}, 0x6)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f0000000180)=0x5, 0x8)

3.647389423s ago: executing program 1 (id=1304):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0xe7878000)
socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00', 0x7)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432})
readv(r3, &(0x7f0000000000)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1)
r4 = socket$kcm(0x2, 0x2, 0x2)
r5 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r6, &(0x7f0000000000)={0x1, @auth_requested={{0x411, 0x2}, {0xc8}}}, 0x6)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
close(0x3)
close(0x4)

3.428104451s ago: executing program 32 (id=1304):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0xe7878000)
socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00', 0x7)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432})
readv(r3, &(0x7f0000000000)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1)
r4 = socket$kcm(0x2, 0x2, 0x2)
r5 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r6, &(0x7f0000000000)={0x1, @auth_requested={{0x411, 0x2}, {0xc8}}}, 0x6)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
close(0x3)
close(0x4)

2.68071929s ago: executing program 0 (id=1308):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r3, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000040)="17", 0x1}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e20, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000a40)='~', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x9}, &(0x7f0000000180)=0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00070000000000000000000080000000080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x128, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xe, 0x8, [0x1a, 0xf, 0xf, 0x2f, 0x23, 0x3e, 0x30, 0x15, 0x3b, 0xe, 0x1e, 0x17, 0x1b, 0x3c, 0x36, 0x4], 0x2, 0x2, 0x8}}}, {{@uncond, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x6, 0x0, 'snmp\x00', {0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0)
r7 = socket$inet(0x2, 0x1, 0x100)
setsockopt$sock_int(r7, 0x1, 0x48, &(0x7f0000000040)=0x3, 0x4)
connect$inet(r7, &(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10)
mmap(&(0x7f0000440000/0x3000)=nil, 0x3000, 0x2, 0x110010, r1, 0xf5cc9000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)

1.560148351s ago: executing program 0 (id=1317):
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x18, 0x140c, 0x4, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x20000056)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}]}, 0x50}}, 0x0)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' @\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000004"], 0x24}}, 0x4004)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27, 0x2}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x27, 0x3c, 0x0, 0x0, 0x8, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0x0, 0x0, 0x28, {[@nop, @timestamp={0x5, 0xa, 0x0, 0x700}, @generic={0x0, 0x8, "d58838000391"}]}}}}}}, 0x4a)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000f40), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000000)={0x1})

1.557921426s ago: executing program 2 (id=1318):
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x1}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xfee}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040081}, 0x44080)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000001340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001300)={&(0x7f0000000240)={0x1090, r1, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x3b, 0xfc, "fe46178f845246fd1cb359a18ac4180525a1deadf579defc9a2fa83b71b08837041a873018e4ff72d6db3e2a1eb176c760387c4e70c582"}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "4b5e0b8509dbfbab300871efc314c9af25ae25e2b9f6bced43ab900e49408f974f07204b576ea5beea91ad58d7a6d098df1d4941d28305f84cf935f72e9505772be4b8b9887b55a6f5ee2ef4a19d0d20c84f882c2736e6c5f46759bb38380a237240f27fe97d0760ea7d506f7063078d65c42860612aa8dbd0464312181deb444639b06a860263586bb61d65210bcb85e10eaf1cc3415c8e61e3fc5696e38e07bdd8c70d5630445200ce27c2a29883e1a890cb64a1ad11eddbe446db4b13f1fc0a1c936f7030f3750115a660e2e69e5f06a62c646510a1fdd0f83b9b0fd7bf379d0318f5c7cec36e7d5efa14a6a71a5a5aab1c97fb6c13304ec6bb9bedeb794f8380d6788ad30d95a072a282d38d5b7ff24f74c4e94afeb3bd9630cba244e26e790040e8a838e643a715ab04c747a9f83c9fa9db8cd98279242d975e2d4fe18e9339382a3ed482d7e8f2e43c039858d0a937c5b2736c3aec11fcad432bf82ccca201c09748bb27fcd1cd15b0c0d549b2284fb24ede197a47109a89cbbcb7c7d34a2673fb05fcbe9fc9992f5aa895d358d8c6d6d20700c8bf5fab5e5e9c076432d797ff489205fac3d663b53e239ae2e5f72277ebd00be71afe2e8f13dfce7abf95811b993e304ce2a54bd208cf912a73c5c89b463598f810c68058ee1a8ba74273f0acdd695f5d373e2cafde3ae1ffcf96db59ad07a76a3add1f9039a7df19fbc396cd8484d690c3f186f44ca20d963cb7c4a30bd2528d5ed60dd4a2dc6a445a8d2a4dbbdb78ce51f9bbb2e42543cfa7867e26e2c6562d6022a3b0daac03b9598173a4c363bdf267799604729c576e92055b9a71a78c44475abbccc82011d7a32eb5bdcf8d6e176bf482eb7158f4a8527ac8e4798e05a86aa762dc5ff14f6c99ba489a0abc84d765d8bdf260718c50a6f19367457f0bf50a98ff915ef0ad0cff3d917f5f4e5ca6bdad8ea000fca9282d8160c4277e79cbef2b2f1eed772ebe5426e9a26168d86bd2984e9eff76e65be083bee27cc4e70b1d28e95dea25bad671ac7633224899f064c6e4e57afae5118950230c701ec6edbf1b3a8345c2c8e9bca85ee9afdd4cfa6a0904e133d22ac1c18b8efa6e3295c36ca73761405f940aa0584a33143cc6c78f747c6eb7887aca4a01ba8eb3cc7d769f493456c2bce57b6daa9e74edb08ac4abbe1db85781c75d14059d0b9f3076ed402d3532f15d16a7f113dbd32445b421e5bafc3ea0557c91caf2a379a6198c21d501254e8db63a632152bbb08db1754950805266a3a79b48a838632427e33ffdfc936f1c1fb0521be3e02abea61a02e2ddfc7d3b94f6487db6370243f2cc8948b7b95ad2cbf92876cb2f41f70ce3a6759cbd41e0dec2c0e0e6a3d838817ae31f7c6c22195ab73ebaa506f7b9e7798286d4b75843067ff913af3783493a2210584f0f254282825f17e821506b9f751989c422d079a6dfa4ade0df1f49babbc567f8999818c0014cea5743a627399f7e7869b7794031d28a07d068f49169ac34d68d10cc6b884330bd3d3bae97f8122ab5b4ccf81390a3bcb51148044c7c941ac4a2ca4f575f379bc320aad2229075c139dec72281d5fff3525fb6b7e7a676d313f8f38f9f1a0a9ad61ff4405e551fe8de1b90b40a73d185e1e9a0789d77e3dfd56bf3312c13a660f5c91cdc2787e4d5a6769397e1b9771fe5203e7a9b65325e493c99c8455ca5ceebac6cf4d2d161e3f43d3aa5cb2ac0a17af09314bb86118c101cff99a0d12e2e5a9b2f3ee2f5055249f73a5f838be607e5ac396e3c39f26e8c1fd348b634b38cf95041b6e39796c8ce05deaf263e2caa8c9949e577ea184008b4f440bef1d59df9d4ca8280b2922797004637978fa75c2d6d152523eb20aa9ca052156466eca8fbb4469c16d9039c989c72f646656e54ba0d60471eb6be00e9d0ef4f3ed5598d785d7032b329c98e85cda7ac82298af95c4eaea5415425392de1162962e1690a93aba9e9cb236c3e62877461462795d4e5d8d983f32ad395882750e776c7594cf28c8814664d01a88a9488ac88aeda0474fa67287c58fed116d4abc5893fcf1e10f8fb129fe11a53440439d7699bd83799de4fe59beb5e83b9f6638832816424c3cdac43a16cfb5bdc916e663c476c76d792fe5466c634024edd67577f33dd01ebc5d6f814573bd54c899d0fdcad7d3143315385a9af20df808760b07b1f67a275bbdb40f25b908dddc5f5d41f80b1b6849dac0303fb95b1a4042260924fcd62023365cf0c9c6da67e54f9961be45f005832378fd639ea5beca8c2b478c9c4863ddb5dcbe793cf48c50ba169f61d7a076e587cb9ec6fef30861e66bf6d837674509ff5d5dee0d39da2e55b565b346b70dafc9f3a53775742cc7354e0ea895852112086717c06548849542063781a830e5e3b90d590fa67c64a55e3df0bc0499d241fcd89b8f11a38b0def62d9a8933227dc7afe2b816b42d4c3793d8f17336af568d1eae3bbad43c9e4aab6efc0307460d634649ba844cd1c6d0c29b79e3a86240f46f26dc4a9bdb79e1754811f652c2222a40725d46b68512e552e26b827c68ddaf2625570b93141cba2c2cda3cc1e29308cf96c703e7a0a9dc5e96a64daf0c51b4dc8ff8094ddfa9df64a5eb7957b20e3ca1a109ff0afac6529cb0cacf71595099e81b266d02b861ca58e8f3a573502086c1d5b5ffd4d7fcb94c5f5acbbb73db39dafd6b7e968631cd56fd4e14e0a3e266c419c1fe8b6f3ef5fac0bc47dd66242098b6145614f0de3e699b4559de125f7268a4273a073e5939a45e39d2a8fc6cce6d44fe5a89ed94f101650996b9a6ecd3c40fddde2b4819c607580f0493c6cd27b07b05245417b4c199da0086471b872f1112d90e4f5c64ef3121355550fad39678ac97bc2dd7654f7c4b4a54e71d5ca71ceb7fda1cb2af25a7fe88e11563bb1d3de053779afa8a4cbcbb7e44b915472d94c111b58e4d0b80435fad3f6084b0404c7003c25fc33218439bde12c4879f500842552c0c9cbc1136e3d9c87b4278e434b6f944d557836361795d4800b48aa41f91ca474d8240c17ad3085b48e90cfbc7b330468db29df28d6be00c814011883cddf901303a8b542de84d1c76e2d64735d1b52ea50ac4388b16a41c4735995cb06fefffb20198a1f3e16409df1ceebd3d4f38f682cc49faa39a7cb3d91754e98859b4ee8a100cfab16ee97f0a0946e2a8a2f0b07bcd2d751c638d7a746dc36d6204f35d66208a09a1846459d8593b0ea18d182e9799b18452aa3cb964af35646b09a7ff82772c492f880b94f20c3c2a30d5dd9912cc90a6534287bb03932a6b00f5f707a5e6321d25ad2eb4f40fa366dbd07be6f22d97b6ee3f63b5866ee8f68906f550942693f4b4bd7f8675047b0e76e48df108857e315948da2c8b9d6cb95791fcafcae73cd546cdfcdab0dd63b0ca769c5e5c693d6ded5510c93ddbf1dc928eb717e7378ffc8833b99018d3f4ed1735e746e1da19eff91961a4ce851e78e93ed1c0286c5c60e856e5167598cf8177d7ddf2b813cbf08ae687d85affa2b093f34f0dce7f85965afd663827b4512fe6f4d84a75bcdd62f70083c922ed6f0afb6aa17b20bac32835d8aa6be1998e5c23775a074e455ff3a4e6dd426b38cba3b3c8c81f6cf1d356e38b7ce5b6d07da3a96a6330ec16692eae381ec43adfdf00390eb308e12c9298ff62461a82d0badbe6061a4b1e5aa7ccf7253476cf7b3fb578b4dfcb43561cc9d82495b3af590561a321c22327f9750f3ffe1167a3d1ab97faf6bea9a4b7ab2630e129f09047bbaa99aa0997a95434f891c412b5eff80af872dc2c2bab67ea80cc9b94704eed1c3d4c955116da1950d29866467d17b723fd306d62f3e39eeb50d3d3e2dce64769522ee283a617accfbeda469ee5ca003def13421e2a74f9d446c49241cfc167fb6a63c43adcbf6c7112013a09e878383d8e0ddff5098500100b4b451cfaacf934a5dcb1984786e4f24e3edaf4f2a17af63ecc13760c09e6e752d509f0bd5e5af609f3ebbf4becb6eb76f1603f55fd0bb906fd5d58ee40f8101b9d98b828ce80c188a329be2fd60fa1aefb8cddba88453d1de0d964816ca96349505c7e0cd00b8ae14290e37765f5db6f7315defa63e5bd706b4a20459a5443a5974b920473dffbdc6cd790d175355dfe68b89c2d83bab2bb9f90b2ae7edc7259a6bf7806c5935ee5c9eec31e59421dd9c030501ade36e4a54442e6e53c6e0e048f17ecbb8292c69ae1bd5e6a7862cf4599aeff6d7a5300c1e42b914d8e5381158cd6204fc22eb10865b0a07a94b166c19bd45c7fabb3438df81bdc21144e68fa46bbca22bb6d2654c3f426d7e39ef00a24ade9ea7fca721ee3ae71c1b3e345dba524f06a8b70fc6e15a9052f20d5d771385ce14bbd010a89fd42f98dca714c46745798660a4e3aa0fad6a7ceab1e5b081b2061db153e8bbdf245a5dfe99937d687a6f7bf5416a261943ae1b2c7cc9c082f2e9eea459caf3da90bb04f68384bbffbeffa95cbe08966dbce7b0d5b0482f2deb50fcce353e034ea1fe072fe08cd5d61aed31efe3e9699c2badcd10826a86a7fda3648820548d69aa8ba0674760bf5fd56e40074e39787c707650ddfb27d4d02a07f908d2d2ac090a066022124880026c29e8fb535fd9a6bedc33ba1c34c12d99f8c1048cd2623e491dc4be27e32335d3045aa6cc7f190234a31b73a642000608c39e1dadf6a56c125e70a75ceefc4dd068ad032e91da0006754886d82a220214409bb6bc86010b033d47a28f41b9c037a2ba2b2b86b6e4e371fb9f93c844e807e40119f47dc4780f0df2ccebb29a64d371b0dd44ae3686e8b8c2bc4dce876b17c99983a4a556e750b47ea99ae1e72111fecfd453ba5a22968569c0654af3c1f3a45f7a085e786c334bdbc056c1f1f8a96dede4da5db835ea94fb6819fb7c9e93e695b643b5b7673263c497a6c6ff9c6fee606540ce68b677d201ffc50e57f0adc5047e5315402d2e74c00612358159994a5f270880996982072dc377f22f0b8c3f0214a68f19d2a1e9c4218131cf2d252a552a3a6b2f012a8af358eff57f263ad4b24e1516c35d309306e254968b0184d48bb74a0794b13208f606d45138872dd74042432ab01cc92b4e3dcef982ef64194cce91cd1c5c051ae682b8eb6b7715ffad655f64664892a5933076236ca094ba0fc7ec59ca03ba7c7c2cbbfc54e5337229bd84668c716df4d400e09b78e9aa2e6240936b96a187b3a67c0711f57cff26ba9fe50c5a3e422f6210d529a2394b7a15046da26e15d6b0268da61743a40eb72f31cd862cec803883850b8763e70e1fdbd72079df0b155d8031517749f2764e92ca20349909617cd8858470fe06f05711c286e9830d14ef4a805e31536caa861884650bdf3b6799270e505dc839e8be2ee60e101b35807efa569c07e9ccd089b2857eb7d4d98ccae24ab99f5554848adbf0879d8343d39171021a2976a5197ddd5e89e6109ec7a23b184f5453a4b106c293a22cc16ef8fce56a6280272ce8351dc991040b6579d9c90e75dc213e8b70a679d468669aebbe1949728639657422d7adbe91c5ec522b23c91ba83a354dd075485f5e7682e6a68bbc3b029d8d3a35d51ed6946699eecf5635cdb0d23d2fa951e6269bf13db04dbf05e92a11aa1d5c841982222a6d13c97d1240407c2725bf9463d0040d059552f4c15392e27ba097a3708c77513fcf94072b1338985bf13612f6748a572f9edb3d3dc07842e1bb5fd11a10ff55c658f0afa1524039fcda886ae2d21d41c"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "c6c207e7472abc5775d9945169"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x6, 0xf9, "ef34"}], @NL80211_ATTR_IE={0x1d, 0x2a, [@cf={0x4, 0x6, {0x6, 0x5, 0x7, 0x9}}, @peer_mgmt={0x75, 0x4, {0x1, 0x4, @void, @void, @void}}, @dsss={0x3, 0x1, 0x84}, @cf={0x4, 0x6, {0x1, 0x0, 0x1ff, 0x7bb4}}]}]}, 0x1090}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000)
r3 = accept4$netrom(r0, 0x0, &(0x7f0000001380), 0x80800)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001440), r0)
sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x40, r5, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1ff}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x1) (async)
sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x40, r5, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1ff}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x1)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001540)={'ip_vti0\x00', 0x8000})
sendto$unix(r0, &(0x7f0000001580), 0x0, 0x0, &(0x7f00000015c0)=@file={0x1, './file0\x00'}, 0x6e)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x6c, 0x0, 0x2c, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000017c0), r0) (async)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000017c0), r0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000001c00)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001800)={0x3b8, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xe4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb41}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x969}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbd1}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x74fa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2ec}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x420, @loopback, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xaae, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}}}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd8ca}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100400}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9c7}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5d37}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6eed}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3cb}]}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x4040002}, 0x40084)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000001c40))
syz_genetlink_get_family_id$ethtool(&(0x7f0000001cc0), r0) (async)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001cc0), r0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001fc0)={r0, 0xe0, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001d00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001d80)=[0x0], 0x0, 0xb9, &(0x7f0000001dc0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001e00), &(0x7f0000001e40), 0x8, 0xab, 0x8, 0x8, &(0x7f0000001e80)}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001fc0)={r0, 0xe0, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001d00)=[0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001d80)=[0x0], 0x0, 0xb9, &(0x7f0000001dc0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001e00), &(0x7f0000001e40), 0x8, 0xab, 0x8, 0x8, &(0x7f0000001e80)}}, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000002140)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x34108}, 0xc, &(0x7f0000002100)={&(0x7f0000002000)={0xd4, r7, 0x404, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000002}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r9, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x22400008}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x34, 0x140f, 0x300, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044814}, 0x40044) (async)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r9, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x22400008}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x34, 0x140f, 0x300, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044814}, 0x40044)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x1c, r7, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xb51}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x1c, r7, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xb51}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x30, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x23}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000024c0), 0xffffffffffffffff) (async)
r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000024c0), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002580)={&(0x7f0000002500)={0x74, r10, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'rose0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:crypt_device_t:s0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x20040880)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r11, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002640)={0x50, r10, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hald_var_lib_t:s0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x44}, 0x20000010) (async)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r11, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002640)={0x50, r10, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hald_var_lib_t:s0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x44}, 0x20000010)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000002740)=0x2, 0x4)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x28, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x34}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x8080)

1.460449565s ago: executing program 2 (id=1319):
socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000)
getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x6, 0x8, 0x800, 0x4, 0x131f]}, &(0x7f00000000c0)=0x78)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.390737688s ago: executing program 0 (id=1320):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}})
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$rds(0x15, 0x5, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff6, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fefffff}, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r6, 0x8)
r7 = accept4(r6, 0x0, 0x0, 0x80000)
setsockopt(r7, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8)
recvmmsg(r7, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x14, 0x4, 0x1, 0x1, 0x50, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x1b, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0x7, 0x9, [@multicast1]}, @rr={0x7, 0xb, 0xff, [@multicast2, @multicast1]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @ra={0x94, 0x4}]}}}}})
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'})
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000180)=0x5, 0x8)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0)

1.329999885s ago: executing program 2 (id=1321):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000000)=0x7, 0x4)
sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000000800), 0x62, 0x12141, 0x0)
listen(r0, 0xfffffffc)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r4, 0x6)
setsockopt$inet_tcp_int(r4, 0x6, 0x24, &(0x7f0000000100), 0x4)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000600000914000200000000000000000000000000000000010f000700756e636f6e66696e6564000014000300ff010000008c6802170000000000000108000400ac1e0001"], 0x54}, 0x2, 0x34005}, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, 0x400000}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[@ANYRESDEC=r4], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)
setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "04e213967fedfd93", '4\x00', "3c32a968", "a01ea39e10f01298"}, 0x28)
close(0x4)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6)

440.746888ms ago: executing program 2 (id=1322):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x303}, "633e014d63a37687", "961b35e857e43a8b3bac36dfb0cd73a1893cbb3c5bde50419276a269bccd0852", "d99bd80a", "6116d2d7a37cd853"}, 0x38)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)={0x6, 0x10, 0x2, 0x7, 0x0, [@loopback, @private0, @private0, @empty, @private2, @private2, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}]}, 0x88)
listen(r0, 0x4)
r1 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f0000000100)=0x71a6edf5)
setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140)=0x3, 0x4)
write$tun(r0, &(0x7f0000000180)={@val={0x0, 0x8847}, @val={0x2, 0x0, 0x3, 0xfff9, 0xfffb, 0x7}, @llc={@snap={0x1, 0xaa, "bbec", "61d4cd", 0x892f, "3827b54391a1e0591fad58a5c3ea1aef40eb9e97394fb6074423848c77c05db88d3faa826c451ef0e210cfad7717d58991bf7f4f5219cf6c0307b3b3b2441e42523d1d694c4703416b257b4f325e69c3a415768bebd7ffaef00854c3cfdb368aae59ba0fe629e1f7ebba8bd11171549e8a796b63f1fa5ed0aae25a868fd57cb2677c5f66a7397d88f0cf06a6d3b2c7b13bf06aa57f7e4f70f54f93d2b95074a72efe5516f93d762260f5beddebaeed5217de2f905d88b200112739af696ba208a153da6badc53c1c8550ff6479fd4157e17c83572e98e59240024ff38167df87f1a2"}}}, 0xf9)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000280))
syz_emit_ethernet(0x87, &(0x7f00000002c0)={@local, @local, @val={@val={0x88a8, 0x4, 0x0, 0x2}, {0x8100, 0x2, 0x1, 0x2}}, {@llc_tr={0x11, {@snap={0x1ff, 0xaa, "82bd", "1b1dd0", 0x9300, "b45e8725754e86d33eeea2052c1ca500f3ff6051d1693c18922492711091d72d9f12d63256e7f18f79a64dd15da9b5ed2df18b42970fbb942e33416dafdc344c38799f0db42b9065a1e780a1d4bd0a4b1487cc339ee59f37b318afa35d5b93dd3b606ae52df1543c"}}}}}, 0x0)
ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000380)="316dca437d8b044e36d4d8783a6ed063b44ba0daa12f571a5b7b9190cc079c2f4c032ff369938b577a4d9528c5ba5d60777c4f032eac8ab13f223bbd90909b82b84a9ea412d814a1218fd4ae5b38608a2b6064a524183e668e7a13c4efe3a1753036f0e43b3be2661de28d02ab0e3b006e1fd8c40061c3cca27f1ee97e435d45934df842bad4ba59a9f46f225c9cf2efebe694763fab04a1dc13cbb6162fe0f3eb4747c817379541de9df78a2020435cb5a81ee8d1ee90bbdebd599e9c06e2728976fb49747e3e7fed71da94b0df289836e7f41ff3fa769f75960959fc2fd1d1c762cfd33227cdef29fe571f75e5")
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000480)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x1, "26d08bf35a18f93d6ccb953a80b1b7f7c033baf1738d68e0920bc521110e1b77", 0x7ff, 0x7, 0x3, 0x7}, 0x3c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x78, r5, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x39}}}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8000, 0x0, 0x4, 0x0, {0x3, 0x8, 0x0, 0x7, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x6, 0x3, 0xff}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x40}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xbd}]}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4081)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000680)={<r7=>r0, 0x5, 0x3, 0x20})
ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f00000006c0)=0xa)
setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000700)={@multicast1, @remote, 0x1, "4af804c2e5a7729305d7723d219e8675e1b493059dd8fb5a51814ac5e059e912", 0x1, 0x2, 0xffffff21, 0x406b4565}, 0x3c)
setsockopt$CAN_RAW_JOIN_FILTERS(r7, 0x65, 0x6, &(0x7f0000000740)=0x1, 0x4)
socket$inet6_sctp(0xa, 0x1, 0x84)
r8 = accept4$nfc_llcp(r7, &(0x7f0000000780), &(0x7f0000000800)=0x60, 0x800)
ioctl$EXT4_IOC_GETSTATE(r8, 0x40046629, &(0x7f0000000840))
socket$kcm(0x29, 0x7, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000880))
r9 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r9, 0x110, 0x5, &(0x7f00000008c0)=[0x1, 0x3], 0x2)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000900)="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", 0xfe, 0x4014, &(0x7f0000000a00)={0xa, 0x4e21, 0xc, @private1, 0xffff}, 0x1c)

187.959994ms ago: executing program 2 (id=1323):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000002c0), 0x10) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) (async)
sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=<r2=>0x0, @ANYRES64=r0], 0x80}}, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r4 = socket(0x2, 0xa, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
r6 = socket(0x11, 0x800000003, 0x0) (rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {0xe, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000180001002bbd700000000000020000040000fd0900110000060015000200000014001680100008800c"], 0x38}}, 0x0) (async)
r8 = socket(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f0000000000), 0x400000000000235, 0x0) (async)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f00000003c0)=[{0x1, 0xb, 0xfd}, {0x6, 0x1}, {0x6, 0x6, 0x3, 0x1}]}, 0x10) (async)
r9 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r9, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000440)=""/238}, {&(0x7f0000000680)=""/252}, {&(0x7f0000002b80)=""/4096}, {&(0x7f0000000540)=""/135}, {&(0x7f0000003b80)=""/4096}, {&(0x7f0000004b80)=""/4096}, {&(0x7f0000000040)}], 0x0, &(0x7f0000000800)=""/71}, 0xfffffff1}, {{&(0x7f0000000880)=@caif, 0x0, &(0x7f0000000940)=[{&(0x7f0000000900)=""/7}], 0x0, &(0x7f0000000980)=""/239}, 0x9e5a}], 0x400000000000023, 0x0, 0x0) (async)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, &(0x7f0000000100))
close(0xffffffffffffffff) (async, rerun: 64)
bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
r10 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) (async)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000200)="1700000072006bcd9e3fe3dc6e08000007230000040200", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
ioctl$sock_kcm_SIOCKCMUNATTACH(r11, 0x89e1, &(0x7f0000000200)={r3})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000200000100c280000500030004"], 0x48}, 0x1, 0x0, 0x0, 0x8011}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, &(0x7f0000000280)=ANY=[@ANYRESDEC=r2], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
getsockopt$llc_int(r10, 0x10c, 0x7, &(0x7f0000000240), &(0x7f0000000080)=0x4) (async, rerun: 64)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffbfe, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0xe, 0x0, &(0x7f00000007c0)="ad0503578f94a2c9f8e025092ec2", 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

0s ago: executing program 2 (id=1324):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @multicast1, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x31}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x31}, 0x48)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014})
epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0xc9)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)
close(0x4) (async)
close(0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r3, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="80000000", @ANYRES16=r4, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="0600cd00000000005900330080200900080211000001080211"], 0x80}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="80000000", @ANYRES16=r4, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="0600cd00000000005900330080200900080211000001080211"], 0x80}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="030300000000000000000600140008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)={0x40, r6, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4800000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x401}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x44880}, 0x8000)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r8, 0x28, 0x0, &(0x7f0000000100)=0xfffffffffffff9f9, 0x8)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r9)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r9) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r9)
sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x34, r10, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x34, r10, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r11 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r11, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1, 0x16bf5125}, 0x1c)
shutdown(r11, 0x1)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000000180)=0x8) (async)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000000180)=0x8)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000004d32b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc02000000000000000000000000000000000000320000004b66e66cac1414aa000000000000000000000000000000000100"], 0x23c}}, 0x0) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000004d32b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc02000000000000000000000000000000000000320000004b66e66cac1414aa000000000000000000000000000000000100"], 0x23c}}, 0x0)

kernel console output (not intermixed with test programs):

 to linux-mm@kvack.org if you depend on this functionality.
[   59.452602][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.466940][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.473753][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.502894][ T5871] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.521369][ T5871] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.525523][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.530650][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.533278][ T5871] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.550467][ T5871] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.595652][ T5912] syz.2.4 uses obsolete (PF_INET,SOCK_PACKET)
[   59.627043][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.630706][ T5912] netlink: 'syz.2.4': attribute type 1 has an invalid length.
[   59.635970][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.642474][ T5912] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4'.
[   59.924514][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.929416][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.201704][ T5921] netlink: 'syz.1.2': attribute type 13 has an invalid length.
[   60.207657][ T5921] netlink: 'syz.1.2': attribute type 17 has an invalid length.
[   60.332557][ T5921] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   60.403353][ T5921] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'.
[   60.423532][ T5921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   60.689779][ T5939] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.6'.
[   60.718804][ T5939] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6'.
[   60.868664][ T5846] Bluetooth: hci0: command tx timeout
[   60.894703][ T5955] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[   60.899057][ T5955] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[   60.937373][ T5960] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.949534][   T54] Bluetooth: hci2: command tx timeout
[   60.951857][ T5846] Bluetooth: hci1: command tx timeout
[   60.952513][ T5960] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11'.
[   61.172058][ T5964] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12'.
[   61.183577][ T5964] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12'.
[   61.313360][ T5974] Zero length message leads to an empty skb
[   61.622732][ T5992] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[   61.626641][ T5992] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   61.677625][ T5995] netlink: 36 bytes leftover after parsing attributes in process `syz.2.21'.
[   61.769778][ T6004] netlink: 'syz.0.23': attribute type 8 has an invalid length.
[   61.776209][ T6004] netlink: 48 bytes leftover after parsing attributes in process `syz.0.23'.
[   61.828154][ T6006] warning: `syz.0.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.672216][ T1269] cfg80211: failed to load regulatory.db
[   62.740575][ T6027] lo speed is unknown, defaulting to 1000
[   62.742929][ T6027] lo speed is unknown, defaulting to 1000
[   62.746456][ T6027] lo speed is unknown, defaulting to 1000
[   62.752863][ T6027] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   62.761823][ T6027] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   62.813173][ T6027] lo speed is unknown, defaulting to 1000
[   62.826047][ T6030] netlink: 'syz.0.31': attribute type 12 has an invalid length.
[   62.830781][ T6027] lo speed is unknown, defaulting to 1000
[   62.834805][ T6027] lo speed is unknown, defaulting to 1000
[   62.892967][ T6031] netlink: 20 bytes leftover after parsing attributes in process `syz.2.32'.
[   62.958594][ T5846] Bluetooth: hci0: command tx timeout
[   63.020391][ T6038] syzkaller0: entered promiscuous mode
[   63.023051][ T6038] syzkaller0: entered allmulticast mode
[   63.027426][ T6035] tipc: Started in network mode
[   63.031431][ T6035] tipc: Node identity 1279d70616c2, cluster identity 4711
[   63.039962][   T54] Bluetooth: hci2: command 0x040f tx timeout
[   63.040161][ T6035] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.042311][ T5846] Bluetooth: hci1: command tx timeout
[   63.082284][ T6038] tipc: Resetting bearer <eth:syzkaller0>
[   63.104188][ T6038] tipc: Disabling bearer <eth:syzkaller0>
[   63.188302][ T6049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.198805][ T6049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.208222][ T6049] 8021q: VLANs not supported on gre0
[   63.214734][ T6045] lo speed is unknown, defaulting to 1000
[   63.467415][ T6065] openvswitch: netlink: Flow actions attr not present in new flow.
[   63.614815][ T6072] lo speed is unknown, defaulting to 1000
[   63.629819][ T6074] lo speed is unknown, defaulting to 1000
[   63.914296][ T6088] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.917745][ T6088] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.936032][ T6088] netlink: 'syz.0.46': attribute type 2 has an invalid length.
[   63.942682][ T6088] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   64.025868][ T6095] netlink: 'syz.0.49': attribute type 1 has an invalid length.
[   64.029140][ T6095] netlink: 'syz.0.49': attribute type 2 has an invalid length.
[   64.044852][ T6098] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[   64.050003][ T6098] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   64.153222][ T6105] Bluetooth: MGMT ver 1.23
[   64.208695][ T6105] nbd0: detected capacity change from 0 to 63
[   64.216257][ T6105] block nbd0: NBD_DISCONNECT
[   64.221270][ T6105] block nbd0: Disconnected due to user request.
[   64.224647][ T6105] block nbd0: shutting down sockets
[   64.230403][    C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.234162][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[   64.237624][    C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.241395][    C1] Buffer I/O error on dev nbd0, logical block 1, async page read
[   64.245187][    C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.249030][    C1] Buffer I/O error on dev nbd0, logical block 2, async page read
[   64.252203][    C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.255642][    C1] Buffer I/O error on dev nbd0, logical block 3, async page read
[   64.275479][ T5841] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.275645][ T6110] team0: No ports can be present during mode change
[   64.281105][ T5841] Buffer I/O error on dev nbd0, logical block 0, async page read
[   64.303978][ T5841] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.312019][ T5841] Buffer I/O error on dev nbd0, logical block 1, async page read
[   64.315359][ T5841] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.334279][ T5841] Buffer I/O error on dev nbd0, logical block 2, async page read
[   64.337176][ T5841] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.356746][ T5841] Buffer I/O error on dev nbd0, logical block 3, async page read
[   64.363876][ T5841] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.367496][ T5841] Buffer I/O error on dev nbd0, logical block 0, async page read
[   64.373597][ T5841] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.376683][ T5841] Buffer I/O error on dev nbd0, logical block 1, async page read
[   64.397771][ T6116] netlink: 'syz.0.56': attribute type 2 has an invalid length.
[   64.399768][ T5841] ldm_validate_partition_table(): Disk read failed.
[   64.406648][ T5841] Dev nbd0: unable to read RDB block 0
[   64.420189][ T5841]  nbd0: unable to read partition table
[   64.429001][ T5841] ldm_validate_partition_table(): Disk read failed.
[   64.432733][ T5841] Dev nbd0: unable to read RDB block 0
[   64.435975][ T5841]  nbd0: unable to read partition table
[   64.536229][ T6118] lo speed is unknown, defaulting to 1000
[   64.945534][ T6133] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   65.039668][ T5846] Bluetooth: hci0: command tx timeout
[   65.109601][   T54] Bluetooth: hci2: command 0x040f tx timeout
[   65.112172][ T5846] Bluetooth: hci1: command tx timeout
[   65.121422][ T6138] __nla_validate_parse: 7 callbacks suppressed
[   65.121435][ T6138] netlink: 48 bytes leftover after parsing attributes in process `syz.0.64'.
[   65.129800][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.64'.
[   65.224308][ T6146] lo speed is unknown, defaulting to 1000
[   65.363539][ T6156] netlink: 'syz.0.68': attribute type 1 has an invalid length.
[   65.431398][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.68'.
[   65.478053][ T6156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.68'.
[   65.484408][ T6161] lo speed is unknown, defaulting to 1000
[   65.508357][ T6156] bond0: (slave bond_slave_1): Releasing backup interface
[   65.648552][ T6166] netlink: 'syz.0.70': attribute type 1 has an invalid length.
[   65.895180][ T6173] netlink: 20 bytes leftover after parsing attributes in process `syz.2.73'.
[   66.190734][ T6202] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   66.241831][ T6208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.82'.
[   66.351598][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.84'.
[   66.357548][ T6212] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[   66.362915][ T6212] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.417533][ T6219] netlink: 'syz.2.86': attribute type 1 has an invalid length.
[   66.425479][ T6219] netlink: 'syz.2.86': attribute type 4 has an invalid length.
[   66.518091][ T6223] netlink: 256 bytes leftover after parsing attributes in process `syz.1.88'.
[   66.628942][ T6227] block nbd0: server does not support multiple connections per device.
[   66.634058][ T6227] block nbd0: shutting down sockets
[   66.637886][ T6223] netlink: 256 bytes leftover after parsing attributes in process `syz.1.88'.
[   66.738901][ T6226] block nbd0: server does not support multiple connections per device.
[   66.742752][ T6226] block nbd0: shutting down sockets
[   66.864485][ T6232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.90'.
[   66.875568][ T6232] team0: No ports can be present during mode change
[   66.891856][ T6234] syzkaller1: entered promiscuous mode
[   66.894250][ T6234] syzkaller1: entered allmulticast mode
[   67.133322][ T6242] lo speed is unknown, defaulting to 1000
[   67.199476][ T5846] Bluetooth: hci2: command 0x040f tx timeout
[   67.983182][ T6270] sctp: [Deprecated]: syz.0.100 (pid 6270) Use of int in max_burst socket option deprecated.
[   67.983182][ T6270] Use struct sctp_assoc_value instead
[   67.994309][ T6264] lo speed is unknown, defaulting to 1000
[   68.354744][ T6275] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.363613][ T6275] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.491581][ T1269] lo speed is unknown, defaulting to 1000
[   68.493929][ T1269] syz2: Port: 1 Link DOWN
[   68.510962][ T6284] hsr_slave_0: left promiscuous mode
[   68.515357][ T6284] hsr_slave_1: left promiscuous mode
[   68.537056][ T5714] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.540322][ T5714] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.543703][ T5714] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.550722][ T5714] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.662788][ T6294] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   68.887130][ T6313] netlink: 'syz.1.109': attribute type 1 has an invalid length.
[   69.044933][ T6319] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   69.048245][ T6319] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   69.270171][ T5850] Bluetooth: hci2: command 0x040f tx timeout
[   69.296130][ T6330] lo speed is unknown, defaulting to 1000
[   69.355191][ T6332] lo speed is unknown, defaulting to 1000
[   69.617300][ T6341] bridge0: entered promiscuous mode
[   69.623834][ T6341] bridge0: port 3(macsec1) entered blocking state
[   69.626680][ T6341] bridge0: port 3(macsec1) entered disabled state
[   69.629985][ T6341] macsec1: entered allmulticast mode
[   69.632224][ T6341] bridge0: entered allmulticast mode
[   69.636807][ T6341] macsec1: left allmulticast mode
[   69.640879][ T6341] bridge0: left allmulticast mode
[   69.645569][ T6341] bridge0: left promiscuous mode
[   69.796756][ T6347] team0: No ports can be present during mode change
[   70.328358][ T6369] __nla_validate_parse: 12 callbacks suppressed
[   70.328373][ T6369] netlink: 60 bytes leftover after parsing attributes in process `syz.0.127'.
[   70.334355][ T6369] unsupported nlmsg_type 40
[   71.113431][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.348799][ T5846] Bluetooth: hci2: command 0x040f tx timeout
[   71.647566][ T6390] siw: device registration error -23
[   71.744374][ T6396] netlink: 'syz.2.134': attribute type 13 has an invalid length.
[   71.759591][ T6394] xt_socket: unknown flags 0xd0
[   71.827659][ T6396] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.830355][ T6396] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.834408][ T6398] netlink: 'syz.0.135': attribute type 13 has an invalid length.
[   71.836800][ T6398] netlink: 'syz.0.135': attribute type 17 has an invalid length.
[   71.922147][ T6396] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.938282][ T6396] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.016576][ T6403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.102899][ T6398] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.106169][ T6398] 8021q: adding VLAN 0 to HW filter on device team0
[   72.114972][ T6398] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   72.133861][ T5714] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.143241][ T5714] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.147615][   T51] lo speed is unknown, defaulting to 1000
[   72.150411][   T51] syz2: Port: 1 Link ACTIVE
[   72.155965][ T6399] lo speed is unknown, defaulting to 1000
[   72.156330][ T5714] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.168795][ T5714] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.971266][ T6423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.141'.
[   73.041498][ T6425] lo speed is unknown, defaulting to 1000
[   73.444101][ T5846] Bluetooth: hci2: command 0x040f tx timeout
[   73.454803][ T6448] netlink: 'syz.1.149': attribute type 22 has an invalid length.
[   73.458096][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.149'.
[   73.487359][ T5874] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   73.491117][ T6448] netlink: 'syz.1.149': attribute type 22 has an invalid length.
[   73.494313][ T5874] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   73.497818][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.149'.
[   73.512725][ T5874] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   73.526319][ T5874] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   73.702547][ T6466] netlink: 16 bytes leftover after parsing attributes in process `syz.0.155'.
[   73.707194][ T6466] team0: No ports can be present during mode change
[   73.823592][ T6470] netlink: 44 bytes leftover after parsing attributes in process `syz.1.156'.
[   73.898239][ T6470] lo speed is unknown, defaulting to 1000
[   74.548886][ T6499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.164'.
[   74.694598][ T6505] lo speed is unknown, defaulting to 1000
[   74.771539][ T6501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.165'.
[   74.975456][ T6510] netlink: 'syz.0.166': attribute type 11 has an invalid length.
[   75.137999][ T6518] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.310345][ T5312] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   75.316288][ T5312] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   75.337392][ T5312] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   75.636530][ T6544] netlink: 'syz.2.171': attribute type 13 has an invalid length.
[   75.640040][ T6544] netlink: 'syz.2.171': attribute type 17 has an invalid length.
[   75.741692][ T6544] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.749397][ T6544] 8021q: adding VLAN 0 to HW filter on device team0
[   75.765551][ T6544] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   75.800820][ T6539] tipc: Started in network mode
[   75.802985][ T6539] tipc: Node identity 66506ec8a034, cluster identity 4711
[   75.806942][ T6539] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.811378][ T6539] syzkaller0: entered promiscuous mode
[   75.813749][ T6539] syzkaller0: entered allmulticast mode
[   75.822422][ T6539] tipc: Resetting bearer <eth:syzkaller0>
[   75.826600][ T6538] tipc: Resetting bearer <eth:syzkaller0>
[   75.840921][ T6538] tipc: Disabling bearer <eth:syzkaller0>
[   75.937106][ T6551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.143424][ T6544] syz.2.171 (6544) used greatest stack depth: 19936 bytes left
[   76.181640][ T6568] trusted_key: syz.2.176 sent an empty control message without MSG_MORE.
[   76.187195][ T6568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.176'.
[   76.199775][ T6568] bridge1: entered promiscuous mode
[   76.201795][ T6568] bridge1: entered allmulticast mode
[   76.205665][ T6568] team0: Port device bridge1 added
[   76.218154][ T6565] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   76.221997][ T6565] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   76.347730][ T6573] netlink: 'syz.2.177': attribute type 8 has an invalid length.
[   76.351962][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'.
[   76.408108][ T6576] lo speed is unknown, defaulting to 1000
[   76.467329][ T6572] lo speed is unknown, defaulting to 1000
[   76.508003][ T6581] netlink: 596 bytes leftover after parsing attributes in process `syz.0.179'.
[   76.646119][ T6585] lo speed is unknown, defaulting to 1000
[   76.755615][ T6593] netlink: 20 bytes leftover after parsing attributes in process `syz.0.181'.
[   76.798291][ T6593] bond1: entered promiscuous mode
[   76.857440][ T6602] dvmrp8: entered allmulticast mode
[   76.894114][ T6602] lo speed is unknown, defaulting to 1000
[   76.938343][ T6608] netlink: 'syz.2.183': attribute type 23 has an invalid length.
[   77.093127][ T6606] lo speed is unknown, defaulting to 1000
[   77.136027][ T6613] lo speed is unknown, defaulting to 1000
[   77.144171][ T6617] netlink: 36 bytes leftover after parsing attributes in process `syz.0.187'.
[   77.388292][ T6621] netlink: 20 bytes leftover after parsing attributes in process `syz.2.189'.
[   77.395749][ T6631] netlink: 'syz.1.190': attribute type 11 has an invalid length.
[   77.398206][ T6631] netlink: 'syz.1.190': attribute type 4 has an invalid length.
[   77.402793][ T6631] netlink: 224 bytes leftover after parsing attributes in process `syz.1.190'.
[   77.508138][ T6635] netlink: 52 bytes leftover after parsing attributes in process `syz.2.192'.
[   77.521619][ T1269] IPVS: starting estimator thread 0...
[   77.524269][ T6635] IPVS: rr: FWM 3 0x00000003 - no destination available
[   77.609633][ T6637] IPVS: using max 64 ests per chain, 153600 per kthread
[   77.611312][ T6639] lo speed is unknown, defaulting to 1000
[   77.963171][ T6658] netlink: 9 bytes leftover after parsing attributes in process `syz.0.198'.
[   78.051447][ T6660] lo speed is unknown, defaulting to 1000
[   78.053517][ T6664] netlink: 36 bytes leftover after parsing attributes in process `syz.1.199'.
[   78.204493][ T6669] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   78.360192][ T6676] bridge0: entered allmulticast mode
[   78.369856][ T6676] pim6reg: entered allmulticast mode
[   78.411316][ T6678] lo speed is unknown, defaulting to 1000
[   78.791895][ T6698] lo speed is unknown, defaulting to 1000
[   78.814468][ T6705] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   78.863527][ T6705] netlink: 'syz.0.212': attribute type 1 has an invalid length.
[   78.911903][ T6714] bond1: entered promiscuous mode
[   78.947540][ T6705] gretap2: entered allmulticast mode
[   79.012356][ T6705] lo speed is unknown, defaulting to 1000
[   79.047962][ T6722] IPVS: set_ctl: invalid protocol: 103 224.0.0.1:20000
[   79.160836][ T6729] xfrm0: entered promiscuous mode
[   79.162928][ T6729] xfrm0: entered allmulticast mode
[   79.249017][ T6734] tap0: tun_chr_ioctl cmd 1074025677
[   79.263689][ T6734] tap0: linktype set to 0
[   79.265513][ T6737] !: renamed from dummy0 (while UP)
[   79.404614][ T6749] lo speed is unknown, defaulting to 1000
[   79.637738][ T6765] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   79.767418][ T6772] bond0: Unable to set down delay as MII monitoring is disabled
[   79.798233][ T6774] lo speed is unknown, defaulting to 1000
[   79.963699][ T6787] vlan2: entered promiscuous mode
[   79.965372][ T6787] hsr_slave_1: entered promiscuous mode
[   79.967331][ T6787] vlan2: entered allmulticast mode
[   79.970458][ T6787] hsr_slave_1: entered allmulticast mode
[   80.062721][ T6790] lo speed is unknown, defaulting to 1000
[   80.249135][ T6792] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   81.017736][ T6830] netlink: 'syz.0.245': attribute type 1 has an invalid length.
[   81.041411][ T6833] netlink: 'syz.2.246': attribute type 1 has an invalid length.
[   81.077568][ T6830] 8021q: adding VLAN 0 to HW filter on device bond3
[   81.135232][ T6837] bond3: (slave veth3): Enslaving as an active interface with a down link
[   81.149673][ T6830] gretap3: entered promiscuous mode
[   81.154811][ T6830] bond3: (slave gretap3): making interface the new active one
[   81.159914][ T6830] bond3: (slave gretap3): Enslaving as an active interface with an up link
[   81.183950][ T6845] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.187121][ T6846] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   81.192466][ T6845] syzkaller0: entered promiscuous mode
[   81.197107][ T6845] syzkaller0: entered allmulticast mode
[   81.331919][ T6851] lo speed is unknown, defaulting to 1000
[   81.673275][ T6880] netlink: 'syz.0.258': attribute type 21 has an invalid length.
[   81.676640][ T6880] __nla_validate_parse: 23 callbacks suppressed
[   81.676654][ T6880] netlink: 132 bytes leftover after parsing attributes in process `syz.0.258'.
[   81.926157][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.262'.
[   82.005217][ T6844] tipc: Resetting bearer <eth:syzkaller0>
[   82.034253][ T6844] tipc: Disabling bearer <eth:syzkaller0>
[   82.044487][ T6892] netlink: 'syz.0.262': attribute type 4 has an invalid length.
[   82.220023][ T6904] netlink: 16 bytes leftover after parsing attributes in process `syz.0.265'.
[   82.253074][ T6904] bond4: entered promiscuous mode
[   82.254660][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'.
[   82.288844][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'.
[   82.371710][ T6912] netlink: 'syz.1.267': attribute type 13 has an invalid length.
[   82.374799][ T6912] netlink: 'syz.1.267': attribute type 17 has an invalid length.
[   82.397211][ T6912] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   82.436161][ T6910] netlink: 348 bytes leftover after parsing attributes in process `syz.1.267'.
[   82.470276][ T6910] lo speed is unknown, defaulting to 1000
[   83.111290][ T6924] netlink: 136 bytes leftover after parsing attributes in process `syz.2.273'.
[   83.115087][ T6924] netlink: 19 bytes leftover after parsing attributes in process `syz.2.273'.
[   83.130035][ T6924] sctp: [Deprecated]: syz.2.273 (pid 6924) Use of int in max_burst socket option deprecated.
[   83.130035][ T6924] Use struct sctp_assoc_value instead
[   83.247367][ T6931] netlink: 88 bytes leftover after parsing attributes in process `syz.0.276'.
[   83.264472][ T6931] netlink: 116 bytes leftover after parsing attributes in process `syz.0.276'.
[   83.377599][ T1269] IPVS: starting estimator thread 0...
[   83.380446][ T6938] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[   83.468674][ T6939] IPVS: using max 48 ests per chain, 115200 per kthread
[   83.473781][ T6944] syzkaller0: entered promiscuous mode
[   83.477662][ T6944] syzkaller0: entered allmulticast mode
[   83.580867][ T6952] netlink: 'syz.1.283': attribute type 10 has an invalid length.
[   83.598195][ T6952] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   83.678968][ T6960] netlink: 'syz.0.285': attribute type 13 has an invalid length.
[   83.863369][ T6967] netlink: 'syz.0.285': attribute type 19 has an invalid length.
[   84.120316][ T1269] lo speed is unknown, defaulting to 1000
[   84.122229][ T1269] syz2: Port: 1 Link DOWN
[   84.574736][ T6987] lo speed is unknown, defaulting to 1000
[   84.929455][ T7009] lo speed is unknown, defaulting to 1000
[   85.120662][ T7013] netlink: 'syz.0.298': attribute type 1 has an invalid length.
[   86.008206][ T7074] netlink: 'syz.1.316': attribute type 29 has an invalid length.
[   86.014480][ T7072] netlink: 'syz.1.316': attribute type 29 has an invalid length.
[   86.020958][ T7072] unsupported nla_type 59
[   86.147875][ T7084] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   86.330613][ T7092] siw: device registration error -23
[   86.442283][ T7099] bridge_slave_0: left allmulticast mode
[   86.444762][ T7099] bridge_slave_0: left promiscuous mode
[   86.447476][ T7099] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.458111][ T7099] bridge_slave_1: left allmulticast mode
[   86.465684][ T7099] bridge_slave_1: left promiscuous mode
[   86.468218][ T7099] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.478365][ T7099] bond0: (slave bond_slave_0): Releasing backup interface
[   86.490794][ T7099] bond0: (slave bond_slave_1): Releasing backup interface
[   86.502612][ T7099] team0: Port device team_slave_0 removed
[   86.512599][ T7099] team0: Port device team_slave_1 removed
[   86.515891][ T7099] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.520113][ T7099] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.525176][ T7099] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.528282][ T7099] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.533696][ T7099] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   86.547300][ T7095] netlink: 'syz.0.324': attribute type 4 has an invalid length.
[   87.302299][ T7124] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   87.309374][ T7125] __nla_validate_parse: 13 callbacks suppressed
[   87.309392][ T7125] netlink: 195992 bytes leftover after parsing attributes in process `syz.2.333'.
[   87.465753][ T7136] netlink: 132 bytes leftover after parsing attributes in process `syz.0.337'.
[   87.562922][ T7140] netlink: 104 bytes leftover after parsing attributes in process `syz.0.339'.
[   87.690313][ T7145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.341'.
[   87.752344][ T7150] lo speed is unknown, defaulting to 1000
[   88.321889][ T7170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.348'.
[   88.383831][ T7175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.350'.
[   88.398657][ T7175] netlink: 'syz.2.350': attribute type 1 has an invalid length.
[   88.401448][ T7175] netlink: 224 bytes leftover after parsing attributes in process `syz.2.350'.
[   88.437843][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.351'.
[   88.465144][ T7177] netlink: 'syz.0.351': attribute type 4 has an invalid length.
[   89.525459][ T7199] lo speed is unknown, defaulting to 1000
[   89.582450][ T7204] lo speed is unknown, defaulting to 1000
[   89.672206][ T7199] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   89.675592][ T7199] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   89.787037][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'.
[   92.621764][ T7244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.366'.
[   92.700154][ T7248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.367'.
[   92.738009][ T7252] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   92.839455][ T7256] netlink: 830 bytes leftover after parsing attributes in process `syz.0.370'.
[   92.941421][ T7270] netlink: 256 bytes leftover after parsing attributes in process `syz.2.372'.
[   92.946089][ T7273] netlink: 308 bytes leftover after parsing attributes in process `syz.0.373'.
[   92.950948][ T7273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.373'.
[   92.971892][ T7273] netlink: 36 bytes leftover after parsing attributes in process `syz.0.373'.
[   93.216177][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.375'.
[   93.996792][ T7320] netlink: 'syz.1.380': attribute type 1 has an invalid length.
[   94.002322][ T7320] netlink: 56 bytes leftover after parsing attributes in process `syz.1.380'.
[   94.763062][ T7325] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[   94.766222][ T7325] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   94.850409][ T7327] lo speed is unknown, defaulting to 1000
[   94.906359][ T7329] lo speed is unknown, defaulting to 1000
[   94.982883][ T7340] netlink: 24 bytes leftover after parsing attributes in process `syz.1.384'.
[   95.199073][ T7346] netlink: 'syz.0.387': attribute type 26 has an invalid length.
[   95.408867][ T7356] netlink: 'syz.0.390': attribute type 39 has an invalid length.
[   96.907319][ T7449] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   97.068363][ T7460] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[   97.074052][ T7460] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.139659][ T7464] Driver unsupported XDP return value 0 on prog  (id 102) dev N/A, expect packet loss!
[   97.300998][ T7473] siw: device registration error -23
[   97.336908][ T7475] lo speed is unknown, defaulting to 1000
[   97.677379][ T7488] infiniband syz!: set down
[   97.680861][ T7488] infiniband syz!: added team_slave_0
[   97.728894][ T7488] RDS/IB: syz!: added
[   97.730681][ T7488] smc: adding ib device syz! with port count 1
[   97.733727][ T7488] smc:    ib device syz! port 1 has no pnetid
[   97.772190][ T7492] __nla_validate_parse: 4 callbacks suppressed
[   97.772201][ T7492] netlink: 28 bytes leftover after parsing attributes in process `syz.0.428'.
[   97.837418][ T7503] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.957311][ T7505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.431'.
[   98.210985][ T7494] siw: device registration error -23
[   98.302826][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.434'.
[   98.344044][ T7525] netlink: zone id is out of range
[   98.350149][ T7525] netlink: zone id is out of range
[   98.397564][ T7525] netlink: set zone limit has 4 unknown bytes
[   98.397658][ T7532] netlink: del zone limit has 4 unknown bytes
[   98.983457][ T7566] lo: entered promiscuous mode
[   98.990517][ T7566] tunl0: entered promiscuous mode
[   98.993938][ T7566] gre0: entered promiscuous mode
[   99.000189][ T7566] gretap0: entered promiscuous mode
[   99.003877][ T7566] erspan0: entered promiscuous mode
[   99.011299][ T7566] ip_vti0: entered promiscuous mode
[   99.015765][ T7566] ip6_vti0: entered promiscuous mode
[   99.021219][ T7566] sit0: entered promiscuous mode
[   99.026511][ T7566] ip6tnl0: entered promiscuous mode
[   99.032429][ T7566] ip6gre0: entered promiscuous mode
[   99.035872][ T7566] syz_tun: entered promiscuous mode
[   99.041332][ T7566] ip6gretap0: entered promiscuous mode
[   99.044943][ T7566] bridge0: entered promiscuous mode
[   99.048281][ T7566] vcan0: entered promiscuous mode
[   99.055518][ T7566] bond0: entered promiscuous mode
[   99.057851][ T7566] bond_slave_0: entered promiscuous mode
[   99.063385][ T7566] team0: entered promiscuous mode
[   99.065716][ T7566] team_slave_0: entered promiscuous mode
[   99.068260][ T7566] team_slave_1: entered promiscuous mode
[   99.074257][ T7566] 8021q: adding VLAN 0 to HW filter on device team0
[   99.078014][ T7566] !: entered promiscuous mode
[   99.082422][ T7566] nlmon0: entered promiscuous mode
[   99.086355][ T7566] caif0: entered promiscuous mode
[   99.090396][ T7566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   99.096520][ T5875] lo speed is unknown, defaulting to 1000
[   99.099852][ T5875] syz2: Port: 1 Link ACTIVE
[   99.102133][ T7567] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   99.220298][ T7572] lo speed is unknown, defaulting to 1000
[   99.263267][ T7574] netlink: 'syz.0.445': attribute type 1 has an invalid length.
[   99.281548][ T7574] lo speed is unknown, defaulting to 1000
[   99.568034][ T7581] netlink: 24 bytes leftover after parsing attributes in process `syz.2.448'.
[   99.574561][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.448'.
[  100.050938][ T7605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.455'.
[  100.087332][ T7625] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3952. macoff=96
[  100.106299][ T7625] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  100.375548][ T7636] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.463'.
[  100.423241][ T7636] lo speed is unknown, defaulting to 1000
[  100.678127][ T7648] lo speed is unknown, defaulting to 1000
[  101.192042][ T7664] netlink: 'syz.0.467': attribute type 12 has an invalid length.
[  101.441491][ T7675] netlink: 'syz.2.471': attribute type 3 has an invalid length.
[  101.446588][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.473'.
[  101.448792][ T7677] netlink: 'syz.2.471': attribute type 3 has an invalid length.
[  102.263547][   T33] audit: type=1107 audit(1757925477.214:2): pid=7691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='0qv'q:I"AЇ(|FPZI#>xѿ<kӕpu҆s
[  102.263547][   T33] /zǰx,Jp9bRdU$WùHAd'*aH6 (T0_(5^'uREo>i(5*Mj"		u]Q&o.<hZ~4._Ad[vRۃKwq*x'
[  102.301301][   T33] audit: type=1107 audit(1757925477.214:3): pid=7691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='0qv'q:I"AЇ(|FPZI#>xѿ<kӕpu҆s
[  102.301301][   T33] /zǰx,Jp9bRdU$WùHAd'*aH6 (T0_(5^'uREo>i(5*Mj"		u]Q&o.<hZ~4._Ad[vRۃKwq*x'
[  102.344355][   T33] audit: type=1107 audit(1757925477.214:4): pid=7691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='0qv'q:I"AЇ(|FPZI#>xѿ<kӕpu҆s
[  102.344355][   T33] /zǰx,Jp9bRdU$WùHAd'*aH6 (T0_(5^'uREo>i(5*Mj"		u]Q&o.<hZ~4._Ad[vRۃKwq*x'
[  102.366852][   T33] audit: type=1107 audit(1757925477.214:5): pid=7691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='0qv'q:I"AЇ(|FPZI#>xѿ<kӕpu҆s
[  102.366852][   T33] /zǰx,Jp9bRdU$WùHAd'*aH6 (T0_(5^'uREo>i(5*Mj"		u]Q&o.<hZ~4._Ad[vRۃKwq*x'
[  102.398593][   T33] audit: type=1107 audit(1757925477.214:6): pid=7691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='0qv'q:I"AЇ(|FPZI#>xѿ<kӕpu҆s
[  102.398593][   T33] /zǰx,Jp9bRdU$WùHAd'*aH6 (T0_(5^'uREo>i(5*Mj"		u]Q&o.<hZ~4._Ad[vRۃKwq*x'
[  102.438955][   T33] audit: type=1107 audit(1757925477.214:7): pid=7691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='0qv'q:I"AЇ(|FPZI#>xѿ<kӕpu҆s
[  102.438955][   T33] /zǰx,Jp9bRdU$WùHAd'*aH6 (T0_(5^'uREo>i(5*Mj"		u]Q&o.<hZ~4._Ad[vRۃKwq*x'
[  102.475102][   T33] audit: type=1107 audit(1757925477.214:8): pid=7691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='0qv'q:I"AЇ(|FPZI#>xѿ<kӕpu҆s
[  102.475102][   T33] /zǰx,Jp9bRdU$WùHAd'*aH6 (T0_(5^'uREo>i(5*Mj"		u]Q&o.<hZ~4._Ad[vRۃKwq*x'
[  102.523308][   T33] audit: type=1107 audit(1757925477.214:9): pid=7691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='0qv'q:I"AЇ(|FPZI#>xѿ<kӕpu҆s
[  102.523308][   T33] /zǰx,Jp9bRdU$WùHAd'*aH6 (T0_(5^'uREo>i(5*Mj"		u]Q&o.<hZ~4._Ad[vRۃKwq*x'
[  102.548131][   T33] audit: type=1107 audit(1757925477.214:10): pid=7691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='0qv'q:I"AЇ(|FPZI#>xѿ<kӕpu҆s
[  102.548131][   T33] /zǰx,Jp9bRdU$WùHAd'*aH6 (T0_(5^'uREo>i(5*Mj"		u]Q&o.<hZ~4._Ad[vRۃKwq*x'
[  102.567509][   T33] audit: type=1107 audit(1757925477.214:11): pid=7691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='0qv'q:I"AЇ(|FPZI#>xѿ<kӕpu҆s
[  102.567509][   T33] /zǰx,Jp9bRdU$WùHAd'*aH6 (T0_(5^'uREo>i(5*Mj"		u]Q&o.<hZ~4._Ad[vRۃKwq*x'
[  102.751803][ T7730] siw: device registration error -23
[  102.863770][ T5874] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  102.996952][ T7757] netlink: 'syz.0.491': attribute type 5 has an invalid length.
[  103.045846][ T7760] lo speed is unknown, defaulting to 1000
[  103.058287][ T7759] lo speed is unknown, defaulting to 1000
[  103.173199][ T7766] netlink: 24 bytes leftover after parsing attributes in process `syz.2.490'.
[  103.253782][ T7774] lo speed is unknown, defaulting to 1000
[  103.596492][ T7793] netlink: 'syz.1.499': attribute type 12 has an invalid length.
[  103.706931][ T7796] siw: device registration error -23
[  104.118374][ T7801] lo speed is unknown, defaulting to 1000
[  104.627252][ T7831] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.630742][ T7831] syzkaller0: entered promiscuous mode
[  104.632675][ T7831] syzkaller0: entered allmulticast mode
[  104.643234][ T7830] tipc: Resetting bearer <eth:syzkaller0>
[  104.647353][ T7829] tipc: Resetting bearer <eth:syzkaller0>
[  104.675857][ T7829] tipc: Disabling bearer <eth:syzkaller0>
[  104.815823][ T7835] lo speed is unknown, defaulting to 1000
[  105.417023][ T7843] netlink: 'syz.0.512': attribute type 6 has an invalid length.
[  105.634504][ T7855] net_ratelimit: 1 callbacks suppressed
[  105.634541][ T7855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  105.643617][  T791] lo speed is unknown, defaulting to 1000
[  105.645971][  T791] syz2: Port: 1 Link DOWN
[  105.649091][ T7855] netlink: 48 bytes leftover after parsing attributes in process `syz.0.516'.
[  106.047189][ T7878] netlink: 292 bytes leftover after parsing attributes in process `syz.0.524'.
[  106.498875][ T7899] netlink: 76 bytes leftover after parsing attributes in process `syz.0.529'.
[  106.828178][ T7914] netlink: 32 bytes leftover after parsing attributes in process `syz.0.533'.
[  106.837516][ T7914] netlink: 32 bytes leftover after parsing attributes in process `syz.0.533'.
[  106.958001][ T7925] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.962079][ T7925] syzkaller0: entered promiscuous mode
[  106.964710][ T7925] syzkaller0: entered allmulticast mode
[  106.971794][ T7925] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  106.988297][ T7925] tipc: Resetting bearer <eth:syzkaller0>
[  107.007652][ T7923] tipc: Resetting bearer <eth:syzkaller0>
[  107.022468][ T7923] tipc: Disabling bearer <eth:syzkaller0>
[  107.271261][ T7941] netlink: 36 bytes leftover after parsing attributes in process `syz.2.542'.
[  107.320386][ T7944] block nbd0: shutting down sockets
[  107.639465][ T7949] ip_vti0: left promiscuous mode
[  107.833928][ T7958] Bluetooth: MGMT ver 1.23
[  108.043064][ T7969] netlink: 'syz.1.550': attribute type 11 has an invalid length.
[  108.148381][ T7972] lo speed is unknown, defaulting to 1000
[  108.593314][ T8004] lo speed is unknown, defaulting to 1000
[  108.737973][ T8012] netlink: 76 bytes leftover after parsing attributes in process `syz.1.561'.
[  108.745927][ T8012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.561'.
[  108.752338][ T8012] netlink: 40 bytes leftover after parsing attributes in process `syz.1.561'.
[  108.827603][ T8016] tipc: Started in network mode
[  108.832040][ T8016] tipc: Node identity 0275e44c3585, cluster identity 4711
[  108.834809][ T8016] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.838871][ T8016] syzkaller0: entered promiscuous mode
[  108.841152][ T8016] syzkaller0: entered allmulticast mode
[  109.356368][ T8033] netlink: 24 bytes leftover after parsing attributes in process `syz.0.565'.
[  109.369366][ T8032] IPv6: Can't replace route, no match found
[  109.369477][ T8030] lo speed is unknown, defaulting to 1000
[  109.646323][ T8037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.568'.
[  109.664606][ T8037] team0: No ports can be present during mode change
[  109.683558][ T8037] vlan0: entered promiscuous mode
[  109.689856][ T8037] tipc: Enabled bearer <eth:team0>, priority 0
[  109.825353][ T8055] ipvlan0: entered promiscuous mode
[  109.840320][ T5312] tipc: Node number set to 938533964
[  109.984985][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.574'.
[  110.292468][ T8067] lo speed is unknown, defaulting to 1000
[  110.511439][ T8075] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  110.773861][ T8087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'.
[  110.822002][ T5875] tipc: Node number set to 3328470728
[  110.977153][ T8100] lo speed is unknown, defaulting to 1000
[  111.104077][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.586'.
[  111.108612][ T8107] netlink: 'syz.2.589': attribute type 1 has an invalid length.
[  111.116891][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.586'.
[  111.264921][ T8117] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  111.309939][ T8121] netlink: 'syz.2.593': attribute type 5 has an invalid length.
[  111.488012][ T8129] netlink: 'syz.0.596': attribute type 5 has an invalid length.
[  111.501253][ T8129] netlink: 'syz.0.596': attribute type 7 has an invalid length.
[  111.573469][ T8129] : entered promiscuous mode
[  111.655559][ T8137] lo speed is unknown, defaulting to 1000
[  111.710873][ T8140] netlink: 'syz.0.598': attribute type 5 has an invalid length.
[  111.722723][ T8139] lo speed is unknown, defaulting to 1000
[  111.733860][ T8140] ieee802154 phy1 wpan1: encryption failed: -22
[  111.795883][ T8148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.601'.
[  112.693084][ T8171] netlink: 'syz.1.606': attribute type 4 has an invalid length.
[  112.854932][ T8179] lo speed is unknown, defaulting to 1000
[  113.022901][ T8186] lo speed is unknown, defaulting to 1000
[  113.141665][ T8192] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  113.145002][ T8192] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.200347][ T8195] lo speed is unknown, defaulting to 1000
[  114.018292][ T8221] __nla_validate_parse: 5 callbacks suppressed
[  114.018311][ T8221] netlink: 16 bytes leftover after parsing attributes in process `syz.0.620'.
[  114.062777][ T8223] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  114.116596][ T8225] netlink: 'syz.0.622': attribute type 13 has an invalid length.
[  114.429167][ T8237] netlink: 16 bytes leftover after parsing attributes in process `syz.0.627'.
[  114.464518][ T8241] netlink: 'syz.2.628': attribute type 1 has an invalid length.
[  114.467187][ T8241] netlink: 172 bytes leftover after parsing attributes in process `syz.2.628'.
[  114.494036][ T8240] netlink: 24 bytes leftover after parsing attributes in process `syz.0.629'.
[  114.494462][ T8242] netlink: 24 bytes leftover after parsing attributes in process `syz.0.629'.
[  114.497718][ T8240] openvswitch: netlink: Flow key attr not present in new flow.
[  114.511043][ T8242] openvswitch: netlink: Flow key attr not present in new flow.
[  114.720016][ T8248] tipc: Resetting bearer <eth:team0>
[  114.762180][ T8248] xfrm0: left promiscuous mode
[  114.768876][ T8248] xfrm0: left allmulticast mode
[  114.773759][ T8248] vlan0: left promiscuous mode
[  114.788235][ T8248] bridge1: left promiscuous mode
[  114.792552][ T8248] bridge1: left allmulticast mode
[  114.859662][ T8253] lo speed is unknown, defaulting to 1000
[  115.307126][ T8269] netlink: 'syz.1.634': attribute type 1 has an invalid length.
[  115.310124][ T8269] netlink: 172 bytes leftover after parsing attributes in process `syz.1.634'.
[  115.318342][ T8269] syzkaller1: entered promiscuous mode
[  115.322831][ T8269] syzkaller1: entered allmulticast mode
[  115.612181][ T8277] lo speed is unknown, defaulting to 1000
[  115.690680][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.636'.
[  115.693582][ T8280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.636'.
[  115.957958][ T8286] lo speed is unknown, defaulting to 1000
[  116.520309][ T8296] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  116.523612][ T8296] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  116.781480][ T8303] wg1 speed is unknown, defaulting to 1000
[  116.783802][ T8303] wg1 speed is unknown, defaulting to 1000
[  116.805340][ T8300] nbd0: detected capacity change from 0 to 63
[  116.808842][ T8305] block nbd0: NBD_DISCONNECT
[  116.811959][ T8305] block nbd0: Disconnected due to user request.
[  116.814592][ T8305] block nbd0: shutting down sockets
[  116.816562][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.643'.
[  116.825448][ T8303] wg1 speed is unknown, defaulting to 1000
[  116.836159][    C0] blk_print_req_error: 138 callbacks suppressed
[  116.836172][    C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.839240][ T8303] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  116.842464][    C0] buffer_io_error: 138 callbacks suppressed
[  116.842476][    C0] Buffer I/O error on dev nbd0, logical block 0, async page read
[  116.850366][    C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.853931][    C0] Buffer I/O error on dev nbd0, logical block 1, async page read
[  116.856990][    C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.860543][    C0] Buffer I/O error on dev nbd0, logical block 2, async page read
[  116.863507][    C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.866991][    C0] Buffer I/O error on dev nbd0, logical block 3, async page read
[  116.872976][ T5841] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.876911][ T5841] Buffer I/O error on dev nbd0, logical block 0, async page read
[  116.881374][ T5841] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.885849][ T8308] netlink: 16 bytes leftover after parsing attributes in process `syz.1.644'.
[  116.886848][ T8303] wg1 speed is unknown, defaulting to 1000
[  116.890693][ T5841] Buffer I/O error on dev nbd0, logical block 1, async page read
[  116.894913][ T5841] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.900052][ T5841] Buffer I/O error on dev nbd0, logical block 2, async page read
[  116.917886][ T5841] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.928052][ T5841] Buffer I/O error on dev nbd0, logical block 3, async page read
[  116.931731][ T5841] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.944709][ T8303] wg1 speed is unknown, defaulting to 1000
[  116.947117][ T5841] Buffer I/O error on dev nbd0, logical block 0, async page read
[  116.958877][ T5841] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.962411][ T5841] Buffer I/O error on dev nbd0, logical block 1, async page read
[  116.967278][ T5841] ldm_validate_partition_table(): Disk read failed.
[  116.972414][ T8303] wg1 speed is unknown, defaulting to 1000
[  116.976769][ T8303] wg1 speed is unknown, defaulting to 1000
[  117.001202][ T5841] Dev nbd0: unable to read RDB block 0
[  117.005022][ T5841]  nbd0: unable to read partition table
[  117.023629][ T5841] ldm_validate_partition_table(): Disk read failed.
[  117.035364][ T5841] Dev nbd0: unable to read RDB block 0
[  117.045442][ T5841]  nbd0: unable to read partition table
[  117.472141][ T8323] netlink: 'syz.1.649': attribute type 1 has an invalid length.
[  117.474962][ T8323] netlink: 'syz.1.649': attribute type 13 has an invalid length.
[  117.804681][ T8323] tipc: Resetting bearer <eth:syzkaller0>
[  117.831637][  T791] wg1 speed is unknown, defaulting to 1000
[  117.833519][  T791] syz0: Port: 1 Link DOWN
[  117.838631][ T5714] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  117.845952][ T5714] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.850228][ T5714] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  117.853007][ T5714] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.855816][ T5714] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  117.862191][ T5714] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.877766][ T5714] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  117.884174][ T5714] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.105045][ T8352] siw: device registration error -23
[  118.347277][ T8373] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.374061][ T8373] 8021q: adding VLAN 0 to HW filter on device team0
[  118.384214][ T8373] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  118.487166][ T8381] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  118.491101][ T8381] CPU: 1 UID: 0 PID: 8381 Comm: syz.0.666 Not tainted syzkaller #0 PREEMPT(full) 
[  118.491119][ T8381] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  118.491129][ T8381] Call Trace:
[  118.491135][ T8381]  <TASK>
[  118.491161][ T8381]  dump_stack_lvl+0x189/0x250
[  118.491187][ T8381]  ? __pfx_dump_stack_lvl+0x10/0x10
[  118.491205][ T8381]  ? __pfx__printk+0x10/0x10
[  118.491225][ T8381]  ? kernfs_path_from_node+0x2f/0x290
[  118.491237][ T8381]  ? kernfs_path_from_node+0x250/0x290
[  118.491247][ T8381]  ? kernfs_path_from_node+0x2f/0x290
[  118.491262][ T8381]  sysfs_warn_dup+0x8e/0xa0
[  118.491277][ T8381]  sysfs_do_create_link_sd+0xc0/0x110
[  118.491294][ T8381]  device_add_class_symlinks+0x1cf/0x240
[  118.491314][ T8381]  device_add+0x475/0xb50
[  118.491333][ T8381]  wiphy_register+0x1ba6/0x28d0
[  118.491363][ T8381]  ? __pfx_wiphy_register+0x10/0x10
[  118.491377][ T8381]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  118.491404][ T8381]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  118.491423][ T8381]  ieee80211_register_hw+0x3484/0x4100
[  118.491451][ T8381]  ? ieee80211_register_hw+0x1471/0x4100
[  118.491474][ T8381]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  118.491492][ T8381]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  118.491512][ T8381]  ? __hrtimer_setup+0x187/0x210
[  118.491525][ T8381]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  118.491549][ T8381]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  118.491625][ T8381]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  118.491645][ T8381]  ? trace_kmalloc+0x1f/0xd0
[  118.491661][ T8381]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  118.491681][ T8381]  ? kstrndup+0xbf/0x160
[  118.491703][ T8381]  hwsim_new_radio_nl+0xea4/0x1b10
[  118.491720][ T8381]  ? __pfx___nla_validate_parse+0x10/0x10
[  118.491752][ T8381]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  118.491780][ T8381]  ? __nla_parse+0x40/0x60
[  118.491797][ T8381]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  118.491823][ T8381]  genl_family_rcv_msg_doit+0x215/0x300
[  118.491847][ T8381]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  118.491874][ T8381]  ? bpf_lsm_capable+0x9/0x20
[  118.491893][ T8381]  ? security_capable+0x7e/0x2e0
[  118.491918][ T8381]  genl_rcv_msg+0x60e/0x790
[  118.491943][ T8381]  ? __pfx_genl_rcv_msg+0x10/0x10
[  118.491960][ T8381]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  118.491991][ T8381]  netlink_rcv_skb+0x208/0x470
[  118.492003][ T8381]  ? __lock_acquire+0xab9/0xd20
[  118.492024][ T8381]  ? __pfx_genl_rcv_msg+0x10/0x10
[  118.492044][ T8381]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  118.492076][ T8381]  ? down_read+0x1ad/0x2e0
[  118.492117][ T8381]  genl_rcv+0x28/0x40
[  118.492134][ T8381]  netlink_unicast+0x82f/0x9e0
[  118.492165][ T8381]  ? __pfx_netlink_unicast+0x10/0x10
[  118.492190][ T8381]  ? netlink_sendmsg+0x642/0xb30
[  118.492203][ T8381]  ? skb_put+0x11b/0x210
[  118.492222][ T8381]  netlink_sendmsg+0x805/0xb30
[  118.492246][ T8381]  ? __pfx_netlink_sendmsg+0x10/0x10
[  118.492264][ T8381]  ? aa_sock_msg_perm+0xf1/0x1d0
[  118.492279][ T8381]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  118.492293][ T8381]  ? __pfx_netlink_sendmsg+0x10/0x10
[  118.492308][ T8381]  __sock_sendmsg+0x21c/0x270
[  118.492331][ T8381]  ____sys_sendmsg+0x505/0x830
[  118.492351][ T8381]  ? __pfx_____sys_sendmsg+0x10/0x10
[  118.492377][ T8381]  ? import_iovec+0x74/0xa0
[  118.492398][ T8381]  ___sys_sendmsg+0x21f/0x2a0
[  118.492416][ T8381]  ? __pfx____sys_sendmsg+0x10/0x10
[  118.492462][ T8381]  ? __fget_files+0x2a/0x420
[  118.492474][ T8381]  ? __fget_files+0x3a0/0x420
[  118.492495][ T8381]  __x64_sys_sendmsg+0x19b/0x260
[  118.492515][ T8381]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  118.492536][ T8381]  ? rcu_is_watching+0x15/0xb0
[  118.492553][ T8381]  ? do_syscall_64+0xbe/0x3b0
[  118.492604][ T8381]  do_syscall_64+0xfa/0x3b0
[  118.492617][ T8381]  ? lockdep_hardirqs_on+0x9c/0x150
[  118.492629][ T8381]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.492642][ T8381]  ? exc_page_fault+0x9f/0xf0
[  118.492655][ T8381]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.492668][ T8381] RIP: 0033:0x7f238a98eba9
[  118.492683][ T8381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  118.492696][ T8381] RSP: 002b:00007f238b7a4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  118.492712][ T8381] RAX: ffffffffffffffda RBX: 00007f238abd6090 RCX: 00007f238a98eba9
[  118.492722][ T8381] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000c
[  118.492732][ T8381] RBP: 00007f238aa11e19 R08: 0000000000000000 R09: 0000000000000000
[  118.492740][ T8381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  118.492745][ T8381] R13: 00007f238abd6128 R14: 00007f238abd6090 R15: 00007ffe023fbd18
[  118.492766][ T8381]  </TASK>
[  118.785254][ T5312] IPVS: starting estimator thread 0...
[  118.877724][ T8397] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  118.881150][ T8391] IPVS: using max 64 ests per chain, 153600 per kthread
[  118.882274][ T8397] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  119.140030][ T8417] !: renamed from dummy0
[  119.263017][ T8418] lo speed is unknown, defaulting to 1000
[  119.497556][ T8426] __nla_validate_parse: 6 callbacks suppressed
[  119.497567][ T8426] netlink: 20 bytes leftover after parsing attributes in process `syz.0.678'.
[  119.503366][ T8425] geneve2: entered promiscuous mode
[  119.510788][ T8418] wg1 speed is unknown, defaulting to 1000
[  119.548594][ T8423] netlink: 60 bytes leftover after parsing attributes in process `syz.1.677'.
[  119.618363][ T8429] !: renamed from dummy0 (while UP)
[  119.719342][ T8431] netlink: 3 bytes leftover after parsing attributes in process `syz.1.680'.
[  119.783424][ T8433] netlink: 'syz.1.681': attribute type 1 has an invalid length.
[  119.786960][ T8433] netlink: 224 bytes leftover after parsing attributes in process `syz.1.681'.
[  119.801045][ T8433] netlink: 48 bytes leftover after parsing attributes in process `syz.1.681'.
[  119.944034][ T8443] bond0: (slave rose0): Enslaving as an active interface with an up link
[  120.118091][ T8453] lo speed is unknown, defaulting to 1000
[  120.145994][ T8455] nbd: must specify a device to reconfigure
[  120.157173][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.686'.
[  120.161260][ T8456] netlink: 24 bytes leftover after parsing attributes in process `syz.2.686'.
[  120.281221][ T8461] bridge_slave_0: left allmulticast mode
[  120.283445][ T8461] bridge_slave_0: left promiscuous mode
[  120.285876][ T8461] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.293994][ T8461] bridge_slave_1: left allmulticast mode
[  120.296234][ T8461] bridge_slave_1: left promiscuous mode
[  120.300394][ T8461] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.307393][ T8461] bond0: (slave bond_slave_0): Releasing backup interface
[  120.312802][ T8461] bond_slave_0: left promiscuous mode
[  120.316599][ T8461] team_slave_0: left promiscuous mode
[  120.321864][ T8461] team0: Port device team_slave_0 removed
[  120.325083][ T8461] team_slave_1: left promiscuous mode
[  120.329740][ T8461] team0: Port device team_slave_1 removed
[  120.332130][ T8461] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.335141][ T8461] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.342578][ T8461] bond3: (slave veth3): Releasing active interface
[  120.345594][ T8461] bond3: (slave veth3): the permanent HWaddr of slave - 1a:70:fc:67:51:0d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  120.354803][ T8461] bond3: (slave gretap3): Releasing active interface
[  120.361026][ T8453] wg1 speed is unknown, defaulting to 1000
[  120.815633][ T8475] syzkaller1: entered promiscuous mode
[  120.817820][ T8475] syzkaller1: entered allmulticast mode
[  120.956113][ T8480] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  121.297850][ T8493] netlink: 20 bytes leftover after parsing attributes in process `syz.0.699'.
[  121.297943][ T8495] netlink: 44 bytes leftover after parsing attributes in process `syz.0.699'.
[  121.348162][ T8499] lo speed is unknown, defaulting to 1000
[  121.470611][ T8499] wg1 speed is unknown, defaulting to 1000
[  121.554367][ T8506] IPVS: length: 162 != 24
[  122.285075][ T8553] lo speed is unknown, defaulting to 1000
[  122.414238][ T8553] wg1 speed is unknown, defaulting to 1000
[  122.973358][ T8565] lo speed is unknown, defaulting to 1000
[  123.126161][ T8565] wg1 speed is unknown, defaulting to 1000
[  123.148876][ T8572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.720'.
[  123.367570][ T8583] lo speed is unknown, defaulting to 1000
[  123.495039][ T8583] wg1 speed is unknown, defaulting to 1000
[  123.701219][ T8596] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.705431][ T8596] syzkaller0: entered promiscuous mode
[  123.707940][ T8596] syzkaller0: entered allmulticast mode
[  123.721127][ T8596] netlink: 'syz.2.726': attribute type 1 has an invalid length.
[  123.857505][ T8595] tipc: Resetting bearer <eth:syzkaller0>
[  123.873358][ T8595] tipc: Disabling bearer <eth:syzkaller0>
[  123.886395][ T8601] lo speed is unknown, defaulting to 1000
[  124.007732][ T8601] wg1 speed is unknown, defaulting to 1000
[  124.164943][ T8615] syzkaller0: entered promiscuous mode
[  124.169123][ T8615] syzkaller0: entered allmulticast mode
[  124.637212][ T8634] lo speed is unknown, defaulting to 1000
[  124.873808][ T8634] wg1 speed is unknown, defaulting to 1000
[  124.890634][ T8656] __nla_validate_parse: 3 callbacks suppressed
[  124.890643][ T8656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.741'.
[  125.014540][ T8665] 8021q: VLANs not supported on ip_vti0
[  125.182006][ T8672] can: request_module (can-proto-0) failed.
[  125.185771][ T8672] netlink: 'syz.2.748': attribute type 1 has an invalid length.
[  125.217622][ T8680] netlink: 'syz.1.750': attribute type 1 has an invalid length.
[  125.223715][ T8680] netlink: 224 bytes leftover after parsing attributes in process `syz.1.750'.
[  125.296262][ T8686] netlink: 19 bytes leftover after parsing attributes in process `syz.0.751'.
[  125.327494][ T8690] syzkaller1: entered promiscuous mode
[  125.329376][ T8690] syzkaller1: entered allmulticast mode
[  125.445314][ T8702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.757'.
[  125.564872][ T8710] lo speed is unknown, defaulting to 1000
[  125.708812][ T8710] wg1 speed is unknown, defaulting to 1000
[  126.059642][ T8726] lo speed is unknown, defaulting to 1000
[  126.095033][ T8725] lo speed is unknown, defaulting to 1000
[  126.299478][ T8733] netlink: 244 bytes leftover after parsing attributes in process `syz.0.763'.
[  126.360906][ T8726] wg1 speed is unknown, defaulting to 1000
[  126.531645][ T8739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'.
[  126.638282][ T8725] wg1 speed is unknown, defaulting to 1000
[  126.646736][ T8746] lo speed is unknown, defaulting to 1000
[  126.971719][ T8746] wg1 speed is unknown, defaulting to 1000
[  127.096579][ T8763] netlink: 20 bytes leftover after parsing attributes in process `syz.2.770'.
[  127.156929][ T8763] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8)
[  127.429747][ T8772] syzkaller1: entered promiscuous mode
[  127.432252][ T8772] syzkaller1: entered allmulticast mode
[  127.491399][ T8776] syzkaller1: left promiscuous mode
[  127.493699][ T8776] syzkaller1: left allmulticast mode
[  127.716988][ T8783] lo speed is unknown, defaulting to 1000
[  127.735888][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.777'.
[  127.826014][ T8789] netlink: 'syz.2.777': attribute type 1 has an invalid length.
[  127.907788][ T8783] wg1 speed is unknown, defaulting to 1000
[  127.911357][ T8796] siw: device registration error -23
[  127.919445][ T8798] gretap2: entered allmulticast mode
[  128.089732][ T8809] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  128.094342][ T8809] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  128.116026][ T8811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.785'.
[  128.122881][ T8813] netlink: 'syz.1.786': attribute type 11 has an invalid length.
[  128.317694][ T8827] netlink: 36 bytes leftover after parsing attributes in process `syz.0.791'.
[  128.371966][ T8825] lo speed is unknown, defaulting to 1000
[  128.394734][ T8830] lo speed is unknown, defaulting to 1000
[  128.544308][ T8825] wg1 speed is unknown, defaulting to 1000
[  128.684988][ T8830] wg1 speed is unknown, defaulting to 1000
[  129.105866][ T8852] lo speed is unknown, defaulting to 1000
[  129.155949][ T8854] netlink: 'syz.1.796': attribute type 1 has an invalid length.
[  129.293510][ T8854] gretap1: entered allmulticast mode
[  129.293910][ T8857] IPVS: Scheduler module ip_vs_sip not found
[  129.303606][ T8854] bond2: (slave gretap1): making interface the new active one
[  129.310163][ T8854] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  129.411331][ T8865] bridge_slave_0: left allmulticast mode
[  129.420787][ T8865] bridge_slave_0: left promiscuous mode
[  129.423242][ T8865] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.428300][ T8865] bridge_slave_1: left allmulticast mode
[  129.438529][ T8865] bridge_slave_1: left promiscuous mode
[  129.451608][ T8865] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.456917][ T8867] openvswitch: netlink: Missing key (keys=40, expected=100)
[  129.462043][ T8865] bond0: (slave bond_slave_0): Releasing backup interface
[  129.480791][ T8865] bond0: (slave bond_slave_1): Releasing backup interface
[  129.502305][ T8865] team0: Port device team_slave_0 removed
[  129.513797][ T8865] team0: Port device team_slave_1 removed
[  129.516497][ T8865] batman_adv: batadv0: Removing interface: batadv_slave_0
[  129.534085][ T8865] batman_adv: batadv0: Removing interface: batadv_slave_1
[  129.540595][ T8865] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  129.550122][ T8858] lo speed is unknown, defaulting to 1000
[  129.556647][ T8852] wg1 speed is unknown, defaulting to 1000
[  129.557264][ T8869] ieee802154 phy1 wpan1: encryption failed: -22
[  129.567598][ T8869] ieee802154 phy1 wpan1: encryption failed: -22
[  129.675828][ T8871] lo speed is unknown, defaulting to 1000
[  129.747330][ T8858] wg1 speed is unknown, defaulting to 1000
[  129.806446][ T8879] netlink: 'syz.0.802': attribute type 1 has an invalid length.
[  129.978370][ T8871] wg1 speed is unknown, defaulting to 1000
[  130.056029][ T8888] __nla_validate_parse: 6 callbacks suppressed
[  130.056039][ T8888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.806'.
[  130.061910][ T8888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.806'.
[  130.120774][ T8892] syzkaller1: entered promiscuous mode
[  130.122666][ T8892] syzkaller1: entered allmulticast mode
[  130.356661][ T8906] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  130.361141][ T8906] CPU: 1 UID: 0 PID: 8906 Comm: syz.1.810 Not tainted syzkaller #0 PREEMPT(full) 
[  130.361158][ T8906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  130.361167][ T8906] Call Trace:
[  130.361173][ T8906]  <TASK>
[  130.361180][ T8906]  dump_stack_lvl+0x189/0x250
[  130.361208][ T8906]  ? __pfx_dump_stack_lvl+0x10/0x10
[  130.361225][ T8906]  ? __pfx__printk+0x10/0x10
[  130.361242][ T8906]  ? kernfs_path_from_node+0x2f/0x290
[  130.361252][ T8906]  ? kernfs_path_from_node+0x250/0x290
[  130.361260][ T8906]  ? kernfs_path_from_node+0x2f/0x290
[  130.361271][ T8906]  sysfs_warn_dup+0x8e/0xa0
[  130.361281][ T8906]  sysfs_do_create_link_sd+0xc0/0x110
[  130.361291][ T8906]  device_add_class_symlinks+0x1cf/0x240
[  130.361302][ T8906]  device_add+0x475/0xb50
[  130.361312][ T8906]  wiphy_register+0x1ba6/0x28d0
[  130.361330][ T8906]  ? __pfx_wiphy_register+0x10/0x10
[  130.361338][ T8906]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  130.361395][ T8906]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  130.361410][ T8906]  ieee80211_register_hw+0x3484/0x4100
[  130.361434][ T8906]  ? ieee80211_register_hw+0x1471/0x4100
[  130.361460][ T8906]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  130.361475][ T8906]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  130.361487][ T8906]  ? __hrtimer_setup+0x187/0x210
[  130.361496][ T8906]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  130.361511][ T8906]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  130.361567][ T8906]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  130.361581][ T8906]  ? trace_kmalloc+0x1f/0xd0
[  130.361591][ T8906]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  130.361603][ T8906]  ? kstrndup+0xbf/0x160
[  130.361617][ T8906]  hwsim_new_radio_nl+0xea4/0x1b10
[  130.361630][ T8906]  ? __pfx___nla_validate_parse+0x10/0x10
[  130.361650][ T8906]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  130.361667][ T8906]  ? __nla_parse+0x40/0x60
[  130.361676][ T8906]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  130.361692][ T8906]  genl_family_rcv_msg_doit+0x215/0x300
[  130.361708][ T8906]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  130.361724][ T8906]  ? bpf_lsm_capable+0x9/0x20
[  130.361735][ T8906]  ? security_capable+0x7e/0x2e0
[  130.361750][ T8906]  genl_rcv_msg+0x60e/0x790
[  130.361763][ T8906]  ? __pfx_genl_rcv_msg+0x10/0x10
[  130.361773][ T8906]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  130.361791][ T8906]  netlink_rcv_skb+0x208/0x470
[  130.361798][ T8906]  ? __lock_acquire+0xab9/0xd20
[  130.361813][ T8906]  ? __pfx_genl_rcv_msg+0x10/0x10
[  130.361830][ T8906]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  130.361859][ T8906]  ? down_read+0x1ad/0x2e0
[  130.361871][ T8906]  genl_rcv+0x28/0x40
[  130.361880][ T8906]  netlink_unicast+0x82f/0x9e0
[  130.361902][ T8906]  ? __pfx_netlink_unicast+0x10/0x10
[  130.361944][ T8906]  ? netlink_sendmsg+0x642/0xb30
[  130.361952][ T8906]  ? skb_put+0x11b/0x210
[  130.361969][ T8906]  netlink_sendmsg+0x805/0xb30
[  130.361992][ T8906]  ? __pfx_netlink_sendmsg+0x10/0x10
[  130.362009][ T8906]  ? aa_sock_msg_perm+0xf1/0x1d0
[  130.362024][ T8906]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  130.362038][ T8906]  ? __pfx_netlink_sendmsg+0x10/0x10
[  130.362048][ T8906]  __sock_sendmsg+0x21c/0x270
[  130.362063][ T8906]  ____sys_sendmsg+0x505/0x830
[  130.362076][ T8906]  ? __pfx_____sys_sendmsg+0x10/0x10
[  130.362090][ T8906]  ? import_iovec+0x74/0xa0
[  130.362102][ T8906]  ___sys_sendmsg+0x21f/0x2a0
[  130.362113][ T8906]  ? __pfx____sys_sendmsg+0x10/0x10
[  130.362159][ T8906]  ? __fget_files+0x2a/0x420
[  130.362169][ T8906]  ? __fget_files+0x3a0/0x420
[  130.362181][ T8906]  __x64_sys_sendmsg+0x19b/0x260
[  130.362192][ T8906]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  130.362207][ T8906]  ? rcu_is_watching+0x15/0xb0
[  130.362218][ T8906]  ? do_syscall_64+0xbe/0x3b0
[  130.362229][ T8906]  do_syscall_64+0xfa/0x3b0
[  130.362237][ T8906]  ? lockdep_hardirqs_on+0x9c/0x150
[  130.362245][ T8906]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.362252][ T8906]  ? exc_page_fault+0x9f/0xf0
[  130.362261][ T8906]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.362269][ T8906] RIP: 0033:0x7fd4ce98eba9
[  130.362278][ T8906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  130.362291][ T8906] RSP: 002b:00007fd4cf89e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  130.362307][ T8906] RAX: ffffffffffffffda RBX: 00007fd4cebd6090 RCX: 00007fd4ce98eba9
[  130.362318][ T8906] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000c
[  130.362327][ T8906] RBP: 00007fd4cea11e19 R08: 0000000000000000 R09: 0000000000000000
[  130.362336][ T8906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  130.362344][ T8906] R13: 00007fd4cebd6128 R14: 00007fd4cebd6090 R15: 00007ffd8642ace8
[  130.362360][ T8906]  </TASK>
[  130.588199][ T8909] sctp: [Deprecated]: syz.2.811 (pid 8909) Use of int in maxseg socket option.
[  130.588199][ T8909] Use struct sctp_assoc_value instead
[  130.967995][ T8933] syzkaller0: entered promiscuous mode
[  130.970210][ T8933] syzkaller0: entered allmulticast mode
[  132.020296][ T8942] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  132.081622][ T8948] netlink: 60 bytes leftover after parsing attributes in process `syz.1.822'.
[  132.205924][ T8955] lo speed is unknown, defaulting to 1000
[  132.369268][ T8976] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  132.433850][ T8955] wg1 speed is unknown, defaulting to 1000
[  132.550969][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  133.304578][ T9010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.839'.
[  133.315744][ T9010] netlink: 68 bytes leftover after parsing attributes in process `syz.2.839'.
[  133.318907][ T9010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.839'.
[  133.403308][ T9012] lo speed is unknown, defaulting to 1000
[  133.452397][ T9014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.840'.
[  133.587724][ T9012] wg1 speed is unknown, defaulting to 1000
[  133.734595][ T9038] syzkaller1: entered promiscuous mode
[  133.737681][ T9038] syzkaller1: entered allmulticast mode
[  133.759483][ T9042] netlink: 24 bytes leftover after parsing attributes in process `syz.2.848'.
[  133.789272][ T9036] lo speed is unknown, defaulting to 1000
[  134.085219][ T9064] lo speed is unknown, defaulting to 1000
[  134.085698][ T9036] wg1 speed is unknown, defaulting to 1000
[  134.199727][ T9070] netlink: 'syz.2.853': attribute type 13 has an invalid length.
[  134.202738][ T9070] netlink: 'syz.2.853': attribute type 17 has an invalid length.
[  134.288038][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.854'.
[  134.362629][ T9070] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.377181][ T9070] 8021q: adding VLAN 0 to HW filter on device team0
[  134.386641][ T9070] tipc: Resetting bearer <eth:team0>
[  134.396299][ T9070] tipc: Resetting bearer <eth:team0>
[  134.404984][ T9070] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  134.431923][ T9069] lo speed is unknown, defaulting to 1000
[  134.445273][ T9064] wg1 speed is unknown, defaulting to 1000
[  134.624338][ T9069] wg1 speed is unknown, defaulting to 1000
[  134.959358][ T9088] lo speed is unknown, defaulting to 1000
[  134.963750][ T9084] lo speed is unknown, defaulting to 1000
[  135.051049][ T9092] netlink: 'syz.2.858': attribute type 12 has an invalid length.
[  135.142186][ T9095] netlink: 24 bytes leftover after parsing attributes in process `syz.0.857'.
[  135.230050][ T9088] wg1 speed is unknown, defaulting to 1000
[  135.373594][ T9084] wg1 speed is unknown, defaulting to 1000
[  135.512927][ T9105] netlink: 'syz.2.861': attribute type 1 has an invalid length.
[  135.622561][ T9109] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  135.681763][ T9117] netlink: 'syz.0.863': attribute type 13 has an invalid length.
[  135.684809][ T9117] netlink: 'syz.0.863': attribute type 17 has an invalid length.
[  135.721863][ T9105] veth3: entered promiscuous mode
[  135.725970][ T9105] bond2: (slave veth3): Enslaving as a backup interface with a down link
[  135.729171][ T9117] lo: left promiscuous mode
[  135.732305][ T9117] tunl0: left promiscuous mode
[  135.736016][ T9117] gre0: left promiscuous mode
[  135.739775][ T9117] gretap0: left promiscuous mode
[  135.742385][ T9117] erspan0: left promiscuous mode
[  135.745843][ T9117] ip6_vti0: left promiscuous mode
[  135.749842][ T9117] sit0: left promiscuous mode
[  135.751664][ T9117] ip6tnl0: left promiscuous mode
[  135.753832][ T9117] ip6gre0: left promiscuous mode
[  135.756478][ T9117] syz_tun: left promiscuous mode
[  135.759446][ T9117] ip6gretap0: left promiscuous mode
[  135.762050][ T9117] bridge0: left promiscuous mode
[  135.764368][ T9117] vcan0: left promiscuous mode
[  135.766898][ T9117] bond0: left promiscuous mode
[  135.771845][ T9117] team0: left promiscuous mode
[  135.777065][ T9117] !: left promiscuous mode
[  135.780884][ T9117] nlmon0: left promiscuous mode
[  135.789257][ T9117] caif0: left promiscuous mode
[  135.793386][ T9117] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  135.807389][ T5875] lo speed is unknown, defaulting to 1000
[  135.810510][ T5875] syz2: Port: 1 Link ACTIVE
[  135.826235][ T9123] tipc: Resetting bearer <eth:team0>
[  135.832118][ T9123] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  135.860727][ T9120] lo speed is unknown, defaulting to 1000
[  135.866417][ T9117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.918242][ T9132] netlink: 3 bytes leftover after parsing attributes in process `syz.1.867'.
[  135.927228][ T9134] netlink: 'syz.2.869': attribute type 13 has an invalid length.
[  135.935430][ T9134] netlink: 'syz.2.869': attribute type 17 has an invalid length.
[  135.957149][ T9132] batadv1: entered promiscuous mode
[  135.960021][ T9132] batadv1: entered allmulticast mode
[  135.969867][ T9134] 8021q: adding VLAN 0 to HW filter on device team0
[  135.972550][ T9134] tipc: Resetting bearer <eth:team0>
[  135.975424][ T9134] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  136.101443][ T9141] netlink: 156 bytes leftover after parsing attributes in process `syz.2.871'.
[  136.192819][ T9146] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  136.231770][ T9120] wg1 speed is unknown, defaulting to 1000
[  136.335240][ T9153] netlink: 20 bytes leftover after parsing attributes in process `syz.2.875'.
[  136.599542][ T9158] lo speed is unknown, defaulting to 1000
[  136.747432][ T9158] wg1 speed is unknown, defaulting to 1000
[  136.878359][ T9165] netlink: 'syz.2.877': attribute type 1 has an invalid length.
[  137.016316][ T9182] netlink: 'syz.0.881': attribute type 1 has an invalid length.
[  137.163771][ T9183] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  137.177698][ T9184] veth5: entered promiscuous mode
[  137.183928][ T9184] bond6: (slave veth5): Enslaving as a backup interface with a down link
[  137.387789][ T9189] lo speed is unknown, defaulting to 1000
[  137.394627][ T9193] netlink: 36 bytes leftover after parsing attributes in process `syz.0.883'.
[  137.554932][ T9189] wg1 speed is unknown, defaulting to 1000
[  137.600192][ T9196] lo speed is unknown, defaulting to 1000
[  137.656371][ T9200] netlink: 68 bytes leftover after parsing attributes in process `syz.0.884'.
[  137.982708][ T9196] wg1 speed is unknown, defaulting to 1000
[  138.017065][ T9205] lo speed is unknown, defaulting to 1000
[  138.138366][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.888'.
[  138.239464][ T9205] wg1 speed is unknown, defaulting to 1000
[  138.710859][ T9232] netlink: 32 bytes leftover after parsing attributes in process `syz.0.891'.
[  138.790040][ T9234] netlink: 32 bytes leftover after parsing attributes in process `syz.0.891'.
[  138.833489][ T9236] syzkaller0: entered promiscuous mode
[  138.835461][ T9236] syzkaller0: entered allmulticast mode
[  138.992530][ T9243] siw: device registration error -23
[  139.296479][ T9253] siw: device registration error -23
[  140.184161][ T9263] pim6reg1: entered promiscuous mode
[  140.185910][ T9263] pim6reg1: entered allmulticast mode
[  140.254785][ T9274] netlink: 20 bytes leftover after parsing attributes in process `syz.0.901'.
[  140.323490][ T9282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.904'.
[  140.331915][ T9282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.904'.
[  140.477623][ T9296] lo speed is unknown, defaulting to 1000
[  140.526058][ T9298] netlink: 248 bytes leftover after parsing attributes in process `syz.0.908'.
[  140.624940][ T9296] wg1 speed is unknown, defaulting to 1000
[  140.741464][ T9303] netlink: 32 bytes leftover after parsing attributes in process `syz.0.909'.
[  141.217373][ T9316] netlink: 14 bytes leftover after parsing attributes in process `syz.2.915'.
[  141.482853][ T9326] nicvf0: entered promiscuous mode
[  141.486680][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[  141.491063][ T5714] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[  141.494608][ T5714] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[  141.498039][ T5714] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[  141.543950][ T9328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  141.557396][ T9328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  141.566024][ T9328] validate_nla: 1 callbacks suppressed
[  141.566053][ T9328] netlink: 'syz.1.920': attribute type 39 has an invalid length.
[  142.078897][ T9337] lo speed is unknown, defaulting to 1000
[  142.285442][ T9353] lo speed is unknown, defaulting to 1000
[  142.286180][ T9337] wg1 speed is unknown, defaulting to 1000
[  142.376647][ T9364] netlink: 56 bytes leftover after parsing attributes in process `syz.2.928'.
[  142.466368][ T9353] wg1 speed is unknown, defaulting to 1000
[  142.678910][ T9372] lo speed is unknown, defaulting to 1000
[  142.776466][ T9374] netlink: 24 bytes leftover after parsing attributes in process `syz.2.931'.
[  142.786062][ T9376] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  142.790286][ T9376] syzkaller0: entered promiscuous mode
[  142.792706][ T9376] syzkaller0: entered allmulticast mode
[  142.808632][ T9376] netlink: 2 bytes leftover after parsing attributes in process `syz.0.932'.
[  142.818215][ T9376] tipc: Resetting bearer <eth:syzkaller0>
[  142.867392][ T9375] tipc: Resetting bearer <eth:syzkaller0>
[  142.884885][ T9375] tipc: Disabling bearer <eth:syzkaller0>
[  142.901003][ T9372] wg1 speed is unknown, defaulting to 1000
[  143.273417][ T9401] netlink: 76 bytes leftover after parsing attributes in process `syz.0.939'.
[  143.450905][ T9405] netlink: 'syz.0.941': attribute type 12 has an invalid length.
[  143.634718][ T9414] lo speed is unknown, defaulting to 1000
[  143.650403][ T9418] lo speed is unknown, defaulting to 1000
[  143.663466][ T9421] netlink: 'syz.0.943': attribute type 1 has an invalid length.
[  144.013254][ T9414] wg1 speed is unknown, defaulting to 1000
[  144.198403][ T9428] netlink: 'syz.1.946': attribute type 1 has an invalid length.
[  144.203359][ T9426] syz_tun: entered allmulticast mode
[  144.229028][ T9426] dvmrp8: entered allmulticast mode
[  144.255599][ T9426] lo speed is unknown, defaulting to 1000
[  144.291793][ T9431] netlink: 'syz.0.945': attribute type 23 has an invalid length.
[  144.344935][ T9433] bond3: entered promiscuous mode
[  144.496651][ T9426] wg1 speed is unknown, defaulting to 1000
[  144.503769][ T9418] wg1 speed is unknown, defaulting to 1000
[  144.702735][ T9425] syz_tun: left allmulticast mode
[  144.705225][ T9425] dvmrp8: left allmulticast mode
[  145.139792][ T9467] siw: device registration error -23
[  145.165685][ T9464] lo speed is unknown, defaulting to 1000
[  145.323285][ T9472] lo speed is unknown, defaulting to 1000
[  145.392534][ T9464] wg1 speed is unknown, defaulting to 1000
[  145.452346][ T9478] syz_tun: entered allmulticast mode
[  145.459048][ T9478] dvmrp8: entered allmulticast mode
[  145.516166][ T9478] lo speed is unknown, defaulting to 1000
[  145.525932][ T9481] netlink: 'syz.1.960': attribute type 23 has an invalid length.
[  145.525940][ T9480] __nla_validate_parse: 4 callbacks suppressed
[  145.525948][ T9480] netlink: 284 bytes leftover after parsing attributes in process `syz.0.961'.
[  145.730700][ T9478] wg1 speed is unknown, defaulting to 1000
[  145.771678][ T9472] wg1 speed is unknown, defaulting to 1000
[  145.841466][ T9477] syz_tun: left allmulticast mode
[  145.843811][ T9477] dvmrp8: left allmulticast mode
[  146.032205][ T9490] syzkaller1: entered promiscuous mode
[  146.034478][ T9490] syzkaller1: entered allmulticast mode
[  146.222857][ T9497] netlink: 'syz.2.966': attribute type 1 has an invalid length.
[  146.547491][ T9503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.969'.
[  146.772095][ T9508] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.775797][ T9508] syzkaller0: entered promiscuous mode
[  146.777878][ T9508] syzkaller0: entered allmulticast mode
[  146.786503][ T9508] syz_tun: entered allmulticast mode
[  146.790624][ T9508] netlink: 60 bytes leftover after parsing attributes in process `syz.0.971'.
[  146.801821][ T9508] tipc: Resetting bearer <eth:syzkaller0>
[  146.807656][ T9507] tipc: Resetting bearer <eth:syzkaller0>
[  146.817341][ T9507] tipc: Disabling bearer <eth:syzkaller0>
[  146.944111][ T9512] netlink: 96 bytes leftover after parsing attributes in process `syz.0.973'.
[  146.947289][ T9512] netlink: 32 bytes leftover after parsing attributes in process `syz.0.973'.
[  146.995451][ T9494] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  147.098161][ T9518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.975'.
[  147.202695][ T9522] lo speed is unknown, defaulting to 1000
[  147.247834][ T9526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.978'.
[  147.299584][ T9524] netlink: 40 bytes leftover after parsing attributes in process `syz.2.977'.
[  147.371127][ T9522] wg1 speed is unknown, defaulting to 1000
[  147.385370][ T9532] netlink: 666 bytes leftover after parsing attributes in process `syz.1.979'.
[  147.826556][ T9564] netlink: 'syz.2.986': attribute type 1 has an invalid length.
[  147.881077][ T9564] veth5: entered promiscuous mode
[  147.886258][ T9564] bond3: (slave veth5): Enslaving as a backup interface with a down link
[  147.899483][ T9569] tipc: Trying to set illegal importance in message
[  147.942348][ T9569] ieee802154 phy1 wpan1: encryption failed: -22
[  147.987743][ T9576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.990'.
[  148.037112][ T9577] syz_tun (unregistering): left allmulticast mode
[  148.137745][ T9590] netlink: 'syz.2.993': attribute type 15 has an invalid length.
[  148.350863][ T9600] netlink: 'syz.0.997': attribute type 4 has an invalid length.
[  148.748154][ T9623] netlink: 'syz.1.1003': attribute type 29 has an invalid length.
[  148.751477][ T9623] netlink: 'syz.1.1003': attribute type 29 has an invalid length.
[  149.334604][ T9636] lo speed is unknown, defaulting to 1000
[  149.437125][ T9643] netlink: 'syz.0.1010': attribute type 12 has an invalid length.
[  149.442245][ T9643] netlink: 'syz.0.1010': attribute type 12 has an invalid length.
[  149.480509][ T9645] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  149.503367][ T9636] wg1 speed is unknown, defaulting to 1000
[  149.729620][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  149.736781][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  149.743024][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  149.746699][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  149.755306][ T9664] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  149.781520][   T51] lo speed is unknown, defaulting to 1000
[  149.783962][   T51] syz2: Port: 1 Link DOWN
[  149.882116][ T9662] lo speed is unknown, defaulting to 1000
[  149.899409][ T9668] lo speed is unknown, defaulting to 1000
[  149.943135][ T9672] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  149.946699][ T9672] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  150.164574][ T9682] lo speed is unknown, defaulting to 1000
[  150.177915][ T9662] wg1 speed is unknown, defaulting to 1000
[  150.437876][ T9668] wg1 speed is unknown, defaulting to 1000
[  150.666249][ T9682] wg1 speed is unknown, defaulting to 1000
[  150.829529][ T9702] lo: entered allmulticast mode
[  150.897399][ T9701] lo speed is unknown, defaulting to 1000
[  151.156421][ T9701] wg1 speed is unknown, defaulting to 1000
[  151.222899][ T9708] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  151.226318][ T9708] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  151.243069][ T9685] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  151.279045][ T9708] syzkaller1: left promiscuous mode
[  151.287962][ T9708] syzkaller1: left allmulticast mode
[  151.377979][ T9700] lo: left allmulticast mode
[  151.528166][ T9713] 8021q: adding VLAN 0 to HW filter on device bond4
[  151.535337][ T9713] bond0: (slave bond4): Enslaving as an active interface with an up link
[  151.623697][ T9732] netlink: 'syz.0.1032': attribute type 1 has an invalid length.
[  151.645658][ T9734] __nla_validate_parse: 20 callbacks suppressed
[  151.645673][ T9734] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1033'.
[  151.672887][ T9737] bond5: (slave ip6gretap2): making interface the new active one
[  151.676640][ T9737] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link
[  152.090642][ T9743] veth7: entered promiscuous mode
[  152.104266][ T9743] bond8: (slave veth7): Enslaving as a backup interface with a down link
[  152.117232][ T9748] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.133265][ T9749] syzkaller0: entered promiscuous mode
[  152.135124][ T9749] syzkaller0: entered allmulticast mode
[  152.576130][ T9744] tipc: Resetting bearer <eth:syzkaller0>
[  152.610069][ T9744] tipc: Disabling bearer <eth:syzkaller0>
[  152.762869][ T9782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1042'.
[  152.796982][ T9782] !: entered promiscuous mode
[  152.807965][ T9782] macsec1: entered promiscuous mode
[  152.813372][ T9782] macsec1: entered allmulticast mode
[  152.815123][ T9782] !: entered allmulticast mode
[  152.818800][ T9782] !: left allmulticast mode
[  152.820477][ T9782] !: left promiscuous mode
[  152.866280][ T9788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1044'.
[  152.888948][ T9778] netlink: 'syz.0.1042': attribute type 13 has an invalid length.
[  152.924323][ T9791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1045'.
[  153.019918][ T9797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1047'.
[  153.112795][ T9793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1044'.
[  153.137948][ T9801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1049'.
[  153.166384][ T9804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1050'.
[  153.191821][ T9801] bond6: entered promiscuous mode
[  153.245508][ T9808] netlink: 'syz.1.1052': attribute type 1 has an invalid length.
[  153.282761][ T9806] lo speed is unknown, defaulting to 1000
[  153.313637][ T9808] veth5: entered promiscuous mode
[  153.317392][ T9808] bond4: (slave veth5): Enslaving as a backup interface with a down link
[  153.340125][ T9812] lo speed is unknown, defaulting to 1000
[  153.455718][ T9806] wg1 speed is unknown, defaulting to 1000
[  153.479198][ T9821] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1051'.
[  153.482721][ T9821] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1051'.
[  153.640128][ T9812] wg1 speed is unknown, defaulting to 1000
[  154.276483][ T9838] bond9: entered promiscuous mode
[  154.553318][ T9853] lo speed is unknown, defaulting to 1000
[  154.748206][ T9853] wg1 speed is unknown, defaulting to 1000
[  154.911553][ T9875] lo speed is unknown, defaulting to 1000
[  154.951049][ T9877] lo speed is unknown, defaulting to 1000
[  155.086685][ T9875] wg1 speed is unknown, defaulting to 1000
[  155.397290][ T9877] wg1 speed is unknown, defaulting to 1000
[  155.467355][ T9898] netlink: 'syz.1.1070': attribute type 29 has an invalid length.
[  156.069259][ T9911] lo speed is unknown, defaulting to 1000
[  156.159143][ T9912] lo speed is unknown, defaulting to 1000
[  156.298615][ T9911] wg1 speed is unknown, defaulting to 1000
[  156.452312][ T9918] bond5: entered promiscuous mode
[  156.456023][ T9922] bridge_slave_0: invalid flags given to default FDB implementation
[  156.477784][ T9922] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  156.567461][ T9926] netlink: 'syz.0.1079': attribute type 20 has an invalid length.
[  156.572991][ T9926] netlink: 'syz.0.1079': attribute type 20 has an invalid length.
[  156.573024][ T9912] wg1 speed is unknown, defaulting to 1000
[  156.634186][ T9924] tipc: Resetting bearer <eth:syzkaller0>
[  156.654788][ T9924] syzkaller0: left promiscuous mode
[  156.657186][ T9924] syzkaller0: left allmulticast mode
[  156.662128][ T9924] bond1: left promiscuous mode
[  156.667820][ T9924] gretap1: left allmulticast mode
[  156.678811][ T9924] nicvf0: left promiscuous mode
[  156.693300][ T9924] bond3: left promiscuous mode
[  156.702945][ T9924] veth5: left promiscuous mode
[  156.710677][ T9924] bond5: left promiscuous mode
[  156.721726][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0
[  156.727227][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0
[  156.755858][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0
[  156.765698][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0
[  156.787778][ T9930] __nla_validate_parse: 14 callbacks suppressed
[  156.787793][ T9930] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1080'.
[  156.834437][ T9934] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1080'.
[  156.838242][ T9931] lo speed is unknown, defaulting to 1000
[  156.891248][ T9936] netlink: 'syz.1.1081': attribute type 1 has an invalid length.
[  156.934324][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1081'.
[  156.938201][ T9936] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1081'.
[  157.004558][ T9931] wg1 speed is unknown, defaulting to 1000
[  157.138703][ T9936] lo speed is unknown, defaulting to 1000
[  157.425201][ T9936] wg1 speed is unknown, defaulting to 1000
[  157.625451][ T9965] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1091'.
[  157.641618][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1090'.
[  157.654784][ T9965] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1091'.
[  157.705295][ T9972] netlink: 'syz.0.1092': attribute type 13 has an invalid length.
[  157.714783][ T9972] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1092'.
[  157.857154][ T9981] netlink: 'syz.2.1094': attribute type 1 has an invalid length.
[  157.865093][ T9981] netlink: 'syz.2.1094': attribute type 1 has an invalid length.
[  157.872890][ T9981] netlink: 'syz.2.1094': attribute type 1 has an invalid length.
[  157.876348][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1094'.
[  157.876382][ T9980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1094'.
[  158.183336][ T9990] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  158.187505][ T9990] CPU: 1 UID: 0 PID: 9990 Comm: syz.0.1097 Not tainted syzkaller #0 PREEMPT(full) 
[  158.187519][ T9990] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  158.187525][ T9990] Call Trace:
[  158.187530][ T9990]  <TASK>
[  158.187535][ T9990]  dump_stack_lvl+0x189/0x250
[  158.187555][ T9990]  ? __pfx_dump_stack_lvl+0x10/0x10
[  158.187567][ T9990]  ? __pfx__printk+0x10/0x10
[  158.187583][ T9990]  ? kernfs_path_from_node+0x2f/0x290
[  158.187594][ T9990]  ? kernfs_path_from_node+0x250/0x290
[  158.187603][ T9990]  ? kernfs_path_from_node+0x2f/0x290
[  158.187615][ T9990]  sysfs_warn_dup+0x8e/0xa0
[  158.187625][ T9990]  sysfs_do_create_link_sd+0xc0/0x110
[  158.187635][ T9990]  device_add_class_symlinks+0x1cf/0x240
[  158.187647][ T9990]  device_add+0x475/0xb50
[  158.187658][ T9990]  wiphy_register+0x1ba6/0x28d0
[  158.187677][ T9990]  ? __pfx_wiphy_register+0x10/0x10
[  158.187685][ T9990]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  158.187703][ T9990]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  158.187718][ T9990]  ieee80211_register_hw+0x3484/0x4100
[  158.187741][ T9990]  ? ieee80211_register_hw+0x1471/0x4100
[  158.187758][ T9990]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  158.187771][ T9990]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  158.187783][ T9990]  ? __hrtimer_setup+0x187/0x210
[  158.187791][ T9990]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  158.187808][ T9990]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  158.187835][ T9990]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  158.187847][ T9990]  ? trace_kmalloc+0x1f/0xd0
[  158.187857][ T9990]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  158.187868][ T9990]  ? kstrndup+0xbf/0x160
[  158.187882][ T9990]  hwsim_new_radio_nl+0xea4/0x1b10
[  158.187894][ T9990]  ? __pfx___nla_validate_parse+0x10/0x10
[  158.187914][ T9990]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  158.187931][ T9990]  ? __nla_parse+0x40/0x60
[  158.187940][ T9990]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  158.187958][ T9990]  genl_family_rcv_msg_doit+0x215/0x300
[  158.187974][ T9990]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  158.187991][ T9990]  ? bpf_lsm_capable+0x9/0x20
[  158.188002][ T9990]  ? security_capable+0x7e/0x2e0
[  158.188017][ T9990]  genl_rcv_msg+0x60e/0x790
[  158.188031][ T9990]  ? __pfx_genl_rcv_msg+0x10/0x10
[  158.188041][ T9990]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  158.188058][ T9990]  netlink_rcv_skb+0x208/0x470
[  158.188066][ T9990]  ? __lock_acquire+0xab9/0xd20
[  158.188078][ T9990]  ? __pfx_genl_rcv_msg+0x10/0x10
[  158.188089][ T9990]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  158.188106][ T9990]  ? down_read+0x1ad/0x2e0
[  158.188118][ T9990]  genl_rcv+0x28/0x40
[  158.188127][ T9990]  netlink_unicast+0x82f/0x9e0
[  158.188143][ T9990]  ? __pfx_netlink_unicast+0x10/0x10
[  158.188157][ T9990]  ? netlink_sendmsg+0x642/0xb30
[  158.188166][ T9990]  ? skb_put+0x11b/0x210
[  158.188177][ T9990]  netlink_sendmsg+0x805/0xb30
[  158.188191][ T9990]  ? __pfx_netlink_sendmsg+0x10/0x10
[  158.188201][ T9990]  ? aa_sock_msg_perm+0xf1/0x1d0
[  158.188211][ T9990]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  158.188219][ T9990]  ? __pfx_netlink_sendmsg+0x10/0x10
[  158.188228][ T9990]  __sock_sendmsg+0x21c/0x270
[  158.188242][ T9990]  ____sys_sendmsg+0x505/0x830
[  158.188255][ T9990]  ? __pfx_____sys_sendmsg+0x10/0x10
[  158.188269][ T9990]  ? import_iovec+0x74/0xa0
[  158.188281][ T9990]  ___sys_sendmsg+0x21f/0x2a0
[  158.188291][ T9990]  ? __pfx____sys_sendmsg+0x10/0x10
[  158.188318][ T9990]  ? __fget_files+0x2a/0x420
[  158.188325][ T9990]  ? __fget_files+0x3a0/0x420
[  158.188337][ T9990]  __x64_sys_sendmsg+0x19b/0x260
[  158.188348][ T9990]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  158.188363][ T9990]  ? rcu_is_watching+0x15/0xb0
[  158.188374][ T9990]  ? do_syscall_64+0xbe/0x3b0
[  158.188426][ T9990]  do_syscall_64+0xfa/0x3b0
[  158.188438][ T9990]  ? lockdep_hardirqs_on+0x9c/0x150
[  158.188447][ T9990]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.188457][ T9990]  ? exc_page_fault+0x9f/0xf0
[  158.188467][ T9990]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.188476][ T9990] RIP: 0033:0x7f238a98eba9
[  158.188486][ T9990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  158.188493][ T9990] RSP: 002b:00007f238b7c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  158.188507][ T9990] RAX: ffffffffffffffda RBX: 00007f238abd5fa0 RCX: 00007f238a98eba9
[  158.188513][ T9990] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a
[  158.188519][ T9990] RBP: 00007f238aa11e19 R08: 0000000000000000 R09: 0000000000000000
[  158.188525][ T9990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  158.188530][ T9990] R13: 00007f238abd6038 R14: 00007f238abd5fa0 R15: 00007ffe023fbd18
[  158.188545][ T9990]  </TASK>
[  158.407725][ T9995] erspan0: entered promiscuous mode
[  158.443133][ T9998] lo speed is unknown, defaulting to 1000
[  158.585485][ T9998] wg1 speed is unknown, defaulting to 1000
[  158.959398][T10022] netlink: 'syz.0.1103': attribute type 4 has an invalid length.
[  159.000315][T10025] lo speed is unknown, defaulting to 1000
[  159.103691][T10031] bond10: entered promiscuous mode
[  159.215239][T10025] wg1 speed is unknown, defaulting to 1000
[  159.418224][T10047] lo speed is unknown, defaulting to 1000
[  159.550758][T10047] wg1 speed is unknown, defaulting to 1000
[  159.978108][T10057] netlink: 'syz.1.1111': attribute type 1 has an invalid length.
[  160.087826][T10061] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  160.114356][T10057] veth7: entered promiscuous mode
[  160.117916][T10057] bond7: (slave veth7): Enslaving as a backup interface with a down link
[  160.287175][T10068] lo speed is unknown, defaulting to 1000
[  160.405924][T10068] wg1 speed is unknown, defaulting to 1000
[  160.468814][ T5850] Bluetooth: hci2: command 0x040f tx timeout
[  161.327551][T10092] bond8: entered promiscuous mode
[  161.732706][T10134] lo speed is unknown, defaulting to 1000
[  161.816572][T10141] lo speed is unknown, defaulting to 1000
[  161.898944][T10134] wg1 speed is unknown, defaulting to 1000
[  161.904594][T10151] __nla_validate_parse: 9 callbacks suppressed
[  161.904603][T10151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1140'.
[  161.911036][T10151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1140'.
[  162.062694][T10141] wg1 speed is unknown, defaulting to 1000
[  162.169125][T10164] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1144'.
[  162.172527][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1144'.
[  162.292272][T10175] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1146'.
[  162.333886][T10176] netlink: 'syz.1.1147': attribute type 1 has an invalid length.
[  162.337024][T10176] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1147'.
[  162.816398][T10194] lo speed is unknown, defaulting to 1000
[  163.211031][T10198] netlink: 'syz.1.1151': attribute type 4 has an invalid length.
[  163.216949][T10194] wg1 speed is unknown, defaulting to 1000
[  163.223636][T10198] netlink: 'syz.1.1151': attribute type 4 has an invalid length.
[  163.349229][T10201] lo speed is unknown, defaulting to 1000
[  163.486269][T10205] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1152'.
[  163.561507][T10210] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1154'.
[  163.588034][T10201] wg1 speed is unknown, defaulting to 1000
[  163.726227][T10218] netlink: 'syz.2.1157': attribute type 1 has an invalid length.
[  163.824264][T10224] bond7: (slave vti1): The slave device specified does not support setting the MAC address
[  163.827513][T10224] bond7: (slave vti1): Setting fail_over_mac to active for active-backup mode
[  163.858296][T10224] bond7: (slave vti1): making interface the new active one
[  163.863268][T10224] bond7: (slave vti1): Enslaving as an active interface with an up link
[  163.873323][T10223] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.879285][T10223] syzkaller0: entered promiscuous mode
[  163.881536][T10223] syzkaller0: entered allmulticast mode
[  163.921168][T10223] tipc: Resetting bearer <eth:syzkaller0>
[  163.926313][T10221] tipc: Resetting bearer <eth:syzkaller0>
[  163.944942][T10221] tipc: Disabling bearer <eth:syzkaller0>
[  163.950408][T10229] netlink: 'syz.1.1161': attribute type 1 has an invalid length.
[  163.990417][T10227] lo speed is unknown, defaulting to 1000
[  164.022938][T10229] veth9: entered promiscuous mode
[  164.080319][T10236] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1160'.
[  164.090089][T10236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1160'.
[  164.298320][T10227] wg1 speed is unknown, defaulting to 1000
[  164.365781][T10247] bridge0 (unregistering): left allmulticast mode
[  164.478607][ T5850] Bluetooth: hci2: command 0x040f tx timeout
[  164.634435][T10261] bond10: entered promiscuous mode
[  164.741208][T10271] netlink: 'syz.0.1173': attribute type 4 has an invalid length.
[  164.912693][T10294] bond11: entered promiscuous mode
[  164.922176][T10294] netlink: 'syz.0.1179': attribute type 1 has an invalid length.
[  164.990951][T10298] syzkaller1: entered promiscuous mode
[  164.992867][T10298] syzkaller1: entered allmulticast mode
[  165.095461][T10313] sctp: [Deprecated]: syz.0.1183 (pid 10313) Use of struct sctp_assoc_value in delayed_ack socket option.
[  165.095461][T10313] Use struct sctp_sack_info instead
[  165.297334][T10328] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.441706][T10347] netlink: 'syz.0.1192': attribute type 2 has an invalid length.
[  165.454676][T10347] k*]: entered promiscuous mode
[  165.456724][T10350] lo speed is unknown, defaulting to 1000
[  165.485844][T10347] veth0_to_team: entered promiscuous mode
[  165.487740][T10347] veth0_to_team: entered allmulticast mode
[  165.506505][T10355] netlink: 'syz.1.1194': attribute type 1 has an invalid length.
[  165.544416][T10355] veth11: entered promiscuous mode
[  165.560787][T10355] bond0: (slave veth11): Enslaving as an active interface with an up link
[  165.614525][T10350] wg1 speed is unknown, defaulting to 1000
[  165.811922][T10368] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  166.548607][ T5850] Bluetooth: hci2: command 0x040f tx timeout
[  167.142177][T10413] syzkaller1: left promiscuous mode
[  167.587410][T10415] __nla_validate_parse: 14 callbacks suppressed
[  167.587423][T10415] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1211'.
[  167.746461][T10417] lo speed is unknown, defaulting to 1000
[  167.858406][T10417] wg1 speed is unknown, defaulting to 1000
[  167.919068][T10417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1212'.
[  167.922701][T10417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1212'.
[  168.018181][T10425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1214'.
[  168.022070][T10425] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1214'.
[  168.026601][T10425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1214'.
[  168.030891][T10425] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1214'.
[  168.112615][T10431] netlink: 'syz.0.1217': attribute type 1 has an invalid length.
[  168.137317][T10433] syzkaller1: entered promiscuous mode
[  168.148132][T10431] bond12: entered promiscuous mode
[  168.153636][T10431] bond12: entered allmulticast mode
[  168.163080][T10431] 8021q: adding VLAN 0 to HW filter on device bond12
[  168.179762][T10431] 8021q: adding VLAN 0 to HW filter on device bond13
[  168.182885][T10431] bond13: entered promiscuous mode
[  168.184568][T10431] bond13: entered allmulticast mode
[  168.188591][T10431] bond12: (slave bond13): Enslaving as a backup interface with a down link
[  168.283469][T10441] syzkaller1: entered promiscuous mode
[  168.286963][T10441] syzkaller1: entered allmulticast mode
[  168.450157][T10449] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  168.526778][T10452] lo speed is unknown, defaulting to 1000
[  168.570422][T10458] netlink: 'syz.0.1225': attribute type 1 has an invalid length.
[  168.608090][T10464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1228'.
[  168.627704][T10463] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1228'.
[  168.631682][T10458] lo speed is unknown, defaulting to 1000
[  168.662269][T10468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1229'.
[  168.687623][T10452] wg1 speed is unknown, defaulting to 1000
[  168.828217][T10458] wg1 speed is unknown, defaulting to 1000
[  169.087745][T10489] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  169.120969][T10489] tipc: Enabled bearer <eth:ipvlan1>, priority 10
[  169.868373][T10516] netlink: 'syz.2.1240': attribute type 1 has an invalid length.
[  169.934057][T10516] veth7: entered promiscuous mode
[  169.941851][T10516] bond8: (slave veth7): Enslaving as a backup interface with a down link
[  169.993302][T10526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.103982][T10531] lo speed is unknown, defaulting to 1000
[  170.236024][T10531] wg1 speed is unknown, defaulting to 1000
[  170.248934][ T5312] tipc: Node number set to 79419142
[  170.578100][T10547] netlink: 'syz.2.1250': attribute type 1 has an invalid length.
[  170.621994][T10547] veth9: entered promiscuous mode
[  170.627615][T10547] bond9: (slave veth9): Enslaving as a backup interface with a down link
[  170.877945][T10557] 8021q: VLANs not supported on ipvlan1
[  170.886522][T10557] macsec2: entered promiscuous mode
[  170.889719][T10557] macsec2: entered allmulticast mode
[  171.005942][T10559] sctp: [Deprecated]: syz.0.1254 (pid 10559) Use of int in maxseg socket option.
[  171.005942][T10559] Use struct sctp_assoc_value instead
[  171.306733][T10578] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  171.313843][T10578] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  171.770121][T10615] syzkaller1: left promiscuous mode
[  171.771867][T10615] syzkaller1: left allmulticast mode
[  172.188224][T10635] netlink: 'syz.0.1274': attribute type 10 has an invalid length.
[  172.193711][T10635] bridge0: port 1(macsec0) entered blocking state
[  172.196364][T10635] bridge0: port 1(macsec0) entered disabled state
[  172.199169][T10635] macsec0: entered allmulticast mode
[  172.201232][T10635] veth1_macvtap: entered allmulticast mode
[  172.205154][T10635] macsec0: entered promiscuous mode
[  172.303640][T10642] dvmrp8: entered allmulticast mode
[  172.337773][T10640] dvmrp8: left allmulticast mode
[  172.669487][T10653] lo speed is unknown, defaulting to 1000
[  172.893771][T10664] __nla_validate_parse: 17 callbacks suppressed
[  172.893786][T10664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1282'.
[  172.905024][T10664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1282'.
[  172.913545][T10663] netlink: 'syz.2.1282': attribute type 39 has an invalid length.
[  172.950439][T10653] wg1 speed is unknown, defaulting to 1000
[  172.953158][T10657] siw: device registration error -23
[  173.073501][T10669] siw: device registration error -23
[  173.126354][T10670] syz.2.1284: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  173.136954][T10670] CPU: 0 UID: 0 PID: 10670 Comm: syz.2.1284 Not tainted syzkaller #0 PREEMPT(full) 
[  173.136972][T10670] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  173.136979][T10670] Call Trace:
[  173.136985][T10670]  <TASK>
[  173.136992][T10670]  dump_stack_lvl+0x189/0x250
[  173.137017][T10670]  ? __pfx_dump_stack_lvl+0x10/0x10
[  173.137033][T10670]  ? __pfx__printk+0x10/0x10
[  173.137053][T10670]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  173.137069][T10670]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  173.137086][T10670]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  173.137103][T10670]  warn_alloc+0x214/0x310
[  173.137129][T10670]  ? __pfx_warn_alloc+0x10/0x10
[  173.137155][T10670]  ? __get_vm_area_node+0x28f/0x300
[  173.137174][T10670]  ? xskq_create+0xbf/0x170
[  173.137191][T10670]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  173.137233][T10670]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  173.137257][T10670]  ? __kasan_kmalloc+0x93/0xb0
[  173.137277][T10670]  vmalloc_user_noprof+0xad/0xf0
[  173.137296][T10670]  ? xskq_create+0xbf/0x170
[  173.137309][T10670]  xskq_create+0xbf/0x170
[  173.137325][T10670]  xsk_init_queue+0xb0/0x110
[  173.137340][T10670]  xsk_setsockopt+0x57b/0x8d0
[  173.137362][T10670]  ? __pfx_xsk_setsockopt+0x10/0x10
[  173.137381][T10670]  ? __pfx_aa_sk_perm+0x10/0x10
[  173.137404][T10670]  ? __fget_files+0x2a/0x420
[  173.137415][T10670]  ? aa_sock_opt_perm+0xff/0x1b0
[  173.137431][T10670]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  173.137446][T10670]  ? __pfx_xsk_setsockopt+0x10/0x10
[  173.137463][T10670]  do_sock_setsockopt+0x17c/0x1b0
[  173.137485][T10670]  __x64_sys_setsockopt+0x13f/0x1b0
[  173.137504][T10670]  do_syscall_64+0xfa/0x3b0
[  173.137520][T10670]  ? lockdep_hardirqs_on+0x9c/0x150
[  173.137533][T10670]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.137547][T10670]  ? exc_page_fault+0x9f/0xf0
[  173.137600][T10670]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.137613][T10670] RIP: 0033:0x7ff1da38eba9
[  173.137626][T10670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  173.137637][T10670] RSP: 002b:00007ff1db150038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  173.137651][T10670] RAX: ffffffffffffffda RBX: 00007ff1da5d5fa0 RCX: 00007ff1da38eba9
[  173.137661][T10670] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003
[  173.137669][T10670] RBP: 00007ff1da411e19 R08: 0000000000000004 R09: 0000000000000000
[  173.137677][T10670] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000
[  173.137685][T10670] R13: 00007ff1da5d6038 R14: 00007ff1da5d5fa0 R15: 00007ffeeda0a4a8
[  173.137708][T10670]  </TASK>
[  173.137713][T10670] Mem-Info:
[  173.233829][T10670] active_anon:17950 inactive_anon:0 isolated_anon:0
[  173.233829][T10670]  active_file:1442 inactive_file:38283 isolated_file:0
[  173.233829][T10670]  unevictable:1768 dirty:169 writeback:0
[  173.233829][T10670]  slab_reclaimable:11169 slab_unreclaimable:156858
[  173.233829][T10670]  mapped:20460 shmem:2432 pagetables:950
[  173.233829][T10670]  sec_pagetables:0 bounce:0
[  173.233829][T10670]  kernel_misc_reclaimable:0
[  173.233829][T10670]  free:176610 free_pcp:19276 free_cma:0
[  173.247938][T10670] Node 0 active_anon:50748kB inactive_anon:0kB active_file:2648kB inactive_file:144496kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37308kB dirty:196kB writeback:0kB shmem:4916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5284kB pagetables:2172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  173.258455][T10670] Node 1 active_anon:21052kB inactive_anon:0kB active_file:3120kB inactive_file:8636kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44532kB dirty:480kB writeback:0kB shmem:4812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7180kB pagetables:1628kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  173.267934][T10670] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  173.277191][T10670] lowmem_reserve[]: 0 811 811 811 811
[  173.278964][T10670] Node 0 DMA32 free:159756kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:50748kB inactive_anon:0kB active_file:2648kB inactive_file:144496kB unevictable:3536kB writepending:196kB present:1556484kB managed:830876kB mlocked:0kB bounce:0kB free_pcp:32124kB local_pcp:24668kB free_cma:0kB
[  173.289063][T10670] lowmem_reserve[]: 0 0 0 0 0
[  173.290677][T10670] Node 1 DMA32 free:454396kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  173.300277][T10670] lowmem_reserve[]: 0 0 854 854 854
[  173.302112][T10670] Node 1 Normal free:76928kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21052kB inactive_anon:0kB active_file:3120kB inactive_file:8636kB unevictable:3536kB writepending:480kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:44864kB local_pcp:19572kB free_cma:0kB
[  173.312964][T10670] lowmem_reserve[]: 0 0 0 0 0
[  173.314542][T10670] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  173.318882][T10670] Node 0 DMA32: 685*4kB (UE) 381*8kB (UME) 173*16kB (UE) 53*32kB (UE) 9*64kB (UE) 3*128kB (UE) 6*256kB (UME) 7*512kB (UME) 6*1024kB (UM) 5*2048kB (UM) 31*4096kB (UM) = 159692kB
[  173.324685][T10670] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 108*4096kB (UM) = 454396kB
[  173.330186][T10670] Node 1 Normal: 1282*4kB (UME) 247*8kB (UE) 94*16kB (UME) 285*32kB (UE) 23*64kB (UM) 3*128kB (UM) 6*256kB (UM) 7*512kB (UM) 5*1024kB (UM) 3*2048kB (UE) 10*4096kB (UM) = 76928kB
[  173.337067][T10670] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  173.351432][T10670] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  173.354838][T10670] 42157 total pagecache pages
[  173.356371][T10670] 0 pages in swap cache
[  173.357726][T10670] Free swap  = 124996kB
[  173.361781][T10670] Total swap = 124996kB
[  173.363967][T10670] 786301 pages RAM
[  173.365196][T10670] 0 pages HighMem/MovableOnly
[  173.366876][T10670] 241350 pages reserved
[  173.368307][T10670] 0 pages cma reserved
[  173.478376][T10691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1288'.
[  173.487745][T10690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1288'.
[  173.581346][T10696] lo speed is unknown, defaulting to 1000
[  173.653610][T10703] bond15: entered promiscuous mode
[  173.682938][T10702] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1290'.
[  173.714948][T10696] wg1 speed is unknown, defaulting to 1000
[  173.743188][T10709] lo speed is unknown, defaulting to 1000
[  173.825672][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1293'.
[  173.895497][T10709] wg1 speed is unknown, defaulting to 1000
[  173.899356][T10715] smc: removing ib device syz!
[  174.274769][T10724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1295'.
[  174.408193][T10727] lo speed is unknown, defaulting to 1000
[  174.440688][T10727] wg1 speed is unknown, defaulting to 1000
[  174.608767][T10734] netlink: 'syz.1.1296': attribute type 1 has an invalid length.
[  174.611914][T10734] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1296'.
[  175.744206][T10762] lo speed is unknown, defaulting to 1000
[  175.758273][T10762] wg1 speed is unknown, defaulting to 1000
[  176.130928][ T5714] bond7 (unregistering): (slave ip6gretap1): Releasing backup interface
[  176.137357][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  176.142188][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  176.145845][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  176.146558][ T5714] bond7 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 06:d2:84:d5:99:fd - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  176.149812][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  176.159227][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  176.251728][ T5714] bond2 (unregistering): (slave gretap1): Releasing active interface
[  176.311760][ T5714] tipc: Disabling bearer <eth:syzkaller0>
[  176.426045][ T5714] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  176.430094][ T5714] bond0 (unregistering): (slave veth11): Releasing backup interface
[  176.434534][ T5714] bond0 (unregistering): Released all slaves
[  176.441961][ T5714] bond1 (unregistering): Released all slaves
[  176.453279][ T5714] bond2 (unregistering): Released all slaves
[  176.462256][ T5714] bond3 (unregistering): Released all slaves
[  176.473146][ T5714] bond4 (unregistering): (slave veth5): Releasing backup interface
[  176.476171][ T5714] bond4 (unregistering): Released all slaves
[  176.483535][ T5714] bond5 (unregistering): Released all slaves
[  176.491923][ T5714] bond6 (unregistering): Released all slaves
[  176.500370][ T5714] bond7 (unregistering): (slave veth7): Releasing backup interface
[  176.504743][ T5714] bond7 (unregistering): Released all slaves
[  176.521689][ T5714] bond8 (unregistering): Released all slaves
[  176.577404][ T5714] bond9 (unregistering): Released all slaves
[  176.586214][ T5714] bond10 (unregistering): Released all slaves
[  176.624408][T10771] lo speed is unknown, defaulting to 1000
[  176.632292][T10771] wg1 speed is unknown, defaulting to 1000
[  176.684715][T10779] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1309'.
[  176.688250][T10779] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1309'.
[  176.741750][ T5714] tipc: Left network mode
[  176.846695][T10771] chnl_net:caif_netlink_parms(): no params data found
[  177.093040][T10771] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.095482][T10771] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.097872][T10771] bridge_slave_0: entered allmulticast mode
[  177.107518][T10771] bridge_slave_0: entered promiscuous mode
[  177.126116][T10771] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.128618][T10771] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.130828][T10771] bridge_slave_1: entered allmulticast mode
[  177.136218][T10771] bridge_slave_1: entered promiscuous mode
[  177.156028][T10798] netlink: 'syz.2.1312': attribute type 1 has an invalid length.
[  177.176607][T10771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.184101][T10771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.275565][T10771] team0: Port device team_slave_0 added
[  177.304569][T10771] team0: Port device team_slave_1 added
[  177.353118][T10771] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.355955][T10771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.367585][T10771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.392745][T10771] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.395614][T10771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.403759][T10771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.467953][T10771] hsr_slave_0: entered promiscuous mode
[  177.472409][T10771] hsr_slave_1: entered promiscuous mode
[  177.475281][T10771] debugfs: 'hsr0' already exists in 'hsr'
[  177.476143][T10806] netlink: zone id is out of range
[  177.477587][T10771] Cannot create hsr debugfs directory
[  177.480594][T10806] netlink: zone id is out of range
[  177.484499][T10806] netlink: zone id is out of range
[  177.486845][T10806] netlink: zone id is out of range
[  177.490946][T10806] netlink: zone id is out of range
[  177.494880][T10806] netlink: zone id is out of range
[  177.497425][T10806] netlink: zone id is out of range
[  177.502381][T10806] netlink: zone id is out of range
[  177.506128][T10806] netlink: zone id is out of range
[  177.512419][T10806] netlink: zone id is out of range
[  177.570863][T10809] netlink: 'syz.0.1317': attribute type 1 has an invalid length.
[  177.573902][T10809] netlink: 'syz.0.1317': attribute type 2 has an invalid length.
[  177.577438][T10809] netlink: 'syz.0.1317': attribute type 1 has an invalid length.
[  177.775348][T10771] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  177.785246][T10771] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  177.794954][T10771] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  177.811276][T10771] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  177.932409][ T5714] hsr_slave_0: left promiscuous mode
[  177.937890][ T5714] hsr_slave_1: left promiscuous mode
[  178.160169][ T5714] pim6reg (unregistering): left allmulticast mode
[  178.253083][ T5850] Bluetooth: hci1: command tx timeout
[  178.909953][T10837] lo speed is unknown, defaulting to 1000
[  179.130286][T10771] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.144313][T10771] 8021q: adding VLAN 0 to HW filter on device team0
[  179.153170][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.155500][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.185231][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.188302][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.255859][ T5714] ==================================================================
[  179.258426][ T5714] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  179.260851][ T5714] Write of size 8 at addr ffff888115965230 by task kworker/u8:2/5714
[  179.263986][ T5714] 
[  179.265294][ T5714] CPU: 1 UID: 0 PID: 5714 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  179.265311][ T5714] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  179.265320][ T5714] Workqueue: netns cleanup_net
[  179.265337][ T5714] Call Trace:
[  179.265343][ T5714]  <TASK>
[  179.265350][ T5714]  dump_stack_lvl+0x189/0x250
[  179.265366][ T5714]  ? __virt_addr_valid+0x1c8/0x5c0
[  179.265381][ T5714]  ? rcu_is_watching+0x15/0xb0
[  179.265394][ T5714]  ? __kasan_check_byte+0x12/0x40
[  179.265410][ T5714]  ? __pfx_dump_stack_lvl+0x10/0x10
[  179.265423][ T5714]  ? rcu_is_watching+0x15/0xb0
[  179.265434][ T5714]  ? lock_release+0x4b/0x3e0
[  179.265473][ T5714]  ? __virt_addr_valid+0x1c8/0x5c0
[  179.265486][ T5714]  ? __virt_addr_valid+0x4a5/0x5c0
[  179.265500][ T5714]  print_report+0xca/0x240
[  179.265511][ T5714]  ? __xfrm_state_delete+0x696/0xca0
[  179.265524][ T5714]  kasan_report+0x118/0x150
[  179.265541][ T5714]  ? __xfrm_state_delete+0x696/0xca0
[  179.265555][ T5714]  __xfrm_state_delete+0x696/0xca0
[  179.265571][ T5714]  xfrm_state_flush+0x45f/0x770
[  179.265586][ T5714]  xfrm6_tunnel_net_exit+0x3c/0x100
[  179.265603][ T5714]  ops_undo_list+0x49a/0x990
[  179.265617][ T5714]  ? __pfx_ops_undo_list+0x10/0x10
[  179.265629][ T5714]  ? do_raw_spin_unlock+0x4d/0x240
[  179.265646][ T5714]  cleanup_net+0x4c5/0x800
[  179.265658][ T5714]  ? __pfx_cleanup_net+0x10/0x10
[  179.265670][ T5714]  ? _raw_spin_unlock_irq+0x23/0x50
[  179.265716][ T5714]  ? process_scheduled_works+0x9ef/0x17b0
[  179.265728][ T5714]  ? process_scheduled_works+0x9ef/0x17b0
[  179.265739][ T5714]  process_scheduled_works+0xae1/0x17b0
[  179.265758][ T5714]  ? __pfx_process_scheduled_works+0x10/0x10
[  179.265772][ T5714]  worker_thread+0x8a0/0xda0
[  179.265787][ T5714]  ? __kthread_parkme+0x7b/0x200
[  179.265804][ T5714]  kthread+0x711/0x8a0
[  179.265820][ T5714]  ? __pfx_worker_thread+0x10/0x10
[  179.265833][ T5714]  ? __pfx_kthread+0x10/0x10
[  179.265848][ T5714]  ? _raw_spin_unlock_irq+0x23/0x50
[  179.265860][ T5714]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.265871][ T5714]  ? __pfx_kthread+0x10/0x10
[  179.265885][ T5714]  ret_from_fork+0x3fc/0x770
[  179.265900][ T5714]  ? __pfx_ret_from_fork+0x10/0x10
[  179.265913][ T5714]  ? __switch_to_asm+0x39/0x70
[  179.265929][ T5714]  ? __switch_to_asm+0x33/0x70
[  179.265944][ T5714]  ? __pfx_kthread+0x10/0x10
[  179.265959][ T5714]  ret_from_fork_asm+0x1a/0x30
[  179.265981][ T5714]  </TASK>
[  179.265986][ T5714] 
[  179.348282][ T5714] Allocated by task 7072:
[  179.349624][ T5714]  kasan_save_track+0x3e/0x80
[  179.351101][ T5714]  __kasan_slab_alloc+0x6c/0x80
[  179.352619][ T5714]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  179.354307][ T5714]  xfrm_state_alloc+0x24/0x2f0
[  179.356023][ T5714]  __find_acq_core+0x8a7/0x1c00
[  179.357633][ T5714]  xfrm_find_acq+0x78/0xa0
[  179.359403][ T5714]  xfrm_alloc_userspi+0x6b3/0xc90
[  179.361246][ T5714]  xfrm_user_rcv_msg+0x7a3/0xab0
[  179.362836][ T5714]  netlink_rcv_skb+0x208/0x470
[  179.364346][ T5714]  xfrm_netlink_rcv+0x79/0x90
[  179.366028][ T5714]  netlink_unicast+0x82f/0x9e0
[  179.367897][ T5714]  netlink_sendmsg+0x805/0xb30
[  179.369828][ T5714]  __sock_sendmsg+0x21c/0x270
[  179.371493][ T5714]  ____sys_sendmsg+0x505/0x830
[  179.372966][ T5714]  ___sys_sendmsg+0x21f/0x2a0
[  179.374775][ T5714]  __x64_sys_sendmsg+0x19b/0x260
[  179.376825][ T5714]  do_syscall_64+0xfa/0x3b0
[  179.378631][ T5714]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.381042][ T5714] 
[  179.382012][ T5714] Freed by task 5886:
[  179.383634][ T5714]  kasan_save_track+0x3e/0x80
[  179.385601][ T5714]  kasan_save_free_info+0x46/0x50
[  179.387697][ T5714]  __kasan_slab_free+0x5b/0x80
[  179.389611][ T5714]  kmem_cache_free+0x18f/0x400
[  179.391633][ T5714]  xfrm_state_gc_task+0x52d/0x6b0
[  179.393660][ T5714]  process_scheduled_works+0xae1/0x17b0
[  179.395904][ T5714]  worker_thread+0x8a0/0xda0
[  179.397765][ T5714]  kthread+0x711/0x8a0
[  179.399446][ T5714]  ret_from_fork+0x3fc/0x770
[  179.401269][ T5714]  ret_from_fork_asm+0x1a/0x30
[  179.403325][ T5714] 
[  179.404300][ T5714] The buggy address belongs to the object at ffff888115965200
[  179.404300][ T5714]  which belongs to the cache xfrm_state of size 928
[  179.409792][ T5714] The buggy address is located 48 bytes inside of
[  179.409792][ T5714]  freed 928-byte region [ffff888115965200, ffff8881159655a0)
[  179.415321][ T5714] 
[  179.416260][ T5714] The buggy address belongs to the physical page:
[  179.418736][ T5714] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888115965680 pfn:0x115964
[  179.422682][ T5714] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  179.426025][ T5714] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  179.428943][ T5714] page_type: f5(slab)
[  179.430600][ T5714] raw: 057ff00000000040 ffff88801bfbac80 dead000000000122 0000000000000000
[  179.433926][ T5714] raw: ffff888115965680 00000000800e000c 00000000f5000000 0000000000000000
[  179.437414][ T5714] head: 057ff00000000040 ffff88801bfbac80 dead000000000122 0000000000000000
[  179.440883][ T5714] head: ffff888115965680 00000000800e000c 00000000f5000000 0000000000000000
[  179.444374][ T5714] head: 057ff00000000002 ffffea0004565901 00000000ffffffff 00000000ffffffff
[  179.447875][ T5714] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  179.451382][ T5714] page dumped because: kasan: bad access detected
[  179.453975][ T5714] page_owner tracks the page as allocated
[  179.456295][ T5714] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5910, tgid 5909 (syz.2.3), ts 59553538227, free_ts 59542525063
[  179.463736][ T5714]  post_alloc_hook+0x240/0x2a0
[  179.465718][ T5714]  get_page_from_freelist+0x21e4/0x22c0
[  179.467745][ T5714]  __alloc_frozen_pages_noprof+0x181/0x370
[  179.469683][ T5714]  alloc_pages_mpol+0x232/0x4a0
[  179.471320][ T5714]  allocate_slab+0x8a/0x370
[  179.472822][ T5714]  ___slab_alloc+0xbeb/0x1420
[  179.474831][ T5714]  kmem_cache_alloc_noprof+0x283/0x3c0
[  179.476653][ T5714]  xfrm_state_alloc+0x24/0x2f0
[  179.478292][ T5714]  xfrm_add_sa+0x17d1/0x4070
[  179.480040][ T5714]  xfrm_user_rcv_msg+0x7a3/0xab0
[  179.481664][ T5714]  netlink_rcv_skb+0x208/0x470
[  179.483280][ T5714]  xfrm_netlink_rcv+0x79/0x90
[  179.484800][ T5714]  netlink_unicast+0x82f/0x9e0
[  179.486472][ T5714]  netlink_sendmsg+0x805/0xb30
[  179.488313][ T5714]  __sock_sendmsg+0x21c/0x270
[  179.489959][ T5714]  ____sys_sendmsg+0x505/0x830
[  179.491582][ T5714] page last free pid 5909 tgid 5909 stack trace:
[  179.493638][ T5714]  __free_frozen_pages+0xbc4/0xd30
[  179.495543][ T5714]  stack_depot_save_flags+0x436/0x860
[  179.497328][ T5714]  kasan_save_track+0x4f/0x80
[  179.498982][ T5714]  __kasan_kmalloc+0x93/0xb0
[  179.500514][ T5714]  __kmalloc_noprof+0x27a/0x4f0
[  179.502085][ T5714]  memcg_list_lru_alloc+0x261/0x7e0
[  179.503761][ T5714]  __memcg_slab_post_alloc_hook+0x13c/0x7f0
[  179.505699][ T5714]  kmem_cache_alloc_lru_noprof+0x2c7/0x3d0
[  179.507619][ T5714]  proc_alloc_inode+0x2a/0xc0
[  179.509159][ T5714]  alloc_inode+0x6a/0x1b0
[  179.510594][ T5714]  new_inode+0x22/0x170
[  179.512014][ T5714]  proc_pid_make_inode+0x21/0x130
[  179.513619][ T5714]  proc_pid_instantiate+0x53/0x2b0
[  179.515295][ T5714]  proc_pid_lookup+0x2fa/0x420
[  179.516876][ T5714]  proc_root_lookup+0x20/0x50
[  179.518422][ T5714]  __lookup_slow+0x297/0x3d0
[  179.519995][ T5714] 
[  179.520800][ T5714] Memory state around the buggy address:
[  179.522642][ T5714]  ffff888115965100: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  179.525283][ T5714]  ffff888115965180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  179.527804][ T5714] >ffff888115965200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  179.530581][ T5714]                                      ^
[  179.532343][ T5714]  ffff888115965280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  179.534963][ T5714]  ffff888115965300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  179.537572][ T5714] ==================================================================
[  179.540532][ T5714] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  179.542916][ T5714] CPU: 1 UID: 0 PID: 5714 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  179.546054][ T5714] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  179.549351][ T5714] Workqueue: netns cleanup_net
[  179.550884][ T5714] Call Trace:
[  179.551945][ T5714]  <TASK>
[  179.552909][ T5714]  dump_stack_lvl+0x99/0x250
[  179.554473][ T5714]  ? __asan_memcpy+0x40/0x70
[  179.556066][ T5714]  ? __pfx_dump_stack_lvl+0x10/0x10
[  179.557705][ T5714]  ? __pfx__printk+0x10/0x10
[  179.559432][ T5714]  vpanic+0x281/0x750
[  179.560750][ T5714]  ? __pfx_print_hex_dump+0x10/0x10
[  179.562328][ T5714]  ? __pfx_vpanic+0x10/0x10
[  179.563816][ T5714]  ? irqentry_exit+0x74/0x90
[  179.565372][ T5714]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.567079][ T5714]  panic+0xb9/0xc0
[  179.568331][ T5714]  ? __pfx_panic+0x10/0x10
[  179.569719][ T5714]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  179.571670][ T5714]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  179.573672][ T5714]  ? __xfrm_state_delete+0x696/0xca0
[  179.575834][ T5714]  check_panic_on_warn+0x89/0xb0
[  179.577476][ T5714]  ? __xfrm_state_delete+0x696/0xca0
[  179.579263][ T5714]  end_report+0x78/0x160
[  179.580628][ T5714]  kasan_report+0x129/0x150
[  179.582126][ T5714]  ? __xfrm_state_delete+0x696/0xca0
[  179.583854][ T5714]  __xfrm_state_delete+0x696/0xca0
[  179.585578][ T5714]  xfrm_state_flush+0x45f/0x770
[  179.587203][ T5714]  xfrm6_tunnel_net_exit+0x3c/0x100
[  179.588933][ T5714]  ops_undo_list+0x49a/0x990
[  179.590490][ T5714]  ? __pfx_ops_undo_list+0x10/0x10
[  179.592158][ T5714]  ? do_raw_spin_unlock+0x4d/0x240
[  179.593838][ T5714]  cleanup_net+0x4c5/0x800
[  179.595335][ T5714]  ? __pfx_cleanup_net+0x10/0x10
[  179.596953][ T5714]  ? _raw_spin_unlock_irq+0x23/0x50
[  179.598678][ T5714]  ? process_scheduled_works+0x9ef/0x17b0
[  179.600600][ T5714]  ? process_scheduled_works+0x9ef/0x17b0
[  179.602462][ T5714]  process_scheduled_works+0xae1/0x17b0
[  179.604278][ T5714]  ? __pfx_process_scheduled_works+0x10/0x10
[  179.606271][ T5714]  worker_thread+0x8a0/0xda0
[  179.607800][ T5714]  ? __kthread_parkme+0x7b/0x200
[  179.609424][ T5714]  kthread+0x711/0x8a0
[  179.610792][ T5714]  ? __pfx_worker_thread+0x10/0x10
[  179.612468][ T5714]  ? __pfx_kthread+0x10/0x10
[  179.614009][ T5714]  ? _raw_spin_unlock_irq+0x23/0x50
[  179.615774][ T5714]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.617500][ T5714]  ? __pfx_kthread+0x10/0x10
[  179.619140][ T5714]  ret_from_fork+0x3fc/0x770
[  179.620694][ T5714]  ? __pfx_ret_from_fork+0x10/0x10
[  179.622391][ T5714]  ? __switch_to_asm+0x39/0x70
[  179.623959][ T5714]  ? __switch_to_asm+0x33/0x70
[  179.625563][ T5714]  ? __pfx_kthread+0x10/0x10
[  179.627086][ T5714]  ret_from_fork_asm+0x1a/0x30
[  179.628674][ T5714]  </TASK>
[  179.630329][ T5714] Kernel Offset: disabled
[  179.631687][ T5714] Rebooting in 86400 seconds..

VM DIAGNOSIS:
08:39:14  Registers:
info registers vcpu 0

CPU#0
RAX=ad2a8bef67802e00 RBX=ffffffff819683f8 RCX=ad2a8bef67802e00 RDX=0000000000000001
RSI=ffffffff8d9b9a32 RDI=ffffffff8be33880 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38f30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a93f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff1d85f5fc8 CR3=00000000232de000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007ff1da412e53
XMM06=0000000000000000 00007ff1da412e4d XMM07=0000000000000000 00007ff1da412e61
XMM08=0000000000000000 00007ff1da412ee7 XMM09=0000000000000000 00007ff1da412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000035 RBX=0000000000000035 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002eff090
R8 =ffff8881062e8237 R9 =1ffff11020c5d046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b018d2 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbb20b65440 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 000000000000ff00 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 000000000000ff00 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
